last executing test programs:

1m32.656421412s ago: executing program 2 (id=147):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = syz_io_uring_setup(0x7890, &(0x7f0000000540)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

1m32.347616864s ago: executing program 2 (id=149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000072009fb326bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}, 0x1, 0x0, 0x0, 0x804c090}, 0x20041040)

1m32.233704202s ago: executing program 2 (id=151):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x80025b}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1}, 0x10000)
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40008010)

1m31.302191427s ago: executing program 2 (id=170):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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")
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007740), 0x0, 0x8800)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)
syz_emit_ethernet(0x15e, 0x0, 0x0)

1m31.166740716s ago: executing program 2 (id=172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

1m30.233111041s ago: executing program 2 (id=173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x1, 0x8001, 0x2, 0x3})
syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff)

1m30.232953474s ago: executing program 32 (id=173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x1, 0x8001, 0x2, 0x3})
syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4}]}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff)

36.222514056s ago: executing program 0 (id=917):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000180)=ANY=[@ANYRES64])

36.161626096s ago: executing program 0 (id=920):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/fib_triestat\x00')
lseek(r0, 0x3, 0x0)

36.161468785s ago: executing program 0 (id=921):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111ac0000000000850000008c00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

36.101674487s ago: executing program 0 (id=922):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ca, &(0x7f00000006c0)="$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")
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)

36.101354418s ago: executing program 0 (id=923):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1)
getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b)

35.923593838s ago: executing program 0 (id=925):
io_uring_setup(0x2bd2, 0x0)
syz_io_uring_setup(0x4a9, &(0x7f00000001c0)={0x0, 0xe798, 0x0, 0x2, 0x3d0}, 0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))
mkdir(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$eJzs3c9vI1cdAPDvTH5umjYpVOKHgC6lsKBV7cTbRlVP5QJCVSVExYnDNiTeKIodR7FTmrCH9H9AohIn+BM4IHFA6ok7N7ghpHJAKrACbZA4GM14nM0PO0TdrGcVfz7SyPPmxfP9vjjz3uQ58QtgbN2MiMOImI6IdyNioTieFFu82duyr3v44P7a0YP7a0l0u+/8I8nrs2Nx4jmZZ4pzzkbED74b8ePkfNz2/sHWaqNR3y3K1U5zp9reP/jLZnN1o75R367VVpZXll6/81rtytr6YvPXn3xn860f/u63X/74D4ff+mmW1nxRd7IdV6nX9KnjOJnJiHjrSQQrwUTRnumyE+FTSSPiMxHxUnb9d8vOBgAYhW53IboLJ8sAwHWX5nNgSVop5gLmI00rld4c3gsxlzZa7c7te6297fXeXNliTKX3Nhv1pWKucDGmkqy8nO8/KtfOlO9ExPMR8bOZG3m5stZqrJd54wMAY+yZM+P/v2d64z8AcM3Nlp0AADByxn8AGD/GfwAYP8Z/ABg/xn8AGD/GfwAYP8Z/ABgr33/77WzrHhWff73+3v7eVuu9V9br7a1Kc2+tstba3alstFob+Wf2NP/f+Rqt1s7yq7H3frVTb3eq7f2Du83W3nbnbv653nfrUyNpFQBwkedf/OhPSUQcvnEj3+LEWg7Garje0rITAEozUXYCQGkmy04AKI3f8YEBS/Se0v8TofmzFR8OfYquBZ5yt75g/h/Glfl/GF/m/2F8mf+H8dXtJtb8B4AxY44fuOz7/6dMX/j+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFx78/mWpJViLfD5SNNKJeLZiFiMqeTeZqO+FBHPRcQfZ6ZmsvJy2UkDAI8p/VtSrP91a+Hl+bO108l/ZqJY6usnv3jn5++vdjq7y9nxfx4f73xYHK9dGMhSgwBQkv443R/H+x4+uL/W30aZzyff7i0umsU9KrZezWRM5o+z+Y3D3L+SotyT3a9MXEH8ww8i4vOD2p/kcyOLxcqnZ+NnsZ8dafz0VPw0r+s9Zt+Lz15BLjBuPsr6nzcHXX9p3MwfB1//s3kP9fj6/d/Ruf4vPe7/Job0fzcvG+PV339vaN0HEV+cHBQ/OY6fDIn/8iXj//lLX3lpWF33lxG3ooifxKn4J2NVO82danv/4JXN5upGfaO+XautLK8svX7ntVo1n6Ou9meqz/v7G7efu6j9czG4/bPD2z+bHfv6Jdv/q/+++6OvXhD/m18b/Pq/MDx+PiZ+45LxV+d+M3D57n789cHtL54z/PW/fe5sNwbG+PivB+uXTBUAGIH2/sHWaqNR37Uzsp3s3u0pSMNOaTvZT8BVnOdzTzDVsnsm4El7dNGXnQkAAAAAAAAAAAAAADDMKP7hqew2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcH39LwAA//94utYi")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)

35.894757773s ago: executing program 33 (id=925):
io_uring_setup(0x2bd2, 0x0)
syz_io_uring_setup(0x4a9, &(0x7f00000001c0)={0x0, 0xe798, 0x0, 0x2, 0x3d0}, 0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))
mkdir(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4d1, &(0x7f0000000500)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)

32.140240444s ago: executing program 3 (id=1002):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90875a"}, &(0x7f0000000300)=ANY=[@ANYBLOB="209b01001e0092"], 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

30.594450893s ago: executing program 3 (id=1036):
syz_usb_connect(0x1, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1a, 0x87, 0x70, 0x8, 0x10c4, 0x1601, 0x101c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x1, 0x40, 0x60}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x1, [{0x0, 0x0}]})

29.314301071s ago: executing program 3 (id=1054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe10010000710700000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

29.189076055s ago: executing program 3 (id=1055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)

29.188817396s ago: executing program 3 (id=1056):
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0xb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x6, 0x3132564e, 0x1, @stepwise={0x0, 0x400, 0x0, 0x0, 0xfffffff9}})

28.892846739s ago: executing program 3 (id=1061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

28.813261985s ago: executing program 34 (id=1061):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

24.232980313s ago: executing program 5 (id=1180):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)={0x20, 0xe, 0x6, "c7a19c1ec455"}, 0x0, 0x0, 0x0, 0x0})

22.706090026s ago: executing program 5 (id=1214):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000000080)={&(0x7f0000000340)=[&(0x7f00000000c0)=@freefrag={{0x4f32494e, 0x9, 0x61, 0x80000001}, {}, 0x2}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x12})

22.34293268s ago: executing program 5 (id=1223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x926}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0)

22.222270541s ago: executing program 5 (id=1227):
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x8, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

22.217388807s ago: executing program 5 (id=1229):
syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X1sVeUdB/BzKQWkQLs4FEMyGUNdls0gZoJOscjAUUHuwA1Jxmhl0iBBu2ZuaRdd49hwcS6Vl20sQV0iI6uNdnSDzBHFhCjE8TI0xoxXGaMZccjrwpjGpffe53LvubS9Mmd9+XxIe85zf+d57nNPzh/3e+lzbgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRFCWntzYv/t1Vm9849c7TDVe93LfvoxP+Vv+TW1cOHfu5R/5atvJP+1+aN7Jm+MTLWvcl5jbsHbskihKpfolM/7k3fWXG/Jlzpw0IA1Z/Nb2tqOjqKdNd96cb/fIe7OyX/1MTRVFpbICSzHZSWXrbJ2+A7G594YDdGjfozcWDj1a1rKkuq1368NRjhS+dTgN6ewK9JXNdHTx7LVWmfveJHZFt51x6ibxLNN0/fsG9Ly8CAHhXRidTm+zb0cxb3Gy7KV6PtStj7eZYO7xDaM5tnI/0uP26mueIeL2X5lmZjgr9u5xnrJ45/9l2Mt4/1o5FjXcxz/xDM5FmQFfzrIvVe2ueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8kD2zd9K+bpz13eOJNT0y5bu9rs58/Oelrzy/63rED/x5+8eoD/1mz/6V5I2uGT7ysdV9ibsPesUuiqCLVL5Hunpg5cPLFX/hV1fd/39Ewdd2g5pdLMuOGbd+cg6PXws615VF0R07lYBj2H0OiKJlfSDWjlYWFBamdKaEAAADAR8klqd99su10HCzNaydSaTKR+hekw+K4QW8uHny0qmVNdVnt0oenHjv/8ZJdjFd5zvGy7YqzP4mcYBzib3y8s/VwaH3BON2LjxjP8yUdVy5Pbl/7jR2Pnn7x6r23bxtec881F97VUrv2kxdUHd/x99kF+b+i+/wfzpz8DwAAwP9C/o+P072e8v9FB8p2Ljrz6obrv/zHZ75527a7T/3mx1u+fVfHoSNNY35Qu2TzloL8PyLvKQvyf5hxyP99ovPL/wAAAPBB9v/O/5UF43Svp/xfOfrtZffcW7d26c6tZ8b/4fLWJ9reuHz1tTNGrWiN5j/bfuitgvw/urj83zd32uHBP4cJLyyPotHFn1QAAAAgT/h/97MfLYS8nv7kIJ7X77hlQvnu45d+d9Km2+7fM6zhwJ2n7xxXs3bh5gWfGX3ftMcqDxbk/8ri8n/p+/NyAQAAgCKMWrWj5q1ZV+4e88qe++qf2t06YPX0f75y/faWK5pOHF60ZeftBfk/WVz+7987LwcAAAA4h58+c82Pbm5c/K05VZvGnznx+uAH395zYX3rrgk/W7Fv2zvPrthVkP+ri8v/AzPbzMqHdKcXwl8hLCuPogGdO3XpwotR843ZAgAAAPAeCTl96aixHSvmD/3srP5TaluWr3ro0hGHP5VofnDonMbxpXs2Hrm3IP/XdX///3Cng7D+P+/+fwXr/3MK6bv+fcmNAQAAAPg4KlzPH26Pn/7mgq6+f7/Y9f+rrtv6622JG1+f3nTJvF+OWDRu8uQj+zY2nnyg+vObXh24ft0jBfm/qbj8X5K7fS+//w8AAADOw4ft+/9mF4zTvZ7u/998dePTj+2/+7kXntx8y6kLDp25of2KJ9vX33p/++HhJ6PG7acL8n9zcfk/bMtyX97GcH5+WB5Fwzp3MncT/G2Y7sJYoa00p5A+8bEeM0OPTKGtf04hpS7WY0x5FH26c6cpVvhEKDTHCkeHZAqPxwrbQyFzPWQLT8UKG8OV9vMhmenGC+tDIbPAoi2soCjLLomI9TjRVY/Owjl77Mo+OQAAwMdKCM+ZLFua34ziUbYt0dMBA3s6oE9PB5T0dEDf2AHxA7t6PKrOL4TH23+xoGb+X5bdMHRD+YxZO0u+fnDahC8uX1f9nQ1zJh8feVF5R0H+f7y4/B9ORb/0pqv1/1FY/5/5XsPs+v/qUKiIFdpCIRm/Y0AyPEc67D4UnqMimelxdFi2AAAAAB9p4XOBkl6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyXvTsPk6q6EwZ8uumFbpruNvoIar6EYNh8pGkg4hITUQwkaLSJe4wKQqNIiyiQCEE/XOJuPk38RmNmDIyJWxBxGbfRiKJohESigyOKS6IO7ga3jMsj83RXnaLqVpddCCjtvO8fXafqd9ZbS9e599a5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/w4HvTB63pQZZ6y67JUVr4ehd14+6uKSX2w3fOnSPtf98urrf/XSA88tHd973HYj+sx/tuSomc/sfHYITW3lSlLFSw6oHtlj4OWjf3rL6pn73lpz0WMV6XrT8dCt9U9p+s6ZsdUXuodwW0kIZcnAwJpUoDx9vybW9+WaELYI6wKZEs3VqRLJhsMDVSHMDesCmaruqAqhJitw4KP33XNha+KSqhD6hBAqk208XZlqoyoZ6FuRClQnAyeUpQL/WJuSCdxemgrABotvhsyLfmFTbob69ssVeP2Vb7SOfb6Sw+sSE/WF872+5ybuVJaK5ANNG/S05VXHJpH39ljk3dYJ3m152/kiT1v2F6n0N5S160KVoXRC88RxM1qmx0dKQ0NDl0I1baLneeWa2ePXJ91pXoexA/Ub5XVY3nfYQX16jj7yyhXLFz1Ut3iD/xk8kbVJs9ObWmVIv+Y6zfMYDfd50gnefnlvjF6+dIUQDt1y5ajdRx700qDD6v+1zwU7X9/wq5t/WPrKlFW7HLzbguU/O7Iqb/5f/8nz/8zHUvq2NCd3bPXD2tTcPD5SExNv1qbm5gAAANBpdIa9pv94f8sF7yy5t/n6c4a+d8OcGwYuvq9uSfWYAbcePGzfO9b0bVqRN//vVdzx/3jIvyZ7tItCGN6WOKMuhJ5tj6cC18buHF0XwtfaUk25gT0TgUUhbNOWGJCpKlGiayzRKxFYXZsODE8ElsRAUyLwuxi4KBE4MwYWJgLjY2BRIrBXDIRJuePYoTY9jqIDVTEwNrURF8azEN6uja0lttVTmaoAAAA2kvTssDz3bta5DhuaIU4vF1Z1lCGegV0wQ2WihuQMNjOtKlhDWUc1lHZUQ2bccz55+Hk1l3RUc95pGCW5GUZc++C8Pz92Vp/59b9d/fX/6vnfO15+yHHTzxy65Yw5r75z6MrVPfLm/42fPP+vbKcjJXnH/0MY0/Y35i5NR1oy8bFNORkAAACADTB7h0sefuX42of7TVn0+nn//uP/X/H7W2cdsetri3/x5DM/Kq1ZdXDe/H94cef/x30iXbIyh2VxN8TkuhAacwOpar+ZH0gd9e6WDgAAAEBnkDkenzkWPil9mzpFOzmfzs/ftJ7544H/4e3mP7Bl0ZcOm95/7KPbXvKP+7f//d3zljXsf832V+yy8poRS7b69qiP8+b/TcWd/1+de5vqxJLYi1/WhdA1K/Bg7GVroE2vGHhuj9xAevxL4gY4P1aVPjEhU9X5scTYGGhMBOYWKrE8U6JnbiD9ZGUaPyMzjknpElkBAAAA+MzF3QHxuHw8//+qv/W/eeceF2+9d/3ybd6d/MJPbnj+vv5rSpde+vZ7x5z75Qtv/Hne/H/s+p3/3zYPzju9v6VbCIPKQuiS/GHAsurUwoAxUFOSTtxdnaqrS7Kq06pD2L11YMmq/ppe/78sucbgo1WpqmKgZ+9r1vRtTVxZFcKg7MDjh8/bqTUxPRHINH5QVQhfbR1tsvF/65pqvDzZ+KVdQ/hKViBT1dFdQ2htrCJZ1X2V6esYJKu6oTKELbMCmaqGVYYwMwDQScV/pROyH5w2c9bkcS0tzSdtwkTch18VJk5qaW4Yf0LLhMoCfZqQ6HPOMkan5Y+p2CvfPJVeouij7/SuLyad+Z1gY3Zb6f34eScOpu/H70LlbeMcUp5zd2hyyP23z28iZH2TKjTk0k085OrsStY9iXn1x/wVoVvoOmNa80kNJ4+bPv2kwam/xWYfkvobDzOlttXg5Laqbq9vRbw8Cq6WlfBpt1W/7EoGTT9+6qBpM2cNnHT8uGOaj2meMnhIY+OuuwwdOqRxUOuo0n87GGq/9qpODHXtvCLHtRGHum1ZViWfxaeGhIREZ0t87YRjH5l65VtX7Fe3y1m3DPv+DTce98bBP2nceu3ZNYfvM/m1xbPy5v9TP3n+Hz914id/en2GQsf/6+Nh/tTj6w7zj42BucUe/68vdDQ/c2JAr0RgTgzMcZgfAACAL4a4OzLuzYx7pbc85Nu3r9rjr8+8stuu/+cPdx9a++FVXQ4b9f+m7fjkFo+U//Hwl/bJm//PKe73/xtp/f/M0vWjCy3zPyCWaCy0/n9ymf/M+v9zCq3/n1zmP7P+/9zPYf3/GZlAYpO8bf1/AADgi+CzW/+/w+X9kxcIyMvQ4fL+yQsE5GXocBn/Yi8QsN7r/zesOnrkhT1//dWXv3nIvj+Y8uKUBf2P/NYe1/zwvHvDNXd/Y0W/OXnz/4uKm/9buB8AAAA2HxOe/N3qwcfv+sEjD91eutdPl7/4lTeeOKbp7gfWXvzqHe9cMWKbiXnz/7nFzf8/+/X/QqHz/3sVCjQVWhjQ+n8AAAB0UoXW/3vxT996cGTlTxpPffS3f7hqp8sP3+PUh6+6d6+JV9fuc9MOo3913q558/+Fxc3/42kXpTm5Y28+rE2taReSa9q9WZv5yQAAAAB0DqWhoaG8yLw5K6Pu+enbXJleCvST0tlmXP7uqgmX7D1w3N9eHXDgf9w4+83vn/jEHac/PfvpWUsve3Pvd5blzf8XFTf/z/ldRnnfYQf16Tn6yA+vXLF80UN1iyvWHf8HAAAANp1i90sAAAAAAAAAAAAAAACfvzvXvPfro7a+b9jP77z1xj1Hvdpnu4/3ffGt58/Z7XsPz/7z1Y99sDTv9/9hTFu5Qr//j9f9i78v2Cond2y14/X/0vcP3GfBzLYlC5fVhrB9dmDy6ZO3COlr8/fLDtxzxIAerYnTkyXuemavF1sTRyUD3x34pfdaE7snAmPjIonbJAPxqorvdU8E4vKKjyUDcXssTAYq0oFzu6fGUZLcVi/XpLZVSXJbPVkTQl1WILOtbqtJtVGSHOAliUBmgCcmA3GA+6UDpcleLeiW6lUM1MSiv+mW6hUAAJut+C2wPEyc1NLcGL/Cx9tty3Jvo5wly07Lr7akyOafSi9N9tF3etcXk+6S/C667lrj5aGydQiD876uZmcpaRvlxqmlg023VYEhd7TaW2mBcknru+kqCo+oKjWihvEntEwo73DgQzvOMqSswyyD8yY72VlK2zZpEbUU0ZciRlTktimiy/F+aWho6JLItVsM1occHb0iiv29fvY6f4VeBdl56vcetcfWpTsNOXjns08cM2TJN7ZY/MrbO52y7OQXVvzTbd8be2rPvPl/fXHz/8rscb2XvhjAnHhlvW/WhTC2yBEBAADAF9/1/3f+TYeesOTliYvK/vMvf5lcuv+h5Wtn3zJ71s+evPv8756749UbGr/goVNaRk4sq7jx5t/ude3yc07ft+nQ5mGr7yx9ftmfLm3u/0b++v+9ipv/xz1Y6UPBqb0di+L1/8+oC6Ht0vr1qcC1cbhH14XwtbZUUyyRuqD+6FiiMRW4Nu4wGRBLjG3KraprDCxMBFbXpgOLEoElMZDeS3FNSO/Kubg2hJ3aUmNyS0yNJeoTgf1joFci0BADjYlA9xgYngi81j0daEoElsZAmJS7rW7unt5WAAAA6yM9zyrPvRuS87yFZR1lKOkoQ3VHGUo7ylDZUYZCo4j3b4oZyhMnr5RkZSpP1lqVqCUvQ7wY/nr3Ky9DWJ6bM1kwr+l4/kHmfIOS3AyndLvgrMe/HYYteG23h2e+Nbphu7/vd/9T90+/dPm5Kz8896DlL+TN/xuLm/9X596mWl8S5//rrv+XCjwYu/fLeOp4rxh4bo/cQHrHwJI42T0/U1VTukR60n5+LDE8BnolAlNjYHgiMHZMOjC3R24gPdPONH5GpvFJ6RJZAQAAAPjMxR0EcTdNnP8fu1/vRy+/+bqWxecMuP3da689r9eIZ2+cc9ezFxz2VGh6feWEN/Pm/8OLm//H9rplN3Zm7M0L3UO4rWRdbzKBgTWpQNyPURN/Hv/lmhC2yNrBkSnRXJ0qUZFoODxQlfqFekWyqjuqUmsMxPsHPnrfPRe2Ji6pCqFP1t6XTBtPV6baqEoG+lakAtXJwAllqUDc85MJ3F6aCsAGy+wVjC+o9KkuGfXtlyvw+vuiXBM0Oby8faDt5GvvN1ebSmXygfQ+1Yz1e9ryqmOTyHt7LPJu64zvtnrvtuwvUulvKGvXhSpD6YTmieNmtEyPj2T/kjXPJnqes3+lWkx6I7wO53z63nasMtmBxsTHR2P75dp/HZZkFtrqO+ygPj1HH3nliuWLHqpbXFF0NwqIPxQ+o+7i+ieyNu+mVhnSr7lO93nS5POkM/4b6OVpCyF0feK4poV7f/z02V23fmCbmz96aOdDV1z19rfuOXr3J7cYNeKKhT/Mm/83FTf/L0vctnk/bsxpdSH0z9q4y+LmH1GX+hzMCqQ+JbfMD6QOuT9fW/CTEwAAADa2zO6OzP6CSenb1AnhyXlyfv6m9cwf91cMbzd/sf1++eNVP3p+4bwPTq2bcdabp87d9/2xj1837u8Nu9xXd/Ir/zLvgGPz5v9jP3n+3zXRTcf/Hf9nE3H8v12b+67orskH5mzQrui86tgkHP9v1+b+bnP8v12O/zv+3x7H/zvg+H+7NvenLe9b0lRfukII83+0w13LLxt/y0tNLVefPWvk19/9ftPiU+4aPuXXD7y6ZOaf7+yXN/+fWtz83/p/7S/al1n/b2yh9f+mFlr/b471/wAAgE2qwEJzyXle3up9eRmSq/flZehwgcAOlxi0/t96r/939KpH99/jlt1/80TpvBuv2/+DytuOGLLVDdvPn3j4+688tWb+vb/Pm//PKW7+H18O3bJb7yzr//UaU6Cqi2JgqoUBAQAA2BwV2kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA56ux/48fm73ghSUf/vjIvd4+f/FFlx6wY8/5Y+5/640eB77z1iEjlz63dHzvcduN6DP/2ZKjZj6z89khTGorV5IqXnJA9cgeAy8f/dNbVs/c99aaix6rTNdbnr7dLid3bPXD2hDmZj1SExNv1rbeWRc4cJ8FM8taE8tqQ9g+OzD59MlbtCZ+VxtCv+zAPUcM6NGaOD1Z4q5n9nqxNXFUMvDdgV96rzWxezpQkuzuP3dPdbck2d0Lu4dQlxXIdPe47rlVZdoYlQ6UJtu4uibVRgzUxKKX1aTaiIGWWGJS1xAGlYXQJVnVHytTVXVJVnVnZaqqLsmqTq0MYfcQQlmyqmcqUlWVJUf+SEWqqhjo2fuaNX1bE3MrQhiUHXj88Hk7tSZOTAQyjf+gIoSvtr5kko3fVJ5qvDzZ+CXlIXwlhFCRLPFOWapERbLEX8tC2DIrkGn82LIQZga+EOKHz4TsB6fNnDV5XEtL80mbMFGRbqsqTJzU0tww/oSWCZWJPhVSkpVee9qnH/tTa2aPb7396Du964tJl6XLlbd1eUh5zt2hm3vvY7+qsytZ93zk1R/zV4RuoeuMac0nNZw8bvr0kwan/habfUjqb5d0NLWtBneWbdUvu5JB04+fOmjazFkDJx0/7pjmY5qnDB7S2LjrLkOHDmkc1Dqq9N+NMdR5n/1Qty3LquSz+ACQkJDobInSnE+3xs39gzzvi/66jpaHyrYP6LxpRXaWkrZRboxB7/kpR/xpvqd0OKLBeROHvCxDOs4yNG8ysS5LVSpL2/e6vMlhdk2lbZs03i8NDQ1dCm2H+ty72Zv39Q3YvCvTm67YNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8d6cf4")
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[], 0xd, 0x0, &(0x7f0000000000))

