last executing test programs:

4m26.634368673s ago: executing program 2 (id=430):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r0}, 0x38)

4m26.633783137s ago: executing program 2 (id=432):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x1, r1, 0x0, 0x6, 0xba3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='smbus_result\x00', r4, 0x0, 0xa}, 0x18)
socket$key(0xf, 0x3, 0x2)
pipe2$9p(&(0x7f00000000c0), 0x81800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1)
setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

4m26.5541132s ago: executing program 2 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xdda4e2fb06c47918}, 0xc880)

4m26.501149945s ago: executing program 2 (id=437):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m26.364042673s ago: executing program 2 (id=438):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r2}, &(0x7f0000000180)=0x8)

4m26.11416808s ago: executing program 2 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4m26.041143562s ago: executing program 32 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2m15.313923487s ago: executing program 0 (id=1980):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setreuid(0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [{0x2, 0x8b675aa846a9a27e}], {0x4, 0x1}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x2c, 0x2)

2m15.238151426s ago: executing program 0 (id=1981):
syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=")
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fc9e3c1e2fa36bbbb80305c37098baf96cb67e"})
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m15.002373601s ago: executing program 0 (id=1982):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2m14.766497572s ago: executing program 0 (id=1985):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

2m14.608852394s ago: executing program 0 (id=1987):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYBLOB="35f99541e81a4d1504af89f97576a2883ca58e9edcde5a834dc0c1ba3e8d696ee2a5645b577792f4475004f54b74b5ff39d031026caa5a197b097947cb45b67ace0876d6196f298848b04b8b25679f524ec779a8211a90d41103a12b3498c8d2971921d52fb30de6abb6c95021031dac25c1ef86ac5ae0d502959bcbc86e5583bc5fb2ced636241e6e6ba2cea7fbe8193d7814", @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES8], 0x1, 0x206, &(0x7f0000000400)="$eJzskk9rE08Yxz+z2Sbb0vILP6KiCKUqUg9tNqlG60HBi0U9lR5qoWBJ0hpM/dMEtKFgCkIRL4JVaBEPoqRID74Dc/DUm4XirRR6zqEHL9K6MrOTZPIOPMznsM/MPP/m+8zeLz0pxYCjg6UsxJG4JPghBC7QL9QRuYgyy0EQqMWdcE9U+286oa1r+9vpDhdUJqdAFM7sZpz6idyAiMd6E7+29sjy3zSjHpvb412rO/83Pn+T0bcaPWHax/dfX99Y61Plxd2po8vtOpH66XVvQKjLvjmc3N1zT5KYZvTD7c3t8cLqzjHvz/GtF7UvmZdSwbtZhL/uAcPfh9au+X2vHF2ztFh5MFMs5hdK15cdGqrVz4OlrFzci0GgxeaAMcCMkfI3aMeccmECiBCIpnKXNsny/ONkabEyVJhnLj+Xf5hOj2T8i75/KZ2cLRQ/vZXfvC+MFnqSSHsBkM/Ubfi7gEMd0wNVoxvCuJr2CzM3ajzd4Fk6cIzcphXUW7kxHSdHMMF55GifVoVxek5VcVGSxoIgeC49hWI+5Rr3C3t5Kmo4+6iYW0Egmmk13FaN1D5drU3a3IxcacleATkR1Rz9YpKatvva9nudf6qrKjj6fx6sQpRnM+XyQioKG706S5+l5eDCVbxqDkx2jUc6xV2NYLFYLBaLxWKxWCz/DH8DAAD//97knPc=")

2m14.284213197s ago: executing program 0 (id=1990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2m13.990736006s ago: executing program 33 (id=1990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

1m14.183387761s ago: executing program 4 (id=2737):
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400001602020000052406a30005240000000d240f010000000000000000000424020209058103400000000009058202000200000009050302"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)

1m12.891638668s ago: executing program 4 (id=2765):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)

1m12.011206814s ago: executing program 4 (id=2785):
r0 = socket(0x10, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xa0179e08})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20)
finit_module(r3, 0x0, 0x3)
epoll_wait(r1, &(0x7f00000002c0)=[{}, {}], 0x2, 0xdc7)

1m11.931308561s ago: executing program 4 (id=2789):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="1a010000ff76181004160780a6af011703010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x10000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)={0x8, 0x0, [{0x100000, 0x8c, &(0x7f00000003c0)=""/140}, {0xdddd1000, 0x52, &(0x7f0000000680)=""/82}, {0x4, 0x60, &(0x7f0000000580)=""/96}, {0xeeee0000, 0x0, 0x0}, {0x8080000, 0x43, &(0x7f0000000a40)=""/67}, {0x8000000, 0x44, &(0x7f0000000700)=""/68}, {0x4000, 0x47, &(0x7f0000000780)=""/71}, {0xdddd1000, 0x48, &(0x7f0000000880)=""/72}]})
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
r3 = dup2(r2, r2)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7}, &(0x7f0000000240)=0x90)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)

1m8.795134617s ago: executing program 4 (id=2813):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4AlD6tIEArVzDl2TU2Pexx7urrn/H7SuOrr0zV9yv+pqe6pywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL733R+f7kXE5V+nBw5HfCYGEf2I5bo+FvXMxfz8YUQcic3meC4iBosR9fKb/zwTcS4iPjoUcW/j1mr98Jk99uP8qZvXP/n+d/7xuz/dOfLTN3/yQbv9R589++Hvb0cc/uFrH35y+8msOwAAAJSiqqqqlz7mH02f7/tddwoAmIq8/6+S/LharVarn2j9x/5s9UddaN1UjXe7WUTEenOZ+j2Dw/EAMGfW4+Ouu0CH5F+0YUQ81XUngJnW67oD7It7G7dWeynfXnN/cGyrPf+dclv+673713fsNp2kfY7JtH6+7sQgnt2lP8tT6sMsyfn32/lf3mofpeftd/7Tslv+o61Ln4qT8x+082/Zlv+fI2Ju8++Pzb9UOf/ho+S/Ppjj7V/+AAAAAAAcfPnv/4c7Pv67+PirsicPO/57bEp9AAAAAAAAAIAn7XHH/7vP+H8AAAAws+rP6rW/HHrw2G73Yqsfv9SLeLr1fKAw6WKZla77AQAAAAAAAAAAAAAlGW6dw3upF7EQEU+vrFRVVX81tetH9bjLz7vS1x9K1vUveQAA2PLRoda1/L2IpYi4lO71t7CyslJVS8sr1Uq1vJjfz44Wl6rlxufaPK0fWxzt4Q3xcFTV32ypsVzTpM/Lk9rb369+rVE12EPHpqPDwAEgIrb2RvfskQ6Yqnomun6Xw3yw/R88tn/2ouufUwAAAGD/VVVV9dLtvI+mY/79rjsFAEzDUt7/t48LqNVqtVqtPnh1UzXe7WYREevNZer3DIbjB4A5sx4fd90FOiT/og0j4kjXnQBmWq/rDrAv7m3cWu2lfHvN/UEa3z2fC7It//Xe5nJ5+XHTSdrnmEzr5+tODOLZXfrz3JT6MEty/v12/pe32kfpefud/7Tsln+9noc76E/Xcv6Ddv4tByf//tj8S5XzHz5S/gP5AwAAAADADMt//z9c/PFfdz0AAAAAAAAAYH7d27i1mq97zcf/Pz/meb3mnOs/D4ycf2/P+bv+9yDJ+ffb+bdOyBk05u++8SD/f2/cWv3g5r8+l6czn//CYFS/9kKvPxim05yqhbfialyLtTi14/nDbe2nd7QvbGs/M6H97I72Ud2+nNtPxGr8Iq7Fm/fbFyecGLU0ob2a0J7zH9j+i5TzHza+6vxXUnuvNa3dfb+/Y7tvTse9zsW//ffFnVvX9N2Jwf11a6rX73gH/dn8P3lqFL+6sXb9xG+u3Lx5/XSkybZHz0SaPGE5/4X0lfN/6YWt9vx7v7m93n1/9Mj5z4o7Mdw1/xca8/X6vjzlvnUh5z9KXzn/vAcav/3Pc/67b/+vdNAfAAAAAAAAAAAAAAAAeJiqqjYvEb0YERfS9T/uhA8ARfjDD9JMlYRarVar1eoDWzdV473eLGJp+zIXIuK3474ZADDL/hcR/+y6E3RG/gXL9/urp1/oujPAVN14972fXbl2be36ja57AgAAAAAAAAB8Wnn8z2ON8Z83zwNqjRu9bfzXN+LY3I7/2R8NNsc6Tyv0fDx8/O/j8fDxv4cTXm9hQvtoQvvihPalCe1jL/RoyPk/nzLO+R9NK1bS+K8vddCfruX8j6exnnP+X2o9r5l/9dd5zr+/Lf+TN9/55ckb77736tV3rry99vbaz0+funDu7PlzZ8+fP/nW1Wtrp7b+7bDH+yvnn8e+dh5oWXL+OXP5lyXn/8VUy78sOf8XUy3/suT88/s9+Zcl558/+8i/LDn/l1Mt/7Lk/L+cavmXJef/SqrlX5ac/1dSLf+y5PxfTbX8y5LzP5Fq+Zcl538y1fIvS84/H+GSf1ly/vnMBvmXJed/JtXyL0vO/2yq5V+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Py/mmr5lyXn/7VUy78sOf/XUi3/suT8v55q+Zcl5/+NVMu/LDn/b6Za/mXJ+X8r1fIvS87/26mWf1ly/q+nWv5leXD/fzNTnvnP3yNmoBtmzIyb6fo3EwAAAAAAAAAAAADQNo3TibteRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjiAOLd9df4BCDSUJKSZtSEtKmJTWOvTZO/FXvOgGEylJoSxSkIrUX9KJpEqVRpLYCRZGaSjRCaqT2rlwl4iZqJS4sFSoHJZVSBbY6M+/77szs7Mz6Y+3z8fsh/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBWGz42/ecDWZbl/zf+WJdll+d/X5Ptyb+c23mpVwgAAACcr7caf/7DFemEPcu4UMs2//aB//j+/Pz8fPaFN0+//Zfz8+mMsSwbWp1ljfOif//lL+ZbtwmeykYHBlu+Huxz80N9zh/uc/5In/NX9Tl/dZ/zR/ucv2gHLLKm+fuYxpVtavx1XXOXZldlI43zNnW51FMDqwcH4+9yGgYal5kfOZgdzo5k09nkossMNP7Lspc25Ld1TxZva7DlttZnWXbmZ4/vj2sYCPt4U9Z2Yw2tj90bd2Vjb/7s8f3fmX39vd1m392waKVZtnljvs6ns2zh11XZQLY67ZO4zsGWda7vss6htnUONC6X/71znWeWuc54v0fDOl/psc714bRHrs+ybC5bcptOT2WD2dqOW037e7R5ROTXkT+U78qGz+o42bCM4yS/zGvXtx8nncdk3P8bwj4ZXmINrQ/HG0+uWrTfz/U4ye91EY7V/Lrvy290dLT1V6ttx2q+zeM3LH0MdH3suhwD6VhuOQY29jsGBlcNNY6BwYU1b2w7BqYWXWYwG2jc1ukbeh8DE7NHT0zMPPrYLYeP7js0fWj62NTkzu3bdmzftmPHxMHDR6Ynm3+e3S4tkbXZYDoGN4bXmngMfrBj29ZDcv6bF+55MFqQ50F+3z9zY76gywezJY7xfJunN5//8yB93295Hgy3PA+6vqZ2eR4ML+N5kG9zZvPyvmcOt/zfbQ0r9Vq4ruUYuJTfD/PbfPBDS78Wrg/reuams/1+OLToGIh3ayA89/JT0s97o7eF/bL4uLg2P+OyVdmpmemTWx7ZNzt7cioL46K4suWx6jxe1rbcp2zR8TJ41sfLnr//1Y3Xdjl9XdhXozf3fqzybbaP936sGq/u7ftzVdbcn22nbs3CuMAu9v7s9t0s358pS/TYn/k2T99y/j8LplzS8vo30u/1b2hkuPn6N5T2xkjb69/ih2aosbIsO3PL8l7/RsL/F/v176qCvP7l++rBLb2PgXybZybO9hgY7vn6d32YA2E9HwqJYbQl97/dOH+ueZi2PJZ9j5vh4ZFw3AzHW2w/brYtukx+bfltb548t+Nm8/Xtj1Xbzy0VPG7yffVXk72Pm3ybl6fO/7VjTfxry2vHqn7HwMjQqny9I+kgaL7eza+Jx8CWbH92PDuSHUiXyR/l/LbGty7vGFgV/r/Yrx3XFOQYyPfV81t7HwP5Nj/admF/dtocTknbtPzs1Pn7haUy/7XDC9fXudsudObP1/nxH38qndYtQ+TbvL79bHNG7/10czjlsi77qfP5s9QxfSC7OPvpmrDOIzt6/24q3+aqncs8nvZkWfbq1KuN33eF3+9+79SPv9/2e99uv1N+derVeyfu/8nZrB8AgHP3duPPuVXNnzVb/sV6Of/+DwAAAJRCzP2DYSbyPwAAAFRGzP1DYSbyPwAAAFRGzP3DYSY1yf8P37brhbeeyNK7Ac4H8fy4G+67o7ld7HjPha/H5hfkp3/02yMvfPWJ5d32YJZlv7r3fV23f/iOuK6mE3GdH24/fZFrrlvW7T/0wMJ2re+fcGZX8/rj/VnuYRC7yi9NbG1c79ijU4358r1ZY94/98xTzetvfh23P72tuf3fhDct2XNwoO3ym8N6NoU5Ft5T5r49C/shn/FyL6z/wL9e+dmF24uXG9j4zsbdfP6Pm9cb3yPquSub28f7vdT6/+Vr330h3/6RG7qv/4nB7us/Ha73tTB/ubu5fes+/2rL+v80rD/eXrzclm/9sOv6X3xPc/sXw3HxjTA713/XX7z/rW6PV7ydPbc3Lxdvf/J/tzcuF68vXn/n+kefmGrbH53X//KbzevZ/eWfD7VuH0+PtxM9dHv78T0QHt+2HnmWZd/9s6xtP2cfaV7unzvWH6/vxO3d139zxzpPDFzXuPzC/VnXdr++/ndbu97fuJ49/7iu7f48d3fYf29O/Ci/3tP3h+MxnP9/rzSvr/O9TF+8u/31Jm7/jXXN5228vomO9T/Xsf656/J913/997zZXP+Ld65uW/+eT4Tj6Z7m7Lf+Q397Rdvlv/md5uNx8ivjx47PnDp8oGWvtj6PV4+uWXvZ5e945xXhtbTz673HZx+ePjk2OTaZZWMlfMvAlV7/t8L8n+aYu/C30PSTnzePu2c/2fy+9cFfNL9+Lpz+UHg84/fHr//1SNvx2vm4z93ZnOe7/pvCOpbrPV/7r+uWteHpz7906p/+5PXOnwvi/Tnx7tHG/Xt+w9WN8wZebp7f+XrVz3++u/15/dPhycb8Qdiv8+GdmTde3by9zuuP703y7Kebz9/4k1y8fNbxfiLrhtrvx/mu/6fh55gfXtP++hePjx880fFuzuuygXwJc+H1IZtrnh+3ivv72TNXd729+D482dx7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jv8gvP77WN5/eB6Z3bs8az/XhzrLBLvf4TD+w/cOvkjQemD+47dXD2gRPTJw/tn5nZP31g5sZ9Bw9Of6Xf5Q8f2D21dde2W7eOHzp8YPdtu3Zt2zV++NjxfBnNRfWxc/JL48dO7m1cZGb39l1TO3Zsnxw/evzA9O5bJyfHT/W7fON703h+6S+Pn5w+sm/28NHp8ZnDj03vntq1c+fWvu/+ePTEwZmxiZOnjk2cGp4+OdG8L2OzjZPz7339Lk89zBwPr3cdBsJP55+7eWd6f9zct59c8qqam7T/eJq9Ed4LKn5/6/d1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/M/mPpo9/r0v+v1D9/yf1/xv0//X/M/3/RP9f/z/T/9f/70P/X/+/zOvX/0/9/xn9f5ZStP5/yP3Zmizz7/8AAABQUTH3rw0zkf8BAACgMmLuvyzMRP4HAACAyoi5//Iwk5rkf5//r/+v/9+r/x+31f/P9P+L0P/f9N/6/4vo/+v/Z/r/5+xS9+fLvv4C9v/X6P9TNEXr/8fc/44wk5rkfwAAAKiDmPvfGWYi/wMAAEBlxNx/RZiJ/A8AAACVEXP/ujCTmuR//X/9f/1/n/+v/1+a/r/P/+9C/1//P9P/P2eXuj9f9vUXsP/v8/8pnKL1/2Pu/7Uwk5rkfwAAAKiDmPvfFWYi/wMAAEBlxNx/ZZiJ/A8AAACVEXP/VWEmNcn/9ez/v5Zlmf5/pv+v/9+xTv1//f+VoP+v/9+L/r/+f5nXr/+v/09/Rev/x9z/7jCTmuR/AAAAqIOY+68OM5H/AQAAoDJi7n9PmIn8DwAAAJURc/81YSY1yf/17P/7/H/9/yb9//Z16v/r/68E/X/9/170/5fR/x9e+Kv+f7HWr/+v/09/Rev/x9z/3jCTmuR/AAAAqIOY+68NM5H/AQAAoDJi7n9fmIn8DwAAAJURc//6MJOa5H/9f/1//X/9f/1//f+VVK7+/+CS5+j/N+n/t7tw/f+5hQX4/P/SrF//X/+f/orW/4+5//1hJjXJ/wAAAFAHMfd/IMxE/gcAAIDKiLn/ujAT+R8AAAAqI+b+sTCTmuR//X/9f/1//X/9f/3/lVSu/v/S9P+b9P/bXZTP/2+h/1+s9ev/6//TX9H6/zH3bwgzqUn+BwAAgDqIuX9jmIn8DwAAAJURc//1YSbyPwAAAFRGzP2bwkxqkv/1//X/9f/1//X/9f9Xkv6//n8v+v/6/2Vev/6//j/9Fa3/H3P/DWEmNcn/AAAAUAcx998YZiL/AwAAQGXE3P/BMBP5HwAAACoj5v7NYSY1yf/6//r/+v8l7v8P6f9n+v+Fp/+v/9+L/r/+f5nXr/+v/09/Rev/x9z/oTCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7r85zET+BwAAgMqIuX88zKQm+V//X/9f/7/E/X+f/9+2fv3/YtL/1//vRf9f/7/M69f/1/+nv6L1/2PuvyXMpCb5HwAAAOog5v4tYSbyPwAAAFRGzP0TYSbyPwAAAFRGzP2TYSY1yf/6//r/+v/6//r/+v8rSf9f/78X/X/9/zKvX/9f/5/+itb/j7l/KsykJvkfAAAA6iDm/q1hJvI/AAAAVEbM/dvCTOR/AAAAqIyY+7eHmdQk/5ek/78lFaD0//X/9f/1//X/S0X/X/+/F/1//f8yr1//X/+fdoNdTita/z/m/h1hJjXJ/wAAAFAHMffvDDOR/wEAAKAyYu6/NcxE/gcAAIDKiLn/tjCTmuT/kvT/ff6//r/+fwv9f/3/MtH/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUun0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fe/36/ytL/1//vxf9f/3/Mq9f/1//n/6K1v+PuX93mElN8j8AAADUQcz9d4SZyP8AAABQGTH33xlmIv8DAABAZcTcvyfMpCb5X/+/6v1/n/+v/6//32/9+v8rS/9f/78X/f9y9v/Djy36/wXq/+fHkP4/RVS0/n/M/XeFmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3fzzMpCb5X/9f/1//X/9f/1//fyXp/69Y/7/xUljk/v+aZdyM/n85+/+R/n9x+v8+/5+iKlr/P+b+u8NMapL/AQAAoA5i7v9EmIn8DwAAAJURc/+vh5nI/wAAAFAZMfffE2ZSk/yv/6//r/+v/6//r/+/kvT/ff5/L/r/+v9lXr/+v/4//RWt/x9z/2+EmdQk/wMAAEAdxNx/b5iJ/A8AAACVEXP/J8NM5H8AAAAomVVLnhNz/2+GmdQk/5ev/z9Wyv7/YLp+/X/9f/1//X/9/wtJ/1//P9P/P2eXuj9f9vXr/+v/01/R+v8x9/9WmElN8j8AAADUQcz9nwozkf8BAACgMmLu/+0wE/kfAAAAKiPm/vvCTGqS/y90/7/z8r34/H/9/0z/X/9f/1///zzp/+v/Z/r/5+xS9+fLvn79f/1/+ita/z/m/t8JM6lJ/gcAAIA6iLn//jAT+R8AAAAK6uGzvkTM/Z8OM5H/AQAAoDJi7v9MmElN8n/5Pv9f/1//X/9f/1//v0z0//X/e9H/1/8v8/r1//X/6a9o/f+Y+x8IM6lJ/gcAAIA6iLn/s2Em8j8AAABURsz9vxtmIv8DAABAZcTc/3thJj3y/9KVhPLR/9f/1//X/9f/1/9fSfr/i/v/+WuY/n+T/r/+f5nXr/+v/09/Rev/x9z/uTAT//4PAAAAlRFz/++Hmcj/AAAAUBkx9/9BmIn8DwAAAJURc/+DYSY1yf/6//r/+v/6//r/+v8rSf/f5//3ov+v/1/m9ev/6//TX9H6/zH3fz7MpCb5HwAAAOog5v4/DDOR/wEAAKAyYu7fG2Yi/wMAAEBlxNz/UJhJTfK//r/+v/6//r/+v/7/StL/1//vRf9f/7/M69f/1/+nv6L1/2Pu3xdmsqf9ZgAAAIDyirn/C2EmNfn3fwAAAKiDmPv3h5nI/wAAAFAZMfcfCDOpSf7X/9f/1//X/9f/1/9fSfr/+v+96P/r/5d5/fr/+v/0V7T+f8z902EmNcn/AAAAUAcx9x8MM5H/AQAAoDJi7j8UZiL/AwAAQGXE3P9wmElN8r/+v/6//n9t+/+vfK9jnfr/+v8rQf9f/78X/X/9/zKvX/9f/5/+itb/j7n/cJhJTfI/AAAA1EHM/V8MM5H/AQAAoDJi7v9SmIn8DwAAAJURc/+RMJOa5H/9f/1//f/a9v+X9/n/axZuV/9f//9c6P/r//ei/6//X+b16//r/9Nf0fr/MfcfDTOpSf4HAACAOoi5/1iYifwPAAAAlRFz//EwE/kfAAAAKiPm/hNhJjXJ//r/Z9X/XzWwRDdQ/7/7+vX/K9D/b6H/r/9/LvT/9f970f/X/y/z+vX/9f/pr2j9/5j7/yjMpCb5HwAAAOog5v6TYSbyPwAAAFRGzP0zYSbyPwAAAFRGzP2zYSY1yf/6/z7/X/9f/1//X/9/Jen/6//3ov+v/1/m9ev/6//TX9H6/zH3nwozqUn+B4D/Z+8+c/U6qz4OP6/zOiRCwBTCEGACDIExIDEGeknooUPovYXeQofQe++99x4IvUpB8VlrhWPsvW2f8/jc+17X9SELTpB8RzEf/kp+2gAAHeTuv1/cYv8DAADANHL33z9usf8BAABgGrn7HxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7n9g3NJk/wMAAEAHufsfFLfY/wAAADCN3P0PjlvsfwAAAJhG7v6HxC1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAATCN3/8PjFvsfAAAAppG7/9q4pcn+1//r//X/G+z//1//r//fDv2//n+J/l//v+X36//1/6wbrf/P3X9d3NJk/wMAAEAHufsfEbfY/wAAADCN3P2PjFvsfwAAAJhG7v5HxS1N9r/+X/+v/99g/+/7//r/DdH/6/+X6P/1/1t+v/5f/8+60fr/3P2Pjlua7H8AAADoIHf/Y+IW+x8AAACmkbv/sXGL/Q8AAADTyN3/uLilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lt+v/9f/s27v/f+9rz9zL7T/z91/fdzSZP8DAABAB7n7Hx+32P8AAAAwjdz9T4hb7H8AAACYRu7+J8YtTfa//l//f0f/f9v/6f/1//r/O36u/z8e+n/9/xL9v/5/y+/X/+v/Wbf3/n+l9z/7v+fuf1Lc0mT/AwAAQAe5+58ct9j/AAAAMI3c/U+JW+x/AAAAmEbu/qfGLU32v/5f/+/7//p//b/+f5/0/8P2/2f/X+8w/f8F0f/r/8/X/9/rAt6v/6eD0fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/hrjF/gcAAIBp5O5/RtzSZP/r//X/+n/9/+H+/1TL/v/2n+n/90P/P2z/v0z/f0H0//p/3//X/7NstP4/d/8z45Ym+x8AAAA6yN3/rLjF/gcAAIBp5O5/dtxi/wMAAMA0cvc/J25psv/1//p//b/+/0jf/79ijv7f9//3R/+v/1+i/9f/b/n9+n/9P+tG6/9z9z83bmmy/wEAAGB6p3a1+58Xt9j/AAAAMI3c/c+PW+x/AAAAmEbu/hfELU32v/5f/6//1/8fqf+f5Pv/+v/90f/r/5dcaP+/0//XX4v+f5z36//1/6wbrf/P3f/CuKXJ/gcAAIAOcve/KG6x/wEAAGAauftfHLfY/wAAADCN3P0viVua7H/9v/5f/6//1//r//dJ/6//X+L7//r/Lb9f/6//Z91o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HL2/j91OV91+ej/9f/6f/2//l//v0/6f/3/Ev3/ufv/q87z6+n/x3q//l//z7rR+v/c/TfGLf75PwAAAEwjd/8r4xb7HwAAAKaRu/9VcYv9DwAAANPI3f/quKXJ/j9f/3/rnQ/+vP7/wuj/z/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/NXFLk/0PAAAAHeTuf23cYv8DAADANHL3vy5usf8BAABgGrn7Xx+3NNn/x//9/2v0//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xC3NNn/AAAA0EHu/jfGLfY/AAAATCN3/5viFvsfAAAAppG7/81xS5P9f/z9v+//6/8vsv8/pf9P+v/4+6r/1/9fBP2//n+n/79kJ93Pb/39+n/9P+tG6/9z9990Zur12/8AAADQwU1n/njV7i1xi/0PAAAA08jd/9a4xf4HAACAaeTuf1vc0mT/6//1/yfe//v+f9H/x99X/b/+/yLo//X/O/3/JTvpfn7r79f/6/9ZN1r/n7v/7XFLk/0PAAAAHeTuf0fcYv8DAADANGL3H/zL7/Y/AAAATOmdZ/541e5dcUuT/d+4/7/mqP3/1f/1n/X/536//v9Y+v+bzv69p//X/2+J/l//v0T/r//f8vvH6f/jB9fq/xnPaP1/7v53xy1N9j8AAAB0kLv/PXGL/Q8AAADTyN1/c9xi/wMAAMA0cve/N25psv8b9/+TfP//PrfEC/T/8/b/vv8fV/+v/z8X/b/+f6f/v2Qn3c9v/f3j9P++/8+4Ruv/c/e/L25psv8BAACgg9z9749b7H8AAACYRu7+D8Qt9j8AAABMI3f/B+OWJvtf/7/1/t/3//X/+n/9/9j0//r/Jfp//f+W36//1/+zbrT+P3f/h+KWJvsfAAAAOsjd/+G4xf4HAACAaeTu/0jcYv8DAADANHL3fzRuabL/9f/6/331/7f/Ivr/Jv3/dfr/nf7/vPT/+v8l+n/9/5bfr//X/7NutP4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBp5O7/RNxi/wMAAMA0cvd/Mm64x11O7knH6/R5fh69uf5f/+/7//p/3//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/1Tc4p//AwAAwDRy9386brH/AQAAYBq5+z8Tt9j/AAAAMI3c/Z+NW5rsf/2//l//v9n+/2r9/+H36//HpP/X/y/R/+v/t/x+/b/+n3Wj9f+5+z8XtzTZ/wAAANBB7v7Pxy32PwAAAEwjd/8X4hb7HwAAAKaRu/+LcUuT/a//1//r/zfb//v+/1nv1/+PSf+v/1+i/9f/b/n9+n/9P+tG6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAAJhG7v6vxC32PwAAAEwjd/9X45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9X4tbmux/AAAA6CB3/9fjFvsfAAAAppG7/xtxi/0PAAAA08jd/824pcn+n7n/X/qf6f8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7NutP4/d/+34pYm+x8AAAA6yN3/7bjF/gcAAIBp5O7/Ttxi/wMAAMA0cvd/N25psv9n7v+X6P8P6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07vz9P+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+Hccs8+/++Ny/8Sf3/sff/Z34T6f/1/7sh+//Th96p/z+g/98v/b/+f4n+X/+/5ffr//X/rBvt+/+5+38Ut8yz/wEAAKC93P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//7/v/+v9O/f89r9j5/r/+/zLT/+v/l+j/9f9bfr/+X//PutH6/9z9P4tbmux/AAAA6CB3/8/jFvsfAAAAppG7/xdxi/0PAAAA08jd/8u4pcn+1//r//X/rfr/Q+/X/x/Q/++X/l//v0T/r//f8vuz/8/fd/p//T//a7T+P3f/r+KWJvsfAAAAOsjd/+u4xf4HAACAaeTu/03cYv8DAADANHL3/zZuabL/9f/6f/1/m/7/trvtdvp//f9lN1D/f+VRfh39/wH9/2H6f/2/7//r/1k2Wv+fu/+WuKXJ/gcAAIAOcvf/Lm6x/wEAAGAauft/H7fY/wAAADCN3P23xi1N9r/+X/8/Zf9/J/2/7//r/0cxUP9/JPr/A/r/w/T/+n/9v/6fZaP1/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAATCN3/5/iFvsfAAAAppG7/89xS5P9r//X/198/3+6/rqH7f99/1//r/8fxrz9/5X6f/3/kfv/G248+LH+f5vv1//r/1k3Wv+fu/8vcUuT/Q8AAAAd5O7/a9xi/wMAAMA0cvf/LW6x/wEAAGAaufv/Hrc02f/T9P93v+vB1f/7/r/+X/8fP9f/j2He/t/3//X/vv+v/9f/6/9ZM1r/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADANHL3/ytusf8BAABgGrn7/x23NNn/0/T/Sf+v/9f/6//j5/r/Mej/9f9L9P/6/y2/X/+v/2fdaP1/7v7/BAAA//9RaTCH")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m8.033313587s ago: executing program 4 (id=2819):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000001600000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000a000000fe8000000000000000000000000000aa37e496771e5455585841cbcb8412d9cde6cc"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m1.602070778s ago: executing program 3 (id=2891):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080005"], 0xac}}, 0x8000)

