last executing test programs:

2m38.452392548s ago: executing program 0 (id=86):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000001a40))

2m38.362244898s ago: executing program 0 (id=87):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000000)=0x10, 0x4)

2m38.361829314s ago: executing program 1 (id=88):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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")
creat(&(0x7f0000000280)='./file1\x00', 0x0)

2m38.282779136s ago: executing program 0 (id=89):
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
timer_delete(r0)

2m38.282509442s ago: executing program 1 (id=90):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodecompose,umask=00000000000000000000001,barrier,force,force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c7300a00000000000002c6465636f6d706f73652c63726561746f723def6a74152c00"], 0xfc, 0x6e0, &(0x7f0000000580)="$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")

2m38.168287803s ago: executing program 0 (id=91):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@nojournal_checksum}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000001400)="$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")
mkdir(&(0x7f0000000140)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1d)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000200)='./file1\x00', 0x2)

2m38.10112891s ago: executing program 1 (id=93):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1eb}, 0x94)

2m37.95165034s ago: executing program 1 (id=95):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2m37.889111681s ago: executing program 0 (id=96):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2m37.785842176s ago: executing program 1 (id=97):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x1d3)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)

2m34.859455607s ago: executing program 0 (id=110):
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x300}, 0x8)

2m34.859273078s ago: executing program 1 (id=111):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

2m34.601688859s ago: executing program 32 (id=111):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

2m34.552039978s ago: executing program 33 (id=110):
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={0xffffffffffffffff, 0x300}, 0x8)

2m26.121729576s ago: executing program 3 (id=149):
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty, 0x3ff}, 0x1c)

2m26.032413356s ago: executing program 3 (id=151):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0xa, 0x4e22, 0xa, @local, 0x6}, 0xffffffffffffffff, {[0x0, 0xffffff9f, 0x7, 0x1a4000, 0x3, 0x7, 0x0, 0x8001]}}, 0x5c)

2m25.931655335s ago: executing program 3 (id=153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba000400080000000000020000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029000edd"], 0x38}}, 0x0)

2m25.406340732s ago: executing program 3 (id=157):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m25.107013991s ago: executing program 3 (id=158):
r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)

2m23.687832415s ago: executing program 3 (id=171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12)

2m23.418767863s ago: executing program 34 (id=171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3}, 0x12)

2m14.068675555s ago: executing program 4 (id=224):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000300), &(0x7f0000000600)='%pK    \x00'}, 0x20)

2m13.136774284s ago: executing program 4 (id=226):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

2m12.209943892s ago: executing program 4 (id=230):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

2m12.126993652s ago: executing program 4 (id=232):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r0)

2m11.867499338s ago: executing program 4 (id=236):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

2m11.539412953s ago: executing program 4 (id=241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030005ac0f00040005000500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804)

2m11.221493648s ago: executing program 35 (id=241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030005ac0f00040005000500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804)

1m17.474182817s ago: executing program 6 (id=851):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}})

1m17.3662288s ago: executing program 6 (id=854):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000004c0), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m17.365857984s ago: executing program 6 (id=855):
r0 = syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x965a, &(0x7f0000001600)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000000f40200002d590000000000000700000000000000fd8000000000000001000000000000000000000000000000000000000000000000000000e0"])

1m16.879729126s ago: executing program 6 (id=862):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
creat(&(0x7f00000001c0)='./file0\x00', 0x8)

1m16.472785426s ago: executing program 6 (id=863):
pipe2(&(0x7f0000000200)={<r0=>0x0, 0x0}, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}})
splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)

1m15.9452217s ago: executing program 6 (id=864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0)

1m15.564125559s ago: executing program 36 (id=864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0)

3.559173086s ago: executing program 5 (id=1693):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syncfs(r0)

3.420972791s ago: executing program 5 (id=1694):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2b, 0x801, 0x0)
splice(r1, 0x0, r0, 0x0, 0x9, 0x0)

3.370726915s ago: executing program 5 (id=1695):
socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2103, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
close_range(r3, r3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000900)={0xb, @capture={0x0, 0x1, {0x0, 0xd}, 0x3, 0x4}})
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
unshare(0x40020000)

2.758985765s ago: executing program 2 (id=1702):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000a80)={[{@barrier_val}, {@resuid}, {@noblock_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000b00)={0x4, 0x4, 0x5, 0x5})

2.618332451s ago: executing program 2 (id=1705):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@private=0xa010100, @empty}, 0x8)