21.903054843s ago: executing program 5 (id=1236):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20004850)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x2000c800)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r5 = syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x64, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}})
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}})

21.830106991s ago: executing program 35 (id=1236):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20004850)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x2000c800)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r5 = syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x64, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}})
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}})

3.0094784s ago: executing program 4 (id=1515):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}, {@size={'size', 0x3d, [0x38]}}]})

2.933083127s ago: executing program 4 (id=1516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x402)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r6, &(0x7f0000000340)='Test Gadg', 0x9)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0)

1.265952407s ago: executing program 6 (id=1541):
r0 = socket$inet(0x2, 0xa, 0xb)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000002f00)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @broadcast}, 0x142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x6b})

1.255866242s ago: executing program 4 (id=1542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

1.19268029s ago: executing program 6 (id=1545):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x50)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/140}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

923.1613ms ago: executing program 6 (id=1548):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=")
readlink(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002040)=""/238, 0xee)

861.175755ms ago: executing program 4 (id=1549):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x17, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e1f, 0x765, @empty, 0x6}, 0x1c)

777.120129ms ago: executing program 4 (id=1551):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff3400000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

719.30361ms ago: executing program 6 (id=1552):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

583.352218ms ago: executing program 4 (id=1554):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x7fd8}], 0x20}, 0x40040)

330.86322ms ago: executing program 6 (id=1557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}}, 0x24}}, 0x0)

233.093493ms ago: executing program 6 (id=1558):
setns(0xc9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860)
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r4, 0x0, 0xacb6, 0x8)
splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0)
write(r0, &(0x7f0000000040), 0xffffff4a)

83.243261ms ago: executing program 1 (id=1565):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

83.104361ms ago: executing program 1 (id=1566):
r0 = syz_ublk_setup_io_uring(0x23, &(0x7f0000000240)={0x0, 0x449e, 0x21b89, 0x3, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001a00)=@ublk_start_user_recovery_sqe={0x2e, 0x3b, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x20000000000000})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_CLOSE)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
io_uring_enter(r0, 0x788b, 0x84b, 0x68, 0x0, 0x0)

33.257396ms ago: executing program 1 (id=1567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20)

33.010291ms ago: executing program 1 (id=1568):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x4e, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0x0, 0x3ff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)

4.890228ms ago: executing program 1 (id=1569):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x160)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)