1m1.601679039s ago: executing program 3 (id=2892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r4}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000900)={{0x83}})

1m0.793172517s ago: executing program 1 (id=2898):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000002c0)={0x3, 0x400, 0x1, {0x1, @vbi={0x0, 0x4e2a, 0x7fff, 0x41414270, [0xa, 0x10001], [0x3, 0x4], 0x108}}, 0x200007f})
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10)

1m0.792989581s ago: executing program 1 (id=2899):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
io_destroy(r1)

1m0.641066956s ago: executing program 3 (id=2900):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000200))

1m0.640662095s ago: executing program 3 (id=2901):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x7, "09df168a00"}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0)

1m0.570122992s ago: executing program 1 (id=2902):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)

1m0.49333292s ago: executing program 1 (id=2903):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x102, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x80000004, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x2, 0x7, 0x6, 0xf, 0xb, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0x8, 0x5, 0x8, 0x5, 0x7fff, 0x8, 0x1, 0x200, 0x2000, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x8, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x1, 0x4, 0xffffffff, 0x9, 0x8, 0x8, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x3, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0x4e0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xe9, 0x2, 0x3, 0x1, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x4, 0x7fffffff, 0xffffffff, 0x3, 0xffff, 0xd5d, 0xa0c787d, 0xffffff52, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x0, 0x7, 0x2, 0x7, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcb, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x5, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0x8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0)

1m0.493050815s ago: executing program 1 (id=2904):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setfsgid(0xee01)
faccessat(0xffffffffffffff9c, 0x0, 0x0)

56.777916623s ago: executing program 3 (id=2905):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000600)=0x8001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
openat(0xffffffffffffff9c, 0x0, 0x6042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