2.559916652s ago: executing program 2 (id=1706):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140)={[{@filestreams}, {@noquota}, {@nouuid}, {@pquota}, {@bsdgroups}, {@dax}, {@sysvgroups}, {@attr2}, {@dax_always}]}, 0x1, 0x9799, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBpKTEJCVEkQ5FlBQlBGlJARFQOpRQQRFQQQEF6e7uku7u7u54Pxs2qNsLDuf3nv/Bw3VdH/esWTFr7nV/n/tx1jzDWssuuOS8AwPjDLzdO6f/6Pw971pxqTEX3fCE3QffuO8uiz067OKR3z4Zd+5hp/MMO513YGBg0LD7GfT2ZYPnOv6EEQYGDwz93z8aY9TRRhhjYGC0YWeH3c/AbG+fjH7QO7d7c7h4oFMM/XY7v/3vrcYceidDP1l+pdfXGxgYGPJPXz90XDP82wOVtuw8Cy34D6t33UYYdvWgf1z31ungt/+NfsDAwOj7Dbz39jH0tiP909f+bzb0e44z1cDSd30I3/v/XMvOs9Aiw/kPXYsjDrtstqFrfPg1aGz47XyXJdd+eNgUDho2cYP/ab18GNv9/1PLzrPgogPvvY4HFltgi4fefGu/OXj+gYHBCwwMDF5wYGDwQh+2R/3P9KFufFVVVfWhNM+8Mw99zj7CcD8PDHnn51r6ufDi12a8b2Bg8GJvP08cvNI7zwWrqqqqqqqq6j+zeeadeT54/j/O+z3/n+K07cft+X9VVVVVVVXV/50WmWfemYc+1x/u+f9E7/f8/6lHjjjw7b/9n3u2t7/qjQ/3QVRVVVVVVVXV+7bgIvj8f4r3e/5/6fFTXNHz/6qqqqqqqqr/Oy3x5ptvbvVPr7M37OLp3rmenv+f8eAdK3xoA66qqqqqqqqq/3ZvPH7qmf94zffJBoZ7vfe3GvZ7gUFHn33VVR/aQP8zGvTvvw/Z+sMe0/+/DXUecugUAwPrLf1hD6U+hP7PvFZ9/X9S/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7j2O/7/7+v9nHLvKO+8F/+lpZr7p1H985Vvv/T94sUUe3+ZDGvqH0Uf1+P/AWoMGBob5jrPWwMDAYvMssdR0AwMDp9408zRTD7x73exDr5tzvBHfeoP4d/4zkQXG5Tveesq3T4duKAPjv3sfR791/4u8uf+Ig4YbxD817okHHrjmsi/OMvzptO/9OEZ497MxT3jknf+WZYThbjTkPb74nft/57EM7zxs7NMNHfv0G6+7wfQbbbb5F9Zad+U1VltjtfXmmGnWGWeZY45ZZ51+9bXWWW2Gtz++15xN8dbH+T7InI0x/Jw9Ps8/z9nwj+295myK95+zt+5xj0uGfO2dORv835yz+d5/zqZYa9g3GnfukQZWemtuBg0MjDv/SAObDj0z4ygDA+MuMOy2Ew297VfGG2FgYLd/PNChn43y7jY4aOuht1l2wSXnfXs3NTDwj9N/9B7vZz/ysJHPPex0nmGn8779bcYZ+MemOHiu408YYehc/Mt0jDHqaCOMMTAw2rCzw+5nYI63T0Y77Z3bvcf7rA830LdeZmXnt/+91ZgDAwOjD/1kspXP2GHo1P8vvE/7/9P///+b1+yD3t0eBw37N+w2b3vNs9Ai//heb03D0Lkbcdhlsw01+R9+a/t/6d/GO8WQgSneZ7zv87o4b0Xb1zqnTrDt/9Tr4tB4J3qf8b7P6/i+53iXuW/vh9++q/+x8Q63r1v0rY9zf5B93cD77+tGpDtY7fJJh9/XfeO9h/gvu8t35miU4W70Xvu6ifaZfOuh9z/3++/rFh069pH+ZV83wsDAuPO9s68buuNbcKSB3YaemWnomYVGGjh46JmZ3zoz6sDZQ898cZX111l16AUL//t2MN2gf/kDTVhnCw63zgb902MfNNzfdw5++3T0A955D6f32G8OGvaw/st9BW2347zPeN/n/adwnodetuoxQyb4n3r/KRrvkPcf73u9X/Z7jnfXF8646394vO+us5H+aboW/iDrbIp/XWdDH+KI/7QyPujPYavC7d/+fKJ3722TLR9592eKkYa73//qZ4qF33+djbPWcF+3034Dg95vbhb6IHMzyb/tg7b557n5oD9vTTfV29eP+D5zM8ocK077ztyM/N+cm4X+u3Mz98CI/zo3gwcWGBgYmHrY/mHBDzI3E73/3HzQ7WY0uP3bn6/27kXz73Lohe/MzfBz8V/NzYL/3bmZ4t3tZuq3rptyhIGRRx7YdOWNN95wxrc/vnN2prc/vv8anP+DzOU4/zNzOfHg95rLf2yqY9x3xQH/xRr8t336O/c//393LgfencuBtYZfLPWfWr//c5e/u/zd5e8uf3f5u8tf3Hsc/3/39f/3GmfO3Yf9cmOkKyafcMcPe7wfch/p4//DfP/l+P+OE05+xQgD7173vsdn377Nf+Tx2dnePhn9oHduN/zxQR7oex+f3W+O2bb/Xzo++//UO2v1A/werv2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9x7HP+f4Z2/A3hwxsWfGXYgdKRHt1tu8Q97vB9yH+nj/8N8/+X4/+LLbffoCAPvXve+x//fvo3j+P89ry6463/y8f931mrH/+u/KH93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/cex//nfufvAI44Yu/N3/l7gOvG3fnUD3u8H3If1eP/vf+/t/b/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3HDjv8PDPf2lt9uu8Dg+P//7d7Df/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9O/pjFf9n8MYv/d/PHLP7fyx+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL//fzxyz+K+WPWfxXzh+z+P8gf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/2H+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/1H+mMV/w/wxi/9G+WMW/43zxyz+P84fs/hvkj9m8f9J/pjFf9P8MYv/ZvljFv/N88cs/j/NH7P4/yx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/z/PHLP6/yB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/y/zxyz+v8ofs/j/On/M4r9b/pjFf/f8MYv/b/LHLP6/zR+z+O+RP2bx/13+mMV/z/wxi/9e+WMW/73zxyz+v88fs/j/IX/M4v/H/DGL/z75Yxb/ffPHLP5/yh+z+P85f8ziv1/+mMV///wxi/8B+WMW/7/kj1n8/5o/ZvE/MH/M4n9Q/pjF/2/5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/j/PX/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/oMG8scs/oPyxyz+I+SPWfxHzB+z+A/OH7P4j5Q/ZvEfOX/M4j9K/pjFf0j+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/j+WPWfzHzx+z+E+QP2bx/3j+mMV/wvwxi/9E+WMW/0/kj1n8J84fs/h/Mn/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8P5U/ZvGf8h3/IR/SuP5Ds/hP1frHLP5T549Z/KfJH7P4T5s/ZvH/dP6YxX+6/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8ofs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/+1f+B//Vx/Ydm8T+49Y9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj8m8X+r/P89if+gy/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv4j04UW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxP+tT/P/9yz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I8NOn/PkQYGBj7y/jPmj1nW/0z5Yxb/mfPHLP6z5I9Z/L+UP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/L+ePWfznzB+z+H8lf8zi/9X8MYv/XPljFv+v5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f96/pjF/xv5Yxb/RfPHLP7fzB+z+C+WP2bx/1b+mMX/2/ljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/O/ljFv9l88cs/t/NH7P4fy9/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP7fzx+z+K+UP2bxXzl/zOL/g/yxj6j/kIHh/FfJH/uI+r/VP/uvmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8wfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8ofs/hvmD9m8d8of8ziv3H+mMX/x/ljFv9N8scs/j/JH7P4b5o/ZvHfLH/M4r95/pjF/6f5Yxb/n+WPWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/ef6Yxf8X+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx/2X+mMX/V/ljFv9f549Z/HfLH7P4754/ZvH/Tf6Yxf+3+WMW/z3yxyz+v8sfs/jvmT9m8d8rf8ziv3f+mMX/9/ljFv8/5I9Z/P+YP2bx3yd/zOK/b/6Yxf9P+WMW/z/nj1n898sfs/jvnz9m8T8gf8zi/5f8MYv/X/PHLP4H5o9Z/A/KH7P4/y1/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv+/549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjEf8SB/DGL/6D8MYv/CPljFv8R88cs/oPzxyz+I+WPWfxHzh+z+I+SP2bxH5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMX/Y/ljFv/x88cs/hPkj1n8P54/ZvGfMH/M4j9R/pjF/xP5Yxb/ifPHLP6fzB+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/T+WPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/6fzxyz+0+WPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9S/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5w/ZvGfM3/M4v+V/DGL/1fzxyz+c+WPWfy/lj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf/r+WMW/2/kj1n8F80fs/h/M3/M4r9Y/pjF/1v5Yxb/b+ePWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+SPWfyXzR+z+H83f8zi/738MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/P3/M4r9S/pjFf+X8MYv/D/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8f5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/j/DGL/yb5Yxb/n+SPWfw3zR+z+G+WP2bx3zx/zOL/0/wxi//P8scs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P88f8zi/4v8MYv/TvljFv+d88cs/rvkj1n8d80fs/j/Mn/M4v+r/DGL/6/zxyz+u+WPWfx3zx+z+P8mf8zi/9v8MYv/HvljFv/f5Y9Z/PfMH7P475U/ZvHfO3/M4v/7/DGL/x/yxyz+f8wfs/jvkz9m8d83f8zi/6f8MYv/n/PHLP775Y9Z/PfPH7P4H5A/ZvH/S/6Yxf+v+WMW/wPzxyz+B+WPWfz/lj9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/9/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/7KPrP/K/+D+UP/bR9f/X9f9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/JvEfPJA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8sf8ziP37+mMV/gvwxi//H88cs/hPmj1n8J8ofs/h/In/M4j9x/pjF/5P5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4v+p/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvH/dP6YxX+6/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X8ofs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/yxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/e/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/EcayB+z+A/KH7P4j5A/ZvEfMX/M4j84f8ziP1L+mMV/5Pwxi/8o+WMW/yH5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5Y/ZvEfP3/M4j9B/pjF/+P5Yxb/CfPHLP4T5Y9Z/D+RP2bxnzh/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bx/1T+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+H86f8ziP13+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv8v5Y9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8v5Yxb/OfPHLP5fyR+z+H81f8ziP1f+mMX/a/ljFv+588cs/vPkj1n8580fG+Y/yrCzH1n/+fLHLOt//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bx/3r+mMX/G/ljFv9F88cs/t/MH7P4L5Y/ZvH/Vv6Yxf/b+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf87+WMW/2Xzxyz+380fs/h/L3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/t/PH7P4r5Q/ZvFfOX/M4v+D/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF/4f5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/0f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zh/zOK/Sf6Yxf8n+WMW/03zxyz+m+WPWfw3zx+z+P80f8zi/7P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+P88fs/j/In/M4r9T/pjFf+f8MYv/LvljFv9d88cs/r/MH7P4/yp/zOL/6/wxi/9u+WMW/93zxyz+v8kfs/j/Nn/M4r9H/pjF/3f5Yxb/PfPHLP575Y9Z/PfOH7P4/z5/zOL/h/wxi/8f88cs/vvkj1n8980fs/j/KX/M4v/n/DGL/375Yxb//fPHLP4H5I9Z/P+SP2bx/2v+mMX/wPwxi/9B+WMW/7/lj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOL/9/wxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+T+I88kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyx/zOI/fv6YxX+C/DGL/8fzxyz+E+aPWfwnyh+z+H8if8ziP3H+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8zi/6n8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8f90/pjFf7r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyh+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5fzxyz+c+aPWfy/kj9m8f9q/pjFf678MYv/1/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/PX/M4v+N/DGL/6L5Yxb/b+aPWfwXyx+z+H8rf8zi/+38MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi/538MYv/svljFv/v5o9Z/L+XP2bxXy5/7CPqP2g465GXzx/7iPq/1T+v/xXyxyz+K+aPWfy/nz9m8V8pf8ziv3L+mMX/B/ljFv9V8scGnT9o2Mx8tP1XzR+zrP/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/1/mj1n8f5U/ZvH/df6YxX+3/DGL/+75Yxb/3+SPWfx/mz9m8d8jf8zi/7v8MYv/nvljFv+98scs/nvnj1n8f58/ZvH/Q/6Yxf+P+WMW/33yxyz+++aPWfz/lD9m8f9z/pjFf7/8MYv//vljFv8D8scs/n/JH7P4/zV/zOJ/YP6Yxf+g/DGL/9/yxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/e/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwHRoXLLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9lIH/M4j8of8ziP0L+mMV/xPwxi//g/DGL/0j5Yxb/kfPHLP6j5I9Z/Ifkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzX9YQ/7lnMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/6X8MYv/rPljFv/Z8scs/rPnj1n858gfs/h/OX/M4j9n/pjF/yv5Yxb/r+aPWfznyh+z+H8tf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/9fzxyz+38gfs/gvmj9m8f9m/pjFf7H8MYv/t/LHLP7fzh+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7fyR+z+C+bP2bx/27+mMX/e/ljFv/l8scs/svnj1n8V8gfs/ivmD9m8f9+/pjFf6X8MYv/yvljFv8f5I9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/j/MH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/KH7P4b5g/ZvHfKH/M4r9x/pjF/8f5Yxb/TfLHLP4/yR+z+G+aP2bx3yx/zOK/ef6Yxf+n+WMW/5/lj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3QP+2CIv/jmljFv+f549Z/H+RP2bx3yl/zOK/c/6YxX+Xt/1ff/PDGtd/aBb/XVv/mMX/l/ljFv9f5Y9Z/H+dP2bx3y1/zOK/e/6Yxf83+WMW/9/mj1n898gfs/j/Ln/M4r9n/pjFf6/8MYv/3vljFv/f549Z/P+QP2bx/2P+mMV/n/wxi/+++WMW/z/lj1n8/5w/ZvHfL3/M4r9//pjF/4D8MYv/X/LHLP5/zR+z+B+YP2bxPyh/zOL/t/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/IQP5Yxb/QfljFv8R8scs/iPmj1n8B+ePWfxHyh+z+I+cP2bxHyV/zOI/JH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/6X8MYv/rPljFv/Z8scs/rPnj1n858gfs/h/OX/M4j9n/pjF/yv5Yxb/r+aPWfznyh+z+H8tf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/9fzxyz+38gfs/gvmj9m8f9m/pjFf7H8MYv/t/LHLP7fzh+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7fyR+z+C+bP2bx/27+mMX/e/ljFv/l8scs/svnj1n8V8gfs/ivmD9m8f9+/pjFf6X8MYv/yvljFv8f5I9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/j/MH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/KH7P4b5g/ZvHfKH/M4r9x/pjF/8f5Yxb/TfLHLP4/yR+z+G+aP2bx3yx/zOK/ef6Yxf+n+WMW/5/lj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx/3n+mMX/F/ljFv+d8scs/jvnj1n8d8kfs/jvmj9m8f9l/pjF/1f5Yxb/X+ePWfx3yx+z+O+eP2bx/03+mMX/t/ljFv898scs/r/LH7P475k/ZvHfK3/M4r93/pjF//f5Yxb/P+SPWfz/mD9m8d8nf8ziv2/+mMX/T/ljFv8/549Z/PfLH7P4758/ZvE/IH/M4v+X/DGL/1/zxyz+B+aPWfwPyh+z+P8tf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvAfNHhgyBP5Ywb/oev/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYn/qAP5Yxb/QfljFv8R8scs/iPmj1n8B+ePWfxHyh+z+I+cP2bxHyV/zOI/JH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//H8scs/uPnj1n8J8gfs/h/PH/M4j9h/pjFf6L8MYv/J/LHLP4T549Z/D+ZP2bxnyR/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP6fyh+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/T+ePWfynyx+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/9PljFv8ZBga2+rCG9J+cxX/G1j9m8Z8pf8ziP3P+mMV/lvwxi/