0s ago: executing program 1 (id=1570):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty, 0x80000000}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14299' (ED25519) to the list of known hosts.
syzkaller login: [   48.871334][ T5555] cgroup: Unknown subsys name 'net'
[   48.943068][ T5555] cgroup: Unknown subsys name 'cpuset'
[   48.948259][ T5555] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.201116][ T5555] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.306205][ T5681] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.328968][ T5615] syz.0.12 (5615) used greatest stack depth: 20328 bytes left
[   61.341032][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.345290][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.349887][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.354810][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.359742][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.381711][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.387980][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.391701][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.396694][ T5709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.403727][ T5703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.408846][ T5709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.412345][ T5703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.413750][ T5709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.419094][ T5709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.422740][ T5703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.983023][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.986007][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.988201][ T5700] bridge_slave_0: entered allmulticast mode
[   61.991081][ T5700] bridge_slave_0: entered promiscuous mode
[   61.995615][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.998122][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.000930][ T5700] bridge_slave_1: entered allmulticast mode
[   62.004196][ T5700] bridge_slave_1: entered promiscuous mode
[   62.063393][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.077029][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.110039][ T5700] team0: Port device team_slave_0 added
[   62.128836][ T5700] team0: Port device team_slave_1 added
[   62.162661][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.169201][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.186401][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.203870][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.206334][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.215739][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.289831][ T5699] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.292625][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.295354][ T5699] bridge_slave_0: entered allmulticast mode
[   62.299266][ T5699] bridge_slave_0: entered promiscuous mode
[   62.319433][ T5700] hsr_slave_0: entered promiscuous mode
[   62.322068][ T5700] hsr_slave_1: entered promiscuous mode
[   62.324932][ T5699] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.327332][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.330338][ T5699] bridge_slave_1: entered allmulticast mode
[   62.334052][ T5699] bridge_slave_1: entered promiscuous mode
[   62.378935][ T5699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.382695][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.385605][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.388925][ T5698] bridge_slave_0: entered allmulticast mode
[   62.393107][ T5698] bridge_slave_0: entered promiscuous mode
[   62.397836][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.400698][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.403451][ T5698] bridge_slave_1: entered allmulticast mode
[   62.407023][ T5698] bridge_slave_1: entered promiscuous mode
[   62.420183][ T5699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.464757][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.475831][ T5699] team0: Port device team_slave_0 added
[   62.479917][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.504597][ T5699] team0: Port device team_slave_1 added
[   62.531939][ T5698] team0: Port device team_slave_0 added
[   62.551787][ T5698] team0: Port device team_slave_1 added
[   62.571622][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.573864][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.582028][ T5699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.600078][ T5699] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.602423][ T5699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.612445][ T5699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.617515][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.620185][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.629348][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.634961][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.637728][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.645558][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.717616][ T5699] hsr_slave_0: entered promiscuous mode
[   62.720391][ T5699] hsr_slave_1: entered promiscuous mode
[   62.723223][ T5699] debugfs: 'hsr0' already exists in 'hsr'
[   62.725416][ T5699] Cannot create hsr debugfs directory
[   62.758185][ T5698] hsr_slave_0: entered promiscuous mode
[   62.760512][ T5698] hsr_slave_1: entered promiscuous mode
[   62.762553][ T5698] debugfs: 'hsr0' already exists in 'hsr'
[   62.764323][ T5698] Cannot create hsr debugfs directory
[   62.926951][ T5700] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.934622][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   62.945840][ T5700] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.956333][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   62.973222][ T5700] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.977703][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   62.993693][ T5700] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.998969][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.045284][ T5699] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.051665][ T5699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.054383][ T5699] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.059630][ T5699] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.074799][ T5699] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.080659][ T5699] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.083181][ T5699] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.087019][ T5699] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.137493][ T5698] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.142074][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.144655][ T5698] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.151468][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.159426][ T5698] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.163731][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.166574][ T5698] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.172119][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.256853][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.276159][ T5699] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.299215][ T5699] 8021q: adding VLAN 0 to HW filter on device team0
[   63.305769][ T5700] 8021q: adding VLAN 0 to HW filter on device team0
[   63.316402][  T100] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.319008][  T100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.329267][  T100] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.331762][  T100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.336037][  T100] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.338158][  T100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.343814][  T100] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.346093][  T100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.364466][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.412638][ T5704] Bluetooth: hci0: command tx timeout
[   63.416471][ T5698] 8021q: adding VLAN 0 to HW filter on device team0
[   63.434984][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.438025][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.457600][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.460579][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.488975][ T5704] Bluetooth: hci2: command tx timeout
[   63.489627][ T5703] Bluetooth: hci1: command tx timeout
[   63.806213][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.844963][ T5700] veth0_vlan: entered promiscuous mode
[   63.852457][ T5700] veth1_vlan: entered promiscuous mode
[   63.874554][ T5699] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.881672][ T5700] veth0_macvtap: entered promiscuous mode
[   63.892254][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.900808][ T5700] veth1_macvtap: entered promiscuous mode
[   63.943317][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.963711][ T5699] veth0_vlan: entered promiscuous mode
[   63.967081][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.989137][ T5698] veth0_vlan: entered promiscuous mode
[   63.992445][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.997198][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.004093][ T5699] veth1_vlan: entered promiscuous mode
[   64.014260][ T5682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.017584][ T5682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.030861][ T5698] veth1_vlan: entered promiscuous mode
[   64.086195][ T5699] veth0_macvtap: entered promiscuous mode
[   64.105700][ T5699] veth1_macvtap: entered promiscuous mode
[   64.113545][ T5698] veth0_macvtap: entered promiscuous mode
[   64.125923][ T5698] veth1_macvtap: entered promiscuous mode
[   64.129757][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.140139][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.156537][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.176035][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.193472][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.195638][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.199092][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.200083][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.206444][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.213443][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.216491][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.225512][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.239346][ T5762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.242954][ T5762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.254980][ T5762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.277430][ T5762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.404669][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.413724][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.439293][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.446259][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.479695][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.488721][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.507918][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.517584][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.604329][ T5814] Zero length message leads to an empty skb
[   64.648145][ T5816] loop0: detected capacity change from 0 to 128
[   64.683516][ T5816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   64.702055][ T5816] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.754831][ T5699] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.059427][   T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   65.098618][ T5840] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   65.223683][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   65.232004][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.237829][   T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   65.244311][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.251087][   T10] usb 1-1: config 0 descriptor??
[   65.303131][ T5850] loop1: detected capacity change from 0 to 164
[   65.337172][ T5850] iso9660: Corrupted directory entry in block 2 of inode 1920
[   65.447606][ T5856] capability: warning: `syz.2.101' uses 32-bit capabilities (legacy support in use)
[   65.451549][ T5855] loop1: detected capacity change from 0 to 128
[   65.463304][ T5855] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   65.483031][ T5856] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.490174][ T5703] Bluetooth: hci0: command tx timeout
[   65.569680][ T5703] Bluetooth: hci1: command tx timeout
[   65.570140][ T5704] Bluetooth: hci2: command tx timeout
[   65.822159][ T5879] Illegal XDP return value 4294967274 on prog  (id 5) dev N/A, expect packet loss!
[   65.867325][   T10] usb 1-1: string descriptor 0 read error: -22
[   66.031628][   T34] audit: type=1326 audit(1789986797.653:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.048649][   T34] audit: type=1326 audit(1789986797.663:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.057626][   T34] audit: type=1326 audit(1789986797.663:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.066174][   T34] audit: type=1326 audit(1789986797.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.074370][   T34] audit: type=1326 audit(1789986797.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.091657][   T34] audit: type=1326 audit(1789986797.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ae39e159 code=0x7ffc0000
[   66.099690][   T10] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4
[   66.105765][   T34] audit: type=1326 audit(1789986797.673:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9ae35e98e code=0x7ffc0000
[   66.124099][   T34] audit: type=1326 audit(1789986797.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9ae35e98e code=0x7ffc0000
[   66.136782][   T34] audit: type=1326 audit(1789986797.713:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9ae35e98e code=0x7ffc0000
[   66.145326][   T34] audit: type=1326 audit(1789986797.723:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.2.118" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe9ae35e98e code=0x7ffc0000
[   66.152476][ T5895] tipc: Started in network mode
[   66.155196][ T5895] tipc: Node identity ac14140f, cluster identity 4711
[   66.158092][ T5895] tipc: New replicast peer: 172.30.0.2
[   66.160554][ T5895] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.167375][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'.
[   66.170748][ T5895] tipc: Disabling bearer <udp:syz2>
[   66.189498][   T10] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   66.290528][ T5899] ALSA: mixer_oss: invalid OSS volume ''
[   66.291018][   T10] usb 1-1: USB disconnect, device number 2
[   66.598522][ T5809] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   66.755086][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.759343][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   66.765764][ T5809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   66.779633][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   66.785931][ T5809] usb 2-1: SerialNumber: syz
[   66.810045][ T5809] hub 2-1:1.0: bad descriptor, ignoring hub
[   66.815032][ T5809] hub 2-1:1.0: probe with driver hub failed with error -5
[   66.975625][ T5931] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure
[   67.091618][ T5937] loop2: detected capacity change from 0 to 1024
[   67.138895][   T32] usb 2-1: USB disconnect, device number 2
[   67.232670][ T5941] loop2: detected capacity change from 0 to 1024
[   67.442015][ T5953] loop2: detected capacity change from 0 to 128
[   67.447879][ T5953] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   67.455764][ T5953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.569468][ T5704] Bluetooth: hci0: command tx timeout
[   67.648741][ T5704] Bluetooth: hci1: command tx timeout
[   67.652403][ T5704] Bluetooth: hci2: command tx timeout
[   68.677057][ T6001] loop0: detected capacity change from 0 to 1764
[   68.832881][ T6005] loop2: detected capacity change from 0 to 512
[   68.853985][ T6005] EXT4-fs (loop2): Test dummy encryption mode enabled
[   68.873799][ T6005] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #11: comm syz.2.170: casefold flag without casefold feature
[   68.881282][ T6005] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   68.882179][ T6005] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.170: couldn't read orphan inode 11 (err -117)
[   68.890577][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   68.890622][    C1] EXT4-fs (loop2): initial error at time 1789986800: ext4_orphan_get:1399: inode 11
[   68.890643][    C1] EXT4-fs (loop2): last error at time 1789986800: ext4_orphan_get:1399: inode 11
[   68.895925][ T6009] loop0: detected capacity change from 0 to 512
[   68.899487][ T6005] loop2: lost filesystem error report for type 5 error -117
[   68.906617][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.978240][ T5700] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /43/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0
[   68.996061][ T5700] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[   69.010703][ T5700] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11
[   69.323384][ T5700] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.362981][ T5762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.485963][ T5762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.617326][ T5762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.650440][ T5703] Bluetooth: hci0: command tx timeout
[   69.731803][ T5703] Bluetooth: hci1: command tx timeout
[   69.779709][ T5762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.049719][ T5704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.060115][ T5704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.066110][ T5704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.079000][ T5704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.084700][ T5704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.164615][ T5762] bridge_slave_1: left allmulticast mode
[   70.186594][ T5762] bridge_slave_1: left promiscuous mode
[   70.199903][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.216057][ T5762] bridge_slave_0: left allmulticast mode
[   70.223842][ T5762] bridge_slave_0: left promiscuous mode
[   70.228375][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.543316][ T5762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.550743][ T5762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.559684][ T5762] bond0 (unregistering): Released all slaves
[   71.088878][ T5762] hsr_slave_0: left promiscuous mode
[   71.093727][ T5762] hsr_slave_1: left promiscuous mode
[   71.098781][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.104888][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.121615][ T5762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.126437][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.155677][ T5762] veth1_macvtap: left promiscuous mode
[   71.163277][ T5762] veth0_macvtap: left promiscuous mode
[   71.168848][ T5762] veth1_vlan: left promiscuous mode
[   71.174896][ T5762] veth0_vlan: left promiscuous mode
[   71.428398][ T5762] team0 (unregistering): Port device team_slave_1 removed
[   71.435927][ T5762] team0 (unregistering): Port device team_slave_0 removed
[   71.492044][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[   71.495049][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[   71.561135][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[   71.726716][ T6063] loop0: detected capacity change from 0 to 2048
[   71.737326][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   71.774831][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.802583][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[   71.853622][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.855994][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.858906][ T6013] bridge_slave_0: entered allmulticast mode
[   71.863434][ T6013] bridge_slave_0: entered promiscuous mode
[   71.866972][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.869432][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.871789][ T6013] bridge_slave_1: entered allmulticast mode
[   71.880997][ T6013] bridge_slave_1: entered promiscuous mode
[   71.914138][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.915151][ T6074] loop0: detected capacity change from 0 to 2048
[   71.919061][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.934898][ T6013] team0: Port device team_slave_0 added
[   71.939349][ T6013] team0: Port device team_slave_1 added
[   71.954870][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.957059][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.965946][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.972550][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.974717][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.982842][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.992777][ T6074]  loop0: p1 < > p4
[   71.992777][ T6074]  p4: <netbsd: >
[   71.999437][ T6074] loop0: p4 size 722688 extends beyond EOD, truncated
[   72.055628][ T6013] hsr_slave_0: entered promiscuous mode
[   72.059987][ T6013] hsr_slave_1: entered promiscuous mode
[   72.066336][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[   72.128590][ T5703] Bluetooth: hci2: command tx timeout
[   72.169752][ T6013] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.176329][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.179360][ T6013] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.183519][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.188004][ T6013] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.194463][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.197370][ T6013] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.202732][ T6013] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.222428][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.224986][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.227812][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.230563][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.283954][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.296256][ T6094] loop1: detected capacity change from 0 to 512
[   72.306145][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.308903][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.318098][ T6094] EXT4-fs (loop1): Test dummy encryption mode enabled
[   72.325033][ T6094] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.190: inode has both inline data and extents flags
[   72.327984][ T6013] 8021q: adding VLAN 0 to HW filter on device team0
[   72.331035][ T6094] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.331847][ T6094] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.190: couldn't read orphan inode 15 (err -117)
[   72.338361][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   72.340930][    C0] EXT4-fs (loop1): initial error at time 1789986803: ext4_orphan_get:1399: inode 15
[   72.343765][    C0] EXT4-fs (loop1): last error at time 1789986803: ext4_orphan_get:1399: inode 15
[   72.344449][ T6094] loop1: lost filesystem error report for type 5 error -117
[   72.347342][ T5343] 8021q: adding VLAN 0 to HW filter on device eth4
[   72.349361][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.361384][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.364565][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.375571][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.378170][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.424660][ T6094] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[   72.471149][ T5698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.738938][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.838815][ T6123] can0: slcan on ttyS3.
[   72.986401][ T6013] veth0_vlan: entered promiscuous mode
[   72.996027][ T6013] veth1_vlan: entered promiscuous mode
[   73.013204][ T6013] veth0_macvtap: entered promiscuous mode
[   73.017974][ T6013] veth1_macvtap: entered promiscuous mode
[   73.031820][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.040119][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.045920][ T5682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.052437][ T5682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.083598][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.086385][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.129912][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.135160][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.206214][ T5682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.210900][ T5682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.222658][ T5682] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.235416][ T5682] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.244494][ T5682] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.250304][ T5682] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.309885][  T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.315787][  T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.335524][  T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.343496][  T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.479093][ T6116] can0 (unregistered): slcan off ttyS3.
[   73.666701][ T6156] loop1: detected capacity change from 0 to 1764
[   73.672487][ T6156] ISOFS: Unable to identify CD-ROM format.
[   73.756261][ T6160] loop1: detected capacity change from 0 to 1024
[   73.759562][ T6160] =======================================================
[   73.759562][ T6160] WARNING: The mand mount option has been deprecated and
[   73.759562][ T6160]          and is ignored by this kernel. Remove the mand
[   73.759562][ T6160]          option from the mount to silence this warning.
[   73.759562][ T6160] =======================================================
[   73.792833][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.802020][ T6160] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.820590][ T6160] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.203: lblock 3 mapped to illegal pblock 3 (length 1)
[   73.825989][ T6160] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[   73.829944][ T6160] EXT4-fs (loop1): This should not happen!! Data will be lost
[   73.829944][ T6160] 
[   73.834882][ T6160] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.203: Freeing blocks not in datazone - block = 3, count = 1
[   73.860574][ T5698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   74.065588][ T6177] netlink: 80 bytes leftover after parsing attributes in process `syz.1.209'.
[   74.070156][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'.
[   74.073488][ T6177] netlink: 64 bytes leftover after parsing attributes in process `syz.1.209'.
[   74.199473][ T6181] Config c/1 of g1 needs at least one function.
[   74.207455][ T6181] udc dummy_udc.0: failed to start g1: -22
[   74.210141][ T6181] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   74.216563][ T6181] UDC core: g1: couldn't find an available UDC or it's busy
[   74.221216][ T5703] Bluetooth: hci2: command tx timeout
[   74.364867][ T6190] FAULT_INJECTION: forcing a failure.
[   74.364867][ T6190] name failslab, interval 1, probability 0, space 0, times 1
[   74.375083][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) 
[   74.375096][ T6190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.375101][ T6190] Call Trace:
[   74.375104][ T6190]  <TASK>
[   74.375108][ T6190]  dump_stack_lvl+0xe8/0x150
[   74.375123][ T6190]  should_fail_ex+0x40c/0x560
[   74.375136][ T6190]  ? nf_hook_entries_grow+0x287/0x740
[   74.375146][ T6190]  should_failslab+0xa8/0x100
[   74.375158][ T6190]  __kvmalloc_node_noprof+0x176/0x860
[   74.375169][ T6190]  ? __nf_register_net_hook+0x232/0x930
[   74.375212][ T6190]  ? nf_hook_entries_grow+0x287/0x740
[   74.375229][ T6190]  nf_hook_entries_grow+0x287/0x740
[   74.375249][ T6190]  __nf_register_net_hook+0x2c9/0x930
[   74.375260][ T6190]  nf_register_net_hook+0xb2/0x190
[   74.375268][ T6190]  nf_register_net_hooks+0x44/0x1b0
[   74.375277][ T6190]  nf_defrag_ipv4_enable+0x87/0x120
[   74.375288][ T6190]  xt_check_match+0x602/0xce0
[   74.375298][ T6190]  ? __pfx_xt_check_match+0x10/0x10
[   74.375307][ T6190]  ? pcpu_alloc_noprof+0x1036/0x1900
[   74.375318][ T6190]  ? xt_find_match+0x213/0x260
[   74.375328][ T6190]  translate_table+0x1498/0x1f80
[   74.375345][ T6190]  ? __pfx_translate_table+0x10/0x10
[   74.375355][ T6190]  ? __might_fault+0xaf/0x130
[   74.375363][ T6190]  ? __might_fault+0xaf/0x130
[   74.375382][ T6190]  ? _copy_from_user+0x94/0xb0
[   74.375393][ T6190]  do_ipt_set_ctl+0xa53/0xe20
[   74.375406][ T6190]  ? rcu_is_watching+0x15/0xb0
[   74.375417][ T6190]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   74.375433][ T6190]  ? __mutex_unlock_slowpath+0x731/0x900
[   74.375442][ T6190]  ? aa_sk_perm+0x6d5/0x900
[   74.375453][ T6190]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   74.375464][ T6190]  ? __pfx_aa_sk_perm+0x10/0x10
[   74.375475][ T6190]  nf_setsockopt+0x26f/0x290
[   74.375486][ T6190]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   74.375496][ T6190]  do_sock_setsockopt+0x17c/0x1b0
[   74.375507][ T6190]  __x64_sys_setsockopt+0x13d/0x1b0
[   74.375517][ T6190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.375529][ T6190]  do_syscall_64+0x174/0x580
[   74.375537][ T6190]  ? trace_irq_disable+0x3b/0x140
[   74.375547][ T6190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.375554][ T6190] RIP: 0033:0x7fc7b539e159
[   74.375563][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.375570][ T6190] RSP: 002b:00007fc7b6182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.375579][ T6190] RAX: ffffffffffffffda RBX: 00007fc7b5625fa0 RCX: 00007fc7b539e159
[   74.375584][ T6190] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005
[   74.375589][ T6190] RBP: 00007fc7b543506b R08: 00000000000003d0 R09: 0000000000000000
[   74.375594][ T6190] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[   74.375598][ T6190] R13: 00007fc7b5626038 R14: 00007fc7b5625fa0 R15: 00007ffcc9304298
[   74.375610][ T6190]  </TASK>
[   74.557679][ T6200] loop1: detected capacity change from 0 to 128
[   74.568671][ T6200] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   74.573657][ T6200] hpfs: filesystem error: improperly stopped
[   74.575597][ T6200] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   74.581222][ T6200] hpfs: You really don't want any checks? You are crazy...
[   74.583830][ T6200] hpfs: Code page index out of array
[   74.585858][ T6200] hpfs: code page support is disabled
[   74.590013][ T6200] hpfs: hpfs_map_4sectors(): unaligned read
[   74.592160][ T6200] hpfs: hpfs_map_4sectors(): unaligned read
[   74.594242][ T6200] hpfs: filesystem error: unable to find root dir
[   74.717764][   T34] kauditd_printk_skb: 64 callbacks suppressed
[   74.717779][   T34] audit: type=1326 audit(1789986806.333:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.3.223" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eabf9e159 code=0x0
[   75.224076][ T5682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.296855][ T5682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.338520][ T5704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.346678][ T5704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.355760][ T5704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.362497][ T5704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.363125][ T5682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.370137][ T5704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.418678][ T5682] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.592750][ T5682] bridge_slave_1: left allmulticast mode
[   75.596216][ T5682] bridge_slave_1: left promiscuous mode
[   75.600465][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.625141][ T5682] bridge_slave_0: left allmulticast mode
[   75.631821][ T5682] bridge_slave_0: left promiscuous mode
[   75.636348][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.724800][ T5701] IPVS: starting estimator thread 0...
[   75.776412][ T5682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.781419][ T5682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.790672][ T5682] bond0 (unregistering): Released all slaves
[   75.818812][ T6253] IPVS: using max 83 ests per chain, 199200 per kthread
[   75.824062][ T5343] 8021q: adding VLAN 0 to HW filter on device eth5
[   75.912622][ T5682] tipc: Left network mode
[   75.967262][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   76.046848][ T5343] 8021q: adding VLAN 0 to HW filter on device eth6
[   76.050604][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'.
[   76.054076][ T6278] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[   76.183546][ T5682] hsr_slave_0: left promiscuous mode
[   76.195410][ T5682] hsr_slave_1: left promiscuous mode
[   76.198963][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.205872][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.220672][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.224646][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.242144][ T5682] veth1_macvtap: left promiscuous mode
[   76.246941][ T5682] veth0_macvtap: left promiscuous mode
[   76.254416][ T5682] veth1_vlan: left promiscuous mode
[   76.259289][ T5682] veth0_vlan: left promiscuous mode
[   76.288427][ T5704] Bluetooth: hci2: command tx timeout
[   76.418206][ T5682] team0 (unregistering): Port device team_slave_1 removed
[   76.425505][ T5682] team0 (unregistering): Port device team_slave_0 removed
[   76.460610][ T6297] mmap: syz.3.252 (6297) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.493863][ T5343] 8021q: adding VLAN 0 to HW filter on device eth7
[   76.597963][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.605698][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.609570][ T6230] bridge_slave_0: entered allmulticast mode
[   76.614297][ T6230] bridge_slave_0: entered promiscuous mode
[   76.625679][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.631429][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.638888][ T6230] bridge_slave_1: entered allmulticast mode
[   76.646600][ T6230] bridge_slave_1: entered promiscuous mode
[   76.687689][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.701943][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.725392][ T5343] 8021q: adding VLAN 0 to HW filter on device eth8
[   76.730086][ T6230] team0: Port device team_slave_0 added
[   76.734673][ T6230] team0: Port device team_slave_1 added
[   76.776823][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.777254][ T6314] loop3: detected capacity change from 0 to 1024
[   76.783084][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.793968][ T6314] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   76.797545][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.802945][ T6314] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   76.811853][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.811881][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.819751][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.835926][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.836313][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.881338][ T6230] hsr_slave_0: entered promiscuous mode
[   76.891184][ T6230] hsr_slave_1: entered promiscuous mode
[   76.901151][ T6230] debugfs: 'hsr0' already exists in 'hsr'
[   76.904991][ T6230] Cannot create hsr debugfs directory
[   76.945475][ T6319] zswap: compressor - not available
[   77.339756][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   77.342969][ T6350] bond0: option lp_interval: invalid value (0)
[   77.344921][ T6350] bond0: option lp_interval: allowed values 1 - 2147483647
[   77.408997][ T5704] Bluetooth: hci0: command tx timeout
[   77.476064][ T6230] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.496305][ T6230] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   77.504970][ T6230] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.521738][ T6230] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.528460][ T6230] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.543729][ T6230] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.546640][ T6230] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.554471][ T6230] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.616973][ T6370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   77.621122][ T6370] block device autoloading is deprecated and will be removed.
[   77.630939][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.653210][ T6230] 8021q: adding VLAN 0 to HW filter on device team0
[   77.661292][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.664090][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.674123][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.677017][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.896042][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.898450][ T2298] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.932546][ T6230] veth0_vlan: entered promiscuous mode
[   77.939635][ T6230] veth1_vlan: entered promiscuous mode
[   77.955240][ T6230] veth0_macvtap: entered promiscuous mode
[   77.959254][ T6230] veth1_macvtap: entered promiscuous mode
[   77.976271][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.987337][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.996571][ T5682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.000222][ T5682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.004876][ T5682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.008532][ T5682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.060248][ T2298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.080043][ T2298] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   78.084203][ T6386] loop0: detected capacity change from 0 to 512