52.917618867s ago: executing program 1 (id=2906):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
modify_ldt$read_default(0x2, 0x0, 0x17)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5a84, &(0x7f0000011bc0)="$eJzs3X+QHNV9IPDXM7Pa1a5WWgkcZDCrRUYJwbG14lf5RypWcomdAscll1MO4mTDglZEtiRU+hFAJrHIgc8qsMtOOZXg5A/iwtxhFBdVcDEKZcKPkzgbW8XFR11h6uwc9h9OEQ6VAR3l8nmvdqbf7EzP9Pbs7KyQxOdT0vb0mzffft39pqe/r3t3AgAAAG8KR27fffzDZ//ed/588rXP/P4/br81DJWr5QOxwkg6vemNaiEnUn9lZXWa7Re/9umv/2Tsut/59gODX3v98Obztvzgd8+47pFPXn7orr95/NXhh375QlHc2J8unJlPXkpCGPjWsb/87OGnz5ouS5ZO/yztD2F5suLx5UkItzWGGP95CGFzOrMyE//B1y7eMj299Y7+pvJlmXr6+5vb9H5OQgj7jt/4jvDD39542/dWfePv+w6+uH+mSjLQ0J9CWHpN4+v7QgiL0//TYm+L/TFJpxtCCIMNr3t3Qbve3mH71+bMn5NOF6XToYI48fnVmflSpl52PurLTAcLljdfee3otl6RJZn5pEdxo7x2xvLl6fSb6fTCOcYvp+tQTkIpCZV687clM30kNOy3JCTVfTlQny/V921I1z8zn2TmS5n5cl9mvarLTTtaOUmay2O9THk8HFfS8vMaj9VtfLThcWO9t8ay9I36erZOJuhQy4P6elXFdh2bpS0nQqnhGNSuvL7j050xlJYNJStaXjPVRnzu8MY715Q3PXFkJKcdyQNJGj/pKv6+7y5f8on7D+zNfq7X419TSuOXuor/oyuOvnzVga9+JTf+F2P8clfxL3p08KUrnrx9de72ORa3T6Wr+BMvPPX5VWdeezC3/XfH+ANdxV9/6Gj/8PFHH8tt/3jcPou7iv/8+z7w4/ueffjF3Pghxh/sKv6mQzu/0D96/ILc+I/F7TPUXf955eBlz42O/nQsL/4zMf5wV/Hv3d//3nuW3XF57v7dELfPSFfxP3T+I7ctOf7wuXnHzuTuXn1yArw5nZGeY30une82z5yvhnzhr8cqtXO+Jen/4V4uKHPymc0TCvQ6rQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNPWWd/y3D/7vj428VEnn+9MHz5dq01i+KIRkcQhh956JXXu27rh+7JM37N21Y2Lb2MSesckde3bdPHbJb4ztmty5beLm6WfH33lx7XUrQlKbJue2LLt/amqqNNJcFpf3784/+MM17/7Xfwth/C3fH63ktn/tXdvvObPNz4xk/dT7t+/98Pcv/bt0vUbSdo20adfU1NRUyGnX/7nyF/f8xbGfXBDC+K/M1q6nnv+tf2pqULVgJk6q1B9qDepPBtu2o97qtD1xe1W2bN02OT779p1+fTlnPf79p1/8+ZabvvSL2vYdyF2PDrfv4vVT20p/tfFD/++vbqkVFLXrjdrvRds7rkVsX9x+A+n2Xpqu19Kc9arkrNft33vs2W+dfeDV/WG88sqq1mUXrVdf2gH6krd2tNy4hMFkeVP5QFo/7vH4urV7tu9cu/vmfe/cun3i+snrJ3e8Z90l6y4bv/SyS9dW13xtj9c/Lv9XO1z/3venF/61dbnL/mT/N+PPzvpTc7sWzXl7TLereHs0tijv/Tf40c9++T13PfnhWkFRP4+168eTdDo4vZ/XhYb+1vLytutVtH9CCGPttsPLr14ezvqfW28rOg417pnGnxnJ+qmnV//s7979tyt/s1ZwQo7zjQ3q8jhfb/VMe6rbayDdH1Mn6fbtD+V0vYbatmvd00/23Xnk3/603r5Fi8JNE3v27FpX+7kkbemS5Jy27cqWxvVaVf1ZDulmCfVu2qa/TusLtfZlj5+xenarDqXPDSUr2q5XVnzu8MY715Q3PXEkb0snD9SWuDgM16bJ23Jqbsu8sFxvcLvln6zvv6L+MfrBv33oYw/9wyUt/eOi2s+i9Upy1usbz9775a996T/+Q+/W64O/dXTkZ//rj9fUCk7640q51pB6q9P2JI3HlYtCKHr/rQrt1yP3/Vdqvz5F77/scmbqt483lpkfCuWu3q8XPTr40hVP3r469/16bLb3a+PK3tL0unLB+/Vk6T/Z91dSaW7Hwr2/mjpKsn7q2587Y//jn9lwdq2g6POyXrtdv764g/wjZ73+6arnRm8Y+w//o3fHja//xoNX/2Bi/Z/VCrrf77EtvdnvA+n2HcjZvvVWx7yzcfu+67obtm2ulRdt5zfu/DedFuQ/8VCy++Z9n5rYtm1y1+7O1qvTz9O4nOxW7vbzNB7dVhSsV6llvRbuQSfbq9P3W2z/5q63V/P7bSgkXX0u7Pvu8iWfuP/A3pGWV6ULuqaUxi91Ff9HVxx9+aoDX/1KbvwvxviVruJPvPDU51edee3B3Ph3J2n8geL4S0NL/PWHjvYPH3/0sdz447H9i7tq//Pv+8CP73v24Rdz44cYf6i77f/KwcueGx39aW78Z5J0OdPnSCE8+NrFW2rzSehL32+xHX1N7QrZ+SQzX8rMlxvnS3EUIV1AOUmay2O9tPy8hra080c55fEsbGBlbfp6nA/ZB7OXn2xKDcf+duVF56kAAKe7eP0/noPG6/+T6YlS/kgDzJhvHrYyJ27Mw2bGc5qvsa5M48fXx3HA0XeF8enprWO1E/25XkeI74fsOGdczgVvb47RdnziUONCqstvGecsGn9fnZmP7aqNl1ca8tBUa15TCR2Mv7cuZ/bx98zqF1/PGvtcS7PGGsatsvuvLx0xa3e/Q6a9lekIef0jOy4W7+cYXRo2VJfXYf/I3kcT90P2Ppq4nLMzB85u76PJ6x8jrduhqV2xf8R6s/SPapOLr0e27r8wy/ad2X/to2X33xz298B0/YW+PtuDccO2h7QTN264sNfDTopxyTbxT/C45JKW+Okb7GQfN4zlcTtVOhxP/FhOea/GE+PhIrbr2CxtORGMJwKnq5j/x8+I6fx/+gT8/2bqFeUp2bPGGC/3PqFy+/YU5R2t9+kNdvU5vunQzi/0jx6/IPc857FO79Pb2TQ3WHDfT9F2XJOZL9yOOQM0RfledjlF2z17X8ZQGO5qu9+7/6733rPsjstzt/uG2gdp8Xb/ctPccMF2PwXyhfbx5QunXL5QfgPuYygaP8vPR8r1dsyWj4Ru85H0xqeFykf+MKd8rvnIYMuD+npVnbz5yMwHaVM+0ndi2wUAnDpi/l+/fpbm//8STyzS84iivPXCzHyMl5u35pyf5OWtf5BOb8rUH6r+RkX7YLOdN3/o/EduW3L84XNz85a7O81D/3PT3EhhHjq/vDk3j9jQm/vFc/OIep41vzwxt/31PHF+eXrOZdqGPH1+eXTu9qnn0c3jAF8+OpNpzBY/jgPkxq+PA/Qwz/3lTKUTd79+wXhdZmFxttPxuhOdR0+X9C1tXs/mvHiwN9f10l+fXag8+qM55XPNo4daHtTXq+rkzaOby+XRAMDpKub/8TSumv/3h/BkrLA4PpjfdfbcvKBH5+3ZvwdSj//MguSVM/F7dP23OO9b6Lx1ofP6hR6XOHmu/051lRcv9LjQSPUPeM41fqfjZG/Y/a4Lkhf/S/1Rx3lxulB5MQAAJ7OY/8c0P17/fzJTb775SUv+1lc7hZzJT069/Lyx3imcn18ZTlR+3n8q5+en+vjXSFfx35z5/4wur4u/PnUa5//VNsv/AQBOSTH/j7/2GP/+339N57N/t77DPP3u7O28rqO7jh7mlacPhxDeDHl6j8fZYvzG+wBO4XGA8qk1DlB7sHim/uk0DlDVFwwGAACcAvqqmVLr79l/PJ1mf88+7/fyr8qp36lKenp87Z5dk5NX7925eWLP5NU7btg8ufvqG3dt3bNnsn7uPL/ru7l5S5o39oVKuj3a18vmbcvSv4ewLOfvIWTrx7DnVB+0/j2E7GIXF/wdgZn911l78/ZfaZb67fpH3v7Oi/9HOfWj+v6/7o8vunrL7qu37ti6Z+vEtq37JpvrjVR/k7rz782M1ynn9H2pmR8tSnP//s64e+bXjlJLO/rS7ZH3/exJph3L05Ysz/v+g5x2f+e//8WfnD/1i/tCGH9L+W3t233H/e0bn5Gsn/ovV07+wZ4j39853f7SrO2v10zbVfR9pdn6cX0q227YvecdW27YuyP7jZLdieMZpfr8At3XkL79yx2OT2zKKZ/r7++XWx6cnDoenwAAoEm8/h/PZ+P1wy+lJ1CxvDBP31GrN9/rx7l5+nhneXr2e8mK8vRs/bi+nebpA/PM07PLL8rT29Vvl6fn5d158f8wp/5cdd5PurjPo5Juh/sP7M3tJ9d01k+y32dQ1E+y9efaT5J59pPs8ov6Sbv67fpJ3n7Pi/+RnPp5ivpDpd4f5ndfTm5/+GJn/eHXM/NF/SFbf679oTTP/pBdflF/aFe/XX/I27+t8ctNm7w347/THaPaLyavvvGGXZ9qqLfQ338RWm/J6KR9i2Zeu7Df/9Gtzrfvwt73Nf/2h7C+WpLX/nh9YNGc2t/p73/Nv/1F238O95UtDS33leW2/5n5jYR13v6F/X6XjLzqra8/UeO1abcruv+saBx3Y075XMdxF7U8ODkZx4U3Tsz/4+WemP/fkU57fRno1P+etC4+5+Ix+BT7HrNuzpPme3980XnMm+7zPHvJ3ec5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGmhv7KyOj1y++7jHz77977z55Ovfeb3/3H7rb/26a//ZOy63/n2A4Nfe/3w5vO2/OB3z7jukU9efuiuv3n81eGHfvlCYeCR6s/KhensQAjJS0kIA9869pefPfz0WdNlSQihnIzsD2F5suLx5UkmwvjPQwib6+1sfvLB1y7eMj299Y7+pvJlmSDZ9QpD5diexnaGcFPhGnEKGkj72b7jN74j/PC3N972vVXf+Pu+gy/un6mSDDT0pxCWXtP4+r4QwuL0/7TY21bGF6fTDSGEwYbXvbugXW/vsP1rc+bPSaeL0ulQQZz4/OrMfClTLzsf9WWmDeu6uGDRXclrR7f1iizJzGcPRvOV185YvjydfjOdXjjH+OX4PwmlJFTqzd+WzPSR0LDfkpBU9+VAfb5U37chXf/MfJKZL2Xmy32Z9aouN+1o5SRpLo/1MuXxcFxJy89rPFa38dGc8rem04H0jfp6nA/ZBzVDLQ/q61UV23Vslrak/lP74krxKztQajgGtSuv7/h0ZwylZUPJipbXTLURnzu88c415U1PHBnJaUfyQJLGT7qKv++7y5d84v4De1fmxb+mlMYvdRX/R1ccffmqA1/9Sm78L8b45a7iX/To4EtXPHn76tztcyxun0pX8SdeeOrzq8689mBu+++O8Qe6ir/+0NH+4eOPPpbb/vG4fRZ3Ff/5933gx/c9+/CLufFDjD/YVfxNh3Z+oX/0+AW58R+L22eou/7zysHLnhsd/elYXvxnYvzhruLfu/+u996z7I7Lc/fvhrh9RrqK/6HzH7ltyfGHz807diZ39+qTE+DN6Yz0HOtz6Xy3eeZ8NeQLfz1WqZ3zLUn/D/dyQRnTy1m6gPEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9/fMtl3z8yvd/ZGMlCSHJqTPVRnyuvGj9+rEuljvxwlOfX3XmtQcby1Z2EQcAAAAoFvPwUr1kIKwMNyaLwzlt68cxgnPiXNJcnh1DiHGyYwTdxim1iVPqIk65R+2p9ChOX4/iLOpRnP4exRkoiDMQOouzeJY4leke0GF7BmdtT+dxhnoUZ0mP4gxnQnQbZ2mP2rOsR3FGZo3TeT9c3qM4K3oU54wexTmzR3He0qM4v9KjOGf1KE52THmu/XA4rXl2Xpzqg3JhnEpSrj/Rbjz9rHQ5585zOUMFyxku+jzucDmLO1zO2zOvK81xOQMdLudX57mcpMPl/Po8l1MqWE7stzdl2xeXE+c67P839yjOvh7F+XSP4tzSozh/2qM4f9ajOJ8JzSenc40D0KmY/8/keyOhv/KbYTA94mRHAWK+u6r6s/XzLu+AFOO9LVO+qCheNlHPxFs11/ZlBxAy8VZnyvua4lXq+cgs8QYa463JPDnb+r5vffu2Nca7MFPeP0u8phUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBPgn2+55ONXvv8jG0MSpv+1NdVGfK68aP36sS6We3jjnWvKm5440ljWX+kiEAAAAFAo5uF99ZKB0F9ZF/qTRU31BtJxgIF0vjxSm44uDRump8lYqTo/mCyf9XWV9HVr92zfuXb3zfveuXX7xPWT10/ueM+6S9ZdNn7pZZeu3bJ12+R47WcI/QXxQgjV4YfdN+/71MS2bZO7dtcKs+1fmb5uZTqfpK8bfVcYn57emrZ/RcHySi3LW7gHxXsPAAAAAAAAAAAAAAAAAAD4/+zaW4hcZx0A8O/MzM5Mt41d6W0amu2QS4laNYlbSbV0DwgWmgtZCjJbXUuwCRY3TWiTEuvYBmxrgiK0BEIkD0ZisbX40ostYi8EIjUacGOQtmge9EFptZKWPEjKyM7OmdvOZNaxZJP4+z2cb+b//b/vf75DCPzPLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG5NlUcmSqNj44NRCFGXnEoHyVw6G8fFPup+5aVtP8gNn17eHMtl+tgIAAAA6CnpwwfqkXzIZdIhHa6tflscmiZCo+8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/0yVRyZKo2Pjl0YhRF1yKh0kc+lsHBf7qHvyvWc++8bw8N+aY4U+9gEAAAB6S/rwVD2SD4WwJAxE1053/vVo8m5gYdv6mbyGZJ9Fc8xrf3fQLW/JHPNumGPex3rkra+NOwMAAABc+JL+P1OPDIVcZsGsfjjp/3v19Une9W156dpYbE46q+xckgAAAIA5SPr/XD1SCLlMod6vz7XfX9wIVX86T9b3+t0+Wb+sLS9Z3+v3/HW10e/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDhmCqPTJRGx8bTUQhRl5xKB8lcOhvHxT7qrnp58B9rDj+6uDmWy/SxEQAAANBT0oc3Wu98yGUGw0C4tNr3D9924LkvPffCSAhhps3PZsPOjdu337dq+hpWJXkrjx4e+P6Rd749K2/lzHXeDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxopsojE6XRsfFLohCiLjmVDpK5dDaOi33UfevzX/zLUydefLs5VuhjHwAAAKC3pA9v9P75UAjZkA1XV7819/rTUm3ru70zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e93/zwW9snJzcdJ8P8/Ohkg7hPLiN//FD8s/pfLmfC/9Dfr5vY37/XwIAAD5814coVP5L12yY77sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOB1PlkYnS6Nh4Pgoh6pJT6SCZS2fjuNhH3filY7kFp19+tTlW6GMfAAAAoLekD2/0/vlQCANhIFxV/dbpnUC1/x86hzcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFemyiMTpdGx8QVRCFGXnEoHyVw6G8fFPuo+uWv/5w5d/r3bm2O5TB8bAQAAAD0lfXi2HsmHXObjIReuq32fbF0QpWtj5/cCjXXbWpYNznlduWVd+mzrokwI9XW7206WqZ1mZl0+2W9oZqzXKzbWpWrrik3rCqFevlhfV31Ye1uqLehxvtlPHgAAAM6dpP/P1SNDIZfJNfX/P62Nl9RGfS4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NlUeWSiNDo2HkUhRF1yKh0kc+lsHBf7qPvgbz962Vd/tmdHc6zQxz4AAABAb0kf3uj986EQFoWPhEXVvj8MteYnef8snTn0xL/+ujyEFVcfH860b/uj5MOv37r1lfZLCKnW7FQIl9fqRV3q/eb3TzywtHLmqRBWXJW+bla9cPZ6rVvGledLm9ZtP3J8W4+HAwAAABeJpP8fqEeGQi5zb9f+P+m8e/T/ddUG/PIHdv3iytq11pG3rUgN1eqlutT7wtJn/rxs9d/fme7/Z9f7ZP3Tp/dvOXRlS8GZSJsoroxu2bH++E0HU8mpZ+qn2+onz+XL33r735t3Pn5mpn4+5GvxhW23MlNt9rWtfIgrk6l942s/2FdurZ/pcv5Hf/fqiV8t3PP+dP33rh+s179h+pJrrz9z8kzX+uGSuDJ4x2N7b95/eH1r/RBCsVP9d9+/PVzzx3seaT//YNvGzU+++dr+AOLK0cWnDq4+ULiltX7UVj95/j8/8eTenzz+3ReS+snfiixfMtf6qbb6r+++YtdrD29Y2Fo/1eX8r9z5xvDW4nf+0H7+u1t2zXS9i9nnf/rGZ+96c2P8UPsUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxWWqPDJRGh0bT0UhRF1yKh0kc+lsHBf7qHtyzbF379zz4x82xwp97AMAAAD0lvThjd4/HwohG7JhsNr3P1/atG77kePbwtDMbFQbM5Nb79/+ic1bd9x79zzdOQAAADBXJ9dE1f4/U48MhVxmaRio9f+jW3asP37TwVTS/6emxyiEsPmeyU0rQj3v9d1X7Hrt4Q0L6+8JQqj+WUB+Ou8zjbzbbj02dOpPX1/WMW9VI+/o4lMHVx8o3JLkhea8laH+fuLpG5+9682N8UP1+2vO+9TXtk7WXk8k+w7e8djem/cfXp9K3mPUxsHavkneZGrf+NoP9pVTQyE3PZ+u5eVr5wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZpsqj0yURsfGQzqEqEtOpVktkMyls3Fc7KPu2qW/fOSy0y8uao7lMn1sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8hx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs11+IVFUcB/BzZnbbP7Oruxq0Fa2rFYU9KAUR9VJRERoh9GRIWJoPURBEFPbQGhqJFb0EWS8SFVRbCAa5SaLFGv2TXnqooMB6CERaqB2kh4qdOXd29jq30VkLys8HhrPn3Hu/93fvPXNmLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyn9HSN1NojOx6p3nnRrZ89df/Mk7d/8NC2K55466exTTd/urf/9ZNTm5dv+faWpZsOPLBmcvcrh38bfO+PY22DH683K1O3N4R4IobQ++H0i09PfX7B7FgMIZTj0HgIw3HJ4eGYS1j9ewhhc6PO+Rv3zVyzZbbdtqtn3vjiXEj+ukKlnNVTNzS/Xv5fetM821p97Krw/U3rt3+57N13uieOj8/tEmf3Kaf5FMKijc3Hd4cQ+tJnVjbbRrKDU7suhNDfdNx1beq69DTrXxVCNdevuTi156W20iYn274i1y/l9sv3M925tr/N+RaqqI5O92tnINfPL0YL1ahzVevx4dS+n9qVZ5hfzj4xlGLoapT/YJybI6H+3GoraQyx9iyzdTCGUuPZhnT9uX7M9Uu5frk7d12186aJVo5x/ni2X248W4670vjy5rW6hbsKxi9MbW/6op7M+iH/R13llD8a11WT1TX9N7X8G0pNa1Cr8VRv4/lXUqcSl5xyzJ8tZNum1j97eXnDR0eGCuqIe2PKjx3lb/1ieOCet3c+OlKUv7GU8ksd5f+w9ugvd+989eXC/Bey/HJH+Vcf7D+x9uMdKwrvz/TcCnI6+TH1s233HvvkuWXn3zfR6lnXMvdk97+3o/pvnDzaM1g9eKiw/tXZ/enrKP+7G2778c2v9x8vzA9Zfn9H+RsmH36+Z7R6ZWH+ofp3oFKboR3Mn18nrv1mdPTnsaL8r7L7P9giP7bNf2N89/WvLd61pnB+rsvuz1DK7zuj+u+47MD2ger+S4rWzrjnbP1yApyblqb/sZ5J/XbvmftmSi3fMxeq6X3hpbGu+i/QQPoMns0T5cyeZ9E/mA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTAQAA//9hRxeo")
sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/107, 0x6b}, 0xb}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

44.026908682s ago: executing program 3 (id=2907):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x10}, &(0x7f00000003c0)=0x8)

44.026717518s ago: executing program 34 (id=2819):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000001600000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000a000000fe8000000000000000000000000000aa37e496771e5455585841cbcb8412d9cde6cc"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

24.745419778s ago: executing program 35 (id=2906):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
modify_ldt$read_default(0x2, 0x0, 0x17)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5a84, &(0x7f0000011bc0)="$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")
sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/107, 0x6b}, 0xb}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

0s ago: executing program 36 (id=2907):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x10}, &(0x7f00000003c0)=0x8)

kernel console output (not intermixed with test programs):