+X8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8zi/+X8MYv/nPljFv+v5I9Z/L+aP2bxnyt/zOL/tfwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP5fzx+z+H8jf8ziv2j+mMX/m/ljFv/F8scs/t/KH7P4fzt/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fyd/zOK/bP6Yxf+7+WMW/+/lj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/+/ljFv+V8scs/ivnj1n8f5A/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/j/MH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/KH/M4r9h/pjFf6P8MYv/xvljFv8f549Z/DfJH7P4/yR/zOK/af6YxX+z/DGL/+b5Yxb/n+aPWfx/lj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/n+WMW/1/kj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMX/l/ljFv9f5Y9Z/H+dP2bx3y1/zOK/e/6Yxf83+WMW/9/mj1n898gfs/j/Ln/M4r9n/pjFf6/8MYv/3vljFv/f549Z/P+QP2bx/2P+mMV/n/wxi/+++WMW/z/lj1n8/5w/ZvHfL3/M4r9//pjF/4D8MYv/X/LHLP5/zR+z+B+YP2bxPyh/zOL/t/wxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/P+eP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5YxL/0Qbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5Y9Z/MfPH7P4T5A/ZvH/eP6YxX/C/DGL/0T5Yxb/T+SPWfwnzh+z+H8yf8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfw/lT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+n84fs/hPlz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/0v5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/cv6YxX/O/DGL/1fyxyz+X80fs/jPlT9m8f9a/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/6/nj1n8v5E/ZvFfNH/M4v/N/DGL/2L5Yxb/b+WPWfy/nT9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/kz9m8V82f8zi/938MYv/9/LHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/9/DGL/0r5Yxb/lfPHLP4/yB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/H+YP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+UP2bx3zB/zOK/Uf6YxX/j/DGL/4/zxyz+m+SPWfx/kj9m8d80f8ziv1n+mMV/8/wxi/9P88cs/j/LH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi//P8MYv/L/LHLP475Y9Z/HfOH7P475I/ZvHfNX/M4v/L/DGL/6/yxyz+v84fs/jvlj9m8d89f8zi/5v8MYv/b/PHLP575I9Z/H+XP2bx3zN/zOK/V/6YxX/v/DGL/+/zxyz+f8gfs/j/MX/M4r9P/pjFf9/8MYv/n/LHLP5/zh+z+O+XP2bx3z9/zOJ/QP6Yxf8v+WMW/7/mj1n8D8wfs/gflD9m8f9b/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+f88fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxif/oA/ljFv9B+WMW/xHyxyz+I+aPWfwH549Z/EfKH7P4j5w/ZvEfJX/M4j8kf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/8fyxyz+4+ePWfwnyB+z+H88f8ziP2H+mMV/ovwxi/8n8scs/hPnj1n8P5k/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv8p8scs/p/KH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv9P549Z/KfLH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/pfwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H85f8ziP2f+mMX/K/ljFv+v5o9Z/OfKH7P4fy1/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/1/PHLP7fyB+z+C+aP2bx/2b+mMV/sfwxi/+38scs/t/OH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/t/JH7P4L5s/ZvH/bv6Yxf97+WMW/+Xyxyz+y4+aP2XxX6H1j1n8V8wfs/h/P3/M4r9S/pjFf+X8MYv/D/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8f5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/j/DGL/yb5Yxb/n+SPWfw3zR+z+G+WP2bx3zx/zOL/0/wxi//P8scs/lvkj1n8t8wfs/hvlT9m8d9a5j/KB7ydxX8bmf8HzeK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+eP2bx/0X+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx/mT9m8f9V/pjF/9f5Yxb/3fLHLP67549Z/H+TP2bx/23+mMV/j/wxi//v8scs/nvmj1n898ofs/jvnT9m8f99/pjF/w/5Yxb/P+aPWfz3yR+z+O+bP2bx/1P+mMX/z/ljFv/98scs/vvnj1n8D8gfs/j/JX/M4v/X/DGL/4H5Yxb/g/LHLP5/yx+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPyxd/wHhgwMfJT9T88fs6z/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/7/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMM/+ffK4T8w+qNtBZjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/McYyB+z+A/KH7P4j5A/ZvEfMX/M4j84f8ziP1L+mMV/5Pwxi/8o+WMW/yH5Yxb/UfPHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8P5Y/ZvEfP3/M4j9B/pjF/+P5Yxb/CfPHLP4T5Y9Z/D+RP2bxnzh/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bx/1T+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+H86f8ziP13+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv8v5Y9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/8v5Yxb/OfPHLP5fyR+z+H81f8ziP1f+mMX/a/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfy/nj9m8f9G/pjFf9H8MYv/N/PHLP6L5Y9Z/L+VP2bx/3b+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bx/07+mMV/2fwxi/9388cs/t/LH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/9/PHLP4r5Y9Z/FfOH7P4/yB/zOK/Sv6YxX9Vo/8HeMAW/9WM/h8gi//q+WMW/zXyxyz+a+aPWfzXyh+z+P8wf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8of8ziv2H+mMV/o/wxi//G+WMW/x/nj1n8N8kfs/j/JH/M4r9p/pjFf7P8MYv/5vljFv+f5o9Z/H+WP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/+f5Yxb/X+SPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf+X+WMW/1/lj1n8f50/ZvHfLX/M4r97/pjF/zf5Yxb/3+aPWfz3yB+z+P8uf8ziv2f+mMV/r/wxi//e+WMW/9/nj1n8/5A/ZvH/Y/6YxX+f/DGL/775Yxb/P+WPWfz/nD9m8d8vf8ziv3/+mMX/gPwxi/9f8scs/n/NH7P4H5g/ZvE/KH/M4v+3/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8/54/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv8xB/LHLP6D8scs/iPkj1n8R8wfs/gPzh+z+I+UP2bxHzl/zOI/Sv6YxX9I/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iP9YH8X/r/blz/oVn8x279Yxb/cfLHLP7j5o9Z/MfLH7P4fyx/zOI/fv6YxX+C/DGL/8fzxyz+E+aPWfwnyh+z+H8if8ziP3H+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8zi/6n8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8f90/pjFf7r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyh+z+M+aP2bxny1/zOI/e/7Yv/gPu2ycD3lM/3/1Hv5z5I9Z1v+X88cs/nPmj1n8v5I/ZvH/av6YxX+u/DGL/9fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fz1/zOL/jfwxi/+i+WMW/2/mj1n8F8sfs/h/K3/M4v/t/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+d/DGL/7L5Yxb/7+aPWfy/lz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/+/nj1n8V8ofs/ivnD9m8f9B/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/8P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/6P8MYv/hvljFv+N8scs/hvnj1n8f5w/ZvHfJH/M4v+T/DGL/6b5Yxb/zfLHLP6b549Z/H+aP2bx/1n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/n+ePWfx/kT9m8d8pf8ziv3P+mMV/l/wxi/+u+f9T/5gJi/8v88cs/r/KH7P4/zp/zOK/W/6YxX/3/LGPqv+Q4fx/kz/2UfUfGM7/t/ljFv898scs/r/LH7P475k/ZvHfK3/M4r93/pjF//f5Yxb/P+SPWfz/mD9m8d8nf8ziv2/+mMX/T/ljFv8/549Z/PfLH7P4758/ZvE/IH/M4v+X/DGL/1/zxyz+B+aPWfwPyh+z+P8tf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/v+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/4PD+W/8vj+s/NIv/Q61/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxH2sgf8ziPyh/zOI/Qv6YxX/E/DGL/+D8MYv/SPljFv+R88cs/qPkj1n8h+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvH/WP6YxX/8/DGL/wT5Yxb/j+ePWfwnzB+z+E+UP2bx/0T+mMV/4vwxi/8n88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/U/ljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8zi/+n8MYv/dPljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+UP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/L+ePWfznzB+z+H8lf8zi/9X8MYv/XPljFv+v5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f96/pjF/xv5Yxb/RfPHLP7fzB+z+C+WP2bx/1b+mMX/2/ljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/O/ljFv9l88cs/t/NH7P4fy9/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP7fzx+z+K+UP2bxXzl/zOL/g/wxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf+H+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8ziv0n+mMX/J/ljFv9N88cs/pvlj1n8N88fs/j/NH/M4v+z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP6/zB+z+P8qf8zi/+v8MYv/bvljFv/d88cs/r/JH7P4/zZ/zOK/R/6Yxf93+WMW/z3zxyz+e+WPWfz3zh+z+P8+f8zi/4f8MYv/H/PHLP775I9Z/PfNH7P4/yl/zOL/5/wxi/9++WMW//3zxyz+B+SPWfz/kj9m8f9r/pjF/8D8MYv/QfljFv+/5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zi//f8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfk/iPPZA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8sf8ziP37+mMV/gvwxi//H88cs/hPmj1n8J8ofs/h/In/M4j9x/pjF/5P5Yxb/SfLHLP6T5v//Y+f+w7Wu6zuO3/wmytmnXZd6zTYcGnNtRiKjUQtRUTz+OGWimb9Rj0CCyA8JMAQ2Wqlj06VuFmxi4ZizVUscbq5fKxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+186ft18/14/ME593183ynP6+V9e3FdhbL0/zn9Q1n6D9c/lKX/UfqHsvT/ef1DWfqP0D+Upf/R+oey9D9G/1CW/q/RP5Sl/0j9Q1n6/4L+oSz9j9U/lKX/L+ofytL/tfqHsvT/Jf1DWfr/sv6hLP2P0z+Upf/r9A9l6T9K/1CW/q/XP5Sl//H6h7L0H61/KEv/E/QPZek/Rv9Qlv6/on8oS/+x+oey9H+D/qEs/X9V/1CW/uP0D2Xp/0b9Q1n6v0n/UJb+v6Z/KEv/N+sfytJ/vP6hLP1P1D+Upf8E/UNZ+p+kfyhL/5P1D2Xpf4r+oSz9J+ofytL/VP1DWfqfpn8oS/9J+oey9D9d/1CW/m36h7L0P0P/UJb+Z+ofytL/LP1DWfqfrX8oS/92/UNZ+r9F/1CW/m/VP5Sl/zn6h7L0f5v+oSz9z9U/lKX/ZP1DWfqfp38oS//z9Q9l6f92/UNZ+l+gfyhL/3foH8rS/0L9Q1n6X6R/KEv/i/UPZel/if6hLP0v1T+Upf9l+oey9L9c/1CW/lP0D2Xpf4X+oSz9r9Q/lKX/VfqHsvTv0D+Upf/V+oey9J+qfyhL/2n6h7L0n65/KEv/d+ofytL/Gv1DWfrP0D+Upf9M/UNZ+l+rfyhL/1n6h7L0v07/UJb+s/UPZek/R/9Qlv5z9Q9l6T9P/1CW/tfrH8rSf77+oSz936V/KEv/BfqHsvRfqH8oS/9F+oey9L9B/1CW/u/WP5Sl/2L9Q1n636h/KEv/JfqHsvRfqn8oS/9l+oey9P91/UNZ+v+G/qEs/ZfrH8rS/z36h7L0/039Q1n6v1f/UJb+79M/lKX/TfqHsvS/Wf9Qlv636B/K0v+39A9l6b9C/1CW/r+tfyhL/9/RP5Sl/636h7L0v03/UJb+v6t/KEv/9+sfytL/dv1DWfrfoX8oS/879Q9l6f97+oey9P99/UNZ+t+lfyhL/w/oH8rS/4P6h7L0X6l/KEv/VfqHsvT/A/1DWfr/of6hLP3v1j+Upf9q/UNZ+t+jfyhL/w/pH8rS/8P6h7L0X6N/KEv/e/UPZen/R/qHsvRfq38oS/8/1j+Upf99+oey9P8T/UNZ+t+vfyhL/4/oH8rS/0/1D2Xp/1H9Q1n6f0z/UJb+H9c/lKX/n+kfytL/E/qHsvR/QP9Qlv7r9A9l6f+g/qEs/f9c/1CW/uv1D2Xp/5D+oSz9/0L/UJb+f6l/KEv/h/UPZen/V/qHsvT/pP6hLP0/pX8oS/9P6x/K0v8z+oey9P+s/qEs/f9a/1CW/p/TP5Sl/+f1D2Xpv0H/UJb+X9A/lKX/3+gfytJ/o/6hLP0f0T+Upf8X9Q9l6f8l/UNZ+j+qfyhL/y/rH8rS/yv6h7L0/1v9Q1n6P6Z/KEv/r+ofytL/7/QPZen/Nf1DWfr/vf6hLP036R/K0v/r+oey9N+sfyhL/3/QP5Sl/z/qH8rS/xv6h7L0/yf9Q1n6f1P/UJb+39I/lKX/t/UPZen/uP6hLP3/Wf9Qlv5P6B/K0v9J/UNZ+m/RP5Sl/1P6h7L0/xf9Q1n6f0f/UJb+/6p/KEv/7+ofytJ/q/6hLP2f1j+Upf/39A9l6b9N/1CW/v+mfyhL/+36h7L0/3f9Q1n6P6N/KEv//9A/lKX/Dv1DWfrv1D+Upf9/6h/K0v/7+oey9N+lfyhL/x/oH8rS/1n9Q1n6/1D/UJb+z+kfytL/v/QPZen/vP6hLP1/pH8oS//d+oeS9H9lS/9Qlv799A9l6d9f/1CW/gP0D2XpP1D/UJb+g/QPZek/WP9Qlv5D9A9l6T9U/1CW/i/TP5Sl/zD9Q1n6v1z/UJb+r9A/lKX/IfqHsvT/Kf1DWfofqn/oJdcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/5q5CxddM2XGjI45vvGNb3yz75sX+99MAADAT9qPP/S/2H8nAAAAAAAAAAAAAAAAAAAAkFcT/3diL/Y/IwAAAAAAAAAAAAAA/H/X1n7StgH9DnhqwP4PfvbRjj1fx+y6YNqaNQ+W7q9dPz4zeMn++z/YvXv37lXPjJ/Y9XBIq9Xq/F97ZdfjoT2PO19/6fCVR+x9VCZ87s7HL518yFlz1t028Ourbml/etCeZwe1Lr96+oyO1/dvtcopg1oLOh8c36/VKqcNat3a+WB054NJg1prOx+csOfBy1qf7nzwuitnzbiq84nTK/+ewUtFW/vS1oADFts64N8G++9/6fAnpnV/7eUlu19tYKtr/yPWffHwHj/r9gL77379clLP/ff5HxB4QX3b/7Obu7/28pL/4/3/Qxt3LYp+9sL77379crL9Q32Cz/8HbLTn5/4en/+PCl5y3/2JQzfe3rn/tvPue3XXUwP/N5//f/z65ZSe++9/wOf/zs/xE7s//w9ptcqpB/nbAam0tS/b1tv7f+/7H/gzPW767b//e7685RWd+7/3udbyrqcG9XH/E3t7/7+px98r0Ddt7at393j/78P+WyODl9y3/63rDtnz+X/L/Vcett/P+rL/U3vuf9S8mdeNmrtw0XHTZ06Z2jG149pxo8ceP2bcuLFjR+35RLD314P8TYEkDu79vzWsx02/Vqtj3/2G+26Z2Ln/7Q8t/3DXU0P7uP/Ten3/P8r7P4RG9G8NHtxaMGXevDnH7/21++Hovb/u/cuC/ffhv/+PPrbrL+v+M8N+rdYR++5HXjpuSOf+b5hd1nc9NbiP+5/U6/4nHPhnlUDfHOT7/1U9bg7Y/4lbb5zfuf9jvv+qLV1P9fW//0/vdf93e/+Hg9HW3qr1TbRz/ycMWXZGtevS5s//oD5N7H/4jlt3VrsuZ9g/1KeJ/U9e8aYrql2XM+0f6tPE/h+cedmKatflLPuH+jSx/+d/eueR1a7L2fYP9Wli/49956k11a5Lu/1DfZrY/wfuaj+h2nV5i/1DfZrY/3HX/2B8tevyVvuH+jSx/6tffu7aatflHPuH+jSx/zN2n3xYtevyNvuH+jSx/37Lvru02nU51/6hPk3s/8kpK2ZVuy6T7R/q08T+1w4f+Wy163Ke/UN9mtj/8qffMKnadTnf/qE+Tez/K3esfKzadXm7/UN9mtj/xy9+1cpq1+UC+4f6NLH/H454aFi16/IO+4f6NLH/TZvWPlDtulxo/1CfJva/au2AEdWuy0X2D/VpYv9LTp/6aLXrcrH9Q32a2P+YsV+6qNp1ucT+oT5N7P+Iz37zqWrX5VL7h/o0sf9zH54/t9p1ucz+oT5N7H/+kR/7UbXrcrn9Q32a2P+bO46cVu26TLF/qE8T+y+3DdtU7bpcYf9Qnyb2f+H21ROqXZcr7R/q08T+1x/6+Y9Wuy5X2T/Up4n975h97bhq16XD/qE+Tez/2+9Z8t5q1+Vq+4f6NLH/25/7Wql2XabaP9Snif1vHX3hxdWuyzT7h/o0sf/VZz3zSLXrMt3+oT5N7H/F+sfnVbsu77R/qE8T+9+w4cwnql2Xa+wf6tPE/o8ZOeqQatdlhv1DfZrY/6wLln+w2nWZaf9Qnyb2f8r9d7ym2nW51v6hPk3sf+hXx3+i2nWZZf9Qnyb2/6nx7/tktetynf1DfZrY/84JRx9b7brMtn+oTxP73/zA6DurXZc59g/1aWL/73/krorXZa79Q32a2P/s1z6/vdp1mWf/UJ8m9v/GyecvrHZdrrd/qE8T+z/s7klfqHZd5ts/1KeJ/V/yre+dU+26vMv+oT5N7P/ow694dbXrssD+oT5N7H/a9I03V7suC+0f6tPE/ieu2jym2nVZZP9Qnyb2f+iTc++pdl1usH+oTxP73zbg8LOrXZd3d+1/8bC9T9g//AQ1sf97Fz/8jWrXZbH3f6hPE/u/+aaPdFS7LjfaP9Snif1/ZtfgHdWuyxL7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9mBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1kH0bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUQAAAP//p0ziYA==")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
mknod$loop(&(0x7f000001ff40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)