[   78.086745][ T6386] EXT4-fs: Ignoring removed oldalloc option
[   78.089402][ T6386] EXT4-fs: Ignoring removed oldalloc option
[   78.091718][ T6386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.094410][ T2298] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   78.095764][ T6386] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   78.111825][ T6386] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.268: invalid indirect mapped block 83886080 (level 1)
[   78.116892][ T6386] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   78.118074][ T2298] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   78.119003][ T6386] EXT4-fs (loop0): Remounting filesystem read-only
[   78.128763][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   78.128773][    C0] EXT4-fs (loop0): initial error at time 1789986809: ext4_free_branches:1023: inode 16
[   78.128786][    C0] EXT4-fs (loop0): last error at time 1789986809: ext4_free_branches:1023: inode 16
[   78.142294][ T6386] EXT4-fs (loop0): 1 orphan inode deleted
[   78.144185][ T6386] EXT4-fs (loop0): 1 truncate cleaned up
[   78.146629][ T2298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[   78.151139][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.157041][  T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.159560][ T2298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   78.161566][  T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.168134][ T2298] usb 4-1: SerialNumber: syz
[   78.212700][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.216377][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.233716][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.273999][ T6391] loop1: detected capacity change from 0 to 1024
[   78.284505][ T6391] hfsplus: (loop1): Catalog File (cnid 0x4) map record invalid or bitmap corruption detected, forcing read-only.
[   78.292209][ T6391] hfsplus: Run fsck.hfsplus to repair.
[   78.296041][ T6391] hfsplus: failed to load attributes file
[   78.368601][ T5704] Bluetooth: hci2: command tx timeout
[   78.405603][ T2298] usbtest 4-1:1.0: couldn't get endpoints, -22
[   78.410093][ T2298] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[   78.418139][ T2298] usb 4-1: USB disconnect, device number 2
[   78.599138][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.739667][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.761005][ T5701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   78.764916][ T5701] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   78.769521][ T5701] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice= 1.00
[   78.774257][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.786660][ T6397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   78.789360][ T6397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   78.795862][ T5701] ems_usb 2-1:1.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -71
[   78.802830][ T5701] ems_usb 2-1:1.0: probe with driver ems_usb failed with error -71
[   78.900109][ T5809] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   78.904047][ T5809] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   78.907687][ T5809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 64, changing to 10
[   78.913577][ T5809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[   78.941409][ T5809] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   78.948463][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.956190][ T5809] usb 1-1: Product: syz
[   78.957777][ T5809] usb 1-1: Manufacturer: syz
[   78.966879][ T5809] usb 1-1: SerialNumber: syz
[   78.976056][ T6402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.981754][ T6402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.984865][ T6402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.996179][ T5809] oti6858 1-1:1.0: oti6858 converter detected
[   79.015223][ T5701] usb 2-1: USB disconnect, device number 3
[   79.033578][ T5809] usb 1-1: oti6858 converter now attached to ttyUSB0
[   79.428875][ T5810] usb 1-1: USB disconnect, device number 3
[   79.437317][ T5810] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   79.441551][ T5810] oti6858 1-1:1.0: device disconnected
[   79.488725][ T5704] Bluetooth: hci0: command tx timeout
[   79.528505][ T2298] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   79.690739][ T2298] usb 4-1: unable to get BOS descriptor or descriptor too short
[   79.693803][ T2298] usb 4-1: not running at top speed; connect to a high speed hub
[   79.698111][ T2298] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[   79.704482][ T2298] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[   79.707568][ T2298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.710442][ T2298] usb 4-1: Product: syz
[   79.712122][ T2298] usb 4-1: Manufacturer: syz
[   79.713987][ T2298] usb 4-1: SerialNumber: syz
[   79.889036][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   79.929081][ T2298] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[   79.932356][ T2298] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[   79.934953][ T2298] usb 4-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[   79.937601][ T2298] usb 4-1: found format II with max.bitrate = 512, frame size=4095
[   79.943353][ T2298] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[   80.005916][ T2298] usb 4-1: USB disconnect, device number 3
[   80.055091][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.068557][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.078096][ T5809] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   80.085295][ T6431] udevd[6431]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.090810][ T5809] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.103277][ T6433] loop0: detected capacity change from 0 to 128
[   80.103861][ T5809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.110030][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.114811][ T5809] usb 2-1: Product: syz
[   80.116599][ T5809] usb 2-1: Manufacturer: syz
[   80.120619][ T5809] usb 2-1: SerialNumber: syz
[   80.710728][ T6439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.287'.
[   80.715408][ T6439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.287'.
[   80.821285][ T6443] loop0: detected capacity change from 0 to 8192
[   80.834828][ T6443] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.927363][ T6447] loop0: detected capacity change from 0 to 128
[   81.150420][ T5809] cdc_ncm 2-1:1.0: bind() failure
[   81.156232][ T5809] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   81.160065][ T5809] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   81.163811][ T5809] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[   81.169349][ T5809] usb 2-1: USB disconnect, device number 4
[   81.258576][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   81.377560][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[   81.380628][ T6457] netlink: 'syz.3.296': attribute type 6 has an invalid length.
[   81.383047][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.296'.
[   81.420027][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.423875][ T5810] usb 1-1: config 0 has no interfaces?
[   81.429254][ T5810] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   81.429296][ T6459] loop8: detected capacity change from 0 to 8
[   81.432357][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.438186][ T5810] usb 1-1: Product: syz
[   81.440505][ T6459]  loop8: [CUMANA/ADFS] p1 [ADFS] p1
[   81.442681][ T5810] usb 1-1: Manufacturer: syz
[   81.442705][ T6459] loop8: partition table partially beyond EOD, truncated
[   81.447397][ T5810] usb 1-1: SerialNumber: syz
[   81.447602][ T6459] loop8: p1 size 3004527350 extends beyond EOD, truncated
[   81.459781][ T5810] usb 1-1: config 0 descriptor??
[   81.480859][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[   81.511920][ T6461] ip_tables: iptables: counters copy to user failed while replacing table
[   81.578484][ T5704] Bluetooth: hci0: command tx timeout
[   81.591756][ T6465] loop3: detected capacity change from 0 to 128
[   81.597516][ T6465] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   81.608233][ T6465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.676988][ T6453] warning: `syz.0.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.694519][ T5810] usb 1-1: USB disconnect, device number 4
[   81.750514][ T1283] cfg80211: failed to load regulatory.db
[   81.859423][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'.
[   81.950423][ T6482] loop3: detected capacity change from 0 to 512
[   81.956258][ T6482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.966441][ T6482] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   81.976964][ T6482] EXT4-fs (loop3): 1 truncate cleaned up
[   81.980362][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.996534][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.260481][ T6491] loop0: detected capacity change from 0 to 4096
[   82.573640][ T6491] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   82.911039][ T5810] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   82.959463][ T2298] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   83.081905][ T5810] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   83.084798][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   83.087796][ T5810] usb 1-1: Product: syz
[   83.089865][ T5810] usb 1-1: SerialNumber: syz
[   83.093602][ T5810] usb 1-1: config 0 descriptor??
[   83.118528][ T2298] usb 2-1: Using ep0 maxpacket: 16
[   83.122944][ T2298] usb 2-1: config 0 interface 0 altsetting 189 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.126770][ T2298] usb 2-1: config 0 interface 0 altsetting 189 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.131483][ T2298] usb 2-1: config 0 interface 0 altsetting 189 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.136033][ T2298] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.138554][ T2298] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[   83.141471][ T2298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.146816][ T2298] usb 2-1: config 0 descriptor??
[   83.268447][ T5809] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   83.300040][ T5810] hso 1-1:0.0: Failed to find INT IN ep
[   83.420413][ T5809] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[   83.423653][ T5809] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   83.427720][ T5809] usb 4-1: config 0 has no interface number 0
[   83.430838][ T5809] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.435353][ T5809] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   83.440061][ T5809] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.445096][ T5809] usb 4-1: config 0 interface 52 has no altsetting 0
[   83.449752][ T5809] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[   83.453274][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[   83.456404][ T5809] usb 4-1: Product: syz
[   83.457985][ T5809] usb 4-1: SerialNumber: syz
[   83.464994][ T5809] usb 4-1: config 0 descriptor??
[   83.507773][ T5810] usb 1-1: USB disconnect, device number 5
[   83.556118][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.559986][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.562380][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.564653][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.566853][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.569433][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.571704][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.573999][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.576283][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.578867][ T2298] logitech 0003:046D:C287.0002: unknown main item tag 0x0
[   83.582770][ T2298] logitech 0003:046D:C287.0002: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0
[   83.587146][ T2298] logitech 0003:046D:C287.0002: no inputs found
[   83.648582][ T5704] Bluetooth: hci0: command tx timeout
[   83.676504][ T5809] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input5
[   83.760503][ T2298] usb 2-1: USB disconnect, device number 5
[   83.878533][ T5810] usb 4-1: USB disconnect, device number 4
[   84.051515][ T6524] loop0: detected capacity change from 0 to 2048
[   84.054521][ T6524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362
[   84.059307][ T6524] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   84.062961][ T6524] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   84.066871][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.075744][   T34] audit: type=1800 audit(1789986815.693:77): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.317" name="file1" dev="loop0" ino=1346 res=0 errno=0
[   84.399900][ T2298] IPVS: starting estimator thread 0...
[   84.403242][ T6539] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   84.437238][   T34] audit: type=1326 audit(1789986816.053:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.322" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0eabf9e159 code=0x0
[   84.439605][ T6544] comedi comedi0: dt2801: a I/O base address must be specified
[   84.488410][ T6540] IPVS: using max 82 ests per chain, 196800 per kthread
[   84.529828][ T6550] Bluetooth: ISO socket layer initialized
[   84.585719][ T6556] overlayfs: missing 'workdir'
[   84.604996][ T6554] raw_sendmsg: syz.1.327 forgot to set AF_INET. Fix it!
[   84.777469][ T6572] loop0: detected capacity change from 0 to 2048
[   84.795898][ T6572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.804924][ T6572] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.841512][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.987445][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[   84.990649][ T6586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.342'.
[   84.993512][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[   84.996761][ T6586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.342'.
[   85.248467][ T1283] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   85.332006][ T6600] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.334817][ T6600] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.393561][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'.
[   85.522860][ T1283] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[   85.530722][ T1283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.541822][ T6609] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[   85.655523][ T6613] loop3: detected capacity change from 0 to 4096
[   85.681470][ T6613] ntfs3(loop3): Failed to load $Extend (-22).
[   85.683808][ T6613] ntfs3(loop3): Failed to initialize $Extend.
[   85.752059][ T1283] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 62:f2:03:b7:2e:5f
[   85.948485][ T5809] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   86.108387][ T5809] usb 4-1: Using ep0 maxpacket: 16
[   86.112542][ T5809] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[   86.115365][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.120484][ T5809] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[   86.125599][ T5809] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   86.128475][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.130900][ T5809] usb 4-1: Product: syz
[   86.132545][ T5809] usb 4-1: Manufacturer: syz
[   86.134181][ T5809] usb 4-1: SerialNumber: syz
[   86.137570][ T5809] usb 4-1: config 0 descriptor??
[   86.278427][ T2298] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   86.356642][ T5809] usb 4-1: USB disconnect, device number 5
[   86.429782][ T2298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.433685][ T2298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.437032][ T2298] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[   86.440204][ T2298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.444750][ T2298] usb 1-1: config 0 descriptor??
[   86.854208][ T2298] hid (null): unknown global tag 0xc
[   86.860320][ T2298] wacom 0003:056A:5000.0003: unexpected long global item
[   86.863223][ T2298] wacom 0003:056A:5000.0003: parse failed
[   86.865141][ T2298] wacom 0003:056A:5000.0003: probe with driver wacom failed with error -22
[   86.982673][ T6630] loop3: detected capacity change from 0 to 256
[   87.079017][ T5810] usb 1-1: USB disconnect, device number 6
[   87.298505][ T2298] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.450067][ T2298] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[   87.453305][ T2298] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   87.457255][ T2298] usb 4-1: config 0 interface 0 has no altsetting 0
[   87.462598][ T2298] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   87.466131][ T2298] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   87.469646][ T2298] usb 4-1: Product: syz
[   87.472434][ T2298] usb 4-1: Manufacturer: syz
[   87.474307][ T2298] usb 4-1: SerialNumber: syz
[   87.478754][ T2298] usb 4-1: config 0 descriptor??
[   87.486162][ T2298] hub 4-1:0.0: bad descriptor, ignoring hub
[   87.490597][ T2298] hub 4-1:0.0: probe with driver hub failed with error -5
[   87.495083][ T2298] usb 4-1: selecting invalid altsetting 0
[   87.657412][   T34] audit: type=1326 audit(1789986819.273:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.666062][   T34] audit: type=1326 audit(1789986819.273:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.675876][   T34] audit: type=1326 audit(1789986819.273:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab0375e98e code=0x7ffc0000
[   87.685790][   T34] audit: type=1326 audit(1789986819.273:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.695870][   T34] audit: type=1326 audit(1789986819.273:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.709182][   T34] audit: type=1326 audit(1789986819.273:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.717854][   T34] audit: type=1326 audit(1789986819.273:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.726375][   T34] audit: type=1326 audit(1789986819.273:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.0.363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[   87.783022][ T6644] ip_tables: iptables: counters copy to user failed while replacing table
[   88.170913][ T6636] usb 4-1: reset high-speed USB device number 6 using dummy_hcd
[   88.321419][ T6636] usb 4-1: device firmware changed
[   88.324868][   T33] usb 4-1: USB disconnect, device number 6
[   88.468422][   T33] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   88.576482][ T6647] loop0: detected capacity change from 0 to 512
[   88.621138][   T33] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[   88.625662][   T33] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   88.629804][   T33] usb 4-1: config 0 interface 0 has no altsetting 0
[   88.635729][   T33] usb 4-1: string descriptor 0 read error: -22
[   88.640263][   T33] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   88.651075][   T33] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   88.655587][ T6649] nftables ruleset with unbound chain
[   88.666839][   T33] usb 4-1: config 0 descriptor??
[   88.675694][   T33] hub 4-1:0.0: bad descriptor, ignoring hub
[   88.682688][   T33] hub 4-1:0.0: probe with driver hub failed with error -5
[   88.696133][   T33] usb 4-1: selecting invalid altsetting 0
[   88.990897][   T33] usb 4-1: USB disconnect, device number 7
[   91.677536][ T5809] usb 2-1: USB disconnect, device number 6
[   91.687560][ T5809] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT
[   91.802055][ T6690] loop3: detected capacity change from 0 to 256
[   91.822639][ T6690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[   91.972571][ T6703] netlink: 'syz.3.384': attribute type 5 has an invalid length.
[   91.975775][ T6701] syzkaller1: tun_chr_ioctl cmd 1074025677
[   91.978124][ T6701] syzkaller1: linktype set to 769
[   92.026763][ T6706] loop3: detected capacity change from 0 to 512
[   92.039770][ T6706] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.386: bg 0: block 5: invalid block bitmap
[   92.050556][ T6706] loop3: lost filesystem error report for type 5 error -117
[   92.054237][ T6706] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   92.060163][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   92.060176][    C1] EXT4-fs (loop3): initial error at time 1789986823: ext4_validate_block_bitmap:432
[   92.060191][    C1] EXT4-fs (loop3): last error at time 1789986823: ext4_validate_block_bitmap:432
[   92.078580][ T6706] loop3: lost filesystem error report for type 5 error -117
[   92.080110][ T6706] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.386: invalid indirect mapped block 3 (level 2)
[   92.105128][ T6706] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   92.107437][ T6706] EXT4-fs (loop3): 1 orphan inode deleted
[   92.124630][ T6706] EXT4-fs (loop3): 1 truncate cleaned up
[   92.131171][ T6706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.186276][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.386874][ T6725] Bluetooth: MGMT ver 1.23
[   92.468557][   T33] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   92.510297][ T6733] netlink: 'syz.1.398': attribute type 1 has an invalid length.
[   92.526554][ T6737] FAULT_INJECTION: forcing a failure.
[   92.526554][ T6737] name failslab, interval 1, probability 0, space 0, times 0
[   92.533217][ T6737] CPU: 0 UID: 0 PID: 6737 Comm: syz.3.400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   92.533230][ T6737] Tainted: [L]=SOFTLOCKUP
[   92.533234][ T6737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.533239][ T6737] Call Trace:
[   92.533242][ T6737]  <TASK>
[   92.533246][ T6737]  dump_stack_lvl+0xe8/0x150
[   92.533261][ T6737]  should_fail_ex+0x40c/0x560
[   92.533276][ T6737]  should_failslab+0xa8/0x100
[   92.533288][ T6737]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[   92.533298][ T6737]  ? alloc_inode+0xb8/0x1b0
[   92.533307][ T6737]  ? alloc_inode+0xb8/0x1b0
[   92.533317][ T6737]  alloc_inode+0xb8/0x1b0
[   92.533325][ T6737]  alloc_anon_inode+0x1e/0x340
[   92.533336][ T6737]  anon_inode_make_secure_inode+0x7b/0x180
[   92.533345][ T6737]  ? _raw_spin_unlock+0x28/0x50
[   92.533352][ T6737]  ? __pfx_anon_inode_make_secure_inode+0x10/0x10
[   92.533363][ T6737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.533370][ T6737]  __se_sys_memfd_secret+0xd9/0x300
[   92.533380][ T6737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.533387][ T6737]  do_syscall_64+0x174/0x580
[   92.533395][ T6737]  ? trace_irq_disable+0x3b/0x140
[   92.533411][ T6737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.533418][ T6737] RIP: 0033:0x7f0eabf9e159
[   92.533426][ T6737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.533432][ T6737] RSP: 002b:00007f0eaceed028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[   92.533441][ T6737] RAX: ffffffffffffffda RBX: 00007f0eac225fa0 RCX: 00007f0eabf9e159
[   92.533446][ T6737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[   92.533451][ T6737] RBP: 00007f0eac03506b R08: 0000000000000000 R09: 0000000000000000
[   92.533456][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.533460][ T6737] R13: 00007f0eac226038 R14: 00007f0eac225fa0 R15: 00007ffc66e35618
[   92.533473][ T6737]  </TASK>
[   92.628830][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'.
[   92.705447][   T33] usb 1-1: config 1 has an invalid interface number: 3 but max is 0
[   92.708038][   T33] usb 1-1: config 1 has no interface number 0
[   92.716377][   T33] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   92.719352][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.721892][   T33] usb 1-1: Product: syz
[   92.723232][   T33] usb 1-1: Manufacturer: syz
[   92.724663][   T33] usb 1-1: SerialNumber: syz
[   92.737191][   T33] usb 1-1: 3:1 : does not exist
[   92.741739][   T33] usb 1-1: 3:2 : does not exist
[   92.773544][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   92.861211][ T6757] loop1: detected capacity change from 0 to 2048
[   92.877601][ T6757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.954544][ T6761] FAULT_INJECTION: forcing a failure.
[   92.954544][ T6761] name failslab, interval 1, probability 0, space 0, times 0
[   92.959690][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.1.412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   92.959704][ T6761] Tainted: [L]=SOFTLOCKUP
[   92.959707][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.959730][ T6761] Call Trace:
[   92.959734][ T6761]  <TASK>
[   92.959738][ T6761]  dump_stack_lvl+0xe8/0x150
[   92.959753][ T6761]  should_fail_ex+0x40c/0x560
[   92.959768][ T6761]  should_failslab+0xa8/0x100
[   92.959782][ T6761]  __kmalloc_node_noprof+0x105/0x740
[   92.959793][ T6761]  ? __get_vm_area_node+0x1f2/0x300
[   92.959801][ T6761]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[   92.959810][ T6761]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[   92.959821][ T6761]  __vmalloc_node_range_noprof+0x5d9/0x1730
[   92.959840][ T6761]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.959850][ T6761]  ? futex_unqueue+0x22/0x240
[   92.959864][ T6761]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[   92.959873][ T6761]  __vmalloc_noprof+0xd2/0x120
[   92.959881][ T6761]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[   92.959891][ T6761]  bpf_prog_alloc_no_stats+0x47/0x4f0
[   92.959899][ T6761]  ? bpf_prog_alloc+0x2a/0x1a0
[   92.959908][ T6761]  bpf_prog_alloc+0x3c/0x1a0
[   92.959918][ T6761]  bpf_prog_load+0x7f8/0x1c00
[   92.959931][ T6761]  ? __pfx_bpf_prog_load+0x10/0x10
[   92.959949][ T6761]  __sys_bpf+0xd0d/0xd90
[   92.959960][ T6761]  ? __pfx___sys_bpf+0x10/0x10
[   92.959970][ T6761]  ? do_futex+0x3e7/0x4e0
[   92.959988][ T6761]  ? ksys_write+0x242/0x270
[   92.959998][ T6761]  ? __pfx___se_sys_futex+0x10/0x10
[   92.960009][ T6761]  ? __pfx_ksys_write+0x10/0x10
[   92.960022][ T6761]  __x64_sys_bpf+0xba/0xd0
[   92.960030][ T6761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.960038][ T6761]  do_syscall_64+0x174/0x580
[   92.960047][ T6761]  ? trace_irq_disable+0x3b/0x140
[   92.960058][ T6761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.960065][ T6761] RIP: 0033:0x7f6a1ff9e159
[   92.960118][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.960125][ T6761] RSP: 002b:00007f6a20dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   92.960136][ T6761] RAX: ffffffffffffffda RBX: 00007f6a20225fa0 RCX: 00007f6a1ff9e159
[   92.960141][ T6761] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[   92.960146][ T6761] RBP: 00007f6a2003506b R08: 0000000000000000 R09: 0000000000000000
[   92.960151][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.960156][ T6761] R13: 00007f6a20226038 R14: 00007f6a20225fa0 R15: 00007ffd56342bb8
[   92.960167][ T6761]  </TASK>
[   92.960364][ T6761] syz.1.412: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.049996][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.1.412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   93.050009][ T6761] Tainted: [L]=SOFTLOCKUP
[   93.050012][ T6761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.050017][ T6761] Call Trace:
[   93.050021][ T6761]  <TASK>
[   93.050025][ T6761]  dump_stack_lvl+0xe8/0x150
[   93.050039][ T6761]  warn_alloc+0x24c/0x270
[   93.050052][ T6761]  ? __pfx_warn_alloc+0x10/0x10
[   93.050061][ T6761]  ? trace_kmalloc+0x2a/0xf0
[   93.050096][ T6761]  ? __kmalloc_node_noprof+0x4e6/0x740
[   93.050112][ T6761]  ? __get_vm_area_node+0x1f2/0x300
[   93.050124][ T6761]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[   93.050133][ T6761]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[   93.050144][ T6761]  __vmalloc_node_range_noprof+0xa81/0x1730
[   93.050163][ T6761]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.050172][ T6761]  ? futex_unqueue+0x22/0x240
[   93.050186][ T6761]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[   93.050196][ T6761]  __vmalloc_noprof+0xd2/0x120
[   93.050204][ T6761]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[   93.050215][ T6761]  bpf_prog_alloc_no_stats+0x47/0x4f0
[   93.050224][ T6761]  ? bpf_prog_alloc+0x2a/0x1a0
[   93.050233][ T6761]  bpf_prog_alloc+0x3c/0x1a0
[   93.050243][ T6761]  bpf_prog_load+0x7f8/0x1c00
[   93.050256][ T6761]  ? __pfx_bpf_prog_load+0x10/0x10
[   93.050273][ T6761]  __sys_bpf+0xd0d/0xd90
[   93.050285][ T6761]  ? __pfx___sys_bpf+0x10/0x10
[   93.050294][ T6761]  ? do_futex+0x3e7/0x4e0
[   93.050314][ T6761]  ? ksys_write+0x242/0x270
[   93.050325][ T6761]  ? __pfx___se_sys_futex+0x10/0x10
[   93.050335][ T6761]  ? __pfx_ksys_write+0x10/0x10
[   93.050347][ T6761]  __x64_sys_bpf+0xba/0xd0
[   93.050357][ T6761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.050365][ T6761]  do_syscall_64+0x174/0x580
[   93.050374][ T6761]  ? trace_irq_disable+0x3b/0x140
[   93.050385][ T6761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.050392][ T6761] RIP: 0033:0x7f6a1ff9e159
[   93.050400][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.050406][ T6761] RSP: 002b:00007f6a20dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   93.050414][ T6761] RAX: ffffffffffffffda RBX: 00007f6a20225fa0 RCX: 00007f6a1ff9e159
[   93.050420][ T6761] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[   93.050425][ T6761] RBP: 00007f6a2003506b R08: 0000000000000000 R09: 0000000000000000
[   93.050429][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.050434][ T6761] R13: 00007f6a20226038 R14: 00007f6a20225fa0 R15: 00007ffd56342bb8
[   93.050445][ T6761]  </TASK>
[   93.050447][ T6761] Mem-Info:
[   93.082219][ T5809] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   93.084690][ T6761] active_anon:6690 inactive_anon:0 isolated_anon:0
[   93.084690][ T6761]  active_file:0 inactive_file:57820 isolated_file:0
[   93.084690][ T6761]  unevictable:1000 dirty:412 writeback:0
[   93.084690][ T6761]  slab_reclaimable:10117 slab_unreclaimable:80419
[   93.084690][ T6761]  mapped:18985 shmem:1640 pagetables:1203
[   93.084690][ T6761]  sec_pagetables:0 bounce:0
[   93.084690][ T6761]  kernel_misc_reclaimable:0
[   93.084690][ T6761]  free:1125316 free_pcp:19462 free_cma:0
[   93.084716][ T6761] Node 0 active_anon:16596kB inactive_anon:0kB active_file:0kB inactive_file:41288kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:31480kB dirty:180kB writeback:0kB shmem:3524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9856kB pagetables:2632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   93.084748][ T6761] Node 1 active_anon:10164kB inactive_anon:0kB active_file:0kB inactive_file:189992kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:44460kB dirty:1468kB writeback:0kB shmem:3036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2432kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   93.084780][ T6761] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.084814][ T6761] lowmem_reserve[]: 0 1583 2113 2113 2113
[   93.084831][ T6761] Node 0 DMA32 free:1568040kB boost:0kB min:24976kB low:31220kB high:37464kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1621436kB mlocked:0kB bounce:0kB free_pcp:12308kB local_pcp:9256kB free_cma:0kB
[   93.084858][ T6761] lowmem_reserve[]: 0 0 530 530 530
[   93.084874][ T6761] Node 0 Normal free:34972kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16588kB inactive_anon:0kB active_file:0kB inactive_file:41288kB unevictable:2000kB writepending:180kB zspages:0kB present:1572868kB managed:542748kB mlocked:0kB bounce:0kB free_pcp:14692kB local_pcp:12kB free_cma:0kB
[   93.084895][ T6761] lowmem_reserve[]: 0 0 0 0 0
[   93.084910][ T6761] Node 1 Normal free:2882892kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10164kB inactive_anon:0kB active_file:0kB inactive_file:189992kB unevictable:2000kB writepending:1468kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:50848kB local_pcp:18356kB free_cma:0kB
[   93.084932][ T6761] lowmem_reserve[]: 0 0 0 0 0
[   93.084948][ T6761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.085001][ T6761] Node 0 DMA32: 18*4kB (UM) 10*8kB (UM) 9*16kB (UM) 8*32kB (UM) 10*64kB (UM) 3*128kB (M) 5*256kB (UM) 5*512kB (UM) 6*1024kB (M) 6*2048kB (UM) 377*4096kB (UM) = 1568040kB
[   93.085105][ T6761] Node 0 Normal: 67*4kB (UME) 314*8kB (UME) 484*16kB (UME) 101*32kB (UME) 14*64kB (UM) 63*128kB (U) 22*256kB (UM) 3*512kB (UE) 1*1024kB (M) 0*2048kB 1*4096kB (U) = 35004kB
[   93.085184][ T6761] Node 1 Normal: 1481*4kB (UME) 421*8kB (UME) 164*16kB (UME) 133*32kB (UM) 94*64kB (UM) 25*128kB (UM) 14*256kB (UM) 4*512kB (M) 3*1024kB (M) 1*2048kB (E) 695*4096kB (UM) = 2882860kB
[   93.085258][ T6761] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.085265][ T6761] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.085271][ T6761] 59457 total pagecache pages
[   93.085275][ T6761] 0 pages in swap cache
[   93.085278][ T6761] Free swap  = 124996kB
[   93.085281][ T6761] Total swap = 124996kB
[   93.085285][ T6761] 1834877 pages RAM
[   93.085288][ T6761] 0 pages HighMem/MovableOnly
[   93.085291][ T6761] 391320 pages reserved
[   93.085294][ T6761] 0 pages cma reserved
[   93.450390][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.454551][ T5809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   93.458661][ T5809] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   93.462636][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.467809][ T5809] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   93.471778][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.503871][ T1283] usb 1-1: USB disconnect, device number 7
[   93.893373][ T5809] gud 4-1:1.0: probe with driver gud failed with error -71
[   93.898907][ T5809] usb 4-1: USB disconnect, device number 8
[   94.238606][   T34] kauditd_printk_skb: 12 callbacks suppressed
[   94.238621][   T34] audit: type=1326 audit(1789986825.843:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.1.415" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a1ff9e159 code=0x0
[   95.025104][ T6775] netlink: 'syz.0.417': attribute type 23 has an invalid length.
[   95.027702][ T6775] netlink: 'syz.0.417': attribute type 11 has an invalid length.
[   95.067594][ T6777] loop0: detected capacity change from 0 to 512
[   95.073156][ T6777] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.080531][ T6777] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.418: bad orphan inode 131083
[   95.085556][ T6777] loop0: lost filesystem error report for type 5 error -117
[   95.087589][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.254851][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.324727][ T6784] loop0: detected capacity change from 0 to 512
[   95.336000][ T6784] EXT4-fs: Ignoring removed oldalloc option
[   95.371889][ T6784] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.421: Parent and EA inode have the same ino 15
[   95.391977][ T6784] loop0: lost filesystem error report for type 5 error -117
[   95.398406][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   95.404257][    C0] EXT4-fs (loop0): initial error at time 1789986827: ext4_xattr_inode_iget:437
[   95.407854][    C0] EXT4-fs (loop0): last error at time 1789986827: ext4_xattr_inode_iget:437
[   95.412298][ T6784] EXT4-fs (loop0): Remounting filesystem read-only
[   95.418558][ T6784] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30)
[   95.425686][ T6784] EXT4-fs (loop0): 1 orphan inode deleted
[   95.432014][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.440730][ T6787] loop1: detected capacity change from 0 to 4096
[   95.446945][ T6787] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.473032][ T6787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   95.481988][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.485229][ T6787] EXT4-fs (loop1): Test dummy encryption mode enabled
[   95.492940][ T6787] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c199, mo2=0002]
[   95.497517][ T6787] System zones: 0-5
[   95.523209][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.638209][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.641203][ T6804] process 'syz.3.430' launched './file0' with NULL argv: empty string added
[   95.749311][ T6815] loop0: detected capacity change from 0 to 64
[   95.811186][ T6819] loop1: detected capacity change from 0 to 256
[   95.815804][ T6819] exFAT-fs (loop1): error, no upcase table entry. Please run fsck
[   95.827632][ T6819] exFAT-fs (loop1): Filesystem has been set read-only
[   95.833860][ T6819] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[   96.104711][ T6847] loop0: detected capacity change from 0 to 256
[   96.126076][ T6853] afs: Bad value for 'source'
[   96.317431][ T6872] xt_hashlimit: size too large, truncated to 1048576
[   96.578496][ T6887] loop1: detected capacity change from 0 to 32768
[   96.808421][   T33] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   96.960207][   T33] usb 4-1: unable to get BOS descriptor or descriptor too short
[   96.963078][   T33] usb 4-1: not running at top speed; connect to a high speed hub
[   96.966320][   T33] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[   96.968905][   T33] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[   96.971827][   T33] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[   96.974925][   T33] usb 4-1: config 14 has no interface number 0
[   96.977004][   T33] usb 4-1: config 14 has no interface number 1
[   96.979304][   T33] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   96.983438][   T33] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[   96.987173][   T33] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   96.990682][   T33] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[   96.994304][   T33] usb 4-1: config 14 interface 57 has no altsetting 0
[   96.996455][   T33] usb 4-1: config 14 interface 228 has no altsetting 0