fx_process_scheduled_works+0x10/0x10
[  160.154370][ T7359]  worker_thread+0x8a0/0xda0
[  160.154416][ T7359]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  160.154444][ T7359]  ? __kthread_parkme+0x7b/0x200
[  160.154468][ T7359]  kthread+0x711/0x8a0
[  160.154488][ T7359]  ? __pfx_worker_thread+0x10/0x10
[  160.154500][ T7359]  ? __pfx_kthread+0x10/0x10
[  160.154519][ T7359]  ? _raw_spin_unlock_irq+0x23/0x50
[  160.154534][ T7359]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.154551][ T7359]  ? __pfx_kthread+0x10/0x10
[  160.154568][ T7359]  ret_from_fork+0x3fc/0x770
[  160.154586][ T7359]  ? __pfx_ret_from_fork+0x10/0x10
[  160.154607][ T7359]  ? __switch_to_asm+0x39/0x70
[  160.154623][ T7359]  ? __switch_to_asm+0x33/0x70
[  160.154637][ T7359]  ? __pfx_kthread+0x10/0x10
[  160.154654][ T7359]  ret_from_fork_asm+0x1a/0x30
[  160.154687][ T7359]  </TASK>
[  160.154693][ T7359] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  160.927462][ T8737] warning: `syz.1.1085' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  160.975153][ T8733] loop0: detected capacity change from 0 to 32768
[  161.082755][ T8733] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  161.082771][ T8733]   allowing incompatible features above 0.0: (unknown version)
[  161.082779][ T8733]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  161.100405][ T8733] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  161.104135][ T8733] bcachefs (loop0): initializing new filesystem
[  161.113561][ T8733] bcachefs (loop0): going read-write
[  161.130727][ T8733] bcachefs (loop0): marking superblocks
[  161.136744][ T8733] bcachefs (loop0): initializing freespace
[  161.142847][ T8733] bcachefs (loop0): done initializing freespace
[  161.147308][ T8733] bcachefs (loop0): reading snapshots table
[  161.149754][ T8733] bcachefs (loop0): reading snapshots done
[  161.200842][ T8733] bcachefs (loop0): done starting filesystem
[  161.964990][ T5854] bcachefs (loop0): shutting down
[  161.967322][ T5854] bcachefs (loop0): going read-only
[  161.969561][ T5854] bcachefs (loop0): finished waiting for writes to stop
[  161.989704][ T5854] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  162.003801][ T5854] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  162.012639][ T5854] bcachefs (loop0): clean shutdown complete, journal seq 6
[  162.016200][ T5854] bcachefs (loop0): marking filesystem clean
[  162.036007][ T5854] bcachefs (loop0): shutdown complete
[  162.178320][   T33] audit: type=1804 audit(1755554570.601:30): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1102" name="file0" dev="tmpfs" ino=2506 res=1 errno=0
[  162.553651][ T8788] loop3: detected capacity change from 0 to 32768
[  162.558008][ T8788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1104 (8788)
[  162.588599][ T8788] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.592789][ T8788] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  162.595716][ T8788] BTRFS info (device loop3): disk space caching is enabled
[  162.598653][ T8788] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  162.686321][ T8788] BTRFS info (device loop3): rebuilding free space tree
[  162.713442][ T8788] BTRFS info (device loop3): disabling free space tree
[  162.717228][ T8788] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.720629][ T8788] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.756437][ T7057] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.170933][ T8829] loop3: detected capacity change from 0 to 32768
[  163.174449][ T8829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1115 (8829)
[  163.189212][ T8829] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.274496][ T8829] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  163.278154][ T8829] BTRFS info (device loop3): using free-space-tree
[  163.439074][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'.
[  163.490129][ T7057] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.677207][ T8864] loop0: detected capacity change from 0 to 128
[  163.723541][ T8864] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.729719][ T8864] ext4 filesystem being mounted at /320/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.802324][ T8864] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.1124: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  163.821495][ T8864] EXT4-fs (loop0): Remounting filesystem read-only
[  163.866984][ T5854] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.977147][ T8876] capability: warning: `syz.0.1127' uses 32-bit capabilities (legacy support in use)
[  164.070805][ T8878] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  164.156591][ T8884] netlink: 'syz.3.1132': attribute type 3 has an invalid length.
[  164.316321][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'.
[  164.517866][ T8903] loop3: detected capacity change from 0 to 32768
[  164.527571][ T8903] XFS: noikeep mount option is deprecated.
[  164.562293][ T8903] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.574467][ T8903] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  164.582179][ T8903] XFS (loop3): Starting recovery (logdev: internal)
[  164.593667][ T8903] XFS (loop3): Ending recovery (logdev: internal)
[  164.976525][ T8903] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[  164.986838][ T8933] loop0: detected capacity change from 0 to 764
[  164.987578][ T8903] XFS (loop3): Unmount and run xfs_repair
[  165.029535][ T7057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.034013][ T7057] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  165.235240][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'.
[  165.471313][ T8949] binder: 8948:8949 ioctl c018620c 200000000000 returned -22
[  165.564920][ T8955] loop0: detected capacity change from 0 to 128
[  165.573451][ T8955] affs: Unknown parameter 'smackfsroot'
[  166.061679][  T792] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  166.214862][  T792] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  166.218952][  T792] usb 4-1: config 1 interface 0 has no altsetting 0
[  166.223322][  T792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  166.226380][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.229004][  T792] usb 4-1: Product: syz
[  166.230453][  T792] usb 4-1: Manufacturer: syz
[  166.232191][  T792] usb 4-1: SerialNumber: syz
[  166.236819][ T8953] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.454332][  T792] usb 4-1: USB disconnect, device number 12
[  166.520654][ T8969] loop0: detected capacity change from 0 to 16
[  166.533931][ T8969] erofs (device loop0): mounted with root inode @ nid 36.
[  166.996197][ T8989] loop0: detected capacity change from 0 to 1024
[  167.056193][ T8989] hfsplus: request for non-existent node 3 in B*Tree
[  167.059539][ T8989] hfsplus: request for non-existent node 3 in B*Tree
[  167.169638][ T8997] loop3: detected capacity change from 0 to 4096
[  167.191057][ T8997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.226079][ T7057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.264413][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'.
[  167.549535][ T9023] loop0: detected capacity change from 0 to 1024
[  167.848013][ T9031] loop3: detected capacity change from 0 to 40427
[  167.848256][ T9033] loop0: detected capacity change from 0 to 32768
[  167.858201][ T9033] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1195 (9033)
[  167.862127][ T9031] F2FS-fs (loop3): Image doesn't support compression
[  167.878100][ T9031] F2FS-fs (loop3): build fault injection rate: 4
[  167.880306][ T9031] F2FS-fs (loop3): build fault injection type: 0x5288
[  167.886027][ T9033] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.890052][ T9033] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  167.893833][ T9031] F2FS-fs (loop3): invalid crc value
[  167.921728][ T9033] BTRFS info (device loop0): using free-space-tree
[  167.930280][ T9031] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.938692][ T9031] F2FS-fs (loop3): Start checkpoint disabled!
[  167.961827][ T9031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  167.996815][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  168.001195][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  168.017229][   T33] audit: type=1800 audit(1755554576.421:31): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1195" name="file1" dev="loop0" ino=260 res=0 errno=0
[  168.026436][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  168.120678][ T5854] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  168.253093][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'.
[  168.644856][ T9076] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1206'.
[  168.984678][ T9090] cgroup: Invalid name
[  169.290040][ T9092] overlay: ./file0 is not a directory
[  169.350788][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1216'.
[  169.359927][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'.
[  169.366399][ T9096] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  169.673423][   T33] audit: type=1326 audit(1755554578.091:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.691257][   T33] audit: type=1326 audit(1755554578.101:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.703911][   T33] audit: type=1326 audit(1755554578.111:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.717750][   T33] audit: type=1326 audit(1755554578.111:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.729929][   T33] audit: type=1326 audit(1755554578.111:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.739768][   T33] audit: type=1326 audit(1755554578.111:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.909808][   T33] audit: type=1326 audit(1755554578.331:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.918093][   T33] audit: type=1326 audit(1755554578.331:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  169.963919][   T33] audit: type=1326 audit(1755554578.391:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.1.1220" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3b5238ebe9 code=0x7ffc0000
[  170.077895][ T9111] loop3: detected capacity change from 0 to 32768
[  170.092585][ T9111] btrfs: Deprecated parameter 'usebackuproot'
[  170.095481][ T9111] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  170.105908][ T9111] BTRFS error: unrecognized compression value n
[  170.433798][ T9142] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1237'.
[  170.551382][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'.
[  170.556068][ T9152] loop3: detected capacity change from 0 to 2048
[  170.576165][ T9153] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.620967][ T9153] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  170.627611][ T9153] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  170.630443][ T9155] overlayfs: failed to clone upperpath
[  170.642949][ T9153] Remounting filesystem read-only
[  170.659260][ T7057] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  171.084849][ T9171] tipc: Started in network mode
[  171.086945][ T9171] tipc: Node identity 0000000000000000000085d3ab8e0001, cluster identity 4711
[  171.090657][ T9171] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.625414][ T9230] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  172.770429][  T792] IPVS: starting estimator thread 0...
[  172.871290][ T9232] loop3: detected capacity change from 0 to 256
[  172.890253][ T9232] FAT-fs (loop3): Directory bread(block 64) failed
[  172.912844][ T9232] FAT-fs (loop3): Directory bread(block 65) failed
[  172.914142][ T9231] IPVS: using max 42 ests per chain, 100800 per kthread
[  172.915992][ T9232] FAT-fs (loop3): Directory bread(block 66) failed
[  172.937848][ T9232] FAT-fs (loop3): Directory bread(block 67) failed
[  172.940837][ T9232] FAT-fs (loop3): Directory bread(block 68) failed
[  172.945458][ T9232] FAT-fs (loop3): Directory bread(block 69) failed
[  172.949954][ T9232] FAT-fs (loop3): Directory bread(block 70) failed
[  172.953557][ T9232] FAT-fs (loop3): Directory bread(block 71) failed
[  172.956982][ T9232] FAT-fs (loop3): Directory bread(block 72) failed
[  172.957669][ T9234] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  172.959502][ T9232] FAT-fs (loop3): Directory bread(block 73) failed
[  172.985722][ T9234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.607046][ T9255] loop0: detected capacity change from 0 to 32768
[  173.670818][ T9255] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  173.670835][ T9255]   allowing incompatible features above 0.0: (unknown version)
[  173.670841][ T9255]   features: 
[  173.688120][ T9255] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  173.692196][ T9255] bcachefs (loop0): initializing new filesystem
[  173.700544][ T9255] bcachefs (loop0): going read-write
[  173.710617][ T9255] bcachefs (loop0): marking superblocks
[  173.772519][ T9255] bcachefs (loop0): initializing freespace
[  173.810214][ T9255] bcachefs (loop0): done initializing freespace
[  173.828600][ T9255] bcachefs (loop0): reading snapshots table
[  173.831255][ T9255] bcachefs (loop0): reading snapshots done
[  173.889115][ T9255] bcachefs (loop0): done starting filesystem
[  174.010017][ T9303] loop3: detected capacity change from 0 to 4096
[  174.019819][ T9303] NILFS (loop3): invalid segment: Checksum error in segment payload
[  174.023615][ T9303] NILFS (loop3): trying rollback from an earlier position
[  174.040149][ T9303] NILFS (loop3): recovery complete
[  174.073895][ T5854] bcachefs (loop0): shutting down
[  174.076370][ T5854] bcachefs (loop0): going read-only
[  174.078505][ T5854] bcachefs (loop0): finished waiting for writes to stop
[  174.087591][ T5854] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  174.118253][ T5854] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  174.125888][ T5854] bcachefs (loop0): clean shutdown complete, journal seq 5
[  174.129210][ T5854] bcachefs (loop0): marking filesystem clean
[  174.135936][ T9303] NILFS (loop3): error -2 reading inode: ino=8452802278719930123
[  174.146269][ T5854] bcachefs (loop0): shutdown complete
[  174.815167][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'.
[  175.280205][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'.
[  175.582959][ T9335] loop0: detected capacity change from 0 to 32768
[  175.586775][ T9335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1309 (9335)
[  175.606918][ T9335] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.613840][ T9335] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  175.617838][ T9335] BTRFS info (device loop0): using free-space-tree
[  175.723955][ T5854] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.051874][ T5902] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.234026][ T5902] usb 4-1: Using ep0 maxpacket: 32
[  177.238970][ T5902] usb 4-1: config 0 has an invalid interface number: 43 but max is 1
[  177.241877][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.245643][ T5902] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  177.251444][ T5902] usb 4-1: config 0 has no interface number 0
[  177.260451][ T5902] usb 4-1: config 0 interface 43 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  177.268372][ T5902] usb 4-1: config 0 interface 43 has no altsetting 0
[  177.277604][ T5902] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[  177.281184][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.290173][ T5902] usb 4-1: Product: syz
[  177.296685][ T5902] usb 4-1: Manufacturer: syz
[  177.301570][ T5902] usb 4-1: SerialNumber: syz
[  177.315839][ T5902] usb 4-1: config 0 descriptor??
[  177.426346][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1337'.
[  177.429358][ T9387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  177.532560][ T5902] keyspan_pda 4-1:0.43: required endpoints missing
[  177.554320][ T5902] usb 4-1: USB disconnect, device number 13
[  177.761493][ T9415] loop0: detected capacity change from 0 to 2048
[  177.809174][ T9415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.818812][ T9415] EXT4-fs (loop0): shut down requested (1)
[  177.841114][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.895126][ T9424] loop0: detected capacity change from 0 to 764
[  178.196108][ T9426] loop0: detected capacity change from 0 to 32768
[  178.199897][ T9426] XFS: attr2 mount option is deprecated.
[  178.207919][ T9426] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.248375][ T9426] XFS (loop0): Ending clean mount
[  178.262906][ T9426] XFS (loop0): Quotacheck needed: Please wait.
[  178.287004][ T9426] XFS (loop0): Quotacheck: Done.
[  178.322533][ T5854] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.515076][ T9463] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1364'.
[  179.518413][ T9463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1364'.
[  179.824083][ T9472] loop0: detected capacity change from 0 to 256
[  180.558120][ T9485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1373'.
[  180.934856][ T9500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  181.206074][ T9518] bond1: entered allmulticast mode
[  181.237174][ T9521] loop3: detected capacity change from 0 to 256
[  181.921853][ T9528] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[  181.938138][ T9525] bridge0: port 3(syz_tun) entered blocking state
[  181.940577][ T9525] bridge0: port 3(syz_tun) entered disabled state
[  181.943140][ T9525] syz_tun: entered allmulticast mode
[  181.947822][ T9525] syz_tun: entered promiscuous mode
[  183.091208][ T9546] autofs: Bad value for 'fd'
[  183.967409][ T9563] syzkaller1: tun_chr_ioctl cmd 1074025672
[  183.969473][ T9563] syzkaller1: ignored: set checksum enabled
[  183.997974][ T9567] loop3: detected capacity change from 0 to 64
[  184.768435][ T9586] loop0: detected capacity change from 0 to 2048
[  184.828110][ T5977] Dev loop0: RDB in block 2 has bad checksum
[  184.847358][ T9586] Dev loop0: RDB in block 2 has bad checksum
[  184.859389][ T5295] Dev loop0: RDB in block 2 has bad checksum
[  185.766105][ T9588] 9pnet_fd: p9_fd_create_tcp (9588): problem connecting socket to 127.0.0.1
[  185.805336][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  185.898941][ T9621] loop3: detected capacity change from 0 to 4096
[  185.996488][ T9625] loop0: detected capacity change from 0 to 1024
[  186.000876][ T9625] EXT4-fs: Ignoring removed bh option
[  186.043443][ T9625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  186.134530][ T9625] EXT4-fs: Ignoring removed orlov option
[  186.151035][ T9625] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.1435: Abort forced by user
[  186.171944][ T9625] EXT4-fs (loop0): Remounting filesystem read-only
[  186.174470][ T9625] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000.
[  186.198838][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  186.670108][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1448'.
[  186.690278][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'.
[  187.030468][ T9659] loop0: detected capacity change from 0 to 32768
[  187.039119][ T9659] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal buckets entry with bad nr: 524297+0
[  187.039119][ T9659] journal_v2 (size 40):
[  187.039119][ T9659] Buckets:  524297-524297 24-25
[  187.039119][ T9659] 
[  187.052979][ T9659] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  187.213161][ T9663] sctp: [Deprecated]: syz.1.1451 (pid 9663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.213161][ T9663] Use struct sctp_sack_info instead
[  187.245565][ T9665] loop0: detected capacity change from 0 to 2048
[  187.339369][ T9665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.362383][ T9665] cifs: Unknown parameter 'norecovery'
[  187.475320][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.578083][ T9674] loop0: detected capacity change from 0 to 16
[  187.590638][ T9674] erofs (device loop0): blkszbits 0 isn't supported
[  187.689368][ T9667] loop3: detected capacity change from 0 to 32768
[  187.702124][ T9667] XFS: noikeep mount option is deprecated.
[  187.732891][ T9667] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  187.746605][ T9667] XFS (loop3): Ending clean mount
[  187.797178][ T7057] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  188.294761][ T9715] loop3: detected capacity change from 0 to 1024
[  188.343921][ T9715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.371944][ T9715] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.454889][   T26] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm kworker/u9:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  188.479228][   T26] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  188.486640][   T26] EXT4-fs (loop3): This should not happen!! Data will be lost
[  188.486640][   T26] 
[  188.499148][ T7057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.029214][ T9723] loop0: detected capacity change from 0 to 40427
[  189.060145][ T9723] F2FS-fs (loop0): build fault injection rate: 771
[  189.073132][ T9723] F2FS-fs (loop0): invalid crc value
[  189.160853][ T9723] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.180718][ T9723] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  189.673421][ T9751] netlink: 'syz.0.1482': attribute type 12 has an invalid length.
[  189.826233][ T9758] syz.3.1485: attempt to access beyond end of device
[  189.826233][ T9758] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  189.867195][   T54] Bluetooth: hci2: Malformed LE Event: 0x0d
[  189.939252][ T9760] loop3: detected capacity change from 0 to 8192
[  189.944418][ T9760] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  189.973095][ T9760] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  189.978383][ T9760] ntfs3(loop3): Failed to load $Extend (-2).
[  189.980876][ T9760] ntfs3(loop3): Failed to initialize $Extend.
[  192.048701][ T9815] netlink: 'syz.1.1510': attribute type 6 has an invalid length.
[  192.501824][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  192.651905][    T9] usb 4-1: Using ep0 maxpacket: 32
[  192.659114][    T9] usb 4-1: config 15 has an invalid interface number: 48 but max is 0
[  192.666221][    T9] usb 4-1: config 15 has no interface number 0
[  192.670066][    T9] usb 4-1: config 15 interface 48 altsetting 5 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  192.681419][    T9] usb 4-1: config 15 interface 48 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0
[  192.698103][    T9] usb 4-1: config 15 interface 48 has no altsetting 0
[  192.717246][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 5.ad
[  192.721188][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.725615][    T9] usb 4-1: Product: syz
[  192.727602][    T9] usb 4-1: Manufacturer: syz
[  192.731429][    T9] usb 4-1: SerialNumber: syz
[  193.128312][ T9834] loop0: detected capacity change from 0 to 32768
[  193.158344][    T9] usbtest 4-1:15.48: couldn't get endpoints, -22
[  193.167245][    T9] usbtest 4-1:15.48: probe with driver usbtest failed with error -22
[  193.206440][ T9834] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  193.206458][ T9834]   allowing incompatible features above 0.0: (unknown version)
[  193.206465][ T9834]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  193.223569][ T9834] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  193.226766][ T9834] bcachefs (loop0): initializing new filesystem
[  193.234387][ T9834] bcachefs (loop0): going read-write
[  193.239866][    T9] usb 4-1: USB disconnect, device number 14
[  193.246183][ T9834] bcachefs (loop0): marking superblocks
[  193.251887][ T9834] bcachefs (loop0): initializing freespace
[  193.255688][ T9834] bcachefs (loop0): done initializing freespace
[  193.259722][ T9834] bcachefs (loop0): reading snapshots table
[  193.262409][ T9834] bcachefs (loop0): reading snapshots done
[  193.284233][ T9834] bcachefs (loop0): done starting filesystem
[  193.370959][ T5854] bcachefs (loop0): shutting down
[  193.373966][ T5854] bcachefs (loop0): going read-only
[  193.376666][ T5854] bcachefs (loop0): finished waiting for writes to stop
[  193.388376][ T5854] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  193.421404][ T5854] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  193.425775][ T5854] bcachefs (loop0): clean shutdown complete, journal seq 4
[  193.428930][ T5854] bcachefs (loop0): marking filesystem clean
[  193.452799][ T5854] bcachefs (loop0): shutdown complete
[  193.658925][ T9850] loop3: detected capacity change from 0 to 32768
[  193.709526][ T9850] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.728972][ T9850] XFS (loop3): Ending clean mount
[  193.924019][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'.
[  193.928189][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'.
[  193.929257][ T7057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.956641][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.967912][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.649730][ T9887] loop3: detected capacity change from 0 to 32768
[  194.672756][ T9887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1537 (9887)
[  194.722316][ T9887] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.730636][ T9887] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  194.781848][ T9887] BTRFS info (device loop3): using free-space-tree
[  194.922073][ T9903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.927889][ T9887] BTRFS info (device loop3): rebuilding free space tree
[  195.101336][ T7057] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.827965][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'.
[  196.034596][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  196.560949][ T9914] loop3: detected capacity change from 0 to 262144
[  196.565574][ T9914] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1539 (9914)
[  196.604490][ T9914] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  196.608706][ T9914] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  196.611981][ T9914] BTRFS info (device loop3): using free-space-tree
[  196.940912][ T9960] BTRFS info (device loop3): balance: start -d -m -s
[  196.969548][ T9960] BTRFS info (device loop3): relocating block group 63963136 flags data
[  197.281542][ T9964] loop0: detected capacity change from 0 to 32768
[  197.284691][ T9960] BTRFS info (device loop3): relocating block group 13631488 flags data
[  197.300280][ T9960] BTRFS info (device loop3): 2 enospc errors during balance
[  197.307496][ T9960] BTRFS info (device loop3): balance: canceled
[  197.374480][ T7057] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  197.475848][ T9972] gtp0: entered promiscuous mode
[  197.914779][ T9986] loop0: detected capacity change from 0 to 4096
[  197.933080][ T9986] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  197.969586][ T9986] ntfs3(loop0): ino=19, mi_enum_attr
[  197.971541][ T9986] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  197.987900][ T9986] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  198.101317][ T9990] loop0: detected capacity change from 0 to 256