2.169913314s ago: executing program 2 (id=1707):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1})
io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)

1.179588993s ago: executing program 2 (id=1708):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)

589.630713ms ago: executing program 7 (id=1711):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)

479.860897ms ago: executing program 7 (id=1712):
unshare(0x2c060000)
unshare(0x2c020400)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)

275.72292ms ago: executing program 7 (id=1713):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

256.178295ms ago: executing program 5 (id=1714):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4)
r3 = dup3(r1, r2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)

185.290762ms ago: executing program 2 (id=1715):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d25e6fa6"}, @global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0)

120.68702ms ago: executing program 7 (id=1716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001680)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0xfffb, 0x9, 0x2, 0x3}}, {0x4}}]}]}, 0x54}}, 0x0)

49.188467ms ago: executing program 5 (id=1717):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r1, 0x2f, 0x2c, 0x4}, 0x20)

48.841203ms ago: executing program 7 (id=1718):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10)
listen(r0, 0x1)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
close(0x3)

299.86µs ago: executing program 5 (id=1719):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@empty, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0xfffffffffffffff}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x10)

0s ago: executing program 7 (id=1720):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

 -o space_cache=v2
[  137.980797][ T7858] BTRFS info (device loop6): rebuilding free space tree
[  137.985573][ T7860] loop2: detected capacity change from 0 to 32768
[  138.000925][ T7858] BTRFS info (device loop6): disabling free space tree
[  138.003331][ T7858] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.006536][ T7858] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.014919][ T7860] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.043259][ T7860] XFS (loop2): Ending clean mount
[  138.053984][ T7860] XFS (loop2): Quotacheck needed: Please wait.
[  138.059269][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'.
[  138.073182][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.546'.
[  138.090337][ T6823] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.105552][ T7860] XFS (loop2): Quotacheck: Done.
[  138.221007][ T5862] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.566484][ T7903] loop2: detected capacity change from 0 to 2048
[  138.597833][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.604443][ T7903] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.638298][ T7903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.554: bg 0: block 345: padding at end of block bitmap is not set
[  138.647378][ T7903] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0
[  138.651269][ T7903] fs-verity (loop2, inode 13): Error -117 building Merkle tree
[  138.679533][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.051092][ T7908] loop2: detected capacity change from 0 to 40427
[  139.054971][ T7908] F2FS-fs: heap/no_heap options were deprecated
[  139.062565][ T7908] F2FS-fs (loop2): build fault injection rate: 19
[  139.065212][ T7908] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  139.084412][ T7908] F2FS-fs (loop2): invalid crc value
[  139.098790][ T7908] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  139.170720][ T7908] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  139.179137][ T7908] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  139.186202][ T7908] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  139.205176][ T7908] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  139.213264][ T7908] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  139.217440][ T7908] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  139.256879][ T5862] syz-executor: attempt to access beyond end of device
[  139.256879][ T5862] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.272299][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  139.272314][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.272320][ T5862] Call Trace:
[  139.272324][ T5862]  <TASK>
[  139.272329][ T5862]  dump_stack_lvl+0x189/0x250
[  139.272346][ T5862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.272356][ T5862]  ? __pfx_queue_work_on+0x10/0x10
[  139.272365][ T5862]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.272376][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.272390][ T5862]  f2fs_handle_critical_error+0x37c/0x540
[  139.272406][ T5862]  f2fs_write_end_io+0x886/0xb60
[  139.272422][ T5862]  __submit_merged_bio+0x27a/0x6a0
[  139.272437][ T5862]  __submit_merged_write_cond+0x255/0x530
[  139.272451][ T5862]  f2fs_write_data_pages+0x261d/0x3000
[  139.272478][ T5862]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.272540][ T5862]  ? check_path+0x21/0x40
[  139.272550][ T5862]  ? check_noncircular+0xe0/0x160
[  139.272582][ T5862]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.272593][ T5862]  do_writepages+0x32e/0x550
[  139.272611][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[  139.272623][ T5862]  filemap_fdatawrite+0x199/0x240
[  139.272635][ T5862]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  139.272667][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[  139.272679][ T5862]  f2fs_sync_dirty_inodes+0x31f/0x830
[  139.272694][ T5862]  f2fs_write_checkpoint+0x95a/0x1df0
[  139.272721][ T5862]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  139.272751][ T5862]  ? kill_f2fs_super+0x298/0x6c0
[  139.272763][ T5862]  kill_f2fs_super+0x2c3/0x6c0
[  139.272774][ T5862]  ? __pfx_kill_f2fs_super+0x10/0x10
[  139.272780][ T5862]  ? radix_tree_delete_item+0x2b6/0x400
[  139.272795][ T5862]  ? shrinker_free+0x2ce/0x3e0
[  139.272805][ T5862]  deactivate_locked_super+0xbc/0x130
[  139.272817][ T5862]  cleanup_mnt+0x425/0x4c0
[  139.272827][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.272839][ T5862]  task_work_run+0x1d4/0x260
[  139.272852][ T5862]  ? __pfx_task_work_run+0x10/0x10
[  139.272861][ T5862]  ? __x64_sys_umount+0x122/0x160
[  139.272874][ T5862]  ? exit_to_user_mode_loop+0x40/0x110
[  139.272887][ T5862]  exit_to_user_mode_loop+0xec/0x110
[  139.272899][ T5862]  do_syscall_64+0x2bd/0x3b0
[  139.272910][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.272919][ T5862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.272943][ T5862]  ? exc_page_fault+0x9f/0xf0
[  139.272957][ T5862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.272967][ T5862] RIP: 0033:0x7efda918ff17
[  139.272978][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  139.272985][ T5862] RSP: 002b:00007ffc90e5aad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  139.272994][ T5862] RAX: 0000000000000000 RBX: 00007efda9211c05 RCX: 00007efda918ff17
[  139.273000][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc90e5ab90
[  139.273005][ T5862] RBP: 00007ffc90e5ab90 R08: 0000000000000000 R09: 0000000000000000
[  139.273010][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc90e5bc20
[  139.273015][ T5862] R13: 00007efda9211c05 R14: 0000000000021f6f R15: 00007ffc90e5bc60
[  139.273028][ T5862]  </TASK>
[  139.273284][ T5862] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  139.286736][ T7926] loop6: detected capacity change from 0 to 512
[  139.427375][ T7926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.435581][ T7926] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.775883][ T6823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.932346][   T33] audit: type=1800 audit(1755520656.643:11): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.581" name="bus" dev="overlay" ino=507 res=0 errno=0
[  141.278005][ T7974] loop6: detected capacity change from 0 to 32768
[  141.285042][ T7974] XFS: ikeep mount option is deprecated.
[  141.298253][ T7974] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.327643][ T7974] XFS (loop6): Ending clean mount
[  141.333328][ T7974] XFS (loop6): Quotacheck needed: Please wait.
[  141.366005][ T7974] XFS (loop6): Quotacheck: Done.
[  141.408481][ T6823] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.740818][ T7999] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  141.802191][   T33] audit: type=1326 audit(1755520657.513:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.5.592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  141.821397][   T33] audit: type=1326 audit(1755520657.513:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.5.592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  141.840803][   T33] audit: type=1326 audit(1755520657.513:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.5.592" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  141.849818][   T33] audit: type=1326 audit(1755520657.513:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.5.592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  141.861819][   T33] audit: type=1326 audit(1755520657.513:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.5.592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  142.327964][ T8033] Illegal XDP return value 65535 on prog  (id 55) dev syz_tun, expect packet loss!
[  142.682412][ T8039] loop2: detected capacity change from 0 to 64
[  142.765201][ T8041] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  143.241128][ T8061] syz.2.618 uses obsolete (PF_INET,SOCK_PACKET)
[  143.385190][ T8065] loop2: detected capacity change from 0 to 512
[  143.496213][ T8065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.521488][ T8065] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.564540][ T8065] netlink: 324 bytes leftover after parsing attributes in process `syz.2.618'.
[  144.986562][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.012608][ T8089] 9pnet_fd: p9_fd_create_unix (8089): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  145.470269][ T8105] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.631'.
[  145.512932][ T8105] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.631'.
[  146.312444][ T8127] loop6: detected capacity change from 0 to 32768
[  146.332749][ T8127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.645 (8127)
[  146.346752][ T8127] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.357061][ T8127] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  146.370180][ T8127] BTRFS info (device loop6): using free-space-tree
[  146.424634][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'.
[  146.515373][ T6823] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.566711][ T8150] loop2: detected capacity change from 0 to 512
[  146.632565][ T8150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.654868][ T8150] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.714594][ T8150] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  146.723739][ T8150] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[  146.728200][ T8150] EXT4-fs (loop2): This should not happen!! Data will be lost
[  146.728200][ T8150] 
[  146.735009][ T8150] EXT4-fs (loop2): Total free blocks count 0
[  146.737321][ T8150] EXT4-fs (loop2): Free/Dirty block details
[  146.743804][ T8150] EXT4-fs (loop2): free_blocks=65280
[  146.745797][ T8150] EXT4-fs (loop2): dirty_blocks=2
[  146.747479][ T8150] EXT4-fs (loop2): Block reservation details
[  146.749429][ T8150] EXT4-fs (loop2): i_reserved_data_blocks=2
[  146.783311][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.128726][ T8159] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  147.137909][ T8159] CIFS mount error: No usable UNC path provided in device string!
[  147.137909][ T8159] 
[  147.142059][ T8159] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  147.620724][ T8171] loop2: detected capacity change from 0 to 1024
[  147.624448][ T8171] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  147.628686][ T8171] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  147.635461][ T8171] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  147.639871][ T8171] EXT4-fs (loop2): invalid journal inode
[  147.763986][ T8175] loop2: detected capacity change from 0 to 256
[  147.816330][ T8177] kernel read not supported for file /eth0 (pid: 8177 comm: syz.6.659)
[  147.823407][   T33] audit: type=1800 audit(1755520663.533:17): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.659" name="eth0" dev="mqueue" ino=16088 res=0 errno=0
[  147.961761][ T8185] loop2: detected capacity change from 0 to 128
[  147.973404][ T8185] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.977903][ T8188] loop6: detected capacity change from 0 to 64
[  147.984695][ T8185] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.023699][ T5862] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.059028][ T8191] loop2: detected capacity change from 0 to 256
[  148.077370][ T8191] FAT-fs (loop2): Directory bread(block 64) failed
[  148.079708][ T8191] FAT-fs (loop2): Directory bread(block 65) failed
[  148.087608][ T8191] FAT-fs (loop2): Directory bread(block 66) failed
[  148.089795][ T8191] FAT-fs (loop2): Directory bread(block 67) failed
[  148.102426][ T8191] FAT-fs (loop2): Directory bread(block 68) failed
[  148.104748][ T8191] FAT-fs (loop2): Directory bread(block 69) failed
[  148.107031][ T8191] FAT-fs (loop2): Directory bread(block 70) failed
[  148.109481][ T8191] FAT-fs (loop2): Directory bread(block 71) failed
[  148.130168][ T8191] FAT-fs (loop2): Directory bread(block 72) failed
[  148.132636][ T8191] FAT-fs (loop2): Directory bread(block 73) failed
[  148.947610][ T8230] loop6: detected capacity change from 0 to 2048
[  148.964936][ T5859] udevd[5859]: incorrect nilfs2 checksum on /dev/loop6
[  148.968950][ T8230] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  148.991184][ T5859] udevd[5859]: incorrect nilfs2 checksum on /dev/loop6
[  148.999439][ T8233] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.216627][ T8243] netlink: 165 bytes leftover after parsing attributes in process `syz.6.689'.
[  149.312011][ T8247] loop6: detected capacity change from 0 to 128
[  149.329545][ T8247] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  149.347449][ T8247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.639923][ T8263] tmpfs: Bad value for 'mpol'
[  150.031954][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  150.180107][ T5889] usb 7-1: Using ep0 maxpacket: 8
[  150.183919][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  150.188961][ T5889] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  150.193206][ T5889] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  150.199621][ T5889] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.203444][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.206572][ T5889] usb 7-1: Product: syz
[  150.208062][ T5889] usb 7-1: Manufacturer: syz
[  150.209772][ T5889] usb 7-1: SerialNumber: syz
[  150.300549][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.707'.
[  150.484215][ T8289] capability: warning: `syz.5.711' uses 32-bit capabilities (legacy support in use)
[  150.618591][ T8277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  150.623863][ T8277] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  151.106498][ T8310] netlink: 'syz.5.720': attribute type 1 has an invalid length.
[  151.527951][ T5889] cdc_ncm 7-1:1.0: SET_CRC_MODE failed
[  151.542988][ T5889] cdc_ncm 7-1:1.0: bind() failure
[  151.553243][ T5889] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  151.556233][ T5889] cdc_ncm 7-1:1.1: bind() failure
[  151.564493][ T5889] usb 7-1: USB disconnect, device number 2
[  151.900248][ T5918] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  152.050154][ T5918] usb 3-1: Using ep0 maxpacket: 8
[  152.067453][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.079092][ T5918] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  152.108396][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.192690][ T5918] usb 3-1: config 0 descriptor??
[  152.449628][ T5918] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.614584][ T8330] loop6: detected capacity change from 0 to 40427
[  152.629951][ T8330] F2FS-fs (loop6): build fault injection rate: 771
[  152.635093][ T8330] F2FS-fs (loop6): invalid crc value
[  152.765515][ T8330] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.778769][ T8330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  152.843965][ T6823] syz-executor: attempt to access beyond end of device
[  152.843965][ T6823] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.861001][ T6823] CPU: 1 UID: 0 PID: 6823 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  152.861024][ T6823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.861033][ T6823] Call Trace:
[  152.861039][ T6823]  <TASK>
[  152.861046][ T6823]  dump_stack_lvl+0x189/0x250
[  152.861071][ T6823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.861088][ T6823]  ? __pfx_queue_work_on+0x10/0x10
[  152.861102][ T6823]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.861121][ T6823]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.861147][ T6823]  f2fs_handle_critical_error+0x37c/0x540
[  152.861172][ T6823]  f2fs_write_end_io+0x886/0xb60
[  152.861200][ T6823]  __submit_merged_bio+0x27a/0x6a0
[  152.861224][ T6823]  __submit_merged_write_cond+0x255/0x530
[  152.861248][ T6823]  f2fs_write_data_pages+0x261d/0x3000
[  152.861291][ T6823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.861319][ T6823]  ? arch_stack_walk+0xfc/0x150
[  152.861352][ T6823]  ? __mod_zone_page_state+0xd7/0x140
[  152.861375][ T6823]  ? folios_put_refs+0x560/0x640
[  152.861398][ T6823]  ? __lock_acquire+0xab9/0xd20
[  152.861424][ T6823]  ? do_raw_spin_lock+0x121/0x290
[  152.861449][ T6823]  ? do_raw_spin_unlock+0x4d/0x240
[  152.861466][ T6823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  152.861516][ T6823]  do_writepages+0x32e/0x550
[  152.861544][ T6823]  ? do_raw_spin_unlock+0x4d/0x240
[  152.861565][ T6823]  filemap_fdatawrite+0x199/0x240
[  152.861584][ T6823]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  152.861634][ T6823]  ? do_raw_spin_unlock+0x4d/0x240
[  152.861652][ T6823]  f2fs_sync_dirty_inodes+0x31f/0x830
[  152.861678][ T6823]  f2fs_write_checkpoint+0x95a/0x1df0
[  152.861711][ T6823]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  152.861759][ T6823]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  152.861773][ T6823]  ? kfree+0x18e/0x440
[  152.861790][ T6823]  ? kill_f2fs_super+0x298/0x6c0
[  152.861807][ T6823]  kill_f2fs_super+0x2c3/0x6c0
[  152.861826][ T6823]  ? __pfx_kill_f2fs_super+0x10/0x10
[  152.861837][ T6823]  ? radix_tree_delete_item+0x2b6/0x400
[  152.861861][ T6823]  ? shrinker_free+0x2ce/0x3e0
[  152.861879][ T6823]  deactivate_locked_super+0xbc/0x130
[  152.861898][ T6823]  cleanup_mnt+0x425/0x4c0
[  152.861914][ T6823]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.861935][ T6823]  task_work_run+0x1d4/0x260
[  152.861955][ T6823]  ? __pfx_task_work_run+0x10/0x10
[  152.861968][ T6823]  ? __x64_sys_umount+0x122/0x160
[  152.861997][ T6823]  ? exit_to_user_mode_loop+0x40/0x110
[  152.862019][ T6823]  exit_to_user_mode_loop+0xec/0x110
[  152.862037][ T6823]  do_syscall_64+0x2bd/0x3b0
[  152.862057][ T6823]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.862074][ T6823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.862088][ T6823]  ? exc_page_fault+0x9f/0xf0
[  152.862106][ T6823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.862119][ T6823] RIP: 0033:0x7fa15438ff17
[  152.862134][ T6823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  152.862145][ T6823] RSP: 002b:00007fff9b1d61b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  152.862161][ T6823] RAX: 0000000000000000 RBX: 00007fa154411c05 RCX: 00007fa15438ff17
[  152.862170][ T6823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9b1d6270
[  152.862178][ T6823] RBP: 00007fff9b1d6270 R08: 0000000000000000 R09: 0000000000000000
[  152.862186][ T6823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9b1d7300
[  152.862194][ T6823] R13: 00007fa154411c05 R14: 0000000000025486 R15: 00007fff9b1d7340
[  152.862218][ T6823]  </TASK>
[  152.862225][ T6823] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  152.867816][ T5918] usb 3-1: USB disconnect, device number 10
[  152.968006][ T8337] unknown channel width for channel at 909000KHz?
[  153.735251][ T8373] loop6: detected capacity change from 0 to 512
[  153.992475][   T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  154.176888][   T47] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.188291][   T47] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  154.201198][   T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.205012][   T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  154.217128][   T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  154.233322][   T47] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.244437][   T47] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.248439][   T47] usb 3-1: Product: syz