[   97.000977][   T33] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   97.003764][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.006161][   T33] usb 4-1: Product: syz
[   97.007486][   T33] usb 4-1: Manufacturer: syz
[   97.009404][   T33] usb 4-1: SerialNumber: syz
[   97.248900][ T6902] netlink: 76 bytes leftover after parsing attributes in process `syz.1.475'.
[   97.314545][ T6907] loop1: detected capacity change from 0 to 2048
[   97.335408][ T6907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.353827][ T6907] syz.1.479 (pid 6907) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   97.379559][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.425591][   T33] legousbtower 4-1:14.57: interrupt endpoints not found
[   97.703645][ T6923] loop0: detected capacity change from 0 to 32768
[   97.716817][ T6923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.484 (6923)
[   97.746404][ T6923] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.750658][ T6923] BTRFS info (device loop0): using crc32c checksum algorithm
[   97.783593][ T6942] loop1: detected capacity change from 0 to 16
[   97.802180][ T6942] erofs (device loop1): bogus i_mode (0) @ nid 0
[   97.828239][   T33] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[   97.835627][ T6923] BTRFS info (device loop0): enabling ssd optimizations
[   97.840661][ T6923] BTRFS info (device loop0): turning on flush-on-commit
[   97.842913][ T6923] BTRFS info (device loop0): enabling free space tree
[   97.846423][   T33] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[   97.849485][ T6923] BTRFS info (device loop0): enabling auto defrag
[   97.851700][ T6923] BTRFS info (device loop0): use lzo compression, level 1
[   97.856942][ T6923] BTRFS info (device loop0): max_inline set to 4096
[   97.877947][ T6923] BTRFS critical (device loop0 state E): emergency shutdown
[   97.881801][ T6946] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   97.912782][   T27] BTRFS error (device loop0 state E): failed to run delalloc range, root=5 ino=260 folio=0 submit_bitmap=0 start=0 len=4096: -30
[   97.925344][ T5699] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.224324][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'.
[   98.228144][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'.
[   98.288590][   T33] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   98.440115][   T33] usb 2-1: not running at top speed; connect to a high speed hub
[   98.443610][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   98.446922][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   98.452154][   T33] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[   98.455029][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.457570][   T33] usb 2-1: Product: syz
[   98.458973][   T33] usb 2-1: Manufacturer: syz
[   98.460641][   T33] usb 2-1: SerialNumber: syz
[   98.464358][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   98.466830][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   98.470639][   T33] ums_eneub6250 2-1:1.0: USB Mass Storage device detected
[   98.477481][   T33] scsi host6: usb-storage 2-1:1.0
[   98.528661][ T5809] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   98.578014][   T33] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3
[   98.672996][   T33] usb 2-1: USB disconnect, device number 7
[   98.678395][ T5809] usb 1-1: Using ep0 maxpacket: 32
[   98.684421][ T5809] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   98.687547][ T5809] usb 1-1: config 0 has no interface number 0
[   98.692461][ T5809] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   98.696005][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.699332][ T5809] usb 1-1: Product: syz
[   98.701149][ T5809] usb 1-1: Manufacturer: syz
[   98.702908][ T5809] usb 1-1: SerialNumber: syz
[   98.706766][ T5809] usb 1-1: config 0 descriptor??
[   99.114675][   T24] usb 4-1: USB disconnect, device number 9
[   99.150265][   T24] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected
[   99.232204][ T6980] loop3: detected capacity change from 0 to 1024
[   99.235094][ T6980] EXT4-fs: Ignoring removed i_version option
[   99.242789][ T6980] EXT4-fs: Ignoring removed nobh option
[   99.248203][ T6980] journal_path: Lookup failure for './file1'
[   99.253817][ T6980] EXT4-fs: error: could not find journal device path
[   99.312739][ T6978] loop1: detected capacity change from 0 to 32768
[   99.326325][ T6978] (syz.1.502,6978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.333285][ T6978] (syz.1.502,6978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.340020][ T6978] (syz.1.502,6978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcde76f4d, computed 0x91bcf2bd. Applying ECC.
[   99.347008][ T6978] (syz.1.502,6978,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xcde76f4d, computed 0x81ce2995
[   99.355818][ T6978] (syz.1.502,6978,1):ocfs2_validate_inode_block:1475 ERROR: Checksum failed for dinode 21
[   99.362524][ T6978] (syz.1.502,6978,1):ocfs2_read_locked_inode:633 ERROR: status = -5
[   99.368846][ T6978] (syz.1.502,6978,1):_ocfs2_get_system_file_inode:141 ERROR: status = -5
[   99.377911][ T6978] (syz.1.502,6978,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   99.381613][ T6978] (syz.1.502,6978,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[   99.381635][ T6978] (syz.1.502,6978,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   99.390444][ T6978] (syz.1.502,6978,1):ocfs2_initialize_super:2195 ERROR: status = -22
[   99.393835][ T6978] (syz.1.502,6978,1):ocfs2_fill_super:1177 ERROR: status = -22
[   99.459639][ T6986] loop3: detected capacity change from 0 to 16
[   99.470475][ T6986] erofs (device loop3): DAX unsupported by block device. Turning off DAX.
[   99.476445][ T6986] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 143300)
[   99.617905][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[   99.625379][ T6994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'.
[   99.728808][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.734179][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.755916][ T7006] program syz.1.515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   99.943533][ T5809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM is busy
[  100.028432][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  100.145702][ T5809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  100.150378][ T5809] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  100.155688][ T5809] usb 1-1: USB disconnect, device number 8
[  100.179760][   T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.183433][   T24] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.187480][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  100.189775][   T24] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  100.192929][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.199548][   T24] usb 2-1: config 0 descriptor??
[  100.613965][   T24] hid-multitouch 0003:0EEF:72C4.0004: ignoring exceeding usage max
[  100.617087][   T24] hid-multitouch 0003:0EEF:72C4.0004: unbalanced collection at end of report description
[  100.620556][   T24] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22
[  100.804406][ T7032] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  100.807462][ T7032] bond1: entered allmulticast mode
[  100.819397][ T7032] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  100.839731][ T5809] usb 2-1: USB disconnect, device number 8
[  100.865225][ T7035] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  101.148821][ T1283] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  101.311119][ T1283] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4
[  101.315474][ T1283] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  101.319955][ T1283] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 51, changing to 4
[  101.324013][ T1283] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 552, setting to 0
[  101.333993][ T1283] usb 1-1: string descriptor 0 read error: -22
[  101.336585][ T1283] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.340851][ T1283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.353016][ T1283] usb 1-1: low speed audio streaming not supported
[  101.359361][ T1283] usb 1-1: low speed audio streaming not supported
[  101.460250][ T7039] loop1: detected capacity change from 0 to 4096
[  101.463883][ T7039] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  101.492508][ T7039] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  101.587287][   T24] usb 1-1: USB disconnect, device number 9
[  101.861438][ T7065] loop3: detected capacity change from 0 to 32768
[  101.885859][ T7065] JBD2: Ignoring recovery information on journal
[  101.889861][ T7065] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  101.892910][ T7065] JBD2: bad block at offset 32
[  101.906980][ T7065] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  101.946355][ T7065] ocfs2: Unmounting device (7,3) on (node local)
[  102.205739][ T7080] loop1: detected capacity change from 0 to 32768
[  102.222831][ T7080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.547 (7080)
[  102.341331][ T7080] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.344748][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'.
[  102.348492][ T7080] BTRFS info (device loop1 state S): using crc32c checksum algorithm
[  102.469134][ T1024] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  102.479859][ T1104] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  102.486087][ T1024] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  102.495441][ T1104] BTRFS warning (device loop1 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xe31d3a17 level 0, ignored
[  102.521693][ T7080] BTRFS error (device loop1 state ECS): logical 6881280 len 1638400 found bg but no related chunk
[  102.534402][   T34] audit: type=1326 audit(1789986834.043:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.548537][   T34] audit: type=1326 audit(1789986834.043:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.559493][   T26] BTRFS warning (device loop1 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xd0cef59b level 0, ignored
[  102.564309][   T34] audit: type=1326 audit(1789986834.043:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.573003][ T7080] BTRFS error (device loop1 state ECS): invalid tree nritems, bytenr=5267456 nritems=0 expect >0
[  102.577438][   T34] audit: type=1326 audit(1789986834.043:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.584895][ T7080] BTRFS error (device loop1 state ECS): failed to read fs tree: -117
[  102.595214][   T34] audit: type=1326 audit(1789986834.043:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.625706][   T34] audit: type=1326 audit(1789986834.043:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.642087][   T34] audit: type=1326 audit(1789986834.053:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.673099][   T34] audit: type=1326 audit(1789986834.053:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.699434][   T34] audit: type=1326 audit(1789986834.053:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.720571][ T7080] BTRFS error (device loop1 state ECS): open_ctree failed: -117
[  102.730237][   T34] audit: type=1326 audit(1789986834.053:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0379e159 code=0x7ffc0000
[  102.795155][ T7125] nvme_fabrics: missing parameter 'traddr=%s'
[  102.902459][ T7136] tipc: Failed to remove unknown binding: 66,0,0/0:2544528179/2544528181
[  102.909076][ T7136] tipc: Failed to remove unknown binding: 66,0,0/0:2544528179/2544528180
[  102.913320][ T7136] tipc: Failed to remove unknown binding: 66,0,0/0:2544528179/2544528181
[  102.918539][ T7136] tipc: Failed to remove unknown binding: 66,0,0/0:2544528179/2544528180
[  102.967534][ T7140] loop1: detected capacity change from 0 to 2048
[  102.971157][ T7140] journal_path: Non-blockdev passed as './file0'
[  102.975243][ T7140] EXT4-fs: error: could not find journal device path
[  103.036006][ T7146] loop1: detected capacity change from 0 to 512
[  103.040725][ T7146] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.571: inode has both inline data and extents flags
[  103.044694][ T7146] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  103.044818][ T7146] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.571: couldn't read orphan inode 15 (err -117)
[  103.051169][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  103.051178][    C1] EXT4-fs (loop1): initial error at time 1789986834: ext4_orphan_get:1399: inode 15
[  103.051190][    C1] EXT4-fs (loop1): last error at time 1789986834: ext4_orphan_get:1399: inode 15
[  103.062101][ T7146] loop1: lost filesystem error report for type 5 error -117
[  103.069566][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.149539][ T7151] loop0: detected capacity change from 0 to 256
[  103.150078][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.156087][ T7151] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  103.426367][ T7164] loop1: detected capacity change from 0 to 512
[  103.429192][ T7164] EXT4-fs: Ignoring removed nobh option
[  103.461012][ T7164] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #3: comm syz.1.577: corrupted inode contents
[  103.470763][ T7164] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  103.475808][ T7164] EXT4-fs (loop1): Remounting filesystem read-only
[  103.478955][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  103.478965][    C0] EXT4-fs (loop1): initial error at time 1789986835: ext4_do_update_inode:5742: inode 3
[  103.478977][    C0] EXT4-fs (loop1): last error at time 1789986835: ext4_do_update_inode:5742: inode 3
[  103.493167][ T7164] EXT4-fs (loop1): 1 truncate cleaned up
[  103.496132][ T7164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.500503][ T7164] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.537555][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.543095][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'.
[  103.559190][ T7168] tmpfs: Unexpected value for 'noswap'
[  103.733234][ T7188] loop1: detected capacity change from 0 to 128
[  103.860115][   T33] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  103.984559][ T7205] loop1: detected capacity change from 0 to 1024
[  103.990770][ T7205] EXT4-fs: Ignoring removed bh option
[  104.026170][ T7205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  104.040079][   T33] usb 1-1: config index 0 descriptor too short (expected 69, got 51)
[  104.043295][   T33] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.050373][   T33] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  104.053953][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.057044][   T33] usb 1-1: Product: syz
[  104.058743][   T33] usb 1-1: Manufacturer: syz
[  104.060513][   T33] usb 1-1: SerialNumber: syz
[  104.067519][   T33] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  104.076290][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  104.277122][   T33] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  104.279242][ T7220] AppArmor: change_hat: Invalid input ''
[  104.335576][   T33] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  104.346709][ T7227] lo: MTU too low for tipc bearer
[  104.353534][ T7227] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  104.363252][ T6400] udevd[6400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.486414][ T7241] tipc: Started in network mode
[  104.488033][ T7241] tipc: Node identity 6eee867475af, cluster identity 4711
[  104.492174][ T7241] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  104.495475][ T1283] usb 1-1: USB disconnect, device number 10
[  104.504877][ T7241] tipc: Resetting bearer <eth:syzkaller0>
[  104.524363][ T7241] tipc: Disabling bearer <eth:syzkaller0>
[  104.632136][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'.
[  104.637326][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'.
[  104.703241][ T7246] loop1: detected capacity change from 0 to 4096
[  105.094688][ T7254] loop0: detected capacity change from 0 to 256
[  105.097217][ T7254] exfat: Deprecated parameter 'utf8'
[  105.106366][ T7254] exfat: Deprecated parameter 'namecase'
[  105.118507][ T7254] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  105.266489][ T7258] loop0: detected capacity change from 0 to 512
[  105.312950][ T7258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.317278][ T7258] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.348541][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.420273][ T7262] loop0: detected capacity change from 0 to 2048
[  105.426415][ T7262] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  105.429514][ T7262] NILFS (loop0): mounting unchecked fs
[  105.431231][ T7262] NILFS (loop0): recovery required for readonly filesystem
[  105.432149][ T6400] udevd[6400]: incorrect nilfs2 checksum on /dev/loop0
[  105.433460][ T7262] NILFS (loop0): write access will be enabled during recovery
[  105.440683][ T7262] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  105.457710][ T6400] udevd[6400]: incorrect nilfs2 checksum on /dev/loop0
[  105.526756][ T7266] netlink: 'syz.0.620': attribute type 10 has an invalid length.
[  105.532888][ T7266] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  105.594160][ T7272] usb usb8: check_ctrlrecip: process 7272 (syz.3.623) requesting ep 01 but needs 81
[  105.608481][ T7272] usb usb8: usbfs: process 7272 (syz.3.623) did not claim interface 0 before use
[  105.718789][ T5809] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  105.869599][ T5809] usb 2-1: Using ep0 maxpacket: 16
[  105.872712][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  105.876999][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  105.885821][ T5809] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  105.889715][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.893892][ T5809] usb 2-1: Product: syz
[  105.895242][ T5809] usb 2-1: Manufacturer: syz
[  105.901645][ T5809] usb 2-1: SerialNumber: syz
[  105.904501][ T5809] usb 2-1: config 0 descriptor??
[  105.910185][ T5809] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  105.914933][ T5809] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  106.016157][ T7301] erofs (device loop3): mounted with root inode @ nid 36.
[  106.019635][ T7301] syz.3.637: attempt to access beyond end of device
[  106.019635][ T7301] loop3: rw=8388608, sector=34359736320, nr_sectors = 8 limit=16
[  106.118413][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  106.272034][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  106.284604][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.287168][   T10] usb 1-1: Product: syz
[  106.289741][   T10] usb 1-1: Manufacturer: syz
[  106.292725][   T10] usb 1-1: SerialNumber: syz
[  106.301605][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  106.304803][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'.
[  106.342321][ T1283] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  106.365310][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'.
[  106.392183][ T7311] vlan2: entered allmulticast mode
[  106.393904][ T7311] bridge1: entered allmulticast mode
[  106.397647][ T7311] bridge1: port 1(erspan0) entered blocking state
[  106.400840][ T7311] bridge1: port 1(erspan0) entered disabled state
[  106.402994][ T7311] erspan0: entered allmulticast mode
[  106.406421][ T7311] erspan0: entered promiscuous mode
[  106.411615][ T7311] bridge1: port 1(erspan0) entered blocking state
[  106.413793][ T7311] bridge1: port 1(erspan0) entered forwarding state
[  106.515847][ T5809] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  106.520543][ T5809] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  106.753100][   T10] usb 1-1: USB disconnect, device number 11
[  106.808412][ T5008] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  106.971889][ T5008] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  106.974773][ T5008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.977230][ T5008] usb 4-1: Product: syz
[  106.978674][ T5008] usb 4-1: Manufacturer: syz
[  106.980201][ T5008] usb 4-1: SerialNumber: syz
[  106.983945][ T5008] usb 4-1: config 0 descriptor??
[  107.130684][ T5809] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  107.133482][ T5809] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  107.298974][ T7321] bond0: option mode: unable to set because the bond device has slaves
[  107.394827][ T5008] usb 4-1: Firmware: major: 0, minor: 65, hardware type: UNKNOWN (38)
[  107.408519][ T1283] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  107.410848][ T1283] ath9k_htc: Failed to initialize the device
[  107.416732][   T10] usb 1-1: ath9k_htc: USB layer deinitialized
[  107.462521][ T7334] netlink: 44 bytes leftover after parsing attributes in process `syz.0.652'.
[  107.541630][ T5809] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  107.545384][ T5809] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  107.550094][ T5809] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  107.552415][ T5809] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  107.557188][ T5809] usb 2-1: USB disconnect, device number 9
[  107.596253][ T5008] usb 4-1: failed to fetch extended address, random address set
[  107.598844][ T5008] usb 4-1: atusb_probe: initialization failed, error = -524
[  107.601654][ T5008] atusb 4-1:0.0: probe with driver atusb failed with error -524
[  107.605857][ T5008] usb 4-1: USB disconnect, device number 10
[  107.798428][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  107.950446][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.953710][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.958437][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  107.961415][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.963958][   T10] usb 1-1: SerialNumber: syz
[  108.275791][   T10] usb 1-1: 0:2 : does not exist
[  108.303564][   T10] usb 1-1: USB disconnect, device number 12
[  109.011146][ T7364] set_capacity_and_notify: 1 callbacks suppressed
[  109.011154][ T7364] loop3: detected capacity change from 0 to 512
[  109.018008][ T7364] EXT4-fs: Ignoring removed bh option
[  109.024152][ T7364] EXT4-fs: Ignoring removed mblk_io_submit option
[  109.029845][ T7364] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  109.034721][ T7364] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  109.037933][ T7364] EXT4-fs (loop3): orphan cleanup on readonly fs
[  109.041667][ T7364] __quota_error: 13 callbacks suppressed
[  109.041674][ T7364] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4
[  109.049621][ T7364] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  109.054080][ T7364] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.664: Failed to acquire dquot type 1
[  109.058285][ T7364] loop3: lost filesystem error report for type 5 error -5
[  109.059257][ T7364] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.664: Invalid block bitmap block 0 in block_group 0
[  109.068180][ T7364] loop3: lost filesystem error report for type 5 error -117
[  109.068374][    C1] EXT4-fs (loop3): error count since last fsck: 2
[  109.072926][    C1] EXT4-fs (loop3): last error at time 1789986840: ext4_read_block_bitmap_nowait:483
[  109.078668][ T7364] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.664: Invalid block bitmap block 0 in block_group 0
[  109.082660][ T7364] loop3: lost filesystem error report for type 5 error -117
[  109.084355][ T7364] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.664: Invalid block bitmap block 0 in block_group 0
[  109.092289][ T7364] loop3: lost filesystem error report for type 5 error -117
[  109.092540][ T7364] Quota error (device loop3): write_blk: dquota write failed
[  109.097982][ T7364] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  109.101493][ T7364] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.664: Failed to acquire dquot type 1
[  109.106017][ T7364] loop3: lost filesystem error report for type 5 error -28
[  109.106836][ T7364] Quota error (device loop3): write_blk: dquota write failed
[  109.114599][ T7364] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  109.127242][ T7364] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.664: Failed to acquire dquot type 1
[  109.132790][ T7364] loop3: lost filesystem error report for type 5 error -28
[  109.134327][ T7364] EXT4-fs (loop3): 1 orphan inode deleted
[  109.159557][ T7364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  109.175799][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.431433][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.494326][ T7383] loop1: detected capacity change from 0 to 24
[  109.501206][ T7383] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  109.529055][ T7383] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  109.679124][ T7391] netlink: Conntrack attr has 4 unknown bytes
[  109.681055][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.978397][ T1283] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  110.128415][ T1283] usb 1-1: Using ep0 maxpacket: 32
[  110.132829][ T1283] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  110.136037][ T1283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.148367][ T1283] usb 1-1: config 0 has no interface number 0
[  110.152022][ T1283] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  110.154813][ T1283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.157232][ T1283] usb 1-1: Product: syz
[  110.164683][ T1283] usb 1-1: Manufacturer: syz
[  110.166151][ T1283] usb 1-1: SerialNumber: syz
[  110.169232][ T1283] usb 1-1: config 0 descriptor??
[  110.172760][ T1283] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  110.175432][ T1283] cx231xx 1-1:0.1: Not found matching IAD interface
[  110.363264][ T7399] loop3: detected capacity change from 0 to 32768
[  110.385947][ T2298] usb 1-1: USB disconnect, device number 13
[  110.410559][ T7399] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.428704][ T7399] XFS (loop3): Ending clean mount
[  110.458247][ T6013] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.586206][ T7416] can0: slcan on ttyS3.
[  110.605240][ T7418] FAULT_INJECTION: forcing a failure.
[  110.605240][ T7418] name failslab, interval 1, probability 0, space 0, times 0
[  110.612538][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.1.685 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.612552][ T7418] Tainted: [L]=SOFTLOCKUP
[  110.612555][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.612560][ T7418] Call Trace:
[  110.612564][ T7418]  <TASK>
[  110.612569][ T7418]  dump_stack_lvl+0xe8/0x150
[  110.612607][ T7418]  should_fail_ex+0x40c/0x560
[  110.612622][ T7418]  should_failslab+0xa8/0x100
[  110.612634][ T7418]  __kmalloc_cache_noprof+0xa8/0x660
[  110.612644][ T7418]  ? __pfx___se_sys_futex+0x10/0x10
[  110.612656][ T7418]  ? __se_sys_memfd_create+0x21d/0x410
[  110.612667][ T7418]  ? __se_sys_memfd_create+0x21d/0x410
[  110.612679][ T7418]  __se_sys_memfd_create+0x21d/0x410
[  110.612688][ T7418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.612697][ T7418]  do_syscall_64+0x174/0x580
[  110.612706][ T7418]  ? trace_irq_disable+0x3b/0x140
[  110.612716][ T7418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.612724][ T7418] RIP: 0033:0x7f6a1ff9e159
[  110.612731][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.612738][ T7418] RSP: 002b:00007f6a20dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  110.612747][ T7418] RAX: ffffffffffffffda RBX: 00007f6a20225fa0 RCX: 00007f6a1ff9e159
[  110.612753][ T7418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000b40
[  110.612757][ T7418] RBP: 00007f6a2003506b R08: 0000000000000000 R09: 0000000000000000
[  110.612762][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.612767][ T7418] R13: 00007f6a20226038 R14: 00007f6a20225fa0 R15: 00007ffd56342bb8
[  110.612778][ T7418]  </TASK>
[  110.688646][ T7416] can0 (unregistered): slcan off ttyS3.
[  110.796326][ T7429] misc userio: The device must be registered before sending interrupts
[  110.845052][ T7433] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  110.902132][ T7434] random: crng reseeded on system resumption
[  110.915076][ T7434] loop3: detected capacity change from 0 to 128
[  110.967576][ T7436] loop0: detected capacity change from 0 to 256
[  110.976921][ T7436] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  111.114572][ T5704] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff
[  111.981844][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.707'.
[  112.135958][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'.
[  112.146332][ T7482] netlink: 88 bytes leftover after parsing attributes in process `syz.3.713'.
[  112.208205][ T7484] syzkaller0: entered promiscuous mode
[  112.212342][ T5704] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  112.215313][ T5704] Bluetooth: hci2: Injecting HCI hardware error event
[  112.221252][ T5703] Bluetooth: hci2: hardware error 0x00
[  112.225944][ T7484] syzkaller0: entered allmulticast mode
[  112.250855][ T7454] iou-wrk-7451 (7454) used greatest stack depth: 19784 bytes left
[  112.648471][ T2298] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  112.723652][ T7513] FAULT_INJECTION: forcing a failure.
[  112.723652][ T7513] name failslab, interval 1, probability 0, space 0, times 0
[  112.728428][ T5008] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  112.731735][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.1.728 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.731755][ T7513] Tainted: [L]=SOFTLOCKUP
[  112.731759][ T7513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.731767][ T7513] Call Trace:
[  112.731772][ T7513]  <TASK>
[  112.731777][ T7513]  dump_stack_lvl+0xe8/0x150
[  112.731790][ T7513]  should_fail_ex+0x40c/0x560
[  112.731805][ T7513]  should_failslab+0xa8/0x100
[  112.731817][ T7513]  __kmalloc_cache_noprof+0xa8/0x660
[  112.731828][ T7513]  ? __kmalloc_noprof+0x1ad/0x720
[  112.731836][ T7513]  ? mpi_alloc+0x52/0x140
[  112.731844][ T7513]  ? mpi_alloc+0x52/0x140
[  112.731854][ T7513]  mpi_alloc+0x52/0x140
[  112.731863][ T7513]  mpi_read_raw_data+0x139/0x970
[  112.731877][ T7513]  rsa_set_pub_key+0x30a/0x5b0
[  112.731890][ T7513]  ? __pfx_rsa_set_pub_key+0x10/0x10
[  112.731903][ T7513]  ? __kmalloc_noprof+0x396/0x720
[  112.731911][ T7513]  ? __kmalloc_noprof+0x1ad/0x720
[  112.731920][ T7513]  rsassa_pkcs1_set_pub_key+0xba/0x1a0
[  112.731936][ T7513]  public_key_verify_signature+0x57a/0x9e0
[  112.731949][ T7513]  ? __pfx_public_key_verify_signature+0x10/0x10
[  112.731958][ T7513]  ? rcu_is_watching+0x15/0xb0
[  112.732009][ T7513]  ? asymmetric_key_generate_id+0x60/0x170
[  112.732022][ T7513]  ? asymmetric_key_id_same+0x67/0xe0
[  112.732036][ T7513]  x509_check_for_self_signed+0x326/0x430
[  112.732048][ T7513]  x509_cert_parse+0x622/0x7a0
[  112.732059][ T7513]  x509_key_preparse+0x64/0x6d0
[  112.732069][ T7513]  ? down_read+0x2be/0x330
[  112.732080][ T7513]  asymmetric_key_preparse+0xb9/0x1b0
[  112.732089][ T7513]  __key_create_or_update+0x3a9/0xa80
[  112.732103][ T7513]  ? __pfx___key_create_or_update+0x10/0x10
[  112.732115][ T7513]  ? lookup_user_key+0xb68/0x1150
[  112.732128][ T7513]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  112.732157][ T7513]  key_create_or_update+0x42/0x60
[  112.732172][ T7513]  __se_sys_add_key+0x349/0x420
[  112.732181][ T7513]  ? __pfx___se_sys_add_key+0x10/0x10
[  112.732198][ T7513]  ? __x64_sys_add_key+0x20/0xc0
[  112.732206][ T7513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.732214][ T7513]  do_syscall_64+0x174/0x580
[  112.732222][ T7513]  ? trace_irq_disable+0x3b/0x140
[  112.732235][ T7513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.732243][ T7513] RIP: 0033:0x7f6a1ff9e159
[  112.732252][ T7513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.732259][ T7513] RSP: 002b:00007f6a20dda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  112.732269][ T7513] RAX: ffffffffffffffda RBX: 00007f6a20225fa0 RCX: 00007f6a1ff9e159
[  112.732274][ T7513] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  112.732279][ T7513] RBP: 00007f6a2003506b R08: ffffffffffffffff R09: 0000000000000000
[  112.732284][ T7513] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  112.732288][ T7513] R13: 00007f6a20226038 R14: 00007f6a20225fa0 R15: 00007ffd56342bb8
[  112.732299][ T7513]  </TASK>
[  112.849821][ T2298] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  112.852855][ T2298] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  112.855614][ T2298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.860569][ T7496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.864214][ T2298] opticon 1-1:1.0: opticon converter detected
[  112.867854][ T2298] usb 1-1: opticon converter now attached to ttyUSB0
[  112.882678][ T5008] usb 4-1: Using ep0 maxpacket: 8
[  112.899199][ T5008] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  112.907946][ T5008] usb 4-1: config 0 has no interface number 0
[  112.910872][ T7519] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  112.916067][ T5008] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.920897][ T5008] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  112.925763][ T5008] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.934159][ T5008] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  112.939532][ T5008] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  112.943271][ T5008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.952758][ T5008] usb 4-1: config 0 descriptor??
[  112.962386][ T5008] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  113.092953][ T7525] loop1: detected capacity change from 0 to 512
[  113.098546][ T7525] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.734: Invalid inode bitmap blk 4 in block_group 0
[  113.102474][ T7525] loop1: lost filesystem error report for type 5 error -117
[  113.103272][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.134817][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.178468][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.188219][ T2298] usb 4-1: USB disconnect, device number 11
[  113.188264][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  113.209483][ T7534] ldusb: No device or device unplugged -19
[  113.209806][ T2298] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  113.212102][ T7531] ldusb: No device or device unplugged -19
[  113.222210][ T7532] ldusb: No device or device unplugged -19
[  113.228656][ T7533] ldusb: No device or device unplugged -19
[  113.325110][ T7539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.582505][ T7547] tipc: Started in network mode
[  113.584147][ T7547] tipc: Node identity 1, cluster identity 2982
[  113.586265][ T7547] tipc: Node number set to 1
[  113.777825][   T24] usb 1-1: USB disconnect, device number 14
[  113.800393][   T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  113.805846][   T24] opticon 1-1:1.0: device disconnected
[  114.034691][ T7581] loop3: detected capacity change from 0 to 512
[  114.057196][ T7581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.063648][ T7581] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.120465][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.256652][ T7596] loop1: detected capacity change from 0 to 2048
[  114.292785][ T5703] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  114.305767][ T7598] .: renamed from bond0 (while UP)
[  114.309385][ T7598] FAULT_INJECTION: forcing a failure.
[  114.309385][ T7598] name failslab, interval 1, probability 0, space 0, times 0
[  114.314100][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.3.762 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.314114][ T7598] Tainted: [L]=SOFTLOCKUP
[  114.314117][ T7598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.314122][ T7598] Call Trace:
[  114.314126][ T7598]  <TASK>
[  114.314130][ T7598]  dump_stack_lvl+0xe8/0x150
[  114.314144][ T7598]  should_fail_ex+0x40c/0x560
[  114.314158][ T7598]  should_failslab+0xa8/0x100
[  114.314171][ T7598]  __kmalloc_noprof+0xfe/0x720
[  114.314181][ T7598]  ? kobject_get_path+0xc5/0x2f0
[  114.314191][ T7598]  ? kobject_get_path+0xc5/0x2f0
[  114.314202][ T7598]  kobject_get_path+0xc5/0x2f0
[  114.314214][ T7598]  kobject_rename+0x194/0x500
[  114.314225][ T7598]  ? __pfx_kobject_rename+0x10/0x10
[  114.314236][ T7598]  ? sysfs_rename_link_ns+0x178/0x1b0
[  114.314247][ T7598]  device_rename+0x15d/0x210
[  114.314261][ T7598]  netif_change_name+0x27a/0x970
[  114.314271][ T7598]  ? dev_change_name+0x101/0x220
[  114.314280][ T7598]  ? dev_ioctl+0x5dc/0x1150
[  114.314296][ T7598]  ? __pfx_netif_change_name+0x10/0x10
[  114.314303][ T7598]  ? full_name_hash+0x92/0xe0
[  114.314313][ T7598]  ? __dev_get_by_name+0xe5/0x130
[  114.314324][ T7598]  dev_change_name+0x101/0x220
[  114.314334][ T7598]  dev_ioctl+0x5ec/0x1150
[  114.314346][ T7598]  sock_do_ioctl+0x23e/0x320
[  114.314355][ T7598]  ? __pfx_sock_do_ioctl+0x10/0x10
[  114.314361][ T7598]  ? hook_file_ioctl+0x1f0/0x5f0
[  114.314377][ T7598]  sock_ioctl+0x57a/0x7e0
[  114.314385][ T7598]  ? __pfx_sock_ioctl+0x10/0x10
[  114.314392][ T7598]  ? __fget_files+0x2a/0x420
[  114.314401][ T7598]  ? __fget_files+0x3a2/0x420
[  114.314410][ T7598]  ? __fget_files+0x2a/0x420
[  114.314426][ T7598]  ? bpf_lsm_file_ioctl+0x9/0x20
[  114.314437][ T7598]  ? __pfx_sock_ioctl+0x10/0x10
[  114.314447][ T7598]  __se_sys_ioctl+0xfc/0x170
[  114.314458][ T7598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.314470][ T7598]  do_syscall_64+0x174/0x580
[  114.314484][ T7598]  ? trace_irq_disable+0x3b/0x140
[  114.314503][ T7598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.314516][ T7598] RIP: 0033:0x7f0eabf9e159
[  114.314528][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.314538][ T7598] RSP: 002b:00007f0eaceed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.314552][ T7598] RAX: ffffffffffffffda RBX: 00007f0eac225fa0 RCX: 00007f0eabf9e159