[  198.129572][ T9990] FAT-fs (loop0): Directory bread(block 64) failed
[  198.133026][ T9990] FAT-fs (loop0): Directory bread(block 65) failed
[  198.135800][ T9990] FAT-fs (loop0): Directory bread(block 66) failed
[  198.138203][ T9990] FAT-fs (loop0): Directory bread(block 67) failed
[  198.140406][ T9990] FAT-fs (loop0): Directory bread(block 68) failed
[  198.143565][ T9990] FAT-fs (loop0): Directory bread(block 69) failed
[  198.146804][ T9990] FAT-fs (loop0): Directory bread(block 70) failed
[  198.149351][ T9990] FAT-fs (loop0): Directory bread(block 71) failed
[  198.153528][ T9990] FAT-fs (loop0): Directory bread(block 72) failed
[  198.157078][ T9990] FAT-fs (loop0): Directory bread(block 73) failed
[  198.306049][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.306049][   T35] loop0: rw=1, sector=1256, nr_sectors = 32 limit=256
[  198.315049][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.315049][   T35] loop0: rw=1, sector=1320, nr_sectors = 32 limit=256
[  198.321019][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.321019][   T35] loop0: rw=1, sector=1384, nr_sectors = 32 limit=256
[  198.328362][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.328362][   T35] loop0: rw=1, sector=1448, nr_sectors = 32 limit=256
[  198.335717][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.335717][   T35] loop0: rw=1, sector=1512, nr_sectors = 32 limit=256
[  198.344098][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.344098][   T35] loop0: rw=1, sector=1576, nr_sectors = 32 limit=256
[  198.350082][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.350082][   T35] loop0: rw=1, sector=1640, nr_sectors = 32 limit=256
[  198.358475][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.358475][   T35] loop0: rw=1, sector=1704, nr_sectors = 32 limit=256
[  198.366098][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.366098][   T35] loop0: rw=1, sector=1768, nr_sectors = 32 limit=256
[  198.372415][   T35] kworker/u10:1: attempt to access beyond end of device
[  198.372415][   T35] loop0: rw=1, sector=1864, nr_sectors = 32 limit=256
[  198.494688][ T9999] loop0: detected capacity change from 0 to 2048
[  198.505345][T10002] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.535002][T10002] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  198.539993][T10002] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  198.547965][T10002] Remounting filesystem read-only
[  198.552260][ T5854] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  198.685422][T10011] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1573'.
[  199.596043][T10031] loop3: detected capacity change from 0 to 1024
[  199.689341][ T1203] hfsplus: b-tree write err: -5, ino 3
[  199.700447][ T7057] hfsplus: node 4:3 still has 1 user(s)!
[  199.824712][T10036] loop3: detected capacity change from 0 to 2048
[  199.893464][T10036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.205241][T10045] loop0: detected capacity change from 0 to 1764
[  200.370926][T10045] loop0: detected capacity change from 0 to 32768
[  200.376469][T10045] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1584 (10045)
[  200.391927][T10045] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  200.396657][T10045] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  200.400576][T10045] BTRFS info (device loop0): disk space caching is enabled
[  200.404080][T10045] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  200.412202][T10039] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 28672 lbcount: 32768 extent 97+12800
[  200.506320][T10045] BTRFS info (device loop0): rebuilding free space tree
[  200.521517][T10045] BTRFS info (device loop0): disabling free space tree
[  200.523866][T10045] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  200.527233][T10045] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  200.765702][T10072] loop6: detected capacity change from 0 to 524287999
[  200.783162][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.786727][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.814604][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.828284][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.832278][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.836300][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.839357][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.844253][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.846998][T10072] ldm_validate_partition_table(): Disk read failed.
[  200.849420][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.852747][T10072] Buffer I/O error on dev loop6, logical block 0, async page read
[  200.856019][T10072] Dev loop6: unable to read RDB block 0
[  200.858313][T10072]  loop6: unable to read partition table
[  200.860414][T10072] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5)
[  200.931460][T10067] BTRFS info (device loop0): balance: start -d -m
[  200.941947][T10067] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  200.968351][T10067] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata
[  200.992313][T10079] loop3: detected capacity change from 0 to 256
[  200.998896][T10079] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.016350][T10067] BTRFS info (device loop0): found 8 extents, stage: move data extents
[  201.029702][T10079] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  201.045345][T10067] BTRFS info (device loop0): found 1 extents, stage: update data pointers
[  201.064817][T10079] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  201.067189][T10067] BTRFS info (device loop0): balance: ended with status: 0
[  202.087864][T10083] program syz.3.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.194014][T10089] loop3: detected capacity change from 0 to 8
[  202.220052][T10089] SQUASHFS error: lzo decompression failed, data probably corrupt
[  202.224715][T10089] SQUASHFS error: Failed to read block 0x91: -5
[  202.227623][T10089] SQUASHFS error: Unable to read metadata cache entry [8f]
[  202.230506][T10089] SQUASHFS error: Unable to read inode 0x11f
[  202.289887][T10091] loop3: detected capacity change from 0 to 4096
[  202.321506][T10091] ntfs3(loop3): failed to convert "0080" to koi8-ru
[  202.327268][T10091] ntfs3(loop3): failed to convert name for inode 1e.
[  202.330666][T10091] ntfs3(loop3): ino=1f, mi_enum_attr
[  202.334035][T10091] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  202.399847][T10093] loop3: detected capacity change from 0 to 256
[  202.757352][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'.
[  202.763302][T10098] netlink: 'syz.1.1601': attribute type 3 has an invalid length.
[  202.796858][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1602'.
[  203.370793][ T5854] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  203.647515][T10111] loop0: detected capacity change from 0 to 512
[  203.657119][T10111] FAT-fs (loop0): bogus sectors per cluster 69
[  203.659423][T10111] FAT-fs (loop0): Can't find a valid FAT filesystem
[  203.681841][    T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  203.844274][    T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  203.848277][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.858729][T10119] loop0: detected capacity change from 0 to 2048
[  203.863012][    T9] usb 4-1: config 0 descriptor??
[  203.903768][ T5851]  loop0: p3 < > p4 < >
[  203.905663][ T5851] loop0: partition table partially beyond EOD, truncated
[  203.908948][ T5851] loop0: p3 start 4284289 is beyond EOD, truncated
[  203.918026][T10119]  loop0: p3 < > p4 < >
[  203.920013][T10119] loop0: partition table partially beyond EOD, truncated
[  203.923835][T10119] loop0: p3 start 4284289 is beyond EOD, truncated
[  204.081484][    T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  204.105755][    T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3
[  204.109125][    T9] [drm] Initialized udl on minor 3
[  204.603892][    T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  204.615209][    T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  204.633853][    T9] usb 4-1: USB disconnect, device number 15
[  204.647152][ T5855] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  204.816105][T10130] loop0: detected capacity change from 0 to 2048
[  204.831459][T10133] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.880851][T10130] NILFS (loop0): error -2 truncating bmap (ino=16)
[  205.864340][T10148] loop3: detected capacity change from 0 to 32768
[  205.871348][T10148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1620 (10148)
[  205.920164][T10148] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.941028][T10148] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  205.948142][T10148] BTRFS info (device loop3): using free-space-tree
[  206.250333][ T7057] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.825085][T10186] batadv0: entered promiscuous mode
[  206.827972][T10186] macsec2: entered promiscuous mode
[  206.830360][T10186] macsec2: entered allmulticast mode
[  206.833703][T10186] batadv0: entered allmulticast mode
[  206.837163][T10186] batadv0: left allmulticast mode
[  206.839323][T10186] batadv0: left promiscuous mode
[  206.988657][T10194] loop0: detected capacity change from 0 to 1024
[  207.018323][T10194] hfsplus: bad catalog entry type
[  207.040885][   T26] hfsplus: b-tree write err: -5, ino 4
[  207.486200][T10213] loop0: detected capacity change from 0 to 8
[  207.499003][T10213] SQUASHFS error: lzo decompression failed, data probably corrupt
[  207.503375][T10213] SQUASHFS error: Failed to read block 0x0: -5
[  207.506529][T10213] SQUASHFS error: lzo decompression failed, data probably corrupt
[  207.510997][T10213] SQUASHFS error: Failed to read block 0x0: -5
[  207.516677][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  207.516690][   T33] audit: type=1800 audit(1755554615.941:45): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1643" name="file2" dev="loop0" ino=3 res=0 errno=0
[  207.638030][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'.
[  207.928883][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  208.081898][    T9] usb 4-1: Using ep0 maxpacket: 16
[  208.093959][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.098513][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.111688][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  208.123199][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  208.126995][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.134553][    T9] usb 4-1: config 0 descriptor??
[  208.254920][T10239] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1656'.
[  208.310969][T10241] netlink: 'syz.0.1657': attribute type 8 has an invalid length.
[  208.340884][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.344488][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.408322][T10245] netlink: 'syz.0.1659': attribute type 11 has an invalid length.
[  208.556074][    T9] hid_parser_main: 176 callbacks suppressed
[  208.556096][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x2
[  208.577162][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.583952][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.587166][T10255] netlink: 'syz.1.1664': attribute type 10 has an invalid length.
[  208.592574][T10255] batman_adv: batadv0: Adding interface: wlan0
[  208.592842][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.598723][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.602755][T10255] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.602786][T10255] batman_adv: batadv0: Interface activated: wlan0
[  208.621196][T10253] input: syz0 as /devices/virtual/input/input12
[  208.631453][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.635547][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.639054][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.642324][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.645625][    T9] hid-multitouch 0003:045E:9994.0009: unknown main item tag 0x0
[  208.662288][    T9] hid-multitouch 0003:045E:9994.0009: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0
[  208.758080][ T5887] usb 4-1: USB disconnect, device number 16
[  208.859723][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'.
[  208.866805][T10273] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1671'.
[  209.366539][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  209.371339][T10300] netlink: 'syz.1.1685': attribute type 3 has an invalid length.
[  209.515947][T10304] loop0: detected capacity change from 0 to 4096
[  209.549163][T10307] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.609979][T10298] loop3: detected capacity change from 0 to 32768
[  209.617300][T10298] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  209.617300][T10298] 
[  209.632648][T10298] ERROR: (device loop3): remounting filesystem as read-only
[  209.638103][T10298] xtLookup: xtSearch returned -5
[  209.644094][T10298] read_mapping_page failed!
[  209.652165][T10298] jfs_mount: diMount failed w/rc = -5
[  209.661005][T10298] Mount JFS Failure: -5
[  209.667237][T10298] jfs_mount failed w/return code = -5
[  210.383044][T10311] loop3: detected capacity change from 0 to 32768
[  210.427773][T10311] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.479740][T10311] XFS (loop3): Ending clean mount
[  210.497710][T10311] XFS (loop3): Quotacheck needed: Please wait.
[  210.531342][T10311] XFS (loop3): Quotacheck: Done.
[  210.624991][T10334] loop0: detected capacity change from 0 to 4096
[  210.660935][T10334] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  210.663463][ T7057] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.665495][T10334] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  210.772292][ T1096] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  210.778884][ T5854] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  210.801141][ T5854] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  210.821541][ T5854] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  210.835128][ T1096] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  211.062540][T10341] loop3: detected capacity change from 0 to 32768
[  211.725701][T10357] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  212.278166][T10368] bridge0: port 4(veth0_to_bridge) entered blocking state
[  212.282383][T10368] bridge0: port 4(veth0_to_bridge) entered disabled state
[  212.286189][T10368] veth0_to_bridge: entered allmulticast mode
[  212.296837][T10368] veth0_to_bridge: entered promiscuous mode
[  212.995894][T10391] sctp: [Deprecated]: syz.1.1720 (pid 10391) Use of int in max_burst socket option deprecated.
[  212.995894][T10391] Use struct sctp_assoc_value instead
[  213.032395][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  213.181700][    T9] usb 4-1: Using ep0 maxpacket: 16
[  213.186108][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  213.190424][    T9] usb 4-1: config 5 has an invalid interface number: 29 but max is 0
[  213.194682][    T9] usb 4-1: config 5 has no interface number 0
[  213.197681][    T9] usb 4-1: config 5 interface 29 has no altsetting 0
[  213.203132][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=90.00
[  213.206674][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.210560][    T9] usb 4-1: Product: syz
[  213.214495][    T9] usb 4-1: Manufacturer: syz
[  213.216541][    T9] usb 4-1: SerialNumber: syz
[  213.437679][    T9] usb 4-1: Found UVC 0.00 device syz (05ac:8501)
[  213.440071][    T9] usb 4-1: No valid video chain found.
[  213.443979][    T9] usb 4-1: USB disconnect, device number 17
[  214.037149][T10403] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  214.040839][T10403] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  216.827176][T10474] loop3: detected capacity change from 0 to 32768
[  216.854093][T10474] XFS: attr2 mount option is deprecated.
[  216.916783][T10474] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  216.969798][T10474] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.016371][T10498] overlayfs: failed to clone upperpath
[  217.018020][T10474] XFS (loop3): Ending clean mount
[  217.041907][T10474] XFS (loop3): Quotacheck needed: Please wait.
[  217.088606][T10474] XFS (loop3): Quotacheck: Done.
[  217.179763][ T7057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.269564][T10513] loop0: detected capacity change from 0 to 1024
[  218.369080][T10513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.380495][T10513] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.420524][T10513] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  218.467946][T10513] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[  218.487108][T10513] EXT4-fs (loop0): This should not happen!! Data will be lost
[  218.487108][T10513] 
[  218.506411][T10513] EXT4-fs (loop0): Total free blocks count 0
[  218.508637][T10513] EXT4-fs (loop0): Free/Dirty block details
[  218.510885][T10513] EXT4-fs (loop0): free_blocks=4293918720
[  218.514329][T10513] EXT4-fs (loop0): dirty_blocks=48
[  218.519525][T10513] EXT4-fs (loop0): Block reservation details
[  218.524470][T10513] EXT4-fs (loop0): i_reserved_data_blocks=3
[  218.567875][ T1096] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[  219.021888][   T33] audit: type=1107 audit(1755554627.421:46): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  219.333932][T10556] loop0: detected capacity change from 0 to 32768
[  219.361562][T10556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  219.422086][ T5854] ocfs2: Unmounting device (7,0) on (node local)
[  219.837471][T10574] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.842380][T10574] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.009475][T10574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.093885][T10574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.582894][T10574] sit1: left allmulticast mode
[  220.595522][T10574] gtp0: left promiscuous mode
[  220.604418][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.616395][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.619740][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.625801][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.666039][T10582] sctp: [Deprecated]: syz.0.1799 (pid 10582) Use of int in max_burst socket option.
[  220.666039][T10582] Use struct sctp_assoc_value instead
[  220.965732][T10596] netlink: 'syz.1.1804': attribute type 3 has an invalid length.
[  221.469229][T10615] loop3: detected capacity change from 0 to 32768
[  221.494655][T10615] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  221.524578][T10615] XFS (loop3): Ending clean mount
[  221.557542][ T7057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.057913][T10645] loop0: detected capacity change from 0 to 32768
[  222.062184][T10645] XFS: noikeep mount option is deprecated.
[  222.068698][T10645] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.084289][T10645] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  222.095313][T10645] XFS (loop0): Starting recovery (logdev: internal)
[  222.106612][T10645] XFS (loop0): Ending recovery (logdev: internal)
[  222.137294][ T5854] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.608355][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'.
[  222.891330][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'.
[  222.905191][T10686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1839'.
[  222.954311][T10689] loop0: detected capacity change from 0 to 1024
[  223.256176][T10704] loop0: detected capacity change from 0 to 128
[  223.284679][T10704] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  223.317032][T10704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  223.339502][T10708] loop3: detected capacity change from 0 to 1024
[  223.370081][T10708] EXT4-fs: Ignoring removed nobh option
[  223.373848][T10708] EXT4-fs: Ignoring removed bh option
[  223.438605][T10708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.681862][ T7057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.862368][T10717] netlink: 'syz.1.1852': attribute type 21 has an invalid length.
[  223.869787][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1852'.
[  224.214360][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  224.383150][    T9] usb 4-1: Using ep0 maxpacket: 32
[  224.388603][    T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0
[  224.393746][    T9] usb 4-1: config 0 has no interface number 0
[  224.396855][    T9] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  224.401275][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.431939][    T9] usb 4-1: config 0 descriptor??
[  224.681092][ T5902] usb 4-1: USB disconnect, device number 18
[  225.047229][T10736] fuse: blksize only supported for fuseblk
[  225.118292][T10740] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  225.404674][T10745] loop3: detected capacity change from 0 to 40427
[  225.415543][T10745] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  225.419330][T10745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  225.425096][T10745] F2FS-fs (loop3): invalid crc value
[  225.485159][T10745] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  225.493367][T10745] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  225.497645][T10745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  225.978510][T10755] loop3: detected capacity change from 0 to 32768
[  226.039086][T10755] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  226.039100][T10755]   allowing incompatible features above 0.0: (unknown version)
[  226.039104][T10755]   features: 
[  226.052805][T10755] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  226.055952][T10755] bcachefs (loop3): initializing new filesystem
[  226.066662][T10755] bcachefs (loop3): going read-write
[  226.070848][T10755] bcachefs (loop3): marking superblocks
[  226.089300][T10755] bcachefs (loop3): initializing freespace
[  226.094857][T10755] bcachefs (loop3): done initializing freespace
[  226.118295][T10755] bcachefs (loop3): reading snapshots table
[  226.121107][T10755] bcachefs (loop3): reading snapshots done
[  226.166391][T10755] bcachefs (loop3): done starting filesystem
[  226.246344][ T7057] bcachefs (loop3): shutting down
[  226.248953][ T7057] bcachefs (loop3): going read-only
[  226.251162][ T7057] bcachefs (loop3): finished waiting for writes to stop
[  226.255775][ T7057] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  226.308558][ T7057] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  226.313989][ T7057] bcachefs (loop3): clean shutdown complete, journal seq 4
[  226.318978][ T7057] bcachefs (loop3): marking filesystem clean
[  226.346531][ T7057] bcachefs (loop3): shutdown complete
[  226.356187][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1876'.
[  226.446949][T10781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.059652][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'.
[  228.306541][T10833] loop3: detected capacity change from 0 to 164
[  228.322669][T10833] rock: directory entry would overflow storage
[  228.325326][T10833] rock: sig=0x4f50, size=4, remaining=3
[  228.328097][T10833] isofs: Unable to find the ".." directory for NFS.
[  228.482453][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'.
[  228.665720][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.717635][T10854] loop0: detected capacity change from 0 to 512
[  228.723529][T10854] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.726995][T10854] EXT4-fs: inline encryption not supported
[  228.730119][T10854] EXT4-fs: Ignoring removed mblk_io_submit option
[  228.737324][T10854] EXT4-fs (loop0): Test dummy encryption mode enabled
[  228.740086][T10854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  228.753654][T10854] EXT4-fs (loop0): 1 truncate cleaned up
[  228.757737][T10854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.862338][T10854] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  228.891142][ T5854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.486672][T10878] loop3: detected capacity change from 0 to 2048
[  229.517349][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'.
[  229.789670][T10886] loop3: detected capacity change from 0 to 32768
[  229.830223][T10886] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.886653][T10886] XFS (loop3): Ending clean mount
[  229.956992][ T7057] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.959266][    C0] hrtimer: interrupt took 81474 ns
[  231.348656][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'.
[  231.533341][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.559080][T10937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.754545][T10937] batman_adv: batadv0: Interface deactivated: wlan0
[  231.786185][ T5900] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.789582][ T5900] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.798103][ T5900] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.803886][ T5900] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.813249][T10942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.816305][T10942] syzkaller0: entered promiscuous mode
[  231.818405][T10942] syzkaller0: entered allmulticast mode
[  231.838388][T10942] tipc: Resetting bearer <eth:syzkaller0>
[  231.844830][T10941] tipc: Resetting bearer <eth:syzkaller0>
[  231.868702][T10941] tipc: Disabling bearer <eth:syzkaller0>
[  232.040745][T10952] netlink: 'syz.0.1946': attribute type 3 has an invalid length.
[  232.118684][T10954] loop0: detected capacity change from 0 to 4096
[  232.168385][T10954] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  232.210004][T10954] ntfs3(loop0): Failed to load $Extend (-22).
[  232.214197][T10954] ntfs3(loop0): Failed to initialize $Extend.
[  232.235718][   T33] audit: type=1800 audit(1755554640.651:47): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1947" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  232.251948][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  232.403788][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  232.435620][    T9] usb 4-1: config 0 has no interface number 0
[  232.440276][    T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  232.445143][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.448646][    T9] usb 4-1: Product: syz
[  232.450377][    T9] usb 4-1: Manufacturer: syz
[  232.455345][    T9] usb 4-1: SerialNumber: syz
[  232.461144][    T9] usb 4-1: config 0 descriptor??
[  232.915041][    T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  232.938775][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  232.943775][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  232.947181][    T9] usb 4-1: media controller created
[  233.035595][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  233.077240][    T9] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  233.139633][    T9] usb 4-1: USB disconnect, device number 19
[  236.389377][T11016] loop0: detected capacity change from 0 to 4096
[  236.422468][T11019] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.779027][T11031] loop0: detected capacity change from 0 to 512