[  154.251249][   T47] usb 3-1: Manufacturer: syz
[  154.274088][   T47] cdc_wdm 3-1:1.0: skipping garbage
[  154.276231][   T47] cdc_wdm 3-1:1.0: skipping garbage
[  154.289700][   T47] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  154.293935][   T47] cdc_wdm 3-1:1.0: Unknown control protocol
[  154.338035][ T8405] loop6: detected capacity change from 0 to 256
[  154.548589][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  154.549605][  T792] usb 3-1: USB disconnect, device number 11
[  154.551892][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  154.556829][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  154.560887][ T8377] cdc_wdm 3-1:1.0: Tx URB error: -19
[  154.695587][ T8416] loop6: detected capacity change from 0 to 4096
[  154.724017][ T8416] NILFS (loop6): invalid segment: Inconsistency found
[  154.726953][ T8416] NILFS (loop6): trying rollback from an earlier position
[  154.744414][ T8416] NILFS (loop6): recovery complete
[  154.764098][ T8421] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.976988][   T33] audit: type=1326 audit(1755520670.683:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  154.994090][   T33] audit: type=1326 audit(1755520670.683:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  155.003545][ T8430] loop6: detected capacity change from 0 to 16
[  155.013046][ T8430] erofs (device loop6): mounted with root inode @ nid 36.
[  155.020107][   T33] audit: type=1326 audit(1755520670.683:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  155.041835][   T33] audit: type=1326 audit(1755520670.683:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  155.057570][   T33] audit: type=1326 audit(1755520670.683:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  155.076694][   T33] audit: type=1326 audit(1755520670.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa51bf85ba7 code=0x7ffc0000
[  155.099379][ T8434] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36
[  155.109003][ T8434] erofs (device loop6): readahead error at folio 47 @ nid 36
[  155.119174][   T33] audit: type=1326 audit(1755520670.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa51bf2add9 code=0x7ffc0000
[  155.128284][ T8434] erofs (device loop6): bogus lookback distance 1586 @ lcn 46 of nid 36
[  155.134752][ T8434] erofs (device loop6): readahead error at folio 46 @ nid 36
[  155.141035][   T33] audit: type=1326 audit(1755520670.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.5.773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  155.153652][ T8434] erofs (device loop6): readahead error at folio 45 @ nid 36
[  155.156487][ T8434] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  155.184436][ T8434] erofs (device loop6): readahead error at folio 43 @ nid 36
[  155.187183][ T8434] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  155.198788][ T8434] erofs (device loop6): readahead error at folio 42 @ nid 36
[  155.206947][ T8434] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36
[  155.216762][ T8434] erofs (device loop6): readahead error at folio 41 @ nid 36
[  155.230909][ T8434] erofs (device loop6): bogus lookback distance 774 @ lcn 40 of nid 36
[  155.250513][ T8434] erofs (device loop6): readahead error at folio 40 @ nid 36
[  155.253580][ T8434] erofs (device loop6): readahead error at folio 39 @ nid 36
[  155.256818][ T8434] erofs (device loop6): readahead error at folio 38 @ nid 36
[  155.275341][ T8434] erofs (device loop6): readahead error at folio 36 @ nid 36
[  155.288935][ T8434] erofs (device loop6): bogus lookback distance 1468 @ lcn 31 of nid 36
[  155.319494][ T8434] erofs (device loop6): readahead error at folio 31 @ nid 36
[  155.326450][ T8434] erofs (device loop6): readahead error at folio 25 @ nid 36
[  155.330922][ T8434] erofs (device loop6): readahead error at folio 24 @ nid 36
[  155.338590][ T8434] erofs (device loop6): readahead error at folio 19 @ nid 36
[  155.350827][ T8434] syz.6.774: attempt to access beyond end of device
[  155.350827][ T8434] loop6: rw=524288, sector=784, nr_sectors = 64 limit=16
[  155.387394][ T8434] syz.6.774: attempt to access beyond end of device
[  155.387394][ T8434] loop6: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  155.406351][ T8434] syz.6.774: attempt to access beyond end of device
[  155.406351][ T8434] loop6: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  155.426824][ T8434] syz.6.774: attempt to access beyond end of device
[  155.426824][ T8434] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16
[  155.465428][ T8442] bond1: entered promiscuous mode
[  155.467763][ T8442] bond1: entered allmulticast mode
[  155.472102][ T8442] 8021q: adding VLAN 0 to HW filter on device bond1
[  156.147933][  T792] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  156.300275][  T792] usb 7-1: Using ep0 maxpacket: 16
[  156.312089][  T792] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  156.315889][  T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.327177][  T792] usb 7-1: Product: syz
[  156.328770][  T792] usb 7-1: Manufacturer: syz
[  156.331183][  T792] usb 7-1: SerialNumber: syz
[  156.336188][  T792] usb 7-1: config 0 descriptor??
[  156.345435][  T792] usb-storage 7-1:0.0: USB Mass Storage device detected
[  156.356105][  T792] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1
[  156.359285][  T792] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[  156.359285][  T792]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  156.547022][  T792] usb 7-1: USB disconnect, device number 3
[  156.711311][   T47] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  156.996574][   T47] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  157.006396][   T47] usb 3-1: config 5 has no interface number 0
[  157.011794][   T47] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x6B, changing to 0xB
[  157.018058][   T47] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  157.023051][   T47] usb 3-1: config 5 interface 123 has no altsetting 0
[  157.031804][   T47] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  157.037698][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.042089][   T47] usb 3-1: Product: syz
[  157.044005][   T47] usb 3-1: Manufacturer: syz
[  157.046049][   T47] usb 3-1: SerialNumber: syz
[  157.311291][   T47] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[  157.319880][   T47] usb 3-1: USB disconnect, device number 12
[  157.782144][ T8505] netlink: 'syz.5.804': attribute type 12 has an invalid length.
[  157.807908][ T8493] loop6: detected capacity change from 0 to 32768
[  157.901131][ T8516] loop2: detected capacity change from 0 to 136
[  157.938560][ T8493] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names
[  157.938576][ T8493]   allowing incompatible features above 0.0: (unknown version)
[  157.938582][ T8493]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  157.950792][ T8516] rock: directory entry would overflow storage
[  157.950819][ T8516] rock: sig=0x4f50, size=4, remaining=3
[  157.950827][ T8516] iso9660: Corrupted directory entry in block 2 of inode 1472
[  157.984503][ T8493] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  157.988360][ T8493] bcachefs (loop6): recovering from clean shutdown, journal seq 10
[  157.998754][ T8493] bcachefs (loop6): superblock requires following recovery passes to be run:
[  157.998754][ T8493]   delete_dead_inodes,fix_reflink_p
[  158.013864][ T8493] bcachefs (loop6): Version upgrade required:
[  158.013864][ T8493] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  158.013864][ T8493] Doing incompatible version upgrade from 0.8: (unknown version) to 1.28: inode_has_case_insensitive
[  158.013864][ T8493]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  158.043299][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.064642][ T8493] bcachefs (loop6): invalid bkey in btree_node btree=alloc level=0: u64s 29 type deleted 1:256:65536 len 0 ver 0: 
[  158.064680][ T8493]   nonzero snapshot, deleting
[  158.098155][ T8493] bcachefs (loop6): btree node read error at btree freespace level 0/0
[  158.098215][ T8493]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  158.098228][ T8493]   loop6 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  158.098239][ T8493]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  158.098247][ T8493]   loop6 btree validate error
[  158.098255][ T8493]   flagging btree freespace lost data
[  158.098277][ T8493]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  158.098286][ T8493]   ret btree_node_read_err_bad_node
[  158.145765][ T8493] bcachefs (loop6): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  158.155963][ T8493] bcachefs (loop6): check_topology... done
[  158.159497][ T8493] bcachefs (loop6): accounting_read... done
[  158.162858][ T8493] bcachefs (loop6): alloc_read... done
[  158.165833][ T8493] bcachefs (loop6): snapshots_read... done
[  158.168881][ T8493] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean
[  158.174750][ T8493] bcachefs (loop6): done starting filesystem
[  158.241142][ T6823] bcachefs (loop6): shutting down
[  158.261690][ T6823] bcachefs (loop6): shutdown complete
[  159.066549][ T8531] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  159.346526][ T8540] loop6: detected capacity change from 0 to 256
[  159.378500][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.820'.
[  161.148957][ T8586] loop2: detected capacity change from 0 to 32768
[  161.203348][ T8586] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  161.227002][ T8586] XFS (loop2): Ending clean mount
[  161.267458][ T5862] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  161.753232][ T8604] loop6: detected capacity change from 0 to 1024
[  161.858463][ T8608] mkiss: ax0: crc mode is auto.
[  162.053156][ T8617] loop2: detected capacity change from 0 to 256
[  162.055976][ T8617] exfat: Deprecated parameter 'namecase'
[  162.071347][ T8617] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36decf98, utbl_chksum : 0xe619d30d)
[  162.217881][ T8625] bridge0: port 3(netdevsim0) entered blocking state
[  162.221114][ T8625] bridge0: port 3(netdevsim0) entered disabled state
[  162.226356][ T8625] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  162.236290][ T8625] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  162.242299][ T8625] bridge0: port 3(netdevsim0) entered blocking state
[  162.245649][ T8625] bridge0: port 3(netdevsim0) entered forwarding state
[  162.570803][ T8634] loop6: detected capacity change from 0 to 32768
[  162.611341][ T8634] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.665678][ T8634] XFS (loop6): Ending clean mount
[  162.766088][ T8655] loop2: detected capacity change from 0 to 16
[  162.768572][ T6823] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.822123][ T8655] erofs (device loop2): mounted with root inode @ nid 36.
[  162.987194][ T8657] loop6: detected capacity change from 0 to 256
[  162.991642][ T8657] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.999165][ T8657] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  163.015821][ T8657] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.112029][ T8657] loop6: detected capacity change from 256 to 0
[  163.121010][ T8658] syz.6.862: attempt to access beyond end of device
[  163.121010][ T8658] loop6: rw=2049, sector=168, nr_sectors = 1 limit=0
[  163.136138][ T8658] Buffer I/O error on dev loop6, logical block 168, lost sync page write
[  163.246129][ T6823] syz-executor: attempt to access beyond end of device
[  163.246129][ T6823] loop6: rw=524288, sector=160, nr_sectors = 1 limit=0
[  163.257735][ T6823] syz-executor: attempt to access beyond end of device
[  163.257735][ T6823] loop6: rw=524288, sector=161, nr_sectors = 1 limit=0
[  163.264138][ T6823] syz-executor: attempt to access beyond end of device
[  163.264138][ T6823] loop6: rw=524288, sector=162, nr_sectors = 1 limit=0
[  163.271609][ T6823] syz-executor: attempt to access beyond end of device
[  163.271609][ T6823] loop6: rw=524288, sector=163, nr_sectors = 1 limit=0
[  163.279838][ T6823] syz-executor: attempt to access beyond end of device
[  163.279838][ T6823] loop6: rw=524288, sector=164, nr_sectors = 1 limit=0
[  163.288564][ T6823] syz-executor: attempt to access beyond end of device
[  163.288564][ T6823] loop6: rw=524288, sector=165, nr_sectors = 1 limit=0
[  163.296479][ T6823] syz-executor: attempt to access beyond end of device
[  163.296479][ T6823] loop6: rw=524288, sector=166, nr_sectors = 1 limit=0
[  163.308499][ T6823] syz-executor: attempt to access beyond end of device
[  163.308499][ T6823] loop6: rw=524288, sector=167, nr_sectors = 1 limit=0
[  163.314618][ T6823] syz-executor: attempt to access beyond end of device
[  163.314618][ T6823] loop6: rw=0, sector=160, nr_sectors = 1 limit=0
[  164.247559][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'.
[  164.875183][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.881192][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.884460][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.889347][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.892692][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.297668][ T8672] chnl_net:caif_netlink_parms(): no params data found
[  165.496437][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.503141][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.506223][ T8672] bridge_slave_0: entered allmulticast mode
[  165.516294][ T8672] bridge_slave_0: entered promiscuous mode
[  165.528168][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.535275][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.545015][ T8672] bridge_slave_1: entered allmulticast mode
[  165.563552][ T8672] bridge_slave_1: entered promiscuous mode
[  165.651236][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.671168][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.723780][ T8672] team0: Port device team_slave_0 added
[  165.733446][ T8672] team0: Port device team_slave_1 added
[  165.789653][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.796050][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.819071][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.833834][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.839355][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.864116][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.933454][ T8672] hsr_slave_0: entered promiscuous mode
[  165.941545][ T8672] hsr_slave_1: entered promiscuous mode
[  165.946149][ T8672] debugfs: 'hsr0' already exists in 'hsr'
[  165.956027][ T8672] Cannot create hsr debugfs directory
[  166.409825][ T8696] loop2: detected capacity change from 0 to 512
[  166.425352][ T8696] EXT4-fs (loop2): can't read group descriptor 0
[  166.464236][ T8672] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  166.511755][ T8672] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  166.521965][ T8672] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  166.524977][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'.
[  166.531399][ T8698] netlink: 'syz.5.879': attribute type 5 has an invalid length.
[  166.532162][ T8672] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  166.540650][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.879'.
[  166.588044][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.881'.
[  166.676624][ T8672] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.692331][ T8672] 8021q: adding VLAN 0 to HW filter on device team0
[  166.698892][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.701326][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.726712][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.729703][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.792024][ T5889] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  166.884514][ T8672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.910296][ T5855] Bluetooth: hci1: command tx timeout
[  166.965078][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short
[  166.970895][ T5889] usb 3-1: config 4 has an invalid interface number: 214 but max is 0
[  166.974174][ T5889] usb 3-1: config 4 has no interface number 0
[  166.976790][ T5889] usb 3-1: config 4 interface 214 has no altsetting 0
[  166.986137][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=87.6e
[  166.989037][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.992694][ T5889] usb 3-1: Product: syz
[  166.994464][ T5889] usb 3-1: Manufacturer: syz
[  166.996733][ T5889] usb 3-1: SerialNumber: syz
[  167.096914][ T8672] veth0_vlan: entered promiscuous mode
[  167.106566][ T8672] veth1_vlan: entered promiscuous mode
[  167.143495][ T8672] veth0_macvtap: entered promiscuous mode
[  167.153680][ T8672] veth1_macvtap: entered promiscuous mode
[  167.171444][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.186369][ T8672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.199847][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.204481][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.218014][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.224280][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.226354][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.214/input/input6
[  167.248507][ T5282] bcm5974 3-1:4.214: could not read from device
[  167.264312][ T5889] usb 3-1: USB disconnect, device number 13
[  167.376278][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.398034][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.429443][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.437399][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.810949][ T8742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.814002][ T8742] IPv6: NLM_F_CREATE should be set when creating new route
[  167.817046][ T8742] IPv6: NLM_F_CREATE should be set when creating new route
[  167.941566][ T8747] binder: 8746:8747 ioctl 400455c8 10000000002 returned -22
[  168.001192][ T8748] ptrace attach of "/syz-executor exec"[5862] was attempted by "/syz-executor exec"[8748]
[  168.820444][ T8756] overlayfs: failed to clone upperpath
[  168.990476][ T5855] Bluetooth: hci1: command tx timeout
[  169.867725][ T8776] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.032339][ T8772] loop2: detected capacity change from 0 to 32768
[  170.038029][ T8772] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.905 (8772)
[  170.063432][ T8772] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  170.068091][ T8772] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  170.075074][ T8772] BTRFS info (device loop2): using free-space-tree
[  170.212736][ T8772] BTRFS info (device loop2): balance: start -susage=8,drange=7..559100,limit=42949673007,stripes=4294967295..4
[  170.218936][ T8772] BTRFS info (device loop2): balance: ended with status: 0
[  170.276442][ T5862] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  170.548316][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.5.909'.
[  171.064190][ T8776] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.082889][ T5855] Bluetooth: hci1: command tx timeout
[  171.174924][ T8776] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.247705][ T8776] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.424036][ T8813] loop2: detected capacity change from 0 to 1024
[  171.431655][ T5712] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.474741][ T5712] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.495404][ T5712] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.517492][ T5712] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.834188][  T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  171.980276][  T792] usb 3-1: Using ep0 maxpacket: 32
[  171.990333][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.996991][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.001544][  T792] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  172.005328][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.017699][  T792] usb 3-1: config 0 descriptor??
[  172.147836][ T8824] loop7: detected capacity change from 0 to 1024
[  172.237359][  T792] usbhid 3-1:0.0: can't add hid device: -71
[  172.239906][  T792] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  172.262586][  T792] usb 3-1: USB disconnect, device number 14
[  172.489784][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'.
[  173.165032][ T5855] Bluetooth: hci1: command tx timeout
[  173.467082][ T5917] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  173.630735][ T5917] usb 8-1: Using ep0 maxpacket: 32
[  173.634871][ T5917] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  173.660116][ T5917] usb 8-1: config 0 has no interface number 0
[  173.667779][ T5917] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  173.678686][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.682943][ T5917] usb 8-1: Product: syz
[  173.684767][ T5917] usb 8-1: Manufacturer: syz
[  173.686745][ T5917] usb 8-1: SerialNumber: syz
[  173.692779][ T5917] usb 8-1: config 0 descriptor??
[  173.702002][ T5917] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  173.711928][ T8876] overlayfs: failed to clone upperpath