[  114.314561][ T7598] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005
[  114.314570][ T7598] RBP: 00007f0eac03506b R08: 0000000000000000 R09: 0000000000000000
[  114.314578][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.314585][ T7598] R13: 00007f0eac226038 R14: 00007f0eac225fa0 R15: 00007ffc66e35618
[  114.314605][ T7598]  </TASK>
[  114.652211][ T7620] loop1: detected capacity change from 0 to 2048
[  114.658264][ T7620] EXT4-fs: test_dummy_encryption requires encrypt feature
[  114.702575][ T7624] program syz.3.773 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.741804][ T7620] loop1: detected capacity change from 0 to 512
[  114.758578][ T7620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.762467][ T7620] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.888112][ T5703] Bluetooth: Wrong link type (-22)
[  115.713934][ T6230] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.793293][ T7645] netlink: 'syz.3.780': attribute type 21 has an invalid length.
[  115.795664][ T7645] netlink: 128 bytes leftover after parsing attributes in process `syz.3.780'.
[  115.799259][ T7645] netlink: 3 bytes leftover after parsing attributes in process `syz.3.780'.
[  115.867428][ T7655] fuse: blksize only supported for fuseblk
[  115.900629][ T7659] loop1: detected capacity change from 0 to 128
[  115.916164][ T7659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  115.924709][ T7659] System zones: 1-3, 19-19, 35-36
[  115.930794][ T7659] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  115.939184][ T7659] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.951572][ T7659] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3200417795 (only 1 groups)
[  115.976166][ T6230] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.024680][ T7664] ptrace attach of "/syz-executor exec"[7665] was attempted by "/syz-executor exec"[7664]
[  116.155873][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'.
[  116.277894][ T7685] xt_CT: No such helper "pptp"
[  116.287891][ T7690] loop1: detected capacity change from 0 to 2048
[  116.327018][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.356424][  T100] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  116.372901][  T100] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  116.386913][  T100] EXT4-fs (loop1): This should not happen!! Data will be lost
[  116.386913][  T100] 
[  116.391920][  T100] EXT4-fs (loop1): Total free blocks count 0
[  116.394032][  T100] EXT4-fs (loop1): Free/Dirty block details
[  116.396025][  T100] EXT4-fs (loop1): free_blocks=2415919504
[  116.401371][  T100] EXT4-fs (loop1): dirty_blocks=32
[  116.405255][  T100] EXT4-fs (loop1): Block reservation details
[  116.407028][  T100] EXT4-fs (loop1): i_reserved_data_blocks=2
[  116.409861][  T100] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  116.416578][ T6230] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  116.652696][ T7712] loop0: detected capacity change from 0 to 2048
[  116.682579][ T7712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.739563][ T1283] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  116.890150][ T1283] usb 2-1: Using ep0 maxpacket: 16
[  116.895509][ T1283] usb 2-1: unable to get BOS descriptor or descriptor too short
[  116.898980][ T1283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.907586][ T1283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.917977][ T1283] usb 2-1: config 1 has no interface number 0
[  116.925706][ T1283] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40
[  116.929806][ T1283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.936327][ T1283] usb 2-1: Product: syz
[  116.937513][ T7725] loop3: detected capacity change from 0 to 128
[  116.937631][ T1283] usb 2-1: Manufacturer: syz
[  116.947502][ T7725] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  116.953431][ T1283] usb 2-1: SerialNumber: syz
[  116.958602][ T7725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.176734][ T1283] snd_usb_variax 2-1:1.1: Line 6 PODxt Live found
[  117.180666][ T1283] usb 2-1: selecting invalid altsetting 1
[  117.183709][ T1283] snd_usb_variax 2-1:1.1: set_interface failed
[  117.185845][ T1283] snd_usb_variax 2-1:1.1: Line 6 PODxt Live now disconnected
[  117.189849][ T1283] snd_usb_variax 2-1:1.1: probe with driver snd_usb_variax failed with error -22
[  117.204825][ T1283] usb 2-1: USB disconnect, device number 10
[  117.209331][ T7729] loop3: detected capacity change from 0 to 512
[  117.220519][ T7729] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  117.225442][ T7729] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002]
[  117.231036][ T7729] System zones: 0-1, 15-15, 18-18, 34-34
[  117.235132][ T7729] EXT4-fs (loop3): orphan cleanup on readonly fs
[  117.237556][ T7729] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  117.241154][ T7729] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  117.245794][ T7729] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  117.248063][ T7729] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.818: bad orphan inode 16
[  117.251810][ T7729] loop3: lost filesystem error report for type 5 error -117
[  117.252021][ T7729] ext4_test_bit(bit=15, block=18) = 1
[  117.255815][ T7729] is_bad_inode(inode)=0
[  117.257092][ T7729] NEXT_ORPHAN(inode)=0
[  117.258393][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  117.258402][    C1] EXT4-fs (loop3): initial error at time 1789986848: ext4_orphan_get:1425
[  117.258412][    C1] EXT4-fs (loop3): last error at time 1789986848: ext4_orphan_get:1425
[  117.267810][ T7729] max_ino=32
[  117.269052][ T7729] i_nlink=2
[  117.270827][ T7729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.847201][ T7742] loop0: detected capacity change from 0 to 2048
[  117.865467][ T7744] nvmet: adding nsid 1 to subsystem testsubsys
[  117.872794][ T7744] nvmet: failed to open block device ./file0: (-2)
[  117.877005][ T7742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.908167][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.974212][ T7756] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  118.007752][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'.
[  118.012218][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  118.059612][ T6013] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.163514][ T7768] EXT4-fs: Ignoring removed nobh option
[  118.185056][ T7768] EXT4-fs: Ignoring removed bh option
[  118.188032][ T7768] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  118.385137][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.387565][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.693441][ T2298] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  118.710762][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.715742][ T7782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.794553][ T5762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.798287][ T5762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.805717][ T5762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.811730][ T5762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.841454][ T2298] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  118.845427][ T2298] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  118.849728][ T2298] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00
[  118.853638][ T2298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.861120][ T7787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  118.864531][ T7787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  118.989599][ T2298] ushc 4-1:1.0: probe with driver ushc failed with error -110
[  119.173019][ T7793] syz.0.845 uses obsolete (PF_INET,SOCK_PACKET)
[  119.175709][ T7793] syzkaller1: entered promiscuous mode
[  119.177524][ T7793] syzkaller1: entered allmulticast mode
[  119.287803][ T7798] set_capacity_and_notify: 1 callbacks suppressed
[  119.287813][ T7798] loop0: detected capacity change from 0 to 2048
[  119.296218][ T7798] EXT4-fs: Ignoring removed bh option
[  119.305809][ T7798] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.313375][ T7798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  119.332690][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.385383][ T7803] loop0: detected capacity change from 0 to 256
[  119.394965][ T7803] overlayfs: refusing to follow metacopy origin for (/file1)
[  119.448415][ T5008] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  119.600416][ T5008] usb 2-1: not running at top speed; connect to a high speed hub
[  119.603901][ T5008] usb 2-1: config 0 has no interfaces?
[  119.607962][ T5008] usb 2-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40
[  119.611017][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.613748][ T5008] usb 2-1: Product: syz
[  119.615234][ T5008] usb 2-1: Manufacturer: syz
[  119.616788][ T5008] usb 2-1: SerialNumber: syz
[  119.621524][ T5008] usb 2-1: config 0 descriptor??
[  119.829350][ T2298] usb 2-1: USB disconnect, device number 11
[  120.615496][ T7820] loop0: detected capacity change from 0 to 8
[  120.632592][ T7820] SQUASHFS error: lzo decompression failed, data probably corrupt
[  120.636056][ T7820] SQUASHFS error: Failed to read block 0x91: -5
[  120.642716][ T7820] SQUASHFS error: Unable to read metadata cache entry [8f]
[  120.646629][ T7820] SQUASHFS error: Unable to read inode 0x11f
[  120.721247][ T7822] loop0: detected capacity change from 0 to 8192
[  120.904161][ T7829] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  121.152866][ T7836] [U] 
[  121.154013][ T7836] [U] K{
[  121.155138][ T7836] [U] T 1FFˊ`GJǘGO/MC
[  121.157600][ T7836] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب(5OBܤ̓J
[  121.162707][ T7836] [U] K\&}66XHXԵ.`A$40|϶9ިU4ĮVBZ}WMTQΦR4
[  121.167133][ T7836] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_<	ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ
[  121.183474][ T7836] [U] 	+WG?]'A:	)' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿BٜNY"VI2
[  121.192498][ T7836] [U] T_K5TYJ9C$BRLNUL9W|G"ʃ%ڶC؝Q 3QN^HP*$	.7Yӱ2
[  121.196084][ T7836] [U] ?H*3͝7ɍ^#Q"0~(OXLB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ
[  121.199965][ T7836] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<<RB|ФE۠V96#ͤʦJU%S81ҩSP\?Q|LQX0K1ORɴ2|DFِ2ޔ0H}C[/PX^O
[  121.207241][ T7836] [U] ؛(JЛMXZ;؝_*335\XMUAK!AQ`;FЕI+VUHMJƷZCZ)_ǟ	ԑ&֡AXTO_ ڼ:%PCֲY+_ܛ}UMƫC!KJ7пG=B
[  121.213872][ T7836] [U] ٽF%XAL2R*GVW$J	AF+ؾ9̈́VI֗Kپ1}_%R6(]/ؐřYܺHäR GRN/ܫ#!D%D-{$VUT$:MTREC1VD~];[SQ(E,X8"GDڵ2@T8҃T8.RC+@ʦPUPC'ńYL-SS1E?7O^]C½H]JKR]RKQ܆ݣ޴OTCX4N	&ڋ@:M7~+W*XM>>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)MăT(Aϝ}9ڥJ*Mќġ'LQ	DWظ=|Q	ÆW;5Ž!DBX`ɧ/E`ƦMX"\
[  121.228177][ T7836] [U] {;ե٘_O2)O.2W2ʲYX_  HPϱSD:]{Ƚ
[  121.231448][ T7836] [U] I,>Ӥ	51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^`	ؿ
[  121.235802][ T7836] [U] 22Ʃ۩X?0;3U
[  121.237600][ T7836] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D,		D~D+W;A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ	ͿAET1ݯ4K.E"RS|ПS:>PR"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ
[  121.245523][ T7836] [U] [['XN',MR/1D=!DX91BWǻRLFK̤Z#`̑L؛˜B~M
[  121.249077][ T7836] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y
[  121.251955][ T7836] [U] 'B6V20ķǞ׌"T8{9FW]̩
[  121.254190][ T7836] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C
[  121.258123][ T7836] [U] EC
[  121.259619][ T7836] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP|IRIӍPM Y ڔ8TV,L,
[  121.268576][ T7835] [U] K)0~ܳʪIP'FҜZR@B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L
[  121.396704][   T33] usb 4-1: USB disconnect, device number 12
[  121.787440][ T7868] xt_CONNSECMARK: invalid mode: 0
[  121.890130][ T7871] macvlan0: entered promiscuous mode
[  121.893640][ T7871] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  121.898623][ T7871] netlink: 'syz.1.878': attribute type 2 has an invalid length.
[  122.047986][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'.
[  122.102756][ T7885] loop0: detected capacity change from 0 to 512
[  122.111332][ T7885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  122.117085][ T7885] System zones: 1-12
[  122.119778][ T7885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.885: missing EA_INODE flag
[  122.129886][ T7885] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  122.130289][ T7885] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.885: error while reading EA inode 12 err=-117
[  122.137594][ T7885] loop0: lost filesystem error report for type 5 error -117
[  122.137745][ T7885] EXT4-fs (loop0): 1 orphan inode deleted
[  122.140197][    C0] EXT4-fs (loop0): error count since last fsck: 2
[  122.140206][    C0] EXT4-fs (loop0): initial error at time 1789986853: ext4_xattr_inode_iget:441: inode 12
[  122.140218][    C0] EXT4-fs (loop0): last error at time 1789986853: ext4_xattr_inode_iget:446
[  122.150685][ T7885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.292935][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.355758][ T7899] loop0: detected capacity change from 0 to 128
[  122.828377][   T33] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  122.979839][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.983954][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.987525][   T33] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  122.991129][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.996133][   T33] usb 4-1: config 0 descriptor??
[  123.407040][   T33] hid_parser_main: 332 callbacks suppressed
[  123.407051][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.414242][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.422282][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.425886][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.429754][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.432368][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.434660][   T33] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  123.443404][   T33] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  123.513158][ T7923] loop1: detected capacity change from 0 to 64
[  123.569373][ T7927] loop0: detected capacity change from 0 to 512
[  123.593159][ T7927] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.901: iget: bad extra_isize 288 (inode size 256)
[  123.605854][ T7927] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  123.606027][ T7927] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.901: couldn't read orphan inode 15 (err -117)
[  123.608879][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  123.608888][    C1] EXT4-fs (loop0): initial error at time 1789986855: ext4_orphan_get:1399: inode 15
[  123.608901][    C1] EXT4-fs (loop0): last error at time 1789986855: ext4_orphan_get:1399: inode 15
[  123.627114][   T33] usb 4-1: USB disconnect, device number 13
[  123.643488][ T7927] loop0: lost filesystem error report for type 5 error -117
[  123.658673][ T7927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.676863][ T7927] EXT4-fs (loop0): shut down requested (2)
[  123.704148][ T5699] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.016812][ T7971] loop0: detected capacity change from 0 to 1024
[  124.319830][ T7979] loop3: detected capacity change from 0 to 512
[  124.335756][ T7979] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.347201][ T5704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.355099][ T5704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.362185][ T5704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.367316][ T5704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.374745][ T5704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.376140][ T6013] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  124.471657][ T7989] sock: sock_set_timeout: `syz.3.929' (pid 7989) tries to set negative timeout
[  124.511779][ T7994] loop3: detected capacity change from 0 to 128
[  124.515460][ T7994] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  124.755634][ T5343] 8021q: adding VLAN 0 to HW filter on device eth5
[  124.893188][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.895531][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.899812][ T8019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.934'.
[  124.903169][ T7980] bridge_slave_0: entered allmulticast mode
[  124.913976][ T7980] bridge_slave_0: entered promiscuous mode
[  124.921696][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.927253][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.933366][ T7980] bridge_slave_1: entered allmulticast mode
[  124.939273][ T7980] bridge_slave_1: entered promiscuous mode
[  124.967781][ T5762] bridge_slave_1: left allmulticast mode
[  124.989227][ T5762] bridge_slave_1: left promiscuous mode
[  124.999566][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.003748][ T5762] bridge_slave_0: left allmulticast mode
[  125.005561][ T5762] bridge_slave_0: left promiscuous mode
[  125.009339][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.015020][ T8024] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  125.099084][ T5762] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  125.126134][ T5762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.136612][ T5762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.141267][ T5762] bond0 (unregistering): Released all slaves
[  125.148927][ T5762] bond1 (unregistering): Released all slaves
[  125.181348][ T5343] 8021q: adding VLAN 0 to HW filter on device eth6
[  125.196995][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.220343][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.244818][ T8033] uprobe: syz.3.940:8033 failed to unregister, leaking uprobe
[  125.262398][ T7980] team0: Port device team_slave_0 added
[  125.280742][ T7980] team0: Port device team_slave_1 added
[  125.330989][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.334920][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.354457][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.373563][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.385356][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.407657][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.484044][ T7980] hsr_slave_0: entered promiscuous mode
[  125.492400][ T7980] hsr_slave_1: entered promiscuous mode
[  125.503674][ T7980] debugfs: 'hsr0' already exists in 'hsr'
[  125.510235][ T7980] Cannot create hsr debugfs directory
[  125.544136][ T5762] hsr_slave_0: left promiscuous mode
[  125.547201][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'.
[  125.553610][ T5762] hsr_slave_1: left promiscuous mode
[  125.555609][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.558197][ T5762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.688944][ T5762] team0 (unregistering): Port device team_slave_1 removed
[  125.696406][ T5762] team0 (unregistering): Port device team_slave_0 removed
[  125.805933][ T5343] 8021q: adding VLAN 0 to HW filter on device eth7
[  125.894476][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.962'.
[  125.937848][ T8088] loop3: detected capacity change from 0 to 64
[  126.119250][ T7980] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.138139][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  126.147610][ T7980] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.180805][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  126.194664][ T7980] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.212530][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  126.218100][ T7980] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.227308][ T5762] IPVS: stop unused estimator thread 0...
[  126.238877][ T7980] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  126.243480][ T5343] 8021q: adding VLAN 0 to HW filter on device eth8
[  126.325698][ T8113] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  126.342190][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.389151][ T7980] 8021q: adding VLAN 0 to HW filter on device team0
[  126.399975][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.402210][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.417818][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.420677][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.449766][ T5704] Bluetooth: hci1: command tx timeout
[  126.689789][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.728609][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'.
[  126.745365][ T8152] ip6tnl2: entered allmulticast mode
[  126.821776][ T7980] veth0_vlan: entered promiscuous mode
[  126.840672][ T7980] veth1_vlan: entered promiscuous mode
[  126.865476][ T7980] veth0_macvtap: entered promiscuous mode
[  126.871210][ T7980] veth1_macvtap: entered promiscuous mode
[  126.887108][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.904191][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.921350][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.926293][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.933158][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.935798][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.977886][ T8169] jffs2: notice: (8169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  127.013294][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.020241][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.046320][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.049586][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.192432][ T8174] loop4: detected capacity change from 0 to 1024
[  127.208802][ T8174] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  127.244957][ T8174] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.987: Freeing blocks not in datazone - block = 0, count = 4096
[  127.250976][ T8174] loop4: lost filesystem error report for type 5 error -117
[  127.251174][ T8174] EXT4-fs (loop4): Remounting filesystem read-only
[  127.256436][ T8174] EXT4-fs (loop4): 1 orphan inode deleted
[  127.258372][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  127.258382][    C1] EXT4-fs (loop4): initial error at time 1789986858: ext4_free_blocks:6718
[  127.258392][    C1] EXT4-fs (loop4): last error at time 1789986858: ext4_free_blocks:6718
[  127.269296][ T8174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.289595][ T7980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.770224][ T1106] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  127.791279][ T1106] Quota error (device loop4): write_blk: dquota write failed
[  127.802909][ T1106] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries
[  127.804846][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'.
[  127.816924][ T1106] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  127.830772][ T1106] Quota error (device loop4): write_blk: dquota write failed
[  127.838416][ T1106] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list
[  127.841278][ T1106] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  127.844193][ T1106] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  128.002716][ T8212] loop4: detected capacity change from 0 to 164
[  128.017266][ T8212] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  128.029390][ T8212] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  128.248537][ T1283] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  128.401288][ T1283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  128.405645][ T1283] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  128.409915][ T1283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.415206][ T1283] usb 4-1: config 0 descriptor??
[  128.418000][ T8211] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.529420][ T5704] Bluetooth: hci1: command tx timeout
[  128.548430][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.702768][ T8239] ip_tables: iptables: counters copy to user failed while replacing table
[  128.718430][   T10] usb 5-1: Using ep0 maxpacket: 8
[  128.723484][   T10] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.728233][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  128.731224][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  128.735004][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.740069][   T10] usb 5-1: config 0 descriptor??
[  128.778146][   T34] audit: type=1804 audit(1789986860.393:121): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1017" name="file1" dev="tmpfs" ino=1558 res=1 errno=0
[  128.836007][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.838227][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.840477][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.842753][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.845601][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.848255][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.856135][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.858755][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.861452][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.863947][ T1283] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  128.874665][ T1283] asus 0003:0B05:1ABE.0006: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0
[  128.917059][   T34] audit: type=1326 audit(1789986860.533:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.1.1021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  128.926526][   T34] audit: type=1326 audit(1789986860.543:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.1.1021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  128.934031][   T34] audit: type=1326 audit(1789986860.543:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.1.1021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  128.940797][   T34] audit: type=1326 audit(1789986860.543:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.1.1021" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  128.966853][ T8253] netlink: 'syz.1.1022': attribute type 2 has an invalid length.
[  128.969533][ T8253] netlink: 'syz.1.1022': attribute type 8 has an invalid length.
[  128.971925][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1022'.
[  129.032160][ T1283] asus 0003:0B05:1ABE.0006: Asus handshake 5a failed to send: -71
[  129.035433][ T1283] asus 0003:0B05:1ABE.0006: Failed to initialize 0x5a: -71.
[  129.043714][ T1283] usb 4-1: USB disconnect, device number 14
[  129.359358][ T5810] usb 5-1: USB disconnect, device number 2
[  129.848453][ T1283] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  130.000235][ T1283] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  130.003733][ T1283] usb 4-1: config 8 has no interfaces?
[  130.008098][ T1283] usb 4-1: string descriptor 0 read error: -22
[  130.013066][ T1283] usb 4-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  130.017452][ T1283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.238614][   T24] usb 4-1: USB disconnect, device number 15
[  130.404750][ T8289] netlink: Unknown conntrack attr (0)
[  130.608555][ T5704] Bluetooth: hci1: command tx timeout
[  130.718286][ T8311] overlayfs: failed to clone upperpath
[  130.727312][ T8311] overlayfs: failed to clone upperpath
[  130.743086][ T8313] loop4: detected capacity change from 0 to 1024
[  130.752677][ T8313] hfsplus: failed to load extents file
[  131.253237][ T8336] netlink: 'syz.1.1060': attribute type 10 has an invalid length.
[  131.276043][ T8336] team0: Device wg2 is of different type
[  131.351492][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.421367][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.421472][ T5703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.432367][ T5703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.435745][ T5703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.442101][ T5703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.444777][ T5703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.482560][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.533006][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.656822][   T12] bridge_slave_1: left allmulticast mode
[  131.661718][   T12] bridge_slave_1: left promiscuous mode
[  131.663643][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.667946][   T12] bridge_slave_0: left allmulticast mode
[  131.670212][   T12] bridge_slave_0: left promiscuous mode
[  131.673926][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.681457][   T12] erspan0: left allmulticast mode
[  131.687004][   T12] erspan0: left promiscuous mode
[  131.691545][   T12] bridge1: port 1(erspan0) entered disabled state
[  131.783787][ T8365] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  131.786006][ T8365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  131.790993][ T8365] vhci_hcd vhci_hcd.0: Device attached
[  131.831739][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.836665][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.851683][   T12] bond0 (unregistering): Released all slaves
[  131.859108][ T5343] 8021q: adding VLAN 0 to HW filter on device eth9
[  131.983839][   T12] tipc: Left network mode
[  132.021281][   T12] rxrpc: Leaked peer 181 {1} 127.0.0.1:7003
[  132.028430][   T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  132.044313][   T33] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  132.106078][ T5343] 8021q: adding VLAN 0 to HW filter on device eth10
[  132.181133][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.185097][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.188775][ T8342] bridge_slave_0: entered allmulticast mode
[  132.195032][ T8342] bridge_slave_0: entered promiscuous mode
[  132.210060][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.215321][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.217603][   T33] usb 5-1: config 0 has no interfaces?
[  132.220179][ T8342] bridge_slave_1: entered allmulticast mode
[  132.222139][   T33] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  132.226090][ T8342] bridge_slave_1: entered promiscuous mode
[  132.227982][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.242172][   T33] usb 5-1: config 0 descriptor??
[  132.262640][   T12] hsr_slave_0: left promiscuous mode
[  132.267461][   T12] hsr_slave_1: left promiscuous mode
[  132.270127][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.272435][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.276812][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.280877][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.293819][   T12] veth1_macvtap: left promiscuous mode
[  132.300712][   T12] veth0_macvtap: left promiscuous mode
[  132.307069][   T12] veth1_vlan: left promiscuous mode
[  132.310325][   T12] veth0_vlan: left promiscuous mode
[  132.313931][ T8402] fuse: Bad value for 'fd'
[  132.455605][   T33] usb 5-1: USB disconnect, device number 3
[  132.463648][ T8366] vhci_hcd: connection closed
[  132.466946][ T5762] vhci_hcd vhci_hcd.4: stop threads
[  132.475036][ T5762] vhci_hcd vhci_hcd.4: release socket
[  132.480175][ T5762] vhci_hcd vhci_hcd.4: disconnect device
[  132.495093][   T12] team0 (unregistering): Port device team_slave_1 removed
[  132.505805][   T12] team0 (unregistering): Port device team_slave_0 removed
[  132.518502][   T24] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  132.572568][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.579788][ T5343] 8021q: adding VLAN 0 to HW filter on device eth11
[  132.585568][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.635935][ T8342] team0: Port device team_slave_0 added
[  132.641281][ T8342] team0: Port device team_slave_1 added
[  132.668115][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.670745][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.678847][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.683459][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.687168][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.688851][ T5704] Bluetooth: hci1: command tx timeout
[  132.699424][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.758107][ T8342] hsr_slave_0: entered promiscuous mode
[  132.761444][ T8342] hsr_slave_1: entered promiscuous mode
[  132.799671][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  132.799752][   T34] audit: type=1326 audit(1789986864.423:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.816338][   T34] audit: type=1326 audit(1789986864.423:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.837751][   T34] audit: type=1326 audit(1789986864.423:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.857067][   T34] audit: type=1326 audit(1789986864.423:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.871731][   T34] audit: type=1326 audit(1789986864.423:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.889413][   T34] audit: type=1326 audit(1789986864.423:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.899086][   T34] audit: type=1326 audit(1789986864.423:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.1082" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  132.931491][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  132.933537][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  132.942799][ T5343] 8021q: adding VLAN 0 to HW filter on device eth12
[  132.972356][ T8431] fuse: fd is not a fuse device
[  133.050116][ T8342] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  133.057957][ T8342] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  133.059910][ T8342] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  133.066423][ T8342] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.068748][ T8342] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  133.075283][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1088'.
[  133.084925][ T8342] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  133.090793][ T8342] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  133.094770][ T8437] syz.4.1088 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  133.094934][ T8342] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  133.116217][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.118447][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.120778][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.122995][ T8342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.174737][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.180417][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.192306][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.210087][ T8342] 8021q: adding VLAN 0 to HW filter on device team0
[  133.216340][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.219038][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.229464][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.231592][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.468384][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.489113][ T5704] Bluetooth: hci2: command tx timeout
[  133.581350][ T1283] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  133.591843][ T8342] veth0_vlan: entered promiscuous mode
[  133.597459][ T8500] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1106'.
[  133.599150][ T8342] veth1_vlan: entered promiscuous mode
[  133.616599][ T8342] veth0_macvtap: entered promiscuous mode
[  133.622616][ T8342] veth1_macvtap: entered promiscuous mode
[  133.641135][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.647696][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.655496][ T5682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.661472][ T5682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.671819][ T5682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.691134][ T5682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.731103][ T1283] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  133.734551][ T1283] usb 5-1: config 0 has no interface number 0
[  133.743338][ T1283] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.752552][ T1283] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.757613][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.761617][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.764516][ T1283] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.770550][ T1283] usb 5-1: config 0 interface 1 has no altsetting 0
[  133.777125][ T1283] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  133.780412][ T1283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.784188][ T1283] usb 5-1: config 0 descriptor??
[  133.795002][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.801412][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.050912][ T8535] loop5: detected capacity change from 0 to 1764
[  134.072342][ T8535] iso9660: Corrupted directory entry in block 14 of inode 1920
[  134.149344][ T8542] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1125'.
[  134.394373][ T1283] uclogic 0003:145F:0212.0008: pen parameters not found
[  134.396596][ T1283] uclogic 0003:145F:0212.0008: interface is invalid, ignoring
[  134.564139][ T8556] ieee802154 phy0 wpan0: encryption failed: -22
[  134.602354][   T33] usb 5-1: USB disconnect, device number 4
[  134.722394][ T8570] fuse: fd is not a fuse device
[  134.828800][ T1283] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  134.892298][ T8586] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  134.954491][ T8592] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  134.988713][ T1283] usb 6-1: Using ep0 maxpacket: 32
[  134.994074][ T1283] usb 6-1: unable to get BOS descriptor or descriptor too short
[  135.000921][ T1283] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  135.003706][ T1283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.006351][ T1283] usb 6-1: Product: syz
[  135.008061][ T1283] usb 6-1: Manufacturer: syz
[  135.012988][ T1283] usb 6-1: SerialNumber: syz
[  135.015805][ T8594] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.235975][ T1283] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  135.241969][ T1283] usb 6-1: unit 37 not found!
[  135.243418][ T1283] usb 6-1: unit 0 not found!
[  135.284231][ T1283] usb 6-1: USB disconnect, device number 2
[  135.324434][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.565997][ T8638] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  135.568553][ T5704] Bluetooth: hci2: command tx timeout