[  236.808698][T11031] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  237.052102][T11036] loop0: detected capacity change from 0 to 2048
[  237.097527][ T5977]  loop0: p3 < > p4 < >
[  237.102571][ T5977] loop0: partition table partially beyond EOD, truncated
[  237.105880][ T5977] loop0: p3 start 4284289 is beyond EOD, truncated
[  237.134756][T11036]  loop0: p3 < > p4 < >
[  237.137068][T11036] loop0: partition table partially beyond EOD, truncated
[  237.145122][T11036] loop0: p3 start 4284289 is beyond EOD, truncated
[  237.339057][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  237.528847][T11042] trusted_key: encrypted_key: hex blob is missing
[  238.419930][T11055] bond3: entered allmulticast mode
[  238.432096][T11055] 8021q: adding VLAN 0 to HW filter on device bond3
[  238.435414][T11055] bridge0: port 5(bond3) entered blocking state
[  238.437704][T11055] bridge0: port 5(bond3) entered disabled state
[  238.443589][T11055] bond3: entered promiscuous mode
[  238.566456][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.572035][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.577031][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.584630][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.589621][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.753715][T11065] chnl_net:caif_netlink_parms(): no params data found
[  238.796088][T11061] loop3: detected capacity change from 0 to 40427
[  238.830869][T11061] F2FS-fs (loop3): Image doesn't support compression
[  238.879383][T11061] F2FS-fs (loop3): build fault injection rate: 690
[  238.896640][T11061] F2FS-fs (loop3): build fault injection type: 0x35f7
[  239.149346][T11061] F2FS-fs (loop3): invalid crc value
[  239.160175][T11065] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.163790][T11065] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.167102][T11065] bridge_slave_0: entered allmulticast mode
[  239.174246][T11065] bridge_slave_0: entered promiscuous mode
[  239.179899][T11065] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.183517][T11065] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.186840][T11065] bridge_slave_1: entered allmulticast mode
[  239.191378][T11065] bridge_slave_1: entered promiscuous mode
[  239.245688][T11061] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.247666][T11065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.252654][T11061] F2FS-fs (loop3): Start checkpoint disabled!
[  239.257063][T11061] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  239.257831][T11065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.290297][   T26] bio_check_eod: 30 callbacks suppressed
[  239.290310][   T26] kworker/u9:0: attempt to access beyond end of device
[  239.290310][   T26] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.300678][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  239.300692][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.300697][   T26] Workqueue: writeback wb_workfn (flush-7:3)
[  239.300712][   T26] Call Trace:
[  239.300715][   T26]  <TASK>
[  239.300719][   T26]  dump_stack_lvl+0x189/0x250
[  239.300731][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.300739][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  239.300746][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.300756][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.300769][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  239.300781][   T26]  f2fs_write_end_io+0x886/0xb60
[  239.300829][   T26]  __submit_merged_bio+0x27a/0x6a0
[  239.300845][   T26]  __submit_merged_write_cond+0x255/0x530
[  239.300856][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  239.300879][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.300893][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  239.300914][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  239.300930][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  239.300940][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  239.300957][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.300967][   T26]  do_writepages+0x32e/0x550
[  239.300979][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  239.300985][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  239.300997][   T26]  __writeback_single_inode+0x145/0xff0
[  239.301006][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  239.301016][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  239.301024][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.301042][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  239.301066][   T26]  ? rcu_is_watching+0x15/0xb0
[  239.301078][   T26]  wb_writeback+0x43b/0xaf0
[  239.301089][   T26]  ? queue_io+0x321/0x590
[  239.301098][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  239.301110][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.301120][   T26]  wb_workfn+0x409/0xef0
[  239.301133][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  239.301142][   T26]  ? __lock_acquire+0xab9/0xd20
[  239.301155][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  239.301165][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.301178][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  239.301184][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  239.301192][   T26]  process_scheduled_works+0xae1/0x17b0
[  239.301210][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.301223][   T26]  worker_thread+0x8a0/0xda0
[  239.301240][   T26]  kthread+0x711/0x8a0
[  239.301252][   T26]  ? __pfx_worker_thread+0x10/0x10
[  239.301258][   T26]  ? __pfx_kthread+0x10/0x10
[  239.301267][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.301274][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.301281][   T26]  ? __pfx_kthread+0x10/0x10
[  239.301290][   T26]  ret_from_fork+0x3fc/0x770
[  239.301299][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  239.301309][   T26]  ? __switch_to_asm+0x39/0x70
[  239.301316][   T26]  ? __switch_to_asm+0x33/0x70
[  239.301324][   T26]  ? __pfx_kthread+0x10/0x10
[  239.301332][   T26]  ret_from_fork_asm+0x1a/0x30
[  239.301346][   T26]  </TASK>
[  239.301351][   T26] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  239.452398][T11065] team0: Port device team_slave_0 added
[  239.456362][T11065] team0: Port device team_slave_1 added
[  239.507666][T11065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.510608][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.520441][T11065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.535378][T11065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.538213][T11065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.552138][T11065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.630521][T11081] vti0: entered promiscuous mode
[  239.658141][T11065] hsr_slave_0: entered promiscuous mode
[  239.661534][T11065] hsr_slave_1: entered promiscuous mode
[  239.667910][T11065] debugfs: 'hsr0' already exists in 'hsr'
[  239.674957][T11065] Cannot create hsr debugfs directory
[  239.774578][   T33] audit: type=1804 audit(1755554648.201:48): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2004" name="/newroot/382/bus/file0" dev="overlay" ino=2006 res=1 errno=0
[  239.828682][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'.
[  239.838295][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'.
[  239.998778][T11065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  240.019011][T11065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  240.040975][T11065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  240.064420][T11065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  240.240106][T11065] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.605409][T11065] 8021q: adding VLAN 0 to HW filter on device team0
[  240.671984][   T54] Bluetooth: hci1: command tx timeout
[  240.836974][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.840153][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.852037][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.855981][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.128653][T11122] loop3: detected capacity change from 0 to 16
[  241.159915][T11122] erofs (device loop3): mounted with root inode @ nid 36.
[  241.219770][T11065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.426541][T11065] veth0_vlan: entered promiscuous mode
[  241.438392][T11065] veth1_vlan: entered promiscuous mode
[  241.460272][T11065] veth0_macvtap: entered promiscuous mode
[  241.465689][T11065] veth1_macvtap: entered promiscuous mode
[  241.476687][T11065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.485325][T11065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.493536][ T5900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.497140][ T5900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.504192][ T5900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.507547][ T5900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.582152][ T5887] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  241.600389][T10122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.607651][T10122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.642839][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.646519][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.732345][ T5887] usb 4-1: Using ep0 maxpacket: 16
[  241.736465][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.742158][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.747012][ T5887] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  241.751053][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.757776][ T5887] usb 4-1: config 0 descriptor??
[  242.569486][ T5887] letsketch 0003:6161:4D15.000A: Device info: ᣍ哙覗돿
[  242.751939][   T54] Bluetooth: hci1: command tx timeout
[  242.772714][ T5887] letsketch 0003:6161:4D15.000A: Device info: ఁ
[  243.102600][ T5887] usb 4-1: Max retries (5) exceeded reading string descriptor 202
[  243.105694][ T5887] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -71
[  243.116134][ T5887] usb 4-1: USB disconnect, device number 20
[  243.497411][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'.
[  244.349375][T11187] loop3: detected capacity change from 0 to 32768
[  244.369389][T11189] loop4: detected capacity change from 0 to 40427
[  244.385242][T11187] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.426328][T11189] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  244.457573][ T7057] ocfs2: Unmounting device (7,3) on (node local)
[  244.492170][T11189] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  244.502297][T11189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  244.562247][T11065] syz-executor: attempt to access beyond end of device
[  244.562247][T11065] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  244.580388][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  244.580410][T11065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.580417][T11065] Call Trace:
[  244.580423][T11065]  <TASK>
[  244.580428][T11065]  dump_stack_lvl+0x189/0x250
[  244.580449][T11065]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.580459][T11065]  ? __pfx_queue_work_on+0x10/0x10
[  244.580466][T11065]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  244.580476][T11065]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.580489][T11065]  f2fs_handle_critical_error+0x37c/0x540
[  244.580503][T11065]  f2fs_write_end_io+0x886/0xb60
[  244.580524][T11065]  __submit_merged_bio+0x27a/0x6a0
[  244.580543][T11065]  __submit_merged_write_cond+0x255/0x530
[  244.580561][T11065]  f2fs_write_data_pages+0x261d/0x3000
[  244.580600][T11065]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  244.580635][T11065]  ? folios_put_refs+0x559/0x640
[  244.580649][T11065]  ? __lock_acquire+0xab9/0xd20
[  244.580663][T11065]  ? do_raw_spin_lock+0x121/0x290
[  244.580677][T11065]  ? do_raw_spin_unlock+0x4d/0x240
[  244.580686][T11065]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  244.580696][T11065]  do_writepages+0x32e/0x550
[  244.580711][T11065]  ? do_raw_spin_unlock+0x4d/0x240
[  244.580721][T11065]  filemap_fdatawrite+0x199/0x240
[  244.580731][T11065]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  244.580853][T11065]  ? do_raw_spin_unlock+0x4d/0x240
[  244.580880][T11065]  f2fs_sync_dirty_inodes+0x31f/0x830
[  244.580897][T11065]  f2fs_write_checkpoint+0x95a/0x1df0
[  244.580917][T11065]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  244.580944][T11065]  ? kill_f2fs_super+0x298/0x6c0
[  244.580956][T11065]  kill_f2fs_super+0x2c3/0x6c0
[  244.580965][T11065]  ? __pfx_kill_f2fs_super+0x10/0x10
[  244.580971][T11065]  ? radix_tree_delete_item+0x2b6/0x400
[  244.580986][T11065]  ? shrinker_free+0x2ce/0x3e0
[  244.580998][T11065]  deactivate_locked_super+0xbc/0x130
[  244.581017][T11065]  cleanup_mnt+0x425/0x4c0
[  244.581027][T11065]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.581039][T11065]  task_work_run+0x1d4/0x260
[  244.581052][T11065]  ? __pfx_task_work_run+0x10/0x10
[  244.581059][T11065]  ? __x64_sys_umount+0x122/0x160
[  244.581071][T11065]  ? exit_to_user_mode_loop+0x40/0x110
[  244.581084][T11065]  exit_to_user_mode_loop+0xec/0x110
[  244.581094][T11065]  do_syscall_64+0x2bd/0x3b0
[  244.581104][T11065]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.581112][T11065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.581119][T11065]  ? exc_page_fault+0x9f/0xf0
[  244.581129][T11065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.581136][T11065] RIP: 0033:0x7f6219f8ff17
[  244.581145][T11065] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  244.581152][T11065] RSP: 002b:00007ffe23930e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  244.581161][T11065] RAX: 0000000000000000 RBX: 00007f621a011c05 RCX: 00007f6219f8ff17
[  244.581166][T11065] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe23930ef0
[  244.581171][T11065] RBP: 00007ffe23930ef0 R08: 0000000000000000 R09: 0000000000000000
[  244.581175][T11065] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe23931f80
[  244.581179][T11065] R13: 00007f621a011c05 R14: 000000000003babc R15: 00007ffe23931fc0
[  244.581192][T11065]  </TASK>
[  244.581197][T11065] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  244.833111][   T54] Bluetooth: hci1: command tx timeout
[  246.343054][   T51] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  246.544956][   T51] usb 4-1: Using ep0 maxpacket: 16
[  246.602360][   T51] usb 4-1: too many configurations: 212, using maximum allowed: 8
[  246.618301][   T51] usb 4-1: config 6 has no interfaces?
[  246.623465][   T51] usb 4-1: config 6 has no interfaces?
[  246.630138][   T51] usb 4-1: config 6 has no interfaces?
[  246.643077][   T51] usb 4-1: config 6 has no interfaces?
[  246.647033][   T51] usb 4-1: config 6 has no interfaces?
[  246.650614][   T51] usb 4-1: config 6 has no interfaces?
[  246.659876][   T51] usb 4-1: config 6 has no interfaces?
[  246.675106][   T51] usb 4-1: config 6 has no interfaces?
[  246.685086][   T51] usb 4-1: string descriptor 0 read error: -71
[  246.687638][   T51] usb 4-1: New USB device found, idVendor=0980, idProduct=06fd, bcdDevice=14.8c
[  246.700372][   T51] usb 4-1: New USB device strings: Mfr=54, Product=54, SerialNumber=151
[  246.723374][   T51] usb 4-1: rejected 8 configurations due to insufficient available bus power
[  246.727074][   T51] usb 4-1: no configuration chosen from 8 choices
[  246.732820][   T51] usb 4-1: USB disconnect, device number 21
[  246.922499][   T54] Bluetooth: hci1: command tx timeout
[  247.150278][T11249] loop4: detected capacity change from 0 to 32768
[  247.159208][T11249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2060 (11249)
[  247.180656][T11249] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.186083][T11249] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  247.189559][T11249] BTRFS info (device loop4): using free-space-tree
[  247.277878][T11249] BTRFS info (device loop4): rebuilding free space tree
[  247.352924][T11065] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.780687][T11281] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2065'.
[  247.995685][T11275] loop3: detected capacity change from 0 to 32768
[  248.005214][T11275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2063 (11275)
[  248.030442][T11275] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.036447][T11275] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  248.040148][T11275] BTRFS info (device loop3): using free-space-tree
[  248.206003][ T7057] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.366451][T11290] loop4: detected capacity change from 0 to 32768
[  248.385229][T11290] (syz.4.2068,11290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.430600][T11290] (syz.4.2068,11290,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.461522][T11290] JBD2: Ignoring recovery information on journal
[  248.518148][T11290] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  248.580965][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2075'.
[  248.762938][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'.
[  248.786581][T11065] ocfs2: Unmounting device (7,4) on (node local)
[  248.823486][T11333] netlink: 'syz.3.2081': attribute type 1 has an invalid length.
[  248.826819][T11333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.891430][T11340] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.031945][T11343] loop4: detected capacity change from 0 to 32768
[  249.035637][T11343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2085 (11343)
[  249.049343][T11343] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.053403][T11343] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  249.056405][T11343] BTRFS info (device loop4): using free-space-tree
[  249.097883][T11065] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.260181][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  249.422033][    T9] usb 4-1: Using ep0 maxpacket: 16
[  249.430690][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.451850][    T9] usb 4-1: config 0 has no interfaces?
[  249.454041][    T9] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  249.457787][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.464084][    T9] usb 4-1: config 0 descriptor??
[  249.506899][T11369] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  249.510080][ T5855] IPVS: starting estimator thread 0...
[  249.603687][T11375] IPVS: using max 81 ests per chain, 194400 per kthread
[  249.656500][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'.
[  249.680505][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'.
[  249.680590][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.688674][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.695370][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.699175][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.831191][T11398] loop4: detected capacity change from 0 to 256
[  249.890276][T11398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  250.363743][   T51] usb 4-1: USB disconnect, device number 22
[  250.847668][T11426] misc userio: No port type given on /dev/userio
[  251.858011][T11436] xfrm0: entered promiscuous mode
[  251.861049][T11436] xfrm0: entered allmulticast mode
[  251.888253][T11437] loop4: detected capacity change from 0 to 1024
[  252.365501][ T5856] Bluetooth: hci0: command 0x0406 tx timeout
[  252.531041][T11450] loop3: detected capacity change from 0 to 32768
[  252.551116][T11450] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.576890][T11450] XFS (loop3): Ending clean mount
[  252.595361][   T33] audit: type=1804 audit(1755554661.021:49): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2126" name="/newroot/416/file0/file1" dev="loop3" ino=6150 res=1 errno=0
[  252.617575][ T7057] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.191843][   T51] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  253.305163][T11501] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  253.346164][   T51] usb 4-1: Using ep0 maxpacket: 8
[  253.357416][   T51] usb 4-1: unable to get BOS descriptor or descriptor too short
[  253.368464][   T51] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  253.376032][   T51] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  253.380811][   T51] usb 4-1: config 4 has no interface number 0
[  253.382955][T11507] loop4: detected capacity change from 0 to 256
[  253.390116][   T51] usb 4-1: string descriptor 0 read error: -22
[  253.398622][   T51] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  253.404017][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.416008][T11507] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  253.448466][   T51] usb 4-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  253.451286][   T51] usb 4-1: No streaming interface found for terminal 6.
[  253.457947][T11507] exFAT-fs (loop4): valid_size(150994954) is greater than size(10)
[  253.652181][   T51] usb 4-1: USB disconnect, device number 23
[  253.785194][T11515] loop4: detected capacity change from 0 to 32768
[  253.814905][T11515] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  253.860946][T11065] ocfs2: Unmounting device (7,4) on (node local)
[  253.957920][T11519] overlayfs: missing 'lowerdir'
[  254.196123][T11531] netlink: 'syz.4.2160': attribute type 10 has an invalid length.
[  254.199222][T11531] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2160'.
[  254.240637][T11535] syz_tun: entered allmulticast mode
[  254.246134][T11534] syz_tun: left allmulticast mode
[  254.603934][ T5855] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  254.765023][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.770411][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.778869][ T5855] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  254.785355][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.791033][ T5855] usb 4-1: config 0 descriptor??
[  255.213782][ T5855] hid_parser_main: 5 callbacks suppressed
[  255.213808][ T5855] petalynx 0003:18B1:0037.000B: unknown main item tag 0x0
[  255.219089][ T5855] petalynx 0003:18B1:0037.000B: unknown global tag 0xe
[  255.225322][T11559] loop4: detected capacity change from 0 to 1024
[  255.249463][ T5855] petalynx 0003:18B1:0037.000B: item 0 0 1 14 parsing failed
[  255.256394][ T5855] petalynx 0003:18B1:0037.000B: parse failed
[  255.258922][ T5855] petalynx 0003:18B1:0037.000B: probe with driver petalynx failed with error -22
[  255.268588][T11559] overlay: filesystem on ./file0 not supported
[  255.301546][   T26] hfsplus: b-tree write err: -5, ino 4
[  255.394877][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.398951][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.412977][ T5918] usb 4-1: USB disconnect, device number 24
[  255.450801][T11565] loop4: detected capacity change from 0 to 4096
[  255.459034][T11565] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  255.464982][T11565] UDF-fs: Scanning with blocksize 512 failed
[  255.473813][T11565] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  255.933906][T11573] loop4: detected capacity change from 0 to 32768
[  255.941151][T11573] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2179 (11573)
[  255.967751][T11575] loop3: detected capacity change from 0 to 256
[  255.975744][T11573] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  255.979509][T11573] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  255.981009][T11575] exfat: Deprecated parameter 'utf8'
[  255.984186][T11573] BTRFS info (device loop4): using free-space-tree
[  256.007411][T11575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  256.021504][T11575] overlay: filesystem on ./file0 not supported
[  256.112243][T11065] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  256.279009][T11601] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2185'.
[  256.291429][T11601] netlink: 'syz.3.2185': attribute type 1 has an invalid length.
[  256.674098][T11630] macvtap1: entered promiscuous mode
[  256.676207][T11630] batadv0: entered promiscuous mode
[  256.695005][T11630] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  256.705576][T11630] batadv0: left promiscuous mode
[  257.058288][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2204'.
[  257.069570][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2204'.
[  257.320603][T11646] loop3: detected capacity change from 0 to 4096
[  257.356241][T11646] ntfs3(loop3): It is recommened to use chkdsk.
[  257.375405][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  257.399911][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  257.417317][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  257.437125][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  257.440305][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  257.443729][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  257.447436][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  257.450481][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  257.454003][T11646] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  258.474618][ T5855] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  258.548139][T11685] overlayfs: failed to clone upperpath
[  258.666477][ T5855] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  258.669555][ T5855] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  258.676604][ T5855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  258.680014][ T5855] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  258.693516][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  258.712367][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  258.719423][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  258.733623][ T5855] usb 5-1: string descriptor 0 read error: -22
[  258.735908][ T5855] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  258.743151][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.751109][ T5855] usb 5-1: config 0 descriptor??
[  258.768367][ T5855] hub 5-1:0.0: bad descriptor, ignoring hub
[  258.770679][ T5855] hub 5-1:0.0: probe with driver hub failed with error -5
[  258.774910][T11703] loop3: detected capacity change from 0 to 8
[  258.782319][ T5855] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  258.862644][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'.
[  258.915390][T11706] sctp: [Deprecated]: syz.3.2230 (pid 11706) Use of int in maxseg socket option.
[  258.915390][T11706] Use struct sctp_assoc_value instead
[  258.998458][ T5855] usb 5-1: USB disconnect, device number 2
[  259.594985][   T33] audit: type=1326 audit(1755554668.021:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.626162][   T33] audit: type=1326 audit(1755554668.021:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.663037][   T33] audit: type=1326 audit(1755554668.021:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.672135][   T33] audit: type=1326 audit(1755554668.021:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.725753][   T33] audit: type=1326 audit(1755554668.021:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.754971][   T33] audit: type=1326 audit(1755554668.021:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.773638][   T33] audit: type=1326 audit(1755554668.021:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  259.803622][   T33] audit: type=1326 audit(1755554668.021:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz.4.2236" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  260.595845][T11746] loop3: detected capacity change from 0 to 16