[  174.057667][ T5917] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  174.068602][ T5917] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  174.954441][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  174.956479][ T5918] usb 8-1: USB disconnect, device number 2
[  175.049011][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  175.061343][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  175.068385][ T5918] quatech2 8-1:0.51: device disconnected
[  175.438120][ T8927] loop2: detected capacity change from 0 to 128
[  175.530092][ T8927] bio_check_eod: 2 callbacks suppressed
[  175.530104][ T8927] syz.2.957: attempt to access beyond end of device
[  175.530104][ T8927] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  175.545878][ T8927] syz.2.957: attempt to access beyond end of device
[  175.545878][ T8927] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  175.577283][ T8927] syz.2.957: attempt to access beyond end of device
[  175.577283][ T8927] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128
[  175.584070][ T8927] syz.2.957: attempt to access beyond end of device
[  175.584070][ T8927] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  175.589797][ T8927] syz.2.957: attempt to access beyond end of device
[  175.589797][ T8927] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  175.612587][ T8927] syz.2.957: attempt to access beyond end of device
[  175.612587][ T8927] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  175.617022][ T8927] syz.2.957: attempt to access beyond end of device
[  175.617022][ T8927] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  175.632987][ T8939] syz.2.957: attempt to access beyond end of device
[  175.632987][ T8939] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128
[  175.638089][ T8939] syz.2.957: attempt to access beyond end of device
[  175.638089][ T8939] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128
[  175.669504][ T8927] syz.2.957: attempt to access beyond end of device
[  175.669504][ T8927] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  176.166460][ T8955] loop2: detected capacity change from 0 to 512
[  176.198264][ T8955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.299256][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  176.430554][ T8977] openvswitch: netlink: Multiple metadata blocks provided
[  177.092422][ T9007] loop2: detected capacity change from 0 to 512
[  177.097244][ T9007] EXT4-fs (loop2): Test dummy encryption mode enabled
[  177.132208][ T9007] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.163745][ T5862] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  177.356845][ T9016] 9pnet: bogus RWRITE count (2 > 1)
[  177.696302][ T9036] __vm_enough_memory: pid: 9036, comm: syz.7.1003, bytes: 4503599627366400 not enough memory for the allocation
[  177.931241][ T5917] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  178.100941][ T5917] usb 3-1: config 128 has an invalid interface number: 249 but max is 0
[  178.104006][ T5917] usb 3-1: config 128 has no interface number 0
[  178.106320][ T5917] usb 3-1: config 128 interface 249 has no altsetting 0
[  178.121519][ T5917] usb 3-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice= a.c0
[  178.124596][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.127042][ T5917] usb 3-1: Product: syz
[  178.128370][ T5917] usb 3-1: Manufacturer: syz
[  178.129889][ T5917] usb 3-1: SerialNumber: syz
[  178.335369][ T9061] loop7: detected capacity change from 0 to 32768
[  178.354229][ T5917] gspca_main: spca506-2.14.0 probing 06e1:a190
[  178.388335][ T9061] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.407015][ T9061] XFS (loop7): Ending clean mount
[  178.467165][ T5917] usb 3-1: USB disconnect, device number 15
[  178.573210][ T8672] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.937778][ T9086] overlayfs: failed to clone lowerpath
[  179.043769][ T9080] loop7: detected capacity change from 0 to 32768
[  179.076363][ T9080] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.105588][ T9080] XFS (loop7): Ending clean mount
[  179.146097][ T8672] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.033474][ T9116] ceph: No mds server is up or the cluster is laggy
[  180.363842][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1034'.
[  180.765997][ T9128] loop2: detected capacity change from 0 to 40427
[  180.783227][ T9128] F2FS-fs (loop2): invalid crc value
[  180.822260][ T9128] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.826264][ T9128] F2FS-fs (loop2): Start checkpoint disabled!
[  180.835199][ T9128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  180.877268][ T1210] bio_check_eod: 43 callbacks suppressed
[  180.877280][ T1210] kworker/u10:10: attempt to access beyond end of device
[  180.877280][ T1210] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.884115][ T1210] CPU: 1 UID: 0 PID: 1210 Comm: kworker/u10:10 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  180.884128][ T1210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.884134][ T1210] Workqueue: writeback wb_workfn (flush-7:2)
[  180.884149][ T1210] Call Trace:
[  180.884153][ T1210]  <TASK>
[  180.884157][ T1210]  dump_stack_lvl+0x189/0x250
[  180.884170][ T1210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.884180][ T1210]  ? __pfx_queue_work_on+0x10/0x10
[  180.884188][ T1210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  180.884199][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.884214][ T1210]  f2fs_handle_critical_error+0x37c/0x540
[  180.884230][ T1210]  f2fs_write_end_io+0x886/0xb60
[  180.884247][ T1210]  __submit_merged_bio+0x27a/0x6a0
[  180.884262][ T1210]  __submit_merged_write_cond+0x255/0x530
[  180.884276][ T1210]  f2fs_write_data_pages+0x261d/0x3000
[  180.884305][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.884324][ T1210]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  180.884379][ T1210]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  180.884391][ T1210]  ? look_up_lock_class+0x74/0x170
[  180.884407][ T1210]  ? trace_f2fs_writepages+0x7f/0x200
[  180.884419][ T1210]  ? f2fs_write_node_pages+0x478/0x6e0
[  180.884432][ T1210]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  180.884449][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.884461][ T1210]  do_writepages+0x32e/0x550
[  180.884475][ T1210]  ? reacquire_held_locks+0x127/0x1d0
[  180.884483][ T1210]  ? writeback_sb_inodes+0x384/0x1010
[  180.884498][ T1210]  __writeback_single_inode+0x145/0xff0
[  180.884507][ T1210]  ? do_raw_spin_unlock+0x4d/0x240
[  180.884519][ T1210]  writeback_sb_inodes+0x6c7/0x1010
[  180.884549][ T1210]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  180.884581][ T1210]  ? rcu_is_watching+0x15/0xb0
[  180.884595][ T1210]  wb_writeback+0x43b/0xaf0
[  180.884609][ T1210]  ? queue_io+0x3c1/0x590
[  180.884620][ T1210]  ? __pfx_wb_writeback+0x10/0x10
[  180.884635][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.884647][ T1210]  wb_workfn+0x409/0xef0
[  180.884663][ T1210]  ? __pfx_wb_workfn+0x10/0x10
[  180.884674][ T1210]  ? __lock_acquire+0xab9/0xd20
[  180.884691][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  180.884702][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.884710][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  180.884717][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  180.884726][ T1210]  process_scheduled_works+0xae1/0x17b0
[  180.884749][ T1210]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.884766][ T1210]  worker_thread+0x8a0/0xda0
[  180.884777][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.884790][ T1210]  ? __kthread_parkme+0x7b/0x200
[  180.884804][ T1210]  kthread+0x711/0x8a0
[  180.884816][ T1210]  ? __pfx_worker_thread+0x10/0x10
[  180.884823][ T1210]  ? __pfx_kthread+0x10/0x10
[  180.884833][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.884842][ T1210]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.884850][ T1210]  ? __pfx_kthread+0x10/0x10
[  180.884860][ T1210]  ret_from_fork+0x3fc/0x770
[  180.884870][ T1210]  ? __pfx_ret_from_fork+0x10/0x10
[  180.884882][ T1210]  ? __switch_to_asm+0x39/0x70
[  180.884890][ T1210]  ? __switch_to_asm+0x33/0x70
[  180.884899][ T1210]  ? __pfx_kthread+0x10/0x10
[  180.884909][ T1210]  ret_from_fork_asm+0x1a/0x30
[  180.884927][ T1210]  </TASK>
[  180.884931][ T1210] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  181.420608][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  181.438176][ T9140] loop7: detected capacity change from 0 to 512
[  181.475283][ T9140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.481032][ T9140] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.515871][ T9140] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1042: corrupted inode contents
[  181.528106][ T9140] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1042: mark_inode_dirty error
[  181.534605][ T9140] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.1042: corrupted inode contents
[  181.539657][ T9140] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1042: mark_inode_dirty error
[  181.590209][ T5917] usb 3-1: Using ep0 maxpacket: 16
[  181.597361][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.613821][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.616903][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.624024][ T5917] usb 3-1: Product: syz
[  181.625425][ T5917] usb 3-1: Manufacturer: syz
[  181.626865][ T5917] usb 3-1: SerialNumber: syz
[  181.711566][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'.
[  181.738185][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.738224][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'.
[  181.742710][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.748386][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.752017][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.874590][ T5917] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  181.920992][ T5917] usb 3-1: USB disconnect, device number 16
[  182.215849][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.810642][ T9177] loop7: detected capacity change from 0 to 4096
[  182.822486][ T9177] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  182.829744][ T9177] ntfs3(loop7): Failed to load $Extend (-22).
[  182.832567][ T9177] ntfs3(loop7): Failed to initialize $Extend.
[  183.180168][ T5917] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  183.340408][ T5917] usb 8-1: Using ep0 maxpacket: 16
[  183.345390][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.351783][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.355848][ T5917] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  183.363056][ T5917] usb 8-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[  183.368845][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.379902][ T5917] usb 8-1: config 0 descriptor??
[  183.804114][ T5917] hid-generic 0003:045E:FC40.0003: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.7-1/input0
[  184.137478][ T5917] usb 8-1: USB disconnect, device number 3
[  184.503516][  T792] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  184.650240][  T792] usb 3-1: Using ep0 maxpacket: 16
[  184.664618][  T792] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  184.673176][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.682097][  T792] usb 3-1: Product: syz
[  184.683964][  T792] usb 3-1: Manufacturer: syz
[  184.691042][  T792] usb 3-1: SerialNumber: syz
[  184.699756][  T792] usb 3-1: config 0 descriptor??
[  184.717813][ T9225] loop7: detected capacity change from 0 to 128
[  184.723400][ T9225] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.732257][ T9225] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  185.121380][  T792] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  185.142025][ T9249] loop7: detected capacity change from 0 to 512
[  185.142070][  T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  185.155684][  T792] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  185.156458][ T9249] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1090: bg 0: block 5: invalid block bitmap
[  185.158571][  T792] usb 3-1: media controller created
[  185.190171][ T9249] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  185.196408][  T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.202869][ T9249] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1090: invalid indirect mapped block 3 (level 2)
[  185.221647][ T9249] EXT4-fs (loop7): 1 orphan inode deleted
[  185.223862][ T9249] EXT4-fs (loop7): 1 truncate cleaned up
[  185.226877][ T9249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.260836][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.326048][  T792] zl10353_read_register: readreg error (reg=127, ret==0)
[  185.338534][  T792] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  185.343955][  T792] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  185.361217][  T792] usb 3-1: USB disconnect, device number 17
[  185.406920][  T792] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  185.823093][ T9271] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  186.054535][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1104'.
[  186.500167][ T5917] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  186.685057][ T5917] usb 3-1: unable to get BOS descriptor or descriptor too short
[  186.688728][ T5917] usb 3-1: config 160 has an invalid interface number: 19 but max is 0
[  186.691978][ T5917] usb 3-1: config 160 has no interface number 0
[  186.694484][ T5917] usb 3-1: config 160 interface 19 has no altsetting 0
[  186.702303][ T5917] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=31.f3
[  186.705314][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.707946][ T5917] usb 3-1: Product: syz
[  186.709393][ T5917] usb 3-1: Manufacturer: syz
[  186.720160][ T5917] usb 3-1: SerialNumber: syz
[  186.941439][ T5917] usb 3-1: USB disconnect, device number 18
[  186.957668][ T9304] cifs: Bad value for 'port'
[  187.322740][ T9309] loop7: detected capacity change from 0 to 32768
[  187.393267][ T9309] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80]
[  187.393267][ T9309] replicas_v0 (size 40):
[  187.393267][ T9309] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  187.407629][ T9309] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  187.863346][ T9325] loop7: detected capacity change from 0 to 128
[  187.904485][ T9325] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.905176][ T9321] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  187.927147][ T9325] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  187.977667][ T9330] overlayfs: missing 'lowerdir'
[  188.057642][ T8672] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.217246][ T9338] netlink: 'syz.7.1129': attribute type 2 has an invalid length.
[  188.221755][ T9338] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1129'.
[  188.426580][ T9341] loop7: detected capacity change from 0 to 40427
[  188.431198][ T9341] F2FS-fs (loop7): invalid crc value
[  188.466088][ T9341] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  188.469241][ T9341] F2FS-fs (loop7): Start checkpoint disabled!
[  188.474605][ T9341] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  188.699460][ T9352] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  189.219747][ T1210] kworker/u10:10: attempt to access beyond end of device
[  189.219747][ T1210] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  189.224700][ T1210] CPU: 1 UID: 0 PID: 1210 Comm: kworker/u10:10 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  189.224716][ T1210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.224747][ T1210] Workqueue: writeback wb_workfn (flush-7:7)
[  189.224764][ T1210] Call Trace:
[  189.224768][ T1210]  <TASK>
[  189.224773][ T1210]  dump_stack_lvl+0x189/0x250
[  189.224788][ T1210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.224798][ T1210]  ? __pfx_queue_work_on+0x10/0x10
[  189.224807][ T1210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.224818][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.224834][ T1210]  f2fs_handle_critical_error+0x37c/0x540
[  189.224850][ T1210]  f2fs_write_end_io+0x886/0xb60
[  189.224868][ T1210]  __submit_merged_bio+0x27a/0x6a0
[  189.224883][ T1210]  __submit_merged_write_cond+0x255/0x530
[  189.224898][ T1210]  f2fs_write_data_pages+0x261d/0x3000
[  189.224929][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.224988][ T1210]  ? f2fs_write_meta_pages+0x357/0x450
[  189.225006][ T1210]  ? __lock_acquire+0xab9/0xd20
[  189.225020][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.225032][ T1210]  do_writepages+0x32e/0x550
[  189.225047][ T1210]  ? reacquire_held_locks+0x127/0x1d0
[  189.225055][ T1210]  ? writeback_sb_inodes+0x384/0x1010
[  189.225071][ T1210]  __writeback_single_inode+0x145/0xff0
[  189.225081][ T1210]  ? do_raw_spin_unlock+0x4d/0x240
[  189.225093][ T1210]  writeback_sb_inodes+0x6c7/0x1010
[  189.225118][ T1210]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  189.225152][ T1210]  ? rcu_is_watching+0x15/0xb0
[  189.225166][ T1210]  wb_writeback+0x43b/0xaf0
[  189.225181][ T1210]  ? queue_io+0x3c1/0x590
[  189.225192][ T1210]  ? __pfx_wb_writeback+0x10/0x10
[  189.225213][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.225226][ T1210]  wb_workfn+0x409/0xef0
[  189.225244][ T1210]  ? __pfx_wb_workfn+0x10/0x10
[  189.225255][ T1210]  ? __lock_acquire+0xab9/0xd20
[  189.225273][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.225285][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.225293][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.225300][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.225309][ T1210]  process_scheduled_works+0xae1/0x17b0
[  189.225334][ T1210]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.225353][ T1210]  worker_thread+0x8a0/0xda0
[  189.225363][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.225378][ T1210]  ? __kthread_parkme+0x7b/0x200
[  189.225393][ T1210]  kthread+0x711/0x8a0
[  189.225405][ T1210]  ? __pfx_worker_thread+0x10/0x10
[  189.225413][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.225424][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.225434][ T1210]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.225443][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.225454][ T1210]  ret_from_fork+0x3fc/0x770
[  189.225464][ T1210]  ? __pfx_ret_from_fork+0x10/0x10
[  189.225477][ T1210]  ? __switch_to_asm+0x39/0x70
[  189.225486][ T1210]  ? __switch_to_asm+0x33/0x70
[  189.225495][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.225505][ T1210]  ret_from_fork_asm+0x1a/0x30
[  189.225525][ T1210]  </TASK>
[  189.225529][ T1210] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  189.350890][ T1210] CPU: 1 UID: 0 PID: 1210 Comm: kworker/u10:10 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  189.350913][ T1210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.350922][ T1210] Workqueue: writeback wb_workfn (flush-7:7)
[  189.350946][ T1210] Call Trace:
[  189.350952][ T1210]  <TASK>
[  189.350959][ T1210]  dump_stack_lvl+0x189/0x250
[  189.350980][ T1210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.350996][ T1210]  ? __pfx_queue_work_on+0x10/0x10
[  189.351010][ T1210]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.351027][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.351053][ T1210]  f2fs_handle_critical_error+0x37c/0x540
[  189.351078][ T1210]  f2fs_write_end_io+0x886/0xb60
[  189.351104][ T1210]  __submit_merged_bio+0x27a/0x6a0
[  189.351134][ T1210]  __submit_merged_write_cond+0x255/0x530
[  189.351158][ T1210]  f2fs_write_data_pages+0x261d/0x3000
[  189.351205][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.351288][ T1210]  ? f2fs_write_meta_pages+0x357/0x450
[  189.351316][ T1210]  ? __lock_acquire+0xab9/0xd20
[  189.351338][ T1210]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.351359][ T1210]  do_writepages+0x32e/0x550
[  189.351381][ T1210]  ? reacquire_held_locks+0x127/0x1d0
[  189.351394][ T1210]  ? writeback_sb_inodes+0x384/0x1010
[  189.351419][ T1210]  __writeback_single_inode+0x145/0xff0
[  189.351436][ T1210]  ? do_raw_spin_unlock+0x4d/0x240
[  189.351456][ T1210]  writeback_sb_inodes+0x6c7/0x1010
[  189.351496][ T1210]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  189.351547][ T1210]  ? rcu_is_watching+0x15/0xb0
[  189.351567][ T1210]  wb_writeback+0x43b/0xaf0
[  189.351588][ T1210]  ? queue_io+0x3c1/0x590
[  189.351607][ T1210]  ? __pfx_wb_writeback+0x10/0x10
[  189.351627][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.351644][ T1210]  wb_workfn+0x409/0xef0
[  189.351669][ T1210]  ? __pfx_wb_workfn+0x10/0x10
[  189.351685][ T1210]  ? __lock_acquire+0xab9/0xd20
[  189.351738][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.351758][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.351770][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.351780][ T1210]  ? process_scheduled_works+0x9ef/0x17b0
[  189.351794][ T1210]  process_scheduled_works+0xae1/0x17b0
[  189.351829][ T1210]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.351856][ T1210]  worker_thread+0x8a0/0xda0