[  135.578160][ T8638] bond1: (slave macvlan2): making interface the new active one
[  135.584728][ T8638] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  135.656744][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1172'.
[  136.120485][ T1283] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  136.196737][ T8667] FAULT_INJECTION: forcing a failure.
[  136.196737][ T8667] name failslab, interval 1, probability 0, space 0, times 0
[  136.202433][ T8667] CPU: 1 UID: 0 PID: 8667 Comm: syz.4.1183 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.202447][ T8667] Tainted: [L]=SOFTLOCKUP
[  136.202450][ T8667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.202456][ T8667] Call Trace:
[  136.202459][ T8667]  <TASK>
[  136.202463][ T8667]  dump_stack_lvl+0xe8/0x150
[  136.202478][ T8667]  should_fail_ex+0x40c/0x560
[  136.202493][ T8667]  should_failslab+0xa8/0x100
[  136.202506][ T8667]  __kmalloc_cache_noprof+0xa8/0x660
[  136.202515][ T8667]  ? do_raw_spin_unlock+0x4d/0x210
[  136.202524][ T8667]  ? snd_rawmidi_open+0x33b/0xb00
[  136.202533][ T8667]  ? snd_rawmidi_open+0x33b/0xb00
[  136.202542][ T8667]  ? snd_card_file_add+0x20e/0x250
[  136.202551][ T8667]  snd_rawmidi_open+0x33b/0xb00
[  136.202565][ T8667]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  136.202579][ T8667]  chrdev_open+0x4d9/0x600
[  136.202588][ T8667]  ? __pfx_chrdev_open+0x10/0x10
[  136.202595][ T8667]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  136.202609][ T8667]  ? __pfx_chrdev_open+0x10/0x10
[  136.202617][ T8667]  do_dentry_open+0x816/0x1380
[  136.202631][ T8667]  vfs_open+0x3b/0x340
[  136.202639][ T8667]  ? path_openat+0x2e2d/0x3830
[  136.202656][ T8667]  path_openat+0x2e44/0x3830
[  136.202668][ T8667]  ? kasan_save_track+0x3e/0x80
[  136.202677][ T8667]  ? do_sys_openat2+0xcc/0x200
[  136.202685][ T8667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.202700][ T8667]  do_file_open+0x23e/0x4a0
[  136.202712][ T8667]  ? __pfx_do_file_open+0x10/0x10
[  136.202731][ T8667]  ? _raw_spin_unlock+0x28/0x50
[  136.202739][ T8667]  ? alloc_fd+0x651/0x6c0
[  136.202751][ T8667]  do_sys_openat2+0x115/0x200
[  136.202761][ T8667]  ? __pfx_do_sys_openat2+0x10/0x10
[  136.202771][ T8667]  ? exc_page_fault+0x6a/0xc0
[  136.202781][ T8667]  ? do_user_addr_fault+0xc4a/0x1340
[  136.202792][ T8667]  __x64_sys_openat+0x138/0x170
[  136.202802][ T8667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.202809][ T8667]  do_syscall_64+0x174/0x580
[  136.202817][ T8667]  ? trace_irq_disable+0x3b/0x140
[  136.202828][ T8667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.202835][ T8667] RIP: 0033:0x7f4d30f5e98e
[  136.202867][ T8667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  136.202874][ T8667] RSP: 002b:00007f4d31dfbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  136.202884][ T8667] RAX: ffffffffffffffda RBX: 00007f4d31dfc6c0 RCX: 00007f4d30f5e98e
[  136.202890][ T8667] RDX: 0000000000000000 RSI: 00007f4d31dfbc00 RDI: ffffffffffffff9c
[  136.202895][ T8667] RBP: 00007f4d31dfbc00 R08: 0000000000000000 R09: 0000000000000000
[  136.202900][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  136.202905][ T8667] R13: 00007f4d31226038 R14: 00007f4d31225fa0 R15: 00007fff5dd237a8
[  136.202917][ T8667]  </TASK>
[  136.297765][ T1283] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  136.300960][ T1283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.310919][ T1283] usb 6-1: config 0 descriptor??
[  136.318181][ T1283] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  136.410714][ T8673] loop4: detected capacity change from 0 to 2048
[  136.450116][ T8676] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.520184][ T1283] gp8psk: usb in 128 operation failed.
[  136.559019][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  136.566818][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  136.724262][ T1283] gp8psk: FW Version = 156.161.199 (0x9ca1c7)  Build 2085/196/30
[  136.878582][   T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  136.928238][ T1283] gp8psk: usb in 149 operation failed.
[  136.930178][ T1283] gp8psk: failed to get FPGA version
[  136.937948][ T1283] gp8psk: usb in 138 operation failed.
[  136.939772][ T1283] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  136.943065][ T1283] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  136.946728][ T1283] usb 6-1: USB disconnect, device number 3
[  136.963112][ T8707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1198'.
[  137.051314][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  137.056499][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.062800][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.072410][   T24] usb 5-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00
[  137.078973][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.089141][   T24] usb 5-1: config 0 descriptor??
[  137.357660][ T8737] overlayfs: failed to clone upperpath
[  137.363552][ T8737] overlayfs: failed to clone upperpath
[  137.514919][   T24] hid-generic 0003:093A:8002.0009: hidraw0: USB HID v0.00 Device [HID 093a:8002] on usb-dummy_hcd.4-1/input0
[  137.651067][ T8761] netlink: 'syz.1.1219': attribute type 1 has an invalid length.
[  137.656818][ T8761] netlink: 'syz.1.1219': attribute type 2 has an invalid length.
[  137.660032][ T5704] Bluetooth: hci2: command tx timeout
[  137.666026][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'.
[  137.681250][ T8745] loop5: detected capacity change from 0 to 32768
[  137.711316][ T8745] JBD2: Ignoring recovery information on journal
[  137.712522][ T2298] usb 5-1: USB disconnect, device number 5
[  137.744680][ T8766] overlayfs: failed to clone upperpath
[  137.752380][ T8745] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  137.788420][ T8342] ocfs2: Unmounting device (7,5) on (node local)
[  137.877622][ T8776] jffs2: notice: (8776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  138.301342][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.381893][ T5703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.391359][ T5703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.408582][ T5703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.411925][ T5703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.412570][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.420319][ T5703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.485705][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.513795][   T34] audit: type=1326 audit(1789986870.133:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.1.1240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  138.525491][   T34] audit: type=1326 audit(1789986870.133:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.1.1240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  138.540261][   T34] audit: type=1326 audit(1789986870.143:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.1.1240" exe="/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  138.555974][   T34] audit: type=1326 audit(1789986870.143:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.1.1240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1ff9e159 code=0x7ffc0000
[  138.573618][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.758518][   T12] bridge_slave_1: left allmulticast mode
[  138.760436][   T12] bridge_slave_1: left promiscuous mode
[  138.762436][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.766022][   T12] bridge_slave_0: left allmulticast mode
[  138.767757][   T12] bridge_slave_0: left promiscuous mode
[  138.769939][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.048284][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.052956][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.056664][   T12] bond0 (unregistering): Released all slaves
[  139.270136][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.272623][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.274982][ T8806] bridge_slave_0: entered allmulticast mode
[  139.277682][ T8806] bridge_slave_0: entered promiscuous mode
[  139.292385][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.294747][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.297067][ T8806] bridge_slave_1: entered allmulticast mode
[  139.302427][ T8806] bridge_slave_1: entered promiscuous mode
[  139.312377][ T5343] 8021q: adding VLAN 0 to HW filter on device eth13
[  139.318056][   T12] hsr_slave_0: left promiscuous mode
[  139.320367][   T12] hsr_slave_1: left promiscuous mode
[  139.322415][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.324799][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.327358][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.333795][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.339485][   T12] veth1_macvtap: left promiscuous mode
[  139.341413][   T12] veth0_macvtap: left promiscuous mode
[  139.343208][   T12] veth1_vlan: left promiscuous mode
[  139.344905][   T12] veth0_vlan: left promiscuous mode
[  139.485733][   T12] team0 (unregistering): Port device team_slave_1 removed
[  139.494097][   T12] team0 (unregistering): Port device team_slave_0 removed
[  139.563088][ T8852] syzkaller0: entered promiscuous mode
[  139.564801][ T8852] syzkaller0: entered allmulticast mode
[  139.608480][ T8856] tipc: Started in network mode
[  139.610267][ T8856] tipc: Node identity 02c3b3230962, cluster identity 4711
[  139.612643][ T8856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.616424][ T8851] tipc: Resetting bearer <eth:syzkaller0>
[  139.626813][ T8851] tipc: Disabling bearer <eth:syzkaller0>
[  139.643180][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.653701][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.729128][ T8806] team0: Port device team_slave_0 added
[  139.736882][ T8806] team0: Port device team_slave_1 added
[  139.788693][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.790892][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.799083][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.809674][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.813403][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.824695][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.901074][ T8806] hsr_slave_0: entered promiscuous mode
[  139.903418][ T8806] hsr_slave_1: entered promiscuous mode
[  139.906401][ T5343] 8021q: adding VLAN 0 to HW filter on device eth15
[  140.132186][ T8886] loop4: detected capacity change from 0 to 512
[  140.166138][ T8886] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.1256: corrupted xattr block 95: invalid header
[  140.186671][ T8886] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  140.188334][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  140.193083][    C0] EXT4-fs (loop4): initial error at time 1789986871: ext4_expand_extra_isize_ea:2810: inode 11
[  140.196204][    C0] EXT4-fs (loop4): last error at time 1789986871: ext4_expand_extra_isize_ea:2810: inode 11
[  140.202875][ T8886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1256: bg 0: block 7: invalid block bitmap
[  140.215201][ T5343] 8021q: adding VLAN 0 to HW filter on device eth16
[  140.219531][ T8886] loop4: lost filesystem error report for type 5 error -117
[  140.219743][ T8886] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  140.230161][ T8806] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  140.239698][ T8886] loop4: lost filesystem error report for type 5 error -117
[  140.240203][ T8886] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.1256: corrupted xattr block 95: invalid header
[  140.249484][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  140.255344][ T8806] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  140.257422][ T8886] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  140.257636][ T8886] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[  140.269081][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  140.275466][ T8806] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  140.279710][ T8886] EXT4-fs (loop4): 1 orphan inode deleted
[  140.288167][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  140.296619][ T8806] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  140.299774][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.312489][ T8806] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  140.367008][ T7980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.429366][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.448633][ T5703] Bluetooth: hci2: command tx timeout
[  140.460422][ T8806] 8021q: adding VLAN 0 to HW filter on device team0
[  140.469427][  T100] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.472212][  T100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.483588][  T100] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.486176][  T100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.601025][ T5343] 8021q: adding VLAN 0 to HW filter on device eth14
[  140.810273][ T8923] loop4: detected capacity change from 0 to 4096
[  140.814261][ T8923] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  140.840987][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.864303][   T34] audit: type=1800 audit(1789986872.483:143): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1259" name="file1" dev="loop4" ino=30 res=0 errno=0
[  140.994884][ T8943] loop4: detected capacity change from 0 to 8
[  141.010746][ T8806] veth0_vlan: entered promiscuous mode
[  141.018510][ T8806] veth1_vlan: entered promiscuous mode
[  141.055477][ T8806] veth0_macvtap: entered promiscuous mode
[  141.061809][ T8806] veth1_macvtap: entered promiscuous mode
[  141.072276][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.078185][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.086396][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.091297][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.099738][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.102775][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.180039][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.184057][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.197484][ T8945] loop4: detected capacity change from 0 to 40427
[  141.201422][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.204488][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.221039][ T8945] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  141.229225][ T8945] F2FS-fs (loop4): invalid crc value
[  141.308138][ T8945] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  141.320988][ T8945] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.351118][ T8945] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  141.373367][ T8956] f2fs_ckpt-7:4: attempt to access beyond end of device
[  141.373367][ T8956] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.380470][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: f2fs_ckpt-7:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.380483][ T8956] Tainted: [L]=SOFTLOCKUP
[  141.380486][ T8956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.380490][ T8956] Call Trace:
[  141.380494][ T8956]  <TASK>
[  141.380497][ T8956]  dump_stack_lvl+0xe8/0x150
[  141.380513][ T8956]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  141.380528][ T8956]  f2fs_write_end_io+0x124b/0x1710
[  141.380545][ T8956]  __submit_merged_bio+0x258/0x6a0
[  141.380552][ T8956]  ? rcu_is_watching+0x15/0xb0
[  141.380565][ T8956]  __submit_merged_write_cond+0x3c9/0x4e0
[  141.380579][ T8956]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  141.380623][ T8956]  f2fs_write_data_pages+0x2a27/0x36f0
[  141.380634][ T8956]  ? __lock_acquire+0x683/0x2cf0
[  141.380657][ T8956]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.380683][ T8956]  ? __pfx_hlock_conflict+0x10/0x10
[  141.380693][ T8956]  ? __bfs+0x153/0x290
[  141.380719][ T8956]  ? __pfx_hlock_conflict+0x10/0x10
[  141.380736][ T8956]  ? lockdep_unlock+0x5d/0xd0
[  141.380744][ T8956]  ? __lock_acquire+0x13e8/0x2cf0
[  141.380754][ T8956]  ? unwind_next_frame+0x8f/0x2550
[  141.380770][ T8956]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  141.380778][ T8956]  do_writepages+0x338/0x560
[  141.380793][ T8956]  ? do_raw_spin_unlock+0x4d/0x210
[  141.380802][ T8956]  filemap_fdatawrite+0x1e9/0x2f0
[  141.380836][ T8956]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  141.380865][ T8956]  ? do_raw_spin_unlock+0x4d/0x210
[  141.380874][ T8956]  f2fs_sync_dirty_inodes+0x30e/0x830
[  141.380889][ T8956]  f2fs_write_checkpoint+0xa3d/0x2710
[  141.380910][ T8956]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  141.380934][ T8956]  ? __pfx_down_write+0x10/0x10
[  141.380946][ T8956]  ? rcu_is_watching+0x15/0xb0
[  141.380958][ T8956]  __checkpoint_and_complete_reqs+0x135/0x480
[  141.380968][ T8956]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  141.380976][ T8956]  ? trace_contention_end+0x3d/0x140
[  141.380985][ T8956]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  141.380994][ T8956]  ? do_raw_spin_lock+0x12b/0x2f0
[  141.381008][ T8956]  ? schedule+0x90/0x2b0
[  141.381019][ T8956]  issue_checkpoint_thread+0xd5/0x270
[  141.381029][ T8956]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  141.381039][ T8956]  ? __pfx_autoremove_wake_function+0x10/0x10
[  141.381047][ T8956]  ? __kthread_parkme+0x71/0x1f0
[  141.381057][ T8956]  ? __kthread_parkme+0x196/0x1f0
[  141.381067][ T8956]  kthread+0x388/0x470
[  141.381077][ T8956]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  141.381090][ T8956]  ? __pfx_kthread+0x10/0x10
[  141.381100][ T8956]  ret_from_fork+0x514/0xb70
[  141.381111][ T8956]  ? __pfx_ret_from_fork+0x10/0x10
[  141.381121][ T8956]  ? __switch_to+0xc89/0x1420
[  141.381131][ T8956]  ? __pfx_kthread+0x10/0x10
[  141.381141][ T8956]  ret_from_fork_asm+0x1a/0x30
[  141.381158][ T8956]  </TASK>
[  141.478421][ T8956] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  141.496279][ T8963] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  141.497907][ T8964] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  141.511780][ T8964] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  141.577961][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'.
[  141.591896][ T8970] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1277'.
[  141.609731][ T8972] loop6: detected capacity change from 0 to 128
[  141.612890][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'.
[  141.792216][ T8983] FAULT_INJECTION: forcing a failure.
[  141.792216][ T8983] name failslab, interval 1, probability 0, space 0, times 0
[  141.797258][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.4.1275 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  141.797273][ T8983] Tainted: [L]=SOFTLOCKUP
[  141.797275][ T8983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.797280][ T8983] Call Trace:
[  141.797284][ T8983]  <TASK>
[  141.797287][ T8983]  dump_stack_lvl+0xe8/0x150
[  141.797302][ T8983]  should_fail_ex+0x40c/0x560
[  141.797316][ T8983]  should_failslab+0xa8/0x100
[  141.797329][ T8983]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  141.797338][ T8983]  ? xas_split_alloc+0x142/0x450
[  141.797347][ T8983]  ? xas_split_alloc+0x142/0x450
[  141.797358][ T8983]  xas_split_alloc+0x142/0x450
[  141.797372][ T8983]  __folio_split+0x118a/0x1590
[  141.797389][ T8983]  ? __pfx___folio_split+0x10/0x10
[  141.797401][ T8983]  ? folio_alloc_swap+0x1084/0x1250
[  141.797411][ T8983]  ? folio_alloc_swap+0x26d/0x1250
[  141.797419][ T8983]  shmem_writeout+0x571/0x1790
[  141.797435][ T8983]  ? __pfx_shmem_writeout+0x10/0x10
[  141.797445][ T8983]  ? folio_mapping+0x16f/0x1f0
[  141.797456][ T8983]  ? folio_clear_dirty_for_io+0x162/0x820
[  141.797466][ T8983]  ? try_to_unmap_flush_dirty+0x96/0x100
[  141.797476][ T8983]  shrink_folio_list+0x3588/0x5330
[  141.797496][ T8983]  ? __pfx_shrink_folio_list+0x10/0x10
[  141.797505][ T8983]  ? ktime_get+0x1f5/0x220
[  141.797517][ T8983]  ? unwind_next_frame+0x8f/0x2550
[  141.797533][ T8983]  ? is_bpf_text_address+0x26/0x2b0
[  141.797544][ T8983]  ? __css_rstat_updated+0x235/0x540
[  141.797556][ T8983]  ? do_raw_spin_lock+0x12b/0x2f0
[  141.797567][ T8983]  reclaim_folio_list+0x100/0x430
[  141.797582][ T8983]  ? __pfx_reclaim_folio_list+0x10/0x10
[  141.797597][ T8983]  reclaim_pages+0x452/0x530
[  141.797609][ T8983]  ? __pfx_reclaim_pages+0x10/0x10
[  141.797619][ T8983]  ? do_raw_spin_unlock+0x4d/0x210
[  141.797628][ T8983]  madvise_cold_or_pageout_pte_range+0x1fe5/0x22e0
[  141.797642][ T8983]  ? __lock_acquire+0x683/0x2cf0
[  141.797653][ T8983]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  141.797664][ T8983]  ? __lock_acquire+0x683/0x2cf0
[  141.797678][ T8983]  walk_pgd_range+0x100f/0x1e40
[  141.797702][ T8983]  ? __pfx_walk_pgd_range+0x10/0x10
[  141.797716][ T8983]  __walk_page_range+0x16d/0x720
[  141.797728][ T8983]  ? kernel_text_address+0xa5/0xe0
[  141.797739][ T8983]  ? __kernel_text_address+0xd/0x30
[  141.797748][ T8983]  ? unwind_get_return_address+0x4d/0x90
[  141.797755][ T8983]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  141.797787][ T8983]  walk_page_range_vma_unsafe+0x309/0x410
[  141.797798][ T8983]  ? mlock_drain_local+0x79/0x480
[  141.797832][ T8983]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  141.797844][ T8983]  ? mlock_drain_local+0x79/0x480
[  141.797855][ T8983]  ? walk_page_range_vma+0x6b/0x90
[  141.797864][ T8983]  madvise_vma_behavior+0x2922/0x4340
[  141.797878][ T8983]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  141.797890][ T8983]  ? __lock_acquire+0x683/0x2cf0
[  141.797905][ T8983]  ? do_raw_spin_lock+0x12b/0x2f0
[  141.797916][ T8983]  ? rcu_is_watching+0x15/0xb0
[  141.797928][ T8983]  ? trace_hrtimer_start+0x82/0x200
[  141.797938][ T8983]  ? hrtimer_start_range_ns_common+0x83b/0xb90
[  141.797955][ T8983]  ? finish_task_switch+0x412/0xc60
[  141.797963][ T8983]  ? lockdep_hardirqs_on+0x7a/0x110
[  141.797972][ T8983]  ? rcu_is_watching+0x15/0xb0
[  141.797990][ T8983]  ? mas_prev_slot+0xb76/0xbf0
[  141.798004][ T8983]  ? find_vma_prev+0x123/0x1b0
[  141.798012][ T8983]  ? __pfx_find_vma_prev+0x10/0x10
[  141.798019][ T8983]  ? futex_unqueue+0x22/0x240
[  141.798033][ T8983]  ? __futex_wait+0x358/0x400
[  141.798043][ T8983]  madvise_walk_vmas+0x576/0xb00
[  141.798057][ T8983]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  141.798068][ T8983]  ? blk_start_plug+0x6e/0x1b0
[  141.798079][ T8983]  madvise_do_behavior+0x385/0x540
[  141.798090][ T8983]  ? __pfx_madvise_do_behavior+0x10/0x10
[  141.798103][ T8983]  ? down_read+0x2be/0x330
[  141.798115][ T8983]  do_madvise+0x327/0x3a0
[  141.798125][ T8983]  ? __pfx_do_madvise+0x10/0x10
[  141.798147][ T8983]  ? __se_sys_futex+0x3a8/0x450
[  141.798161][ T8983]  ? rcu_is_watching+0x15/0xb0
[  141.798174][ T8983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.798184][ T8983]  __x64_sys_madvise+0xa6/0xc0
[  141.798195][ T8983]  do_syscall_64+0x174/0x580
[  141.798203][ T8983]  ? trace_irq_disable+0x3b/0x140
[  141.798215][ T8983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.798223][ T8983] RIP: 0033:0x7f4d30f9e159
[  141.798231][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.798237][ T8983] RSP: 002b:00007f4d31dfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  141.798246][ T8983] RAX: ffffffffffffffda RBX: 00007f4d31225fa0 RCX: 00007f4d30f9e159
[  141.798251][ T8983] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  141.798256][ T8983] RBP: 00007f4d3103506b R08: 0000000000000000 R09: 0000000000000000
[  141.798261][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.798265][ T8983] R13: 00007f4d31226038 R14: 00007f4d31225fa0 R15: 00007fff5dd237a8
[  141.798276][ T8983]  </TASK>
[  142.089776][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1282'.
[  142.094914][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.127184][ T8991] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  142.396754][ T9011] loop4: detected capacity change from 0 to 256
[  142.465731][ T9014] loop6: detected capacity change from 0 to 4096
[  142.485587][ T9017] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.529236][ T5703] Bluetooth: hci2: command tx timeout
[  144.119313][ T9050] loop4: detected capacity change from 0 to 512
[  144.129984][ T9050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  144.163204][ T9050] EXT4-fs (loop4): 1 truncate cleaned up
[  144.171696][ T9050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.204019][ T9050] EXT4-fs error (device loop4): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.4.1307: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  144.233655][ T9050] EXT4-fs (loop4): Remounting filesystem read-only
[  144.288501][ T7980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.367766][ T9065] loop4: detected capacity change from 0 to 1764
[  144.608406][ T5703] Bluetooth: hci2: command tx timeout
[  144.760777][ T9103] misc userio: The device must be registered before sending interrupts
[  144.897467][ T9109] loop6: detected capacity change from 0 to 2
[  144.900613][ T9109] jffs2: rp_size unrepresentable
[  145.259069][   T33] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  145.413511][   T33] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  145.416018][   T33] usb 7-1: config 0 has no interface number 0
[  145.419026][   T33] usb 7-1: config 0 interface 8 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  145.424629][   T33] usb 7-1: config 0 interface 8 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.429995][   T33] usb 7-1: config 0 interface 8 has no altsetting 0
[  145.433658][   T33] usb 7-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  145.440712][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.448588][   T33] usb 7-1: config 0 descriptor??
[  145.804407][   T34] audit: type=1326 audit(1789986877.423:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.812047][   T34] audit: type=1326 audit(1789986877.433:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.819466][   T34] audit: type=1326 audit(1789986877.433:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.829381][   T34] audit: type=1326 audit(1789986877.433:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.842837][   T34] audit: type=1326 audit(1789986877.433:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.861853][   T34] audit: type=1326 audit(1789986877.453:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.877662][   T33] uclogic 0003:5543:0045.000A: interface is invalid, ignoring
[  145.883813][   T34] audit: type=1326 audit(1789986877.453:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.901041][   T34] audit: type=1326 audit(1789986877.473:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.907898][   T34] audit: type=1326 audit(1789986877.473:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.4.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d30f9e159 code=0x7ffc0000
[  145.915053][ T9139] loop4: detected capacity change from 0 to 512
[  145.930775][ T9139] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.1338: iget: bad i_size value: 12154757448730
[  145.934942][ T9139] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  145.938359][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  145.943149][    C1] EXT4-fs (loop4): initial error at time 1789986877: ext4_orphan_get:1399: inode 13
[  145.946010][    C1] EXT4-fs (loop4): last error at time 1789986877: ext4_orphan_get:1399: inode 13
[  145.950092][ T9139] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1338: couldn't read orphan inode 13 (err -117)
[  145.953742][ T9139] loop4: lost filesystem error report for type 5 error -117
[  145.955530][ T9139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.979623][ T7980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.009339][ T9148] loop4: detected capacity change from 0 to 8
[  146.011913][ T9148] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  146.031156][ T9150] jffs2: notice: (9150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  146.104885][    T9] usb 7-1: USB disconnect, device number 2
[  146.361734][ T9173] loop4: detected capacity change from 0 to 512
[  146.378458][ T9173] EXT4-fs: Ignoring removed mblk_io_submit option
[  146.395360][ T9173] EXT4-fs: Ignoring removed orlov option
[  146.404475][ T9173] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  146.698805][ T5703] Bluetooth: hci2: command tx timeout
[  147.059522][ T9195] RDS: rds_bind could not find a transport for fe80::26, load rds_tcp or rds_rdma?
[  147.088164][ T9197] loop6: detected capacity change from 0 to 256
[  147.101540][ T9197] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  147.200613][ T9204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.233679][ T9208] loop4: detected capacity change from 0 to 1024
[  147.237629][ T9208] hfsplus: invalid secondary volume header
[  147.245281][ T9208] hfsplus: unable to find HFS+ superblock
[  147.308003][ T5703] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1
[  147.655964][ T9228] Invalid ELF header magic: != ELF
[  148.297275][ T9242] loop6: detected capacity change from 0 to 32768
[  148.330070][ T9242] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.347205][ T9242] XFS (loop6): Ending clean mount
[  149.007790][ T9289] loop4: detected capacity change from 0 to 32768
[  149.016883][ T9289] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1399 (9289)
[  149.100083][ T8806] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.119766][ T9289] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.128078][ T9289] BTRFS info (device loop4): using blake2b checksum algorithm
[  149.241803][ T9289] BTRFS info (device loop4): enabling ssd optimizations
[  149.251174][ T9289] BTRFS info (device loop4): turning on async discard
[  149.256399][ T9289] BTRFS info (device loop4): enabling free space tree
[  149.262947][ T9289] BTRFS info (device loop4): use zstd compression, level 3
[  149.297976][ T9305] loop6: detected capacity change from 0 to 64
[  149.315524][ T9305] MINIX-fs: bad superblock or unable to read bitmaps
[  149.398242][ T9311] Cannot find add_set index 0 as target
[  149.411233][ T7980] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.785341][ T9324] fuse: root generation should be zero
[  150.056553][ T9335] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1413'.
[  150.112308][ T9339] Cannot find add_set index 0 as target
[  150.149945][   T33] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  150.402948][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.415334][   T33] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.470219][   T33] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  150.480811][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  150.487553][   T33] usb 5-1: Product: syz
[  150.511542][   T33] usb 5-1: Manufacturer: syz
[  150.518201][   T33] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected
[  150.526446][   T33] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[  150.550029][ T9347] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.1418'.
[  150.552927][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'.
[  150.557539][ T9347] netlink: 1088 bytes leftover after parsing attributes in process `syz.1.1418'.
[  150.561028][ T9347] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1418'.
[  151.740667][ T9331] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  151.753541][   T33] usb 5-1: USB disconnect, device number 6
[  151.781541][   T33] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  151.785206][   T33] iuu_phoenix 5-1:1.0: device disconnected
[  153.203077][ T9437] loop4: detected capacity change from 0 to 32768
[  153.376278][ T9459] ima: policy update failed
[  153.378654][   T34] audit: type=1802 audit(1789986884.993:153): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1457" res=0 errno=0
[  153.427461][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'.
[  154.075945][ T9482] macsec1: entered allmulticast mode
[  154.081382][ T9482] ip6gretap0: entered allmulticast mode
[  154.598862][ T5776] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  154.753536][ T5776] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.758278][ T5776] usb 7-1: config 0 interface 0 has no altsetting 0
[  154.761636][ T5776] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  154.764703][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.770185][ T5776] usb 7-1: config 0 descriptor??
[  154.948372][ T2298] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  155.098400][ T2298] usb 5-1: Using ep0 maxpacket: 8
[  155.103181][ T2298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.108605][ T2298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  155.111982][ T2298] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  155.115709][ T2298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  155.119705][ T2298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  155.123233][ T2298] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  155.126158][ T2298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.132310][ T2298] hub 5-1:1.0: bad descriptor, ignoring hub
[  155.138402][ T2298] hub 5-1:1.0: probe with driver hub failed with error -5
[  155.142608][ T2298] cdc_wdm 5-1:1.0: skipping garbage
[  155.147310][ T2298] cdc_wdm 5-1:1.0: skipping garbage
[  155.150840][ T2298] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  155.185507][ T5776] input: HID 06cb:2968 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:06CB:2968.000B/input/input6
[  155.263686][ T5776] itetech 0003:06CB:2968.000B: input,hidraw0: USB HID v0.00 Joystick [HID 06cb:2968] on usb-dummy_hcd.6-1/input0
[  155.383862][ T5776] usb 7-1: USB disconnect, device number 3
[  155.449244][ T2298] usb 5-1: USB disconnect, device number 7
[  155.885353][ T9512] loop4: detected capacity change from 0 to 512
[  155.891417][ T9512] EXT4-fs: Ignoring removed bh option
[  155.903903][ T9512] EXT4-fs: test_dummy_encryption requires encrypt feature
[  155.962104][ T9514] loop4: detected capacity change from 0 to 4096
[  156.059157][ T9522] overlayfs: failed to clone upperpath
[  156.317761][ T5703] Bluetooth: hci0: Malformed MSFT vendor event: 0x02
[  156.663996][ T9567] loop6: detected capacity change from 0 to 1024
[  156.673105][ T9567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.696389][ T8806] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.748141][ T9574] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  156.750136][ T9574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  156.754212][ T9574] vhci_hcd vhci_hcd.0: Device attached
[  156.928581][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  156.988975][ T1283] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  156.992090][   T10] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  157.152625][ T1283] usb 7-1: config 0 has no interfaces?
[  157.154862][ T1283] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  157.158024][ T1283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.163650][ T1283] usb 7-1: config 0 descriptor??
[  157.372936][ T5776] usb 7-1: USB disconnect, device number 4
[  157.383330][ T9575] usbip_core: unknown command
[  157.384916][ T9575] vhci_hcd: unknown pdu 0
[  157.386276][ T9575] usbip_core: unknown command
[  157.392579][ T5762] vhci_hcd vhci_hcd.6: stop threads
[  157.394323][ T5762] vhci_hcd vhci_hcd.6: release socket
[  157.398771][ T5762] vhci_hcd vhci_hcd.6: disconnect device
[  157.887398][ T9609] overlayfs: failed to clone upperpath
[  157.909750][ T9595] binder: 9593:9595 ioctl 4018620d 0 returned -22
[  157.914752][   T34] audit: type=1800 audit(1789986889.523:154): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1516" name="product" dev="configfs" ino=21924 res=0 errno=0
[  158.128664][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  158.456490][ T9627] netlink: Conntrack attr has 1 unknown bytes
[  158.462080][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.509537][ T9629] loop6: detected capacity change from 0 to 8
[  158.536438][ T9629] SQUASHFS error: Failed to read block 0x6e6: -5
[  158.540386][ T9629] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  158.544118][ T9629] SQUASHFS error: Unable to read directory block [631:26]
[  159.248217][ T9665] loop6: detected capacity change from 0 to 2048
[  159.306231][ T9668] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.632037][ T1283] Process accounting resumed
[  159.665130][ T9687] Process accounting resumed
[  159.747653][ T9678] loop6: detected capacity change from 0 to 32768
[  160.105616][ T9717] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1568'.
[  160.111664][ T9717] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1568'.
[  160.211855][ T9723] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  160.614856][ T9735] loop4: detected capacity change from 0 to 32768
[  160.633037][ T9735] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  160.662614][ T9735] XFS (loop4): Ending clean mount
[  161.411033][ T7980] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  194.380665][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  194.383922][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  232.292178][ T5703] Bluetooth: hci0: command 0x0406 tx timeout
[  247.648470][ T5704] Bluetooth: hci1: command 0x0406 tx timeout
[  255.813720][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  255.817869][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  263.008538][ T5703] Bluetooth: hci2: command 0x0406 tx timeout
[  317.252355][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  317.254848][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  378.691069][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  378.694747][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  440.129637][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  440.131572][ T1374] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
10:39:58  Registers:
info registers vcpu 0