[  260.620765][T11746] erofs (device loop3): algorithm 1 isn't enabled on this kernel
[  261.020990][T11765] loop4: detected capacity change from 0 to 1024
[  261.100942][T11765] EXT4-fs: Ignoring removed bh option
[  261.213930][T11765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.249401][T11065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.722122][   T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  261.871907][   T51] usb 5-1: Using ep0 maxpacket: 8
[  261.883750][   T51] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  261.887412][   T51] usb 5-1: config 0 has no interface number 0
[  261.889927][   T51] usb 5-1: config 0 interface 223 has no altsetting 0
[  261.900391][   T51] usb 5-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=2f.36
[  261.906857][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.914342][   T51] usb 5-1: Product: syz
[  261.916048][   T51] usb 5-1: Manufacturer: syz
[  261.917928][   T51] usb 5-1: SerialNumber: syz
[  262.188967][   T51] usb 5-1: config 0 descriptor??
[  262.430658][   T51] usb 5-1: USB disconnect, device number 3
[  263.472847][T11816] netlink: 'syz.4.2278': attribute type 1 has an invalid length.
[  263.476713][T11816] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2278'.
[  263.551052][T11819] loop4: detected capacity change from 0 to 764
[  263.566147][T11819] rock: directory entry would overflow storage
[  263.570264][T11819] rock: sig=0x5245, size=8, remaining=5
[  263.694586][T11826] loop4: detected capacity change from 0 to 512
[  263.717681][T11826] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  263.726804][T11826] EXT4-fs (loop4): invalid journal inode
[  263.729336][T11826] EXT4-fs (loop4): can't get journal size
[  263.745949][T11826] EXT4-fs (loop4): 1 truncate cleaned up
[  263.749977][T11826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.843976][T11065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.979678][T11835] loop4: detected capacity change from 0 to 4096
[  263.987242][T11835] ntfs3: Unknown parameter 'iochaRset'
[  264.158133][T11831] loop3: detected capacity change from 0 to 32768
[  264.161512][T11831] XFS: noikeep mount option is deprecated.
[  264.450105][T11831] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.467996][T11831] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  264.477658][T11831] XFS (loop3): Starting recovery (logdev: internal)
[  264.485635][T11831] XFS (loop3): Ending recovery (logdev: internal)
[  264.520411][ T7057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.679822][T11852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.931921][T11856] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  265.134099][   T33] audit: type=1326 audit(1755554673.561:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.146187][   T33] audit: type=1326 audit(1755554673.571:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.154476][   T33] audit: type=1326 audit(1755554673.571:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.163397][   T33] audit: type=1326 audit(1755554673.571:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.171322][   T33] audit: type=1326 audit(1755554673.571:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.179252][   T33] audit: type=1326 audit(1755554673.581:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.187718][   T33] audit: type=1326 audit(1755554673.581:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.195063][   T33] audit: type=1326 audit(1755554673.581:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11859 comm="syz.4.2291" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219f8ebe9 code=0x7ffc0000
[  265.500052][T11869] loop4: detected capacity change from 0 to 32768
[  265.503317][T11869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2295 (11869)
[  265.512769][T11869] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.517375][T11869] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  265.521196][T11869] BTRFS info (device loop4): using free-space-tree
[  265.758571][   T33] audit: type=1800 audit(1755554674.181:66): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2295" name="bus" dev="loop4" ino=263 res=0 errno=0
[  265.977279][T11065] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.266549][T11932] netlink: 'syz.3.2314': attribute type 33 has an invalid length.
[  267.270966][T11932] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  267.691846][ T5915] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  267.778167][T11958] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  267.870646][ T5915] usb 4-1: config 4 has an invalid interface number: 39 but max is 0
[  267.875162][ T5915] usb 4-1: config 4 has no interface number 0
[  267.877791][ T5915] usb 4-1: config 4 interface 39 has no altsetting 0
[  267.885581][ T5915] usb 4-1: New USB device found, idVendor=19d2, idProduct=1061, bcdDevice=9f.df
[  267.902504][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.906187][ T5915] usb 4-1: Product: syz
[  267.908138][ T5915] usb 4-1: Manufacturer: syz
[  267.910206][ T5915] usb 4-1: SerialNumber: syz
[  268.130340][ T5915] option 4-1:4.39: GSM modem (1-port) converter detected
[  268.142488][T11971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.152538][ T5915] usb 4-1: USB disconnect, device number 25
[  268.163336][ T5915] option 4-1:4.39: device disconnected
[  268.284448][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2336'.
[  268.611791][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  268.695488][T11990] netlink: 'syz.3.2341': attribute type 15 has an invalid length.
[  268.698568][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'.
[  268.717796][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  268.721560][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  268.722193][T11990] netlink: 'syz.3.2341': attribute type 15 has an invalid length.
[  268.729489][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  268.733726][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'.
[  268.737385][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  268.762241][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  268.766786][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.782013][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  268.791896][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  268.801397][ T5887] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  268.807802][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.813177][ T5887] usb 5-1: Product: syz
[  268.816995][ T5887] usb 5-1: Manufacturer: syz
[  268.819107][ T5887] usb 5-1: SerialNumber: syz
[  268.825108][ T5887] usb 5-1: config 0 descriptor??
[  268.831011][ T5887] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  269.327512][ T5887] usb 5-1: USB disconnect, device number 4
[  270.129236][T12027] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2357'.
[  270.172239][T12025] netlink: 'syz.3.2356': attribute type 10 has an invalid length.
[  270.185926][T12025] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  270.334967][T12038] loop3: detected capacity change from 0 to 512
[  270.338801][T12038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  270.361357][T12038] EXT4-fs (loop3): 1 truncate cleaned up
[  270.377793][T12038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.458521][ T7057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.475266][ T5855] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  270.634302][ T5855] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  270.638108][ T5855] usb 5-1: config 0 has no interface number 0
[  270.657299][ T5855] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  270.669385][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.675245][ T5855] usb 5-1: Product: syz
[  270.677542][ T5855] usb 5-1: Manufacturer: syz
[  270.681874][ T5855] usb 5-1: SerialNumber: syz
[  270.689298][ T5855] usb 5-1: config 0 descriptor??
[  270.987141][T12049] loop3: detected capacity change from 0 to 32768
[  271.167749][T12049] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  271.347878][ T5855] usb 5-1: Firmware: major: 18, minor: 128, hardware type: UNKNOWN (75)
[  271.355192][T12049] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  271.367825][   T13] (kworker/u8:1,13,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  271.423645][ T7057] ocfs2: Unmounting device (7,3) on (node local)
[  271.472525][ T5855] usb 5-1: no permanent extended address found, random address set
[  271.486917][ T5855] usb 5-1: atusb_probe: initialization failed, error = -524
[  271.491387][ T5855] atusb 5-1:0.128: probe with driver atusb failed with error -524
[  271.703722][   T51] usb 5-1: USB disconnect, device number 5
[  272.642102][T12081] loop4: detected capacity change from 0 to 32768
[  272.650816][T12081] jfs_mount: diMount failed w/rc = -5
[  272.654113][T12081] Mount JFS Failure: -5
[  272.656033][T12081] jfs_mount failed w/return code = -5
[  272.936601][T12087] loop3: detected capacity change from 0 to 40427
[  272.950489][T12087] F2FS-fs (loop3): build fault injection rate: 25
[  272.957125][T12087] F2FS-fs (loop3): build fault injection type: 0x7698c
[  272.962946][T12087] F2FS-fs (loop3): invalid crc value
[  272.969216][T12087] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  272.987613][T12087] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  273.055521][T12087] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  273.060819][T12087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  273.092491][T12087] F2FS-fs (loop3): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  273.119506][T12087] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  273.154449][ T7057] syz-executor: attempt to access beyond end of device
[  273.154449][ T7057] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  273.162996][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  273.163018][ T7057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.163026][ T7057] Call Trace:
[  273.163031][ T7057]  <TASK>
[  273.163037][ T7057]  dump_stack_lvl+0x189/0x250
[  273.163060][ T7057]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.163075][ T7057]  ? __pfx_queue_work_on+0x10/0x10
[  273.163088][ T7057]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  273.163105][ T7057]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  273.163130][ T7057]  f2fs_handle_critical_error+0x37c/0x540
[  273.163152][ T7057]  f2fs_write_end_io+0x886/0xb60
[  273.163179][ T7057]  __submit_merged_bio+0x27a/0x6a0
[  273.163201][ T7057]  __submit_merged_write_cond+0x255/0x530
[  273.163223][ T7057]  f2fs_write_data_pages+0x261d/0x3000
[  273.163240][ T7057]  ? __lock_acquire+0xab9/0xd20
[  273.163282][ T7057]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  273.163332][ T7057]  ? __mod_zone_page_state+0xd7/0x140
[  273.163357][ T7057]  ? folios_put_refs+0x560/0x640
[  273.163381][ T7057]  ? __lock_acquire+0xab9/0xd20
[  273.163404][ T7057]  ? do_raw_spin_lock+0x121/0x290
[  273.163427][ T7057]  ? do_raw_spin_unlock+0x4d/0x240
[  273.163444][ T7057]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  273.163463][ T7057]  do_writepages+0x32e/0x550
[  273.163488][ T7057]  ? do_raw_spin_unlock+0x4d/0x240
[  273.163506][ T7057]  filemap_fdatawrite+0x199/0x240
[  273.163524][ T7057]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  273.163616][ T7057]  ? do_raw_spin_unlock+0x4d/0x240
[  273.163636][ T7057]  f2fs_sync_dirty_inodes+0x31f/0x830
[  273.163660][ T7057]  f2fs_write_checkpoint+0x95a/0x1df0
[  273.163690][ T7057]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  273.163738][ T7057]  ? kill_f2fs_super+0x298/0x6c0
[  273.163754][ T7057]  kill_f2fs_super+0x2c3/0x6c0
[  273.163772][ T7057]  ? __pfx_kill_f2fs_super+0x10/0x10
[  273.163782][ T7057]  ? radix_tree_delete_item+0x2b6/0x400
[  273.163805][ T7057]  ? shrinker_free+0x2ce/0x3e0
[  273.163820][ T7057]  deactivate_locked_super+0xbc/0x130
[  273.163837][ T7057]  cleanup_mnt+0x425/0x4c0
[  273.163852][ T7057]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.163872][ T7057]  task_work_run+0x1d4/0x260
[  273.163891][ T7057]  ? __pfx_task_work_run+0x10/0x10
[  273.163905][ T7057]  ? __x64_sys_umount+0x122/0x160
[  273.163926][ T7057]  ? exit_to_user_mode_loop+0x40/0x110
[  273.163947][ T7057]  exit_to_user_mode_loop+0xec/0x110
[  273.163964][ T7057]  do_syscall_64+0x2bd/0x3b0
[  273.163981][ T7057]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.163995][ T7057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.164008][ T7057]  ? exc_page_fault+0x9f/0xf0
[  273.164025][ T7057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.164035][ T7057] RIP: 0033:0x7f4e4478ff17
[  273.164047][ T7057] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  273.164056][ T7057] RSP: 002b:00007ffc6bd3a948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  273.164072][ T7057] RAX: 0000000000000000 RBX: 00007f4e44811c05 RCX: 00007f4e4478ff17
[  273.164079][ T7057] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6bd3aa00
[  273.164086][ T7057] RBP: 00007ffc6bd3aa00 R08: 0000000000000000 R09: 0000000000000000
[  273.164092][ T7057] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc6bd3ba90
[  273.164100][ T7057] R13: 00007f4e44811c05 R14: 0000000000042a6d R15: 00007ffc6bd3bad0
[  273.164119][ T7057]  </TASK>
[  273.164125][ T7057] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  273.785503][T12117] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2393'.
[  274.242020][ T5855] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  274.437297][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.446590][ T5855] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  274.451312][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.456187][ T5855] usb 4-1: Product: syz
[  274.458082][ T5855] usb 4-1: Manufacturer: syz
[  274.460095][ T5855] usb 4-1: SerialNumber: syz
[  274.466297][ T5855] usb 4-1: config 0 descriptor??
[  274.692860][ T5855] usb 4-1: bad CDC descriptors
[  274.697721][ T5855] usb 4-1: unsupported MDLM descriptors
[  274.716610][ T5855] usb 4-1: USB disconnect, device number 26
[  275.453603][T12158] loop4: detected capacity change from 0 to 32768
[  275.499357][T12158] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  275.569562][T12158] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  275.714412][T12158] (syz.4.2414,12158,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  275.728217][T12158] (syz.4.2414,12158,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  275.734508][T12158] (syz.4.2414,12158,1):ocfs2_mknod:301 ERROR: status = -2
[  275.737690][T12158] (syz.4.2414,12158,1):ocfs2_mknod:505 ERROR: status = -2
[  275.740875][T12158] (syz.4.2414,12158,1):ocfs2_mkdir:661 ERROR: status = -2
[  275.849613][T11065] ocfs2: Unmounting device (7,4) on (node local)
[  276.099556][T12164] loop3: detected capacity change from 0 to 32768
[  276.108012][T12164] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2416 (12164)
[  276.156013][T12164] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  276.162141][T12164] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  276.166512][T12164] BTRFS info (device loop3): using free-space-tree
[  276.407191][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'.
[  276.884327][ T7057] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  277.174880][ T5855] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  277.344985][ T5855] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  277.349181][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  277.353994][ T5855] usb 5-1: Product: syz
[  277.355864][ T5855] usb 5-1: Manufacturer: syz
[  277.358121][ T5855] usb 5-1: SerialNumber: syz
[  277.378740][ T5855] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  277.667301][T12212] loop3: detected capacity change from 0 to 32768
[  277.678813][T12212] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 16981954538416098692, max 2147483583)
[  277.678813][T12212] members_v1 (size 152):
[  277.678813][T12212] Device:                        0
[  277.678813][T12212]   Label:                       invalid label 98
[  277.678813][T12212]   UUID:                        88000000-0000-0000-7af6-772b00de4159
[  277.678813][T12212]   Size:                        0
[  277.678813][T12212]   read errors:                 0
[  277.678813][T12212]   write errors:                0
[  277.678813][T12212]   checksum errors:             0
[  277.678813][T12212]   seqread iops:                1611530240
[  277.678813][T12212]   seqwrite iops:               0
[  277.678813][T12212]   randread iops:               0
[  277.678813][T12212]   randwrite iops:              0
[  277.678813][T12212]   Bucket size:                 0
[  277.678813][T12212]   First bucket:                128
[  277.678813][T12212]   Buckets:                     16981954538416098692
[  277.678813][T12212]   Last mount:                  34376515584
[  277.678813][T12212]   Last superblock write:       0
[  277.678813][T12212]   State:                       spare
[  277.678813][T12212]   Data allowed:                free,sb,journal
[  277.678813][T12212]   Has data:                    journal,btree,user
[  277.678813][T12212]   Btree allocated bitmap blocksize:1
[  277.678813][T12212]   Btree allocated bitmap:      00000000000000000
[  277.678913][T12212] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  277.800605][ T5855] vp7045: USB control message 'in' went wrong.
[  277.804420][ T5855] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  277.819467][ T5855] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  277.836822][ T5855] usb 5-1: USB disconnect, device number 6
[  278.945986][T12248] loop4: detected capacity change from 0 to 32768
[  278.968207][T12248] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.007474][T12248] XFS (loop4): Ending clean mount
[  279.046491][T11065] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.315006][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'.
[  279.385336][T12267] loop4: detected capacity change from 0 to 1024
[  279.868457][T12272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'.
[  280.946796][T12291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2461'.
[  281.077477][T12296] loop4: detected capacity change from 0 to 2048
[  281.118537][T12296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=787, location=787
[  281.124371][T12296] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  281.137749][T12296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1043, location=1043
[  281.155360][T12296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=787, location=787
[  281.175295][T12296] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  281.180786][T12296] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1043, location=1043
[  281.194628][T12296] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  281.799200][T12322] loop4: detected capacity change from 0 to 32768
[  281.896668][T12322] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2476 (12322)
[  282.099725][T12322] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  282.112520][T12322] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  282.116372][T12322] BTRFS info (device loop4): using free-space-tree
[  282.363661][   T13] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  282.405992][T11065] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  282.902783][T12362] loop4: detected capacity change from 0 to 32768
[  282.919717][T12362] JBD2: Ignoring recovery information on journal
[  282.967164][T12362] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  283.020880][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2492'.
[  283.056781][T11065] ocfs2: Unmounting device (7,4) on (node local)
[  283.704755][T12413] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2509'.
[  284.336719][T12424] netlink: 'syz.4.2514': attribute type 12 has an invalid length.
[  284.339990][T12424] netlink: 'syz.4.2514': attribute type 29 has an invalid length.
[  284.343815][T12424] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2514'.
[  284.347521][T12424] netlink: 'syz.4.2514': attribute type 2 has an invalid length.
[  284.351223][T12424] netlink: 'syz.4.2514': attribute type 3 has an invalid length.
[  284.367993][T12424] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2514'.
[  284.465833][T12435] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  284.643842][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'.
[  286.151029][T12472] netlink: 'syz.4.2533': attribute type 1 has an invalid length.
[  287.232944][T12514] dns_resolver: Unsupported server list version (0)
[  287.269025][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2554'.
[  287.683109][T12531] loop4: detected capacity change from 0 to 512
[  287.701350][T12531] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2559: invalid indirect mapped block 4294967295 (level 1)
[  287.719805][T12531] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2559: invalid indirect mapped block 4294967295 (level 1)
[  287.728976][T12531] EXT4-fs (loop4): 2 truncates cleaned up
[  287.736403][T12531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.749770][T12531] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1768304430 > max in inode 16
[  287.779897][T11065] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.019083][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'.
[  288.024392][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'.
[  288.028913][T12542] netlink: 'syz.1.2563': attribute type 13 has an invalid length.
[  288.034263][T12542] netlink: 'syz.1.2563': attribute type 14 has an invalid length.
[  288.049537][T12544] loop4: detected capacity change from 0 to 2048
[  288.113607][ T5977]  loop4: p2 < > p3 < p5 > p4
[  288.116124][ T5977] loop4: partition table partially beyond EOD, truncated
[  288.120085][ T5977] loop4: p2 start 4278190080 is beyond EOD, truncated
[  288.150583][ T5977] loop4: p4 size 8192 extends beyond EOD, truncated
[  288.157515][ T5977] loop4: p5 size 8192 extends beyond EOD, truncated
[  288.174106][T12544]  loop4: p2 < > p3 < p5 > p4
[  288.176331][T12544] loop4: partition table partially beyond EOD, truncated
[  288.196314][T12544] loop4: p2 start 4278190080 is beyond EOD, truncated
[  288.212003][T12544] loop4: p4 size 8192 extends beyond EOD, truncated
[  288.226217][T12544] loop4: p5 size 8192 extends beyond EOD, truncated
[  288.350963][T12555] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  288.389553][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  288.389690][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  288.415310][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  288.445270][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  288.454134][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  288.466272][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  288.663618][ T5918] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  288.695852][T12577] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2581'.
[  288.842930][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  288.857730][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  288.864952][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  288.869492][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  288.875086][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  288.880781][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  288.999480][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.025947][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2591'.
[  289.403675][ T5918] usb 5-1: GET_CAPABILITIES returned 0
[  289.406198][ T5918] usbtmc 5-1:16.0: can't read capabilities
[  289.471052][ T5918] usb 5-1: USB disconnect, device number 7
[  290.154267][T12618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2600'.
[  290.163750][T12616] loop4: detected capacity change from 0 to 32768
[  290.185784][T12616] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  290.227625][T11065] ocfs2: Unmounting device (7,4) on (node local)
[  290.851894][T12658] netlink: 'syz.4.2616': attribute type 4 has an invalid length.
[  291.317203][T12686] : entered promiscuous mode
[  291.326781][T12688] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2631'.
[  292.630689][T12740] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2655'.
[  292.654786][T12744] overlayfs: failed to clone upperpath
[  292.770945][T12758] netlink: 'syz.3.2664': attribute type 10 has an invalid length.
[  292.857270][T12765] loop4: detected capacity change from 0 to 256
[  292.880596][T12765] FAT-fs (loop4): Directory bread(block 64) failed
[  292.887439][T12765] FAT-fs (loop4): Directory bread(block 65) failed
[  292.890694][T12765] FAT-fs (loop4): Directory bread(block 66) failed
[  292.894280][T12765] FAT-fs (loop4): Directory bread(block 67) failed
[  292.897244][T12765] FAT-fs (loop4): Directory bread(block 68) failed
[  292.906588][T12765] FAT-fs (loop4): Directory bread(block 69) failed
[  292.914577][T12765] FAT-fs (loop4): Directory bread(block 70) failed
[  292.918434][T12765] FAT-fs (loop4): Directory bread(block 71) failed
[  292.924860][T12765] FAT-fs (loop4): Directory bread(block 72) failed
[  292.928013][T12765] FAT-fs (loop4): Directory bread(block 73) failed
[  292.957762][ T5915] kernel write not supported for file /input/event2 (pid: 5915 comm: kworker/0:5)
[  293.530545][T12797] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  294.146051][T12814] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2689'.
[  294.150249][T12814] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2689'.
[  294.191813][ T5918] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  294.361688][ T5918] usb 5-1: Using ep0 maxpacket: 32
[  294.367643][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short
[  294.374565][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64
[  294.384413][ T5918] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  294.388471][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.394037][ T5918] usb 5-1: Product: syz
[  294.396157][ T5918] usb 5-1: Manufacturer: syz
[  294.398571][ T5918] usb 5-1: SerialNumber: syz
[  294.408877][ T5918] usb 5-1: config 0 descriptor??
[  294.624713][ T5918] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15
[  294.833053][ T5918] usb 5-1: USB disconnect, device number 8
[  297.643245][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'.
[  297.647282][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'.
[  297.882114][T12906] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2731'.
[  298.108535][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'.
[  298.123652][T12922] gretap0: entered promiscuous mode