[  189.351872][ T1210]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.351892][ T1210]  ? __kthread_parkme+0x7b/0x200
[  189.351910][ T1210]  kthread+0x711/0x8a0
[  189.351927][ T1210]  ? __pfx_worker_thread+0x10/0x10
[  189.351941][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.351958][ T1210]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.351973][ T1210]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.351990][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.352007][ T1210]  ret_from_fork+0x3fc/0x770
[  189.352024][ T1210]  ? __pfx_ret_from_fork+0x10/0x10
[  189.352042][ T1210]  ? __switch_to_asm+0x39/0x70
[  189.352058][ T1210]  ? __switch_to_asm+0x33/0x70
[  189.352074][ T1210]  ? __pfx_kthread+0x10/0x10
[  189.352091][ T1210]  ret_from_fork_asm+0x1a/0x30
[  189.352127][ T1210]  </TASK>
[  189.352134][ T1210] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  189.875503][   T33] audit: type=1800 audit(1755520961.590:26): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1147" name="/" dev="9p" ino=2 res=0 errno=0
[  189.989094][ T9388] loop7: detected capacity change from 0 to 512
[  190.001214][ T9388] EXT4-fs: Ignoring removed bh option
[  190.016545][ T9388] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  190.049324][ T9388] EXT4-fs (loop7): 1 truncate cleaned up
[  190.058272][ T9388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.078072][   T33] audit: type=1800 audit(1755520961.790:27): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1150" name="file1" dev="loop7" ino=15 res=0 errno=0
[  190.148204][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.485105][ T9410] netlink: 'syz.7.1162': attribute type 2 has an invalid length.
[  190.499143][ T9410] netlink: 'syz.7.1162': attribute type 8 has an invalid length.
[  190.515165][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1162'.
[  190.559235][ T9414] netlink: 'syz.5.1163': attribute type 5 has an invalid length.
[  190.703650][ T9416] loop7: detected capacity change from 0 to 4096
[  190.739407][ T9416] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  190.763784][ T9416] ntfs3(loop7): Failed to load $Extend (-22).
[  190.766339][ T9416] ntfs3(loop7): Failed to initialize $Extend.
[  191.174207][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'.
[  191.177821][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'.
[  191.197719][ T9432] erspan0: entered promiscuous mode
[  191.205836][ T9432] gretap0: entered promiscuous mode
[  191.284303][ T9428] loop7: detected capacity change from 0 to 40427
[  191.291160][ T9428] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  191.294175][ T9428] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  191.362792][ T9428] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.369638][ T9428] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  191.372228][ T9428] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  191.501380][ T9451] overlay: Unknown parameter 'subj_role'
[  191.740448][ T5917] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  191.805851][ T9464] syz_tun: entered allmulticast mode
[  191.823428][ T9463] syz_tun: left allmulticast mode
[  191.890534][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  191.894179][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.898675][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.910130][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00
[  191.913917][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.919602][ T5917] usb 3-1: config 0 descriptor??
[  192.253794][ T9472] autofs4:pid:9472:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  192.646265][ T5917] logitech-hidpp-device 0003:046D:C082.0004: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.2-1/input0
[  193.072599][ T5763] usb 3-1: USB disconnect, device number 19
[  193.338352][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1194'.
[  194.107773][ T9485] loop7: detected capacity change from 0 to 131072
[  194.123566][ T9485] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  194.126269][ T9485] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  194.131820][ T9485] F2FS-fs (loop7): invalid crc value
[  194.196543][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.199053][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.220213][ T9485] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.227783][ T9485] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  194.231107][ T9485] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  194.252381][ T9485] F2FS-fs (loop7): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  194.266083][ T9485] F2FS-fs (loop7): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  194.712606][ T9514] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  194.921723][   T33] audit: type=1326 audit(1755520966.640:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9525 comm="syz.7.1202" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7b1f8ebe9 code=0x0
[  194.995107][ T9534] netlink: 'syz.5.1210': attribute type 10 has an invalid length.
[  194.999657][ T9534] syz_tun: entered promiscuous mode
[  195.012365][ T9534] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  195.220177][ T5918] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  195.384884][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  195.390896][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  195.395428][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  195.399877][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  195.406332][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  195.409704][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.425828][ T5918] usb 3-1: config 0 descriptor??
[  195.428818][ T9532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  195.865673][ T5918] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  196.082314][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1227'.
[  196.390218][ T5917] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  196.930202][ T5917] usb 8-1: Using ep0 maxpacket: 32
[  196.937730][ T5917] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  196.944386][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.954118][ T5917] usb 8-1: config 0 descriptor??
[  196.964660][ T5917] gspca_main: nw80x-2.14.0 probing 055f:d001
[  197.818977][ T5917] usb 8-1: USB disconnect, device number 4
[  198.082513][ T5918] usb 3-1: USB disconnect, device number 20
[  198.232868][ T9589] loop7: detected capacity change from 0 to 1024
[  198.250636][ T9589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  198.261830][ T9589] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.274421][   T33] audit: type=1800 audit(1755520969.990:29): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1235" name="file1" dev="loop7" ino=15 res=0 errno=0
[  198.292375][ T9589] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.1235: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.303396][ T9589] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  198.308503][ T9589] EXT4-fs (loop7): This should not happen!! Data will be lost
[  198.308503][ T9589] 
[  198.316819][ T9589] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.1235: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.326870][ T9589] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  198.332013][ T9589] EXT4-fs (loop7): This should not happen!! Data will be lost
[  198.332013][ T9589] 
[  198.366158][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  198.723929][ T9598] loop7: detected capacity change from 0 to 32768
[  198.745434][ T9598] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  198.796729][ T9598] XFS (loop7): Ending clean mount
[  198.834776][ T8672] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  199.533861][ T9628] loop7: detected capacity change from 0 to 4096
[  201.204195][ T9701] loop7: detected capacity change from 0 to 32768
[  201.673591][ T9728] overlayfs: failed to clone upperpath
[  202.014223][ T9745] tmpfs: Bad value for 'mpol'
[  202.966120][ T9762] loop7: detected capacity change from 0 to 32768
[  202.991592][ T9762] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1264 (9762)
[  203.019004][ T9762] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.023590][ T9762] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  203.028445][ T9762] BTRFS info (device loop7): using free-space-tree
[  203.266402][ T8672] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.676041][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'.
[  203.689007][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'.
[  203.702953][ T9822] hugetlbfs: syz.7.1296 (9822): Using mlock ulimits for SHM_HUGETLB is obsolete
[  204.340803][ T5763] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  204.502557][ T5763] usb 8-1: unable to get BOS descriptor or descriptor too short
[  204.507627][ T5763] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.511999][ T5763] usb 8-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  204.516883][ T5763] usb 8-1: config 1 interface 0 has no altsetting 0
[  204.523582][ T5763] usb 8-1: string descriptor 0 read error: -22
[  204.526021][ T5763] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.60
[  204.530806][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.543075][ T5763] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input8
[  204.752836][ T5282] bcm5974 8-1:1.0: could not read from device
[  204.752993][ T5917] usb 8-1: USB disconnect, device number 5
[  204.762879][ T5861] bcm5974 8-1:1.0: could not read from device
[  204.785979][ T5861] udevd[5861]: Error opening device "/dev/input/event3": No such file or directory
[  204.789180][ T5861] udevd[5861]: Unable to EVIOCGABS device "/dev/input/event3"
[  204.799317][ T5861] udevd[5861]: Unable to EVIOCGABS device "/dev/input/event3"
[  204.803235][ T5861] udevd[5861]: Unable to EVIOCGABS device "/dev/input/event3"
[  204.807016][ T5861] udevd[5861]: Unable to EVIOCGABS device "/dev/input/event3"
[  204.980211][ T5889] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  205.110395][ T5889] usb 3-1: device descriptor read/64, error -71
[  205.362554][ T5889] usb 3-1: new low-speed USB device number 22 using dummy_hcd
[  205.490388][ T5889] usb 3-1: device descriptor read/64, error -71
[  205.600516][ T5889] usb usb3-port1: attempt power cycle
[  205.688593][ T9893] loop7: detected capacity change from 0 to 32768
[  205.940248][ T5889] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  205.961635][ T5889] usb 3-1: device descriptor read/8, error -71
[  206.154658][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1338'.
[  206.201171][ T5889] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[  206.220992][ T5889] usb 3-1: device descriptor read/8, error -71
[  206.333227][ T5889] usb usb3-port1: unable to enumerate USB device
[  207.190157][ T5917] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  207.346023][ T5917] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  207.350445][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.354704][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.358598][ T5917] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  207.366984][ T5917] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  207.370719][ T5917] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  207.374160][ T5917] usb 8-1: Manufacturer: syz
[  207.378881][ T5917] usb 8-1: config 0 descriptor??
[  207.797180][ T5917] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  207.805069][ T5917] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  208.621955][ T5917] usb 8-1: USB disconnect, device number 6
[  208.643332][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'.
[  208.684679][ T9933] bridge1: port 1(veth3) entered blocking state
[  208.687094][ T9933] bridge1: port 1(veth3) entered disabled state
[  208.689495][ T9933] veth3: entered allmulticast mode
[  208.692863][ T9933] veth3: entered promiscuous mode
[  208.712822][ T9933] bridge1: port 2(veth0_to_bond) entered blocking state
[  208.716918][ T9933] bridge1: port 2(veth0_to_bond) entered disabled state
[  208.719550][ T9933] veth0_to_bond: entered allmulticast mode
[  208.722752][ T9933] veth0_to_bond: entered promiscuous mode
[  208.984722][ T9944] [U] 1WT`8H$09\
[  208.986664][ T9944] [U] ;2}UGVĥ#O9ե>-ߴSݢP
[  208.989873][ T9943] [U] 4XZ^Y)MC.OȞPOW
[  209.232686][ T9951] loop7: detected capacity change from 0 to 512
[  209.238182][ T9951] EXT4-fs (loop7): first meta block group too large: 524287 (group descriptor block count 1)
[  210.080321][ T5918] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  210.230230][ T5763] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  210.235830][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.243207][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  210.247558][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  210.253795][ T5918] usb 8-1: language id specifier not provided by device, defaulting to English
[  210.263479][ T5918] usb 8-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  210.267050][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.272407][ T5918] usb 8-1: Manufacturer: 
[  210.274567][ T5918] usb 8-1: SerialNumber: syz
[  210.278906][ T5918] usb 8-1: config 0 descriptor??
[  210.288517][ T5918] em28xx 8-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  210.302026][ T5918] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  210.390214][ T5763] usb 3-1: Using ep0 maxpacket: 8
[  210.420259][ T5763] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  210.424181][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.427882][ T5763] usb 3-1: Product: syz
[  210.429862][ T5763] usb 3-1: Manufacturer: syz
[  210.435635][ T5763] usb 3-1: SerialNumber: syz
[  210.450967][ T5763] usb 3-1: config 0 descriptor??
[  210.463868][ T5763] gspca_main: se401-2.14.0 probing 047d:5003
[  210.560683][ T5918] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  210.567241][ T5918] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  210.571298][ T5918] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  210.574407][ T5918] em28xx 8-1:0.0: No AC97 audio processor
[  210.600281][ T5918] usb 8-1: USB disconnect, device number 7
[  210.617697][ T5918] em28xx 8-1:0.0: Disconnecting em28xx
[  210.693315][ T5918] em28xx 8-1:0.0: Freeing device
[  210.898681][ T5763] gspca_se401: Wrong descriptor type
[  211.109595][ T5763] usb 3-1: USB disconnect, device number 25
[  211.899900][ T9975] loop7: detected capacity change from 0 to 32768
[  211.930428][ T9975] OCFS2: ERROR (device loop7): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  211.937177][ T9975] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  211.941261][ T9975] OCFS2: File system is now read-only.
[  211.943529][ T9975] (syz.7.1363,9975,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  211.946194][ T9975] (syz.7.1363,9975,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  211.951333][ T9975] (syz.7.1363,9975,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  211.954933][ T9975] (syz.7.1363,9975,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  211.954960][ T9975] (syz.7.1363,9975,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  211.962120][ T9975] (syz.7.1363,9975,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  211.965478][ T9975] (syz.7.1363,9975,0):ocfs2_fill_super:1177 ERROR: status = -30
[  212.663299][ T9996] team0: Port device team_slave_0 removed
[  213.842542][ T6367] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  214.242803][ T6367] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  214.245649][ T6367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.252888][ T6367] usb 3-1: config 0 descriptor??
[  214.538963][ T6367] kaweth 3-1:0.0: Firmware present in device.
[  214.666306][ T6367] kaweth 3-1:0.0: Statistics collection: 0
[  214.668304][ T6367] kaweth 3-1:0.0: Multicast filter limit: 0
[  214.674397][ T6367] kaweth 3-1:0.0: MTU: 0
[  214.681299][ T6367] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  214.901007][ T5763] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  215.050222][ T5763] usb 8-1: Using ep0 maxpacket: 32
[  215.055380][ T5763] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.066879][ T6367] kaweth 3-1:0.0: Error setting SOFS wait
[  215.068074][ T5763] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.070368][ T6367] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  215.083339][ T5763] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  215.092390][ T6367] usb 3-1: USB disconnect, device number 26
[  215.099077][ T5763] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  215.102984][ T5763] usb 8-1: Product: syz
[  215.104735][ T5763] usb 8-1: Manufacturer: syz
[  215.141254][ T5763] hub 8-1:4.0: USB hub found
[  215.335863][ T5763] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  215.650660][ T5763] usb 8-1: USB disconnect, device number 8
[  216.145668][T10062] loop7: detected capacity change from 0 to 1024
[  216.165444][T10062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.171340][T10062] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.182540][   T33] audit: type=1800 audit(1755520987.900:30): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1401" name="file1" dev="loop7" ino=15 res=0 errno=0
[  216.214411][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.284581][T10069] loop7: detected capacity change from 0 to 128
[  216.288135][T10069] udf: Unknown parameter '01777777777777777777777'
[  217.022496][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1410'.
[  217.165598][T10091] cgroup: fork rejected by pids controller in /syz5
[  217.250142][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  217.295084][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1414'.
[  217.414015][ T5918] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  217.425366][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.765627][ T5918] pegasus 3-1:254.0: probe with driver pegasus failed with error -71
[  217.791687][ T5918] usb 3-1: USB disconnect, device number 27
[  217.792156][ T5860] Bluetooth: hci1: command 0x0405 tx timeout
[  217.813845][T11433] loop7: detected capacity change from 0 to 256
[  217.819506][T11433] exfat: Deprecated parameter 'namecase'
[  217.851520][T11433] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  217.882932][   T33] audit: type=1800 audit(1755520989.600:31): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1421" name="file1" dev="loop7" ino=1048640 res=0 errno=0
[  218.334872][T11917] loop7: detected capacity change from 0 to 32768
[  218.383039][T11917] JBD2: Ignoring recovery information on journal
[  218.404022][T11917] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75
[  218.406909][T11917] JBD2: bad block at offset 32
[  218.430926][T11917] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  218.483197][ T8672] ocfs2: Unmounting device (7,7) on (node local)
[  218.914674][ T5855] Bluetooth: hci0: Unable to find connection for big 0x00
[  219.049407][T11959] loop7: detected capacity change from 0 to 40427
[  219.461809][T11959] F2FS-fs (loop7): invalid crc value
[  219.526667][T11959] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.532720][T11959] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  219.543999][   T33] audit: type=1800 audit(1755520991.260:32): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1444" name="file1" dev="loop7" ino=10 res=0 errno=0
[  219.560339][T11959] syz.7.1444: attempt to access beyond end of device
[  219.560339][T11959] loop7: rw=34817, sector=53248, nr_sectors = 8 limit=40427
[  219.592023][ T8672] syz-executor: attempt to access beyond end of device
[  219.592023][ T8672] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  219.599516][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  219.599539][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.599548][ T8672] Call Trace:
[  219.599554][ T8672]  <TASK>
[  219.599561][ T8672]  dump_stack_lvl+0x189/0x250
[  219.599586][ T8672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.599603][ T8672]  ? __pfx_queue_work_on+0x10/0x10
[  219.599617][ T8672]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.599635][ T8672]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.599671][ T8672]  f2fs_handle_critical_error+0x37c/0x540
[  219.599697][ T8672]  f2fs_write_end_io+0x886/0xb60
[  219.599727][ T8672]  __submit_merged_bio+0x27a/0x6a0
[  219.599752][ T8672]  __submit_merged_write_cond+0x255/0x530
[  219.599778][ T8672]  f2fs_write_data_pages+0x261d/0x3000
[  219.599831][ T8672]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  219.599914][ T8672]  ? ktime_get+0x3e/0x1f0
[  219.599930][ T8672]  ? ktime_get+0x3e/0x1f0
[  219.599946][ T8672]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  219.599961][ T8672]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  219.599987][ T8672]  ? rcu_is_watching+0x15/0xb0
[  219.600011][ T8672]  ? __lock_acquire+0xab9/0xd20
[  219.600044][ T8672]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  219.600066][ T8672]  do_writepages+0x32e/0x550