CPU#0
RAX=00000000003629e7 RBX=ffffffff819b3450 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e22723f RDI=ffffffff8c4bb580 RBP=ffffffff8e807eb8 RSP=ffffffff8e807de0
R8 =ffff8881210338db R9 =1ffff1102420671b R10=dffffc0000000000 R11=ffffed102420671c
R12=0000000000000000 R13=1ffffffff1d11de8 R14=1ffffffff1d00fc4 R15=dffffc0000000000
RIP=ffffffff8bcf812f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d959000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556aae3ab600 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000268829 RBX=ffffffff819b333c RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e22723f RDI=ffffffff8c4bb580 RBP=ffffc90000197f10 RSP=ffffc90000197e40
R8 =ffff88823c6338db R9 =1ffff110478c671b R10=dffffc0000000000 R11=ffffed10478c671c
R12=0000000000000000 R13=1ffff1102c096000 R14=1ffff92000032fd0 R15=dffffc0000000000
RIP=ffffffff8bcf812f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f59000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556ac724b028 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555590ab3b08
XMM02=08020013ea030188 020013e80302f602 XMM03=02408080820013ee 0303c0020013ec03
XMM04=0200040a13d4030e 40a080820013ee03 XMM05=0101800404a7e208 0001000000080606
XMM06=01409c3013c00002 00040a13d4030e40 XMM07=a080820013ee0302 408080820013ee03
XMM08=03c0020013ec0308 020013ea03018802 XMM09=2064326666316561 3966666666666666
XMM10=6f6d5f44495f4555 51494e555f5f2072 XMM11=666666660a393535 33315f6f666e6964
XMM12=66660a3934363331 5f6f666e69646f6d XMM13=7220363331313265 6139666666666666
XMM14=646f6d5f44495f45 5551494e555f5f20 XMM15=66666666660a3035 3633315f6f666e69