[  298.142621][T12922] gretap0: left promiscuous mode
[  298.332460][ T5918] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  298.455073][T12945] overlayfs: failed to clone upperpath
[  298.515426][ T5918] usb 5-1: Using ep0 maxpacket: 16
[  298.537757][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.543404][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  298.547269][ T5918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  298.551549][ T5918] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  298.567823][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  298.581906][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  298.585133][ T5918] usb 5-1: SerialNumber: syz
[  298.593462][ T5918] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[  298.797347][ T5918] usb 5-1: USB disconnect, device number 9
[  299.165125][T12972] netlink: 'syz.1.2762': attribute type 21 has an invalid length.
[  299.168875][T12972] IPv6: NLM_F_CREATE should be specified when creating new route
[  300.305815][T13024] netlink: 'syz.1.2787': attribute type 4 has an invalid length.
[  300.712882][ T5855] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  301.211872][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  301.218585][ T5855] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  301.242698][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  301.253644][ T5855] usb 5-1: Product: syz
[  301.258170][ T5855] usb 5-1: Manufacturer: syz
[  301.263751][ T5855] usb 5-1: SerialNumber: syz
[  301.272578][ T5855] usb 5-1: config 0 descriptor??
[  301.610552][T13033] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  301.612806][T13033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  301.654882][T13033] vhci_hcd vhci_hcd.0: Device attached
[  301.872989][ T5855] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  303.388647][T13074] vhci_hcd: connection reset by peer
[  303.391553][  T973] usb 5-1: USB disconnect, device number 10
[  303.413289][   T13] vhci_hcd: stop threads
[  303.417870][   T13] vhci_hcd: release socket
[  303.460481][   T13] vhci_hcd: disconnect device
[  303.717601][T13123] loop4: detected capacity change from 0 to 32768
[  303.842829][   T54] Bluetooth: hci0: unexpected event for opcode 0x2060
[  303.857133][T13123] ERROR: (device loop4): duplicateIXtree: 
[  303.857133][T13123] 
[  303.863036][T13123] ERROR: (device loop4): remounting filesystem as read-only
[  303.897867][T13123] ERROR: (device loop4): dtReadFirst: btstack overrun
[  303.897867][T13123] 
[  303.903039][T13123] ERROR: (device loop4): remounting filesystem as read-only
[  303.906430][T13123] btstack dump:
[  303.909449][T13123] bn = 0, index = 0
[  303.911248][T13123] bn = 2d, index = 0
[  303.918045][T13123] bn = 0, index = 0
[  303.919658][T13123] bn = 2d, index = 0
[  303.921169][T13123] bn = 0, index = 0
[  303.922874][T13123] bn = 2d, index = 0
[  303.924213][T13123] bn = 0, index = 0
[  303.925916][T13123] bn = 0, index = 0
[  303.928294][T13123] jfs_readdir: unexpected rc = -5 from dtReadNext
[  304.245621][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'.
[  304.782426][T13148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  304.793067][T13148] batman_adv: batadv0: Adding interface: ip6gretap1
[  304.796505][T13148] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.807849][T13148] batman_adv: batadv0: Interface activated: ip6gretap1
[  305.100842][T13164] openvswitch: netlink: Message has 4 unknown bytes.
[  306.981772][ T5855] vhci_hcd: vhci_device speed not set
[  309.719901][T13265] lo speed is unknown, defaulting to 1000
[  309.723534][T13265] lo speed is unknown, defaulting to 1000
[  309.747948][T13265] lo speed is unknown, defaulting to 1000
[  309.785786][T13265] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  309.852151][T13265] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  309.897660][T13265] lo speed is unknown, defaulting to 1000
[  309.902039][T13265] lo speed is unknown, defaulting to 1000
[  309.905040][T13265] lo speed is unknown, defaulting to 1000
[  309.907765][T13265] lo speed is unknown, defaulting to 1000
[  309.911551][T13265] lo speed is unknown, defaulting to 1000
[  309.954198][T13272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.000346][T13274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2881'.
[  311.700122][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'.
[  317.142081][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  317.175192][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  321.181647][    C0] sched: DL replenish lagged too much
[  369.809552][T13335] Bluetooth: hci1: command tx timeout
[  371.712658][T11065] jfs_flush_journal: synclist not empty
[  371.714900][T11065] metapage: ffff88810e45de88: 00001000 00000000 00003938 00000000
[  371.717784][T11065] metapage: ffff88810e45de98: 0e45d2f8 ffff8881 3d448a28 ffff8880
[  371.721056][T11065] metapage: ffff88810e45dea8: 00000004 00000000 00000000 00000000
[  372.428269][T11065] metapage: ffff88810e45deb8: 3729b000 ffff8880 0000002d 00000000
[  372.446790][T11065] metapage: ffff88810e45dec8: 00000000 dead4ead ffffffff 00000000
[  372.451131][T11065] metapage: ffff88810e45ded8: ffffffff ffffffff 99c03760 ffffffff
[  372.462776][T11065] metapage: ffff88810e45dee8: 93529b50 ffffffff 00000000 00000000
[  372.466495][T11065] metapage: ffff88810e45def8: 8bc401c0 ffffffff 00000300 00000000
[  372.470810][T11065] metapage: ffff88810e45df08: 0e45df08 ffff8881 0e45df08 ffff8881
[  374.711259][T11065] metapage: ffff88810e45df18: 00dca6c0 ffffea00 3e7ac000 ffff8880
[  374.722703][T11065] metapage: ffff88810e45df28: 00001000 00003e24 00000000 00000000
[  374.726031][T11065] metapage: ffff88810e45df38: 3d448800 ffff8880
[  374.729091][T11065] page: ffffea0000dca6c0: 00fff2000000403c ffffea0000dca688
[  376.121916][T11065] page: ffffea0000dca6d0: ffffea0001019ac8 0000000000000000
[  376.125093][T11065] page: ffffea0000dca6e0: 000000000000002d ffff88810e45de88
[  376.128497][T11065] page: ffffea0000dca6f0: 00000001ffffffff ffff88811b380d00
[  377.303773][T11065] metapage: ffff88810e45d2e8: 00001000 00000000 00003cb0 00000000
[  377.307485][T11065] metapage: ffff88810e45d2f8: 0e45dda0 ffff8881 0e45de98 ffff8881
[  377.337291][T11065] metapage: ffff88810e45d308: 00000004 00000000 00000000 00000000
[  377.341109][T11065] metapage: ffff88810e45d318: 3f007000 ffff8880 00000030 00000000
[  377.773722][T11065] metapage: ffff88810e45d328: 00000000 dead4ead ffffffff 00000000
[  377.777153][T11065] metapage: ffff88810e45d338: ffffffff ffffffff 99c03760 ffffffff
[  377.780282][T11065] metapage: ffff88810e45d348: 93529b50 ffffffff 00000000 00000000
[  378.552225][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  378.562735][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.864232][T11065] metapage: ffff88810e45d358: 8bc401c0 ffffffff 00000300 00000000
[  378.866968][T11065] metapage: ffff88810e45d368: 0e45d368 ffff8881 0e45d368 ffff8881
[  378.869841][T11065] metapage: ffff88810e45d378: 00fc01c0 ffffea00 3e7ac000 ffff8880
[  379.157637][T11065] metapage: ffff88810e45d388: 00001000 00003e24 00000000 00000000
[  379.161387][T11065] metapage: ffff88810e45d398: 3d448800 ffff8880
[  380.669022][T11065] page: ffffea0000fc01c0: 00fff2800000403c ffffea0000e12188
[  382.066240][T11065] page: ffffea0000fc01d0: ffffea0000dca608 0000000000000000
[  382.069274][T11065] page: ffffea0000fc01e0: 0000000000000030 ffff88810e45d2e8
[  382.164518][T11065] page: ffffea0000fc01f0: 00000001ffffffff ffff88811b380d00
[  382.168133][T11065] metapage: ffff88810e45dd90: 00001000 00000000 00003d58 00000000
[  382.170951][T11065] metapage: ffff88810e45dda0: 3d448a28 ffff8880 0e45d2f8 ffff8881
[  382.591467][T11065] metapage: ffff88810e45ddb0: 00000004 00000000 00000000 00000000
[  382.603007][T11065] metapage: ffff88810e45ddc0: 44548000 ffff8880 0000001c 00000000
[  382.607099][T11065] metapage: ffff88810e45ddd0: 00000000 dead4ead ffffffff 00000000
[  382.610497][T11065] metapage: ffff88810e45dde0: ffffffff ffffffff 99c03760 ffffffff
[  383.318411][T11065] metapage: ffff88810e45ddf0: 93529b50 ffffffff 00000000 00000000
[  383.859702][T11065] metapage: ffff88810e45de00: 8bc401c0 ffffffff 00000300 00000000
[  384.009040][T11065] metapage: ffff88810e45de10: 0e45de10 ffff8881 0e45de10 ffff8881
[  384.027828][T11065] metapage: ffff88810e45de20: 01115200 ffffea00 3e7ac000 ffff8880
[  384.031317][T11065] metapage: ffff88810e45de30: 00001000 00003e24 00000000 00000000
[  384.345375][T11065] metapage: ffff88810e45de40: 3d448800 ffff8880
[  384.348118][T11065] page: ffffea0001115200: 00fff2800000403c ffffea0000fdd3c8
[  389.766899][T11065] page: ffffea0001115210: ffffea0000abfd88 0000000000000000
[  389.769964][T11065] page: ffffea0001115220: 000000000000001c ffff88810e45dd90
[  391.833200][T11065] page: ffffea0001115230: 00000001ffffffff ffff88811b380d00
[  391.855640][T11065] read_mapping_page failed!
[  391.858050][T11065] diWriteSpecial: failed to read aggregate inode extent!
[  391.900692][T11065] read_mapping_page failed!
[  391.915465][T11065] diWriteSpecial: failed to read aggregate inode extent!
[  420.216843][ T6933] syz_tun (unregistering): left allmulticast mode
[  420.231458][ T6933] syz_tun (unregistering): left promiscuous mode
[  420.631909][ T6933] bridge0: port 3(syz_tun) entered disabled state
[  440.155518][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  440.168145][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  462.015813][T13336] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  462.954836][T13336] CPU: 1 UID: 0 PID: 13336 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  462.954851][T13336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.954856][T13336] Call Trace:
[  462.954859][T13336]  <TASK>
[  462.954863][T13336]  dump_stack_lvl+0x189/0x250
[  462.954878][T13336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.954886][T13336]  ? __pfx__printk+0x10/0x10
[  462.954896][T13336]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.954904][T13336]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.954912][T13336]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  462.954921][T13336]  warn_alloc+0x214/0x310
[  462.954934][T13336]  ? __pfx_warn_alloc+0x10/0x10
[  462.954946][T13336]  ? __get_vm_area_node+0x28f/0x300
[  462.954956][T13336]  ? kcov_ioctl+0x55/0x640
[  462.954965][T13336]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  462.954985][T13336]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  462.954997][T13336]  ? __pfx_kcov_ioctl+0x10/0x10
[  462.955005][T13336]  vmalloc_user_noprof+0xad/0xf0
[  462.955014][T13336]  ? kcov_ioctl+0x55/0x640
[  462.955022][T13336]  kcov_ioctl+0x55/0x640
[  462.955031][T13336]  ? bpf_lsm_file_ioctl+0x9/0x20
[  462.955040][T13336]  ? __pfx_kcov_ioctl+0x10/0x10
[  462.955048][T13336]  __se_sys_ioctl+0xfc/0x170
[  462.955058][T13336]  do_syscall_64+0xfa/0x3b0
[  462.955067][T13336]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.955076][T13336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.955082][T13336]  ? exc_page_fault+0x9f/0xf0
[  462.955091][T13336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.955097][T13336] RIP: 0033:0x7f686c38e7eb
[  462.955105][T13336] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  462.955111][T13336] RSP: 002b:00007ffcd4fd1db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  462.955120][T13336] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f686c38e7eb
[  462.955125][T13336] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc
[  462.955129][T13336] RBP: 00007f686c5b63f8 R08: 00000000000000da R09: 0000000000000000
[  462.955133][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.955137][T13336] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  462.955148][T13336]  </TASK>
[  462.955169][T13336] Mem-Info:
[  466.105109][T13336] active_anon:9362 inactive_anon:0 isolated_anon:0
[  466.105109][T13336]  active_file:4394 inactive_file:47218 isolated_file:374
[  466.105109][T13336]  unevictable:1768 dirty:13 writeback:34
[  466.105109][T13336]  slab_reclaimable:10630 slab_unreclaimable:126585
[  466.105109][T13336]  mapped:13219 shmem:6778 pagetables:725
[  466.105109][T13336]  sec_pagetables:0 bounce:0
[  466.105109][T13336]  kernel_misc_reclaimable:0
[  466.105109][T13336]  free:219071 free_pcp:23199 free_cma:0
[  466.431488][T13336] Node 0 active_anon:14260kB inactive_anon:0kB active_file:3916kB inactive_file:178712kB unevictable:3536kB isolated(anon):0kB isolated(file):1860kB mapped:34776kB dirty:0kB writeback:148kB shmem:6468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6736kB pagetables:1424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  466.945043][T13336] Node 1 active_anon:23180kB inactive_anon:0kB active_file:13660kB inactive_file:9728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:18116kB dirty:0kB writeback:0kB shmem:20644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:1484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  468.113979][T13336] Node 0 DMA free:13624kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:628kB local_pcp:316kB free_cma:0kB
[  472.465969][T13336] lowmem_reserve[]: 0 811 811 811 811
[  472.468243][T13336] Node 0 DMA32 free:115124kB boost:2048kB min:35708kB low:44120kB high:52532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15172kB inactive_anon:0kB active_file:3780kB inactive_file:179672kB unevictable:3536kB writepending:4kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:30500kB local_pcp:14120kB free_cma:0kB
[  475.394372][T11065] jfs_flush_journal: synclist not empty
[  475.397406][T11065] metapage: ffff88810e45de88: 00001000 00000000 00003938 00000000
[  475.400501][T11065] metapage: ffff88810e45de98: 0e45d2f8 ffff8881 3d448a28 ffff8880
[  475.555196][T11065] metapage: ffff88810e45dea8: 00000004 00000000 00000000 00000000
[  475.558507][T11065] metapage: ffff88810e45deb8: 3729b000 ffff8880 0000002d 00000000
[  476.049970][T11065] metapage: ffff88810e45dec8: 00000000 dead4ead ffffffff 00000000
[  476.066556][T11065] metapage: ffff88810e45ded8: ffffffff ffffffff 99c03760 ffffffff
[  476.069935][T11065] metapage: ffff88810e45dee8: 93529b50 ffffffff 00000000 00000000
[  476.080652][T13336] lowmem_reserve[]: 0 0 0 0 0
[  476.096228][T13336] Node 1 DMA32 free:440032kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17672kB local_pcp:9428kB free_cma:0kB
[  476.871827][T11065] metapage: ffff88810e45def8: 8bc401c0 ffffffff 00000300 00000000
[  476.875691][T11065] metapage: ffff88810e45df08: 0e45df08 ffff8881 0e45df08 ffff8881
[  476.879049][T11065] metapage: ffff88810e45df18: 00dca6c0 ffffea00 3e7ac000 ffff8880
[  478.727375][T13336] lowmem_reserve[]: 0 0 854 854 854
[  478.729202][T13336] Node 1 Normal free:175228kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23188kB inactive_anon:0kB active_file:13660kB inactive_file:9728kB unevictable:3536kB writepending:4kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35792kB local_pcp:16600kB free_cma:0kB
[  479.670020][T13336] lowmem_reserve[]: 0 0 0 0 0
[  480.629913][T13336] Node 0 DMA: 133*4kB (U) 147*8kB (U) 137*16kB (U) 82*32kB (U) 33*64kB (U) 9*128kB (U) 3*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 0*4096kB = 13628kB
[  480.914545][T13336] Node 0 DMA32: 810*4kB (UME) 649*8kB (UME) 267*16kB (UME) 216*32kB (UME) 126*64kB (UME) 96*128kB (UME) 48*256kB (UM) 19*512kB (UME) 6*1024kB (UM) 2*2048kB (UM) 0*4096kB = 72224kB
[  480.920977][T13336] Node 1 DMA32: 23*4kB (UM) 128*8kB (UM) 338*16kB (UM) 339*32kB (UM) 256*64kB (UM) 185*128kB (UM) 113*256kB (UM) 53*512kB (UM) 23*1024kB (UM) 6*2048kB (UM) 71*4096kB (M) = 440156kB
[  481.106980][T11065] metapage: ffff88810e45df28: 00001000 00003e24 00000000 00000000
[  481.109812][T11065] metapage: ffff88810e45df38: 3d448800 ffff8880
[  481.125151][T11065] page: ffffea0000dca6c0: 00fff2000000403c ffffea0000dca688
[  481.127678][T11065] page: ffffea0000dca6d0: ffffea0001019ac8 0000000000000000
[  481.130297][T11065] page: ffffea0000dca6e0: 000000000000002d ffff88810e45de88
[  481.472167][T13336] Node 1 Normal: 509*4kB (ME) 448*8kB (ME) 474*16kB (UME) 174*32kB (UME) 133*64kB (UME) 495*128kB (UME) 153*256kB (UME) 31*512kB (UM) 19*1024kB (M) 0*2048kB 0*4096kB = 165140kB
[  481.478230][T13336] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  481.481522][T13336] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  481.556270][T11065] page: ffffea0000dca6f0: 00000001ffffffff ffff88811b380d00
[  481.559089][T11065] metapage: ffff88810e45d2e8: 00001000 00000000 00003cb0 00000000
[  481.843071][T11065] metapage: ffff88810e45d2f8: 0e45dda0 ffff8881 0e45de98 ffff8881
[  481.846376][T11065] metapage: ffff88810e45d308: 00000004 00000000 00000000 00000000
[  481.849858][T11065] metapage: ffff88810e45d318: 3f007000 ffff8880 00000030 00000000
[  482.324257][T13336] 58730 total pagecache pages
[  482.326166][T13336] 0 pages in swap cache
[  482.327672][T13336] Free swap  = 124996kB
[  482.329102][T13336] Total swap = 124996kB
[  482.344227][T13336] 786301 pages RAM
[  482.345614][T13336] 0 pages HighMem/MovableOnly
[  482.347415][T13336] 241329 pages reserved
[  482.348998][T13336] 0 pages cma reserved
[  482.402717][T11065] metapage: ffff88810e45d328: 00000000 dead4ead ffffffff 00000000
[  482.405397][T11065] metapage: ffff88810e45d338: ffffffff ffffffff 99c03760 ffffffff
[  482.408471][T11065] metapage: ffff88810e45d348: 93529b50 ffffffff 00000000 00000000
[  482.411138][T11065] metapage: ffff88810e45d358: 8bc401c0 ffffffff 00000300 00000000
[  484.383298][T11065] metapage: ffff88810e45d368: 0e45d368 ffff8881 0e45d368 ffff8881
[  484.386106][T11065] metapage: ffff88810e45d378: 00fc01c0 ffffea00 3e7ac000 ffff8880
[  484.388753][T11065] metapage: ffff88810e45d388: 00001000 00003e24 00000000 00000000
[  484.391347][T11065] metapage: ffff88810e45d398: 3d448800 ffff8880
[  485.269264][T11065] page: ffffea0000fc01c0: 00fff2800000403c ffffea0001115208
[  485.282890][T11065] page: ffffea0000fc01d0: ffffea0000dca608 0000000000000000
[  485.286420][T11065] page: ffffea0000fc01e0: 0000000000000030 ffff88810e45d2e8
[  485.289735][T11065] page: ffffea0000fc01f0: 00000001ffffffff ffff88811b380d00
[  486.569855][T11065] metapage: ffff88810e45dd90: 00001000 00000000 00003d58 00000000
[  487.174857][T11065] metapage: ffff88810e45dda0: 3d448a28 ffff8880 0e45d2f8 ffff8881
[  487.177929][T11065] metapage: ffff88810e45ddb0: 00000004 00000000 00000000 00000000
[  488.208413][T11065] metapage: ffff88810e45ddc0: 44548000 ffff8880 0000001c 00000000
[  488.211195][T11065] metapage: ffff88810e45ddd0: 00000000 dead4ead ffffffff 00000000
[  488.222423][T11065] metapage: ffff88810e45dde0: ffffffff ffffffff 99c03760 ffffffff
[  488.225261][T11065] metapage: ffff88810e45ddf0: 93529b50 ffffffff 00000000 00000000
[  488.228301][T11065] metapage: ffff88810e45de00: 8bc401c0 ffffffff 00000300 00000000
[  488.231056][T11065] metapage: ffff88810e45de10: 0e45de10 ffff8881 0e45de10 ffff8881
[  489.007779][T11065] metapage: ffff88810e45de20: 01115200 ffffea00 3e7ac000 ffff8880
[  489.010826][T11065] metapage: ffff88810e45de30: 00001000 00003e24 00000000 00000000
[  489.023037][T11065] metapage: ffff88810e45de40: 3d448800 ffff8880
[  489.025879][T11065] page: ffffea0001115200: 00fff2800000403c ffffea000104e088
[  489.028903][T11065] page: ffffea0001115210: ffffea0000fc01c8 0000000000000000
[  490.595077][T11065] page: ffffea0001115220: 000000000000001c ffff88810e45dd90
[  490.597541][T11065] page: ffffea0001115230: 00000001ffffffff ffff88811b380d00
[  502.353123][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  502.620196][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  505.239701][T13339] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  508.278560][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  508.278583][T13339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.278592][T13339] Call Trace:
[  508.278599][T13339]  <TASK>
[  508.278605][T13339]  dump_stack_lvl+0x189/0x250
[  508.278628][T13339]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.278643][T13339]  ? __pfx__printk+0x10/0x10
[  508.278661][T13339]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  508.278677][T13339]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  508.278692][T13339]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  508.278708][T13339]  warn_alloc+0x214/0x310
[  508.278731][T13339]  ? __pfx_warn_alloc+0x10/0x10
[  508.278758][T13339]  ? __get_vm_area_node+0x28f/0x300
[  508.278775][T13339]  ? kcov_ioctl+0x55/0x640
[  508.278794][T13339]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  508.278865][T13339]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  508.278890][T13339]  ? __pfx_kcov_ioctl+0x10/0x10
[  508.278913][T13339]  vmalloc_user_noprof+0xad/0xf0
[  508.278930][T13339]  ? kcov_ioctl+0x55/0x640
[  508.278947][T13339]  kcov_ioctl+0x55/0x640
[  508.278965][T13339]  ? bpf_lsm_file_ioctl+0x9/0x20
[  508.278980][T13339]  ? __pfx_kcov_ioctl+0x10/0x10
[  508.278997][T13339]  __se_sys_ioctl+0xfc/0x170
[  508.279015][T13339]  do_syscall_64+0xfa/0x3b0
[  508.279033][T13339]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.279048][T13339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.279061][T13339]  ? exc_page_fault+0x9f/0xf0
[  508.279078][T13339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.279090][T13339] RIP: 0033:0x7fb9f0b8e7eb
[  508.279104][T13339] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  508.279116][T13339] RSP: 002b:00007ffd2f9a1000 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  508.279132][T13339] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fb9f0b8e7eb
[  508.279141][T13339] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7
[  508.279149][T13339] RBP: 00007fb9f0db5f40 R08: 00000000000000da R09: 0000000000000000
[  508.279157][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.279165][T13339] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  508.279186][T13339]  </TASK>
[  508.279192][T13339] Mem-Info:
[  511.000137][T13339] active_anon:9183 inactive_anon:0 isolated_anon:0
[  511.000137][T13339]  active_file:4394 inactive_file:47033 isolated_file:474
[  511.000137][T13339]  unevictable:1768 dirty:23 writeback:0
[  511.000137][T13339]  slab_reclaimable:10630 slab_unreclaimable:152287
[  511.000137][T13339]  mapped:7063 shmem:6779 pagetables:708
[  511.000137][T13339]  sec_pagetables:0 bounce:0
[  511.000137][T13339]  kernel_misc_reclaimable:0
[  511.000137][T13339]  free:190731 free_pcp:27569 free_cma:0
[  511.664455][T13339] Node 0 active_anon:13468kB inactive_anon:0kB active_file:3916kB inactive_file:180228kB unevictable:3536kB isolated(anon):0kB isolated(file):128kB mapped:18908kB dirty:92kB writeback:0kB shmem:6472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6768kB pagetables:1376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  512.499472][T13339] Node 1 active_anon:24012kB inactive_anon:0kB active_file:13660kB inactive_file:9740kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:13356kB dirty:0kB writeback:0kB shmem:20644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5520kB pagetables:1456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  513.585274][T13339] Node 0 DMA free:12188kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:616kB local_pcp:280kB free_cma:0kB
[  514.655241][T13339] lowmem_reserve[]: 0 811 811 811 811
[  514.657348][T13339] Node 0 DMA32 free:113340kB boost:2048kB min:35708kB low:44120kB high:52532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13676kB inactive_anon:0kB active_file:3916kB inactive_file:179620kB unevictable:3536kB writepending:92kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:49632kB local_pcp:35044kB free_cma:0kB
[  515.515579][T13339] lowmem_reserve[]: 0 0 0 0 0
[  515.517591][T13339] Node 1 DMA32 free:440776kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:9568kB free_cma:0kB
[  516.139432][T13339] lowmem_reserve[]: 0 0 854 854 854
[  516.141378][T13339] Node 1 Normal free:315424kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23980kB inactive_anon:0kB active_file:13660kB inactive_file:9740kB unevictable:3536kB writepending:4kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41644kB local_pcp:24796kB free_cma:0kB
[  518.209430][T13339] lowmem_reserve[]: 0 0 0 0 0
[  518.224188][T13339] Node 0 DMA: 99*4kB (UM) 122*8kB (UM) 129*16kB (UM) 58*32kB (UM) 40*64kB (UM) 10*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 13228kB
[  518.230981][T13339] Node 0 DMA32: 2078*4kB (UME) 1193*8kB (UME) 1033*16kB (UME) 1091*32kB (UME) 476*64kB (UME) 83*128kB (UME) 19*256kB (UM) 14*512kB (UME) 8*1024kB (UM) 3*2048kB (M) 1*4096kB (M) = 140848kB
[  520.365595][T13339] Node 1 DMA32: 23*4kB (UM) 129*8kB (UM) 338*16kB (UM) 340*32kB (UM) 257*64kB (UM) 184*128kB (UM) 112*256kB (UM) 55*512kB (UM) 23*1024kB (UM) 6*2048kB (UM) 71*4096kB (M) = 440900kB
[  520.405632][T13339] Node 1 Normal: 513*4kB (ME) 1475*8kB (UME) 2100*16kB (UME) 1875*32kB (UME) 1063*64kB (UME) 569*128kB (UME) 174*256kB (UME) 36*512kB (UM) 19*1024kB (M) 0*2048kB 0*4096kB = 330748kB
[  520.454693][T13339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.458162][T13339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  521.275655][T13339] 58653 total pagecache pages
[  521.277987][T13339] 0 pages in swap cache
[  521.279862][T13339] Free swap  = 124996kB
[  521.296599][T13339] Total swap = 124996kB
[  521.298536][T13339] 786301 pages RAM
[  521.300138][T13339] 0 pages HighMem/MovableOnly
[  521.479132][T13339] 241329 pages reserved
[  521.480981][T13339] 0 pages cma reserved
[  562.866225][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  562.874338][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  620.467127][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  624.592772][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  624.602759][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  628.244904][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  630.658762][T13357] Bluetooth: hci0: Opcode 0x0c03 failed: -110

VM DIAGNOSIS:
22:10:42  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000000f0 RBX=0000000000000820 RCX=ffff88801c2f0000 RDX=00000000ffffffff
RSI=0000000000000820 RDI=0000000000000820 RBP=00000000ffffffff RSP=ffffc900000070d0
R8 =0000000000000000 R9 =ffffffff89c542a5 R10=000000000000dd86 R11=0000000000000100
R12=0000000000000820 R13=0000000000000820 R14=0000000000000820 R15=ffff88801d6e6a00
RIP=ffffffff8215bea0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e5d7a93cc CR3=000000001d698000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00ff000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007660000 RBX=1ffff110211b425a RCX=000000000000009d RDX=ffff888108da12d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0c28 RSP=ffffc900001e0a80
R8 =ffff888108da16bf R9 =1ffff110211b42d7 R10=dffffc0000000000 R11=ffffed10211b42d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff869871bb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f484b720800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e5d914fe4 CR3=000000010e608000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