[  219.600096][ T8672]  ? do_raw_spin_unlock+0x4d/0x240
[  219.600118][ T8672]  filemap_fdatawrite+0x199/0x240
[  219.600137][ T8672]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  219.600193][ T8672]  ? do_raw_spin_unlock+0x4d/0x240
[  219.600212][ T8672]  f2fs_sync_dirty_inodes+0x31f/0x830
[  219.600240][ T8672]  f2fs_write_checkpoint+0x95a/0x1df0
[  219.600278][ T8672]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  219.600337][ T8672]  ? kill_f2fs_super+0x298/0x6c0
[  219.600357][ T8672]  kill_f2fs_super+0x2c3/0x6c0
[  219.600376][ T8672]  ? __pfx_kill_f2fs_super+0x10/0x10
[  219.600388][ T8672]  ? radix_tree_delete_item+0x2b6/0x400
[  219.600413][ T8672]  ? shrinker_free+0x2ce/0x3e0
[  219.600467][ T8672]  deactivate_locked_super+0xbc/0x130
[  219.600488][ T8672]  cleanup_mnt+0x425/0x4c0
[  219.600504][ T8672]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.600525][ T8672]  task_work_run+0x1d4/0x260
[  219.600548][ T8672]  ? __pfx_task_work_run+0x10/0x10
[  219.600564][ T8672]  ? __x64_sys_umount+0x122/0x160
[  219.600608][ T8672]  ? exit_to_user_mode_loop+0x40/0x110
[  219.600632][ T8672]  exit_to_user_mode_loop+0xec/0x110
[  219.600669][ T8672]  do_syscall_64+0x2bd/0x3b0
[  219.600686][ T8672]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.600702][ T8672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.600715][ T8672]  ? exc_page_fault+0x9f/0xf0
[  219.600735][ T8672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.600747][ T8672] RIP: 0033:0x7fa7b1f8ff17
[  219.600760][ T8672] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  219.600772][ T8672] RSP: 002b:00007ffcf90c6298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  219.600787][ T8672] RAX: 0000000000000000 RBX: 00007fa7b2011c05 RCX: 00007fa7b1f8ff17
[  219.600796][ T8672] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf90c6350
[  219.600804][ T8672] RBP: 00007ffcf90c6350 R08: 0000000000000000 R09: 0000000000000000
[  219.600812][ T8672] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf90c73e0
[  219.600821][ T8672] R13: 00007fa7b2011c05 R14: 0000000000035940 R15: 00007ffcf90c7420
[  219.600846][ T8672]  </TASK>
[  219.835866][ T8672] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  220.079675][T11994] netlink: 'syz.5.1458': attribute type 10 has an invalid length.
[  220.097703][T11994] team0: Port device dummy0 added
[  220.104924][T11994] netlink: 'syz.5.1458': attribute type 10 has an invalid length.
[  220.111640][T11994] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  220.125291][T11994] team0: Failed to send options change via netlink (err -105)
[  220.128091][T11994] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  220.132224][T11994] team0: Port device dummy0 removed
[  220.144710][T11994] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  220.450160][ T5917] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  220.600956][ T5917] usb 8-1: Using ep0 maxpacket: 8
[  220.606821][ T5917] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  220.611938][ T5917] usb 8-1: config 0 interface 0 has no altsetting 0
[  220.614710][ T5917] usb 8-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00
[  220.618503][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.627526][ T5917] usb 8-1: config 0 descriptor??
[  220.635460][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input11
[  220.836703][ T5282] bcm5974 8-1:0.0: could not read from device
[  220.851082][ T5282] bcm5974 8-1:0.0: could not read from device
[  220.855639][ T5917] usb 8-1: USB disconnect, device number 9
[  220.867734][ T5859] bcm5974 8-1:0.0: could not read from device
[  221.070377][ T5763] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  221.220200][ T5763] usb 3-1: Using ep0 maxpacket: 8
[  221.223835][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64
[  221.229804][ T5763] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  221.235471][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.238373][ T5763] usb 3-1: Product: syz
[  221.239866][ T5763] usb 3-1: Manufacturer: syz
[  221.241868][ T5763] usb 3-1: SerialNumber: syz
[  221.245280][ T5763] usb 3-1: config 0 descriptor??
[  221.252594][ T5763] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  221.458076][  T792] usb 3-1: USB disconnect, device number 28
[  221.620172][ T5763] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  221.773601][ T5763] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  221.776880][ T5763] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  221.781184][ T5763] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  221.784714][ T5763] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  221.792745][ T5763] usb 8-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e
[  221.796223][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.799105][ T5763] usb 8-1: Product: syz
[  221.800760][ T5763] usb 8-1: Manufacturer: syz
[  221.802427][ T5763] usb 8-1: SerialNumber: syz
[  221.805621][ T5763] usb 8-1: config 0 descriptor??
[  221.812022][ T5763] ti_usb_3410_5052 8-1:0.0: TI USB 3410 1 port adapter converter detected
[  221.819673][ T5763] usb 8-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  222.027155][ T5917] usb 8-1: USB disconnect, device number 10
[  222.035718][ T5917] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  222.042602][ T5917] ti_usb_3410_5052 8-1:0.0: device disconnected
[  222.983187][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1483'.
[  223.003758][T12049] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.062285][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'.
[  223.348885][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'.
[  223.364986][T12061] veth1_macvtap: left promiscuous mode
[  223.548444][T12074] fuse: Unknown parameter 'fd0x0000000000000004'
[  224.218781][T12092] loop7: detected capacity change from 0 to 32768
[  224.242811][T12092] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.277906][T12092] XFS (loop7): Ending clean mount
[  224.444520][ T8672] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.649212][T12122] loop7: detected capacity change from 0 to 256
[  224.653024][T12122] exfat: Deprecated parameter 'utf8'
[  224.655436][T12122] exfat: Deprecated parameter 'utf8'
[  224.657542][T12122] exfat: Deprecated parameter 'utf8'
[  224.666607][T12122] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  224.700309][ T5889] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  224.870148][ T5889] usb 3-1: Using ep0 maxpacket: 32
[  224.878319][ T5889] usb 3-1: config 2 has an invalid interface number: 20 but max is 0
[  224.882662][ T5889] usb 3-1: config 2 has no interface number 0
[  224.886572][ T5889] usb 3-1: config 2 interface 20 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  224.891249][ T5889] usb 3-1: config 2 interface 20 has no altsetting 0
[  224.894122][ T5889] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93
[  224.897808][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.138702][ T5889] usb 3-1: string descriptor 0 read error: -71
[  225.162511][ T5889] usb 3-1: USB disconnect, device number 29
[  226.123201][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'.
[  226.138099][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'.
[  226.140875][ T5712] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.146296][ T5712] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.149915][ T5712] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.154150][ T5712] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.208061][T12152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'.
[  226.211147][T12141] loop7: detected capacity change from 0 to 32768
[  226.226251][T12141] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.256473][T12141] XFS (loop7): Ending clean mount
[  226.266355][T12141] XFS (loop7): Quotacheck needed: Please wait.
[  226.304243][T12141] XFS (loop7): Quotacheck: Done.
[  226.402524][ T8672] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.632399][T12174] loop7: detected capacity change from 0 to 128
[  226.646093][T12174] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  226.653681][T12174] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  226.707218][ T8672] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.118920][T12199] loop7: detected capacity change from 0 to 32768
[  227.123222][T12199] (syz.7.1541,12199,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.128080][T12199] (syz.7.1541,12199,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.141039][T12199] JBD2: Ignoring recovery information on journal
[  227.177813][T12199] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  227.241269][ T8672] ocfs2: Unmounting device (7,7) on (node local)
[  227.574504][T12210] tipc: Started in network mode
[  227.576418][T12210] tipc: Node identity -, cluster identity 4711
[  227.581031][ T5889] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  227.627197][T12215] ip6gre1: entered promiscuous mode
[  227.736087][ T5889] usb 8-1: config index 0 descriptor too short (expected 1307, got 27)
[  227.743426][ T5889] usb 8-1: config 0 has an invalid interface number: 0 but max is -1
[  227.749544][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0
[  227.756631][ T5889] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  227.765193][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  227.781187][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  227.784700][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  227.795587][ T5889] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  227.798500][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.806096][ T5889] usb 8-1: Manufacturer: и
[  227.816705][ T5889] usb 8-1: config 0 descriptor??
[  227.824499][ T5889] hub 8-1:0.0: bad descriptor, ignoring hub
[  227.830086][ T5889] hub 8-1:0.0: probe with driver hub failed with error -5
[  227.840321][ T5889] input: и as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input12
[  228.034442][ T5917] usb 8-1: USB disconnect, device number 11
[  228.188645][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1566'.
[  228.210121][ T6367] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  228.364979][ T6367] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55911, setting to 64
[  228.369234][ T6367] usb 3-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  228.376267][ T6367] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  228.379715][ T6367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.388894][T12242] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  228.602484][ T6367] usb 3-1: USB disconnect, device number 30
[  229.204853][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'.
[  229.208019][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'.
[  229.213196][T12277] netlink: 'syz.5.1577': attribute type 6 has an invalid length.
[  229.485871][T12285] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1581'.
[  229.488919][T12285] netlink: zone id is out of range
[  229.493229][T12285] netlink: get zone limit has 8 unknown bytes
[  230.097769][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1590'.
[  230.839664][T12336] loop7: detected capacity change from 0 to 1024
[  230.988931][T12342] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  231.214782][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1613'.
[  231.371735][T12363] netlink: 'syz.7.1619': attribute type 11 has an invalid length.
[  231.383083][T12365] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1620'.
[  231.543790][T12375] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1625'.
[  231.760210][ T5763] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  231.910070][ T5763] usb 8-1: Using ep0 maxpacket: 32
[  231.915383][ T5763] usb 8-1: unable to get BOS descriptor or descriptor too short
[  231.919813][ T5763] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  231.926939][ T5763] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  231.930748][ T5763] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  231.933838][ T5763] usb 8-1: config 128 has no interface number 0
[  231.936510][ T5763] usb 8-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  231.956094][ T5763] usb 8-1: config 128 interface 127 has no altsetting 0
[  231.963319][ T5763] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  231.966844][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.969286][ T5763] usb 8-1: Product: syz
[  231.978966][ T5763] usb 8-1: Manufacturer: syz
[  231.980816][ T5763] usb 8-1: SerialNumber: syz
[  231.996437][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1636'.
[  232.246707][ T5763] usb 8-1: USB disconnect, device number 12
[  232.271319][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.465496][T12424] netlink: 'syz.2.1648': attribute type 11 has an invalid length.
[  232.820204][T12438] syz_tun: entered promiscuous mode
[  232.831057][T12438] vlan2: entered promiscuous mode
[  233.200888][ T6367] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  233.350226][ T6367] usb 8-1: Using ep0 maxpacket: 16
[  233.356839][ T6367] usb 8-1: config 0 has an invalid interface number: 49 but max is 0
[  233.360509][ T6367] usb 8-1: config 0 has no interface number 0
[  233.363218][ T6367] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  233.366683][ T6367] usb 8-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  233.372517][ T6367] usb 8-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  233.377877][ T6367] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  233.386265][ T6367] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  233.390191][ T6367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.393798][ T6367] usb 8-1: Product: syz
[  233.395749][ T6367] usb 8-1: Manufacturer: syz
[  233.397897][ T6367] usb 8-1: SerialNumber: syz
[  233.406408][ T6367] usb 8-1: config 0 descriptor??
[  233.409953][T12441] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  233.627647][ T6367] qcserial 8-1:0.49: Qualcomm USB modem converter detected
[  233.631133][T12453] netlink: 'syz.2.1661': attribute type 1 has an invalid length.
[  233.637211][ T6367] usb 8-1: USB disconnect, device number 13
[  233.647441][ T6367] qcserial 8-1:0.49: device disconnected
[  233.678665][T12453] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.702690][T12453] vlan2: entered allmulticast mode
[  233.704832][T12453] batadv0: entered allmulticast mode
[  233.711935][T12453] bond1: (slave vlan2): making interface the new active one
[  233.715926][T12453] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  234.288472][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1671'.
[  234.291555][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1671'.
[  234.423676][T12481] loop7: detected capacity change from 0 to 4096
[  234.777714][T12503] loop7: detected capacity change from 0 to 512
[  234.793867][T12503] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  234.832300][T12503] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1680: invalid indirect mapped block 4294967295 (level 0)
[  234.844390][T12503] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1680: invalid indirect mapped block 4294967295 (level 1)
[  234.855309][T12503] EXT4-fs (loop7): 1 orphan inode deleted
[  234.857162][T12503] EXT4-fs (loop7): 1 truncate cleaned up
[  234.860681][T12503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.886927][ T8672] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.101859][T12507] loop7: detected capacity change from 0 to 32768
[  235.780270][T12527] loop7: detected capacity change from 0 to 40427
[  235.784417][T12527] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  235.786529][T12527] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  235.791493][T12527] F2FS-fs (loop7): invalid crc value
[  235.831941][T12527] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.836836][T12527] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  235.839637][T12527] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  235.863955][T12527] syz.7.1690: attempt to access beyond end of device
[  235.863955][T12527] loop7: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  235.893587][ T8672] syz-executor: attempt to access beyond end of device
[  235.893587][ T8672] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.899445][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  235.899462][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.899467][ T8672] Call Trace:
[  235.899471][ T8672]  <TASK>
[  235.899476][ T8672]  dump_stack_lvl+0x189/0x250
[  235.899494][ T8672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.899504][ T8672]  ? __pfx_queue_work_on+0x10/0x10
[  235.899514][ T8672]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  235.899525][ T8672]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.899542][ T8672]  f2fs_handle_critical_error+0x37c/0x540
[  235.899558][ T8672]  f2fs_write_end_io+0x886/0xb60
[  235.899576][ T8672]  __submit_merged_bio+0x27a/0x6a0
[  235.899591][ T8672]  __submit_merged_write_cond+0x255/0x530
[  235.899606][ T8672]  f2fs_write_data_pages+0x261d/0x3000
[  235.899644][ T8672]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.899706][ T8672]  ? folios_put_refs+0x559/0x640
[  235.899724][ T8672]  ? __pfx_folios_put_refs+0x10/0x10
[  235.899732][ T8672]  ? rcu_is_watching+0x15/0xb0
[  235.899759][ T8672]  ? __lock_acquire+0xab9/0xd20
[  235.899786][ T8672]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.899806][ T8672]  do_writepages+0x32e/0x550
[  235.899833][ T8672]  ? do_raw_spin_unlock+0x4d/0x240
[  235.899853][ T8672]  filemap_fdatawrite+0x199/0x240
[  235.899875][ T8672]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  235.899937][ T8672]  ? do_raw_spin_unlock+0x4d/0x240
[  235.899959][ T8672]  f2fs_sync_dirty_inodes+0x31f/0x830
[  235.899981][ T8672]  f2fs_write_checkpoint+0x95a/0x1df0
[  235.900004][ T8672]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  235.900040][ T8672]  ? kill_f2fs_super+0x298/0x6c0
[  235.900052][ T8672]  kill_f2fs_super+0x2c3/0x6c0
[  235.900064][ T8672]  ? __pfx_kill_f2fs_super+0x10/0x10
[  235.900071][ T8672]  ? radix_tree_delete_item+0x2b6/0x400
[  235.900087][ T8672]  ? shrinker_free+0x2ce/0x3e0
[  235.900136][ T8672]  deactivate_locked_super+0xbc/0x130
[  235.900149][ T8672]  cleanup_mnt+0x425/0x4c0
[  235.900159][ T8672]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.900172][ T8672]  task_work_run+0x1d4/0x260
[  235.900186][ T8672]  ? __pfx_task_work_run+0x10/0x10
[  235.900218][ T8672]  ? __x64_sys_umount+0x122/0x160
[  235.900233][ T8672]  ? exit_to_user_mode_loop+0x40/0x110
[  235.900247][ T8672]  exit_to_user_mode_loop+0xec/0x110
[  235.900259][ T8672]  do_syscall_64+0x2bd/0x3b0
[  235.900271][ T8672]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.900282][ T8672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.900291][ T8672]  ? exc_page_fault+0x9f/0xf0
[  235.900302][ T8672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.900311][ T8672] RIP: 0033:0x7fa7b1f8ff17
[  235.900321][ T8672] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  235.900328][ T8672] RSP: 002b:00007ffcf90c6298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  235.900339][ T8672] RAX: 0000000000000000 RBX: 00007fa7b2011c05 RCX: 00007fa7b1f8ff17
[  235.900344][ T8672] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf90c6350
[  235.900350][ T8672] RBP: 00007ffcf90c6350 R08: 0000000000000000 R09: 0000000000000000
[  235.900355][ T8672] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf90c73e0
[  235.900360][ T8672] R13: 00007fa7b2011c05 R14: 00000000000398ee R15: 00007ffcf90c7420
[  235.900377][ T8672]  </TASK>
[  236.039845][ T8672] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  236.135396][   T33] audit: type=1326 audit(1755521007.850:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.149080][   T33] audit: type=1326 audit(1755521007.850:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.157545][   T33] audit: type=1326 audit(1755521007.860:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.168200][   T33] audit: type=1326 audit(1755521007.860:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.191567][   T33] audit: type=1326 audit(1755521007.860:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.229275][   T33] audit: type=1326 audit(1755521007.890:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.238006][   T33] audit: type=1326 audit(1755521007.890:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12535 comm="syz.5.1693" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51bf8ebe9 code=0x7ffc0000
[  236.270228][ T5860] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  236.270251][ T5855] Bluetooth: hci3: command 0x1003 tx timeout
[  236.450797][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1696'.
[  237.270124][ T5763] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  237.420145][ T5763] usb 8-1: Using ep0 maxpacket: 16
[  237.424445][ T5763] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  237.429043][ T5763] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  237.438761][ T5763] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  237.444295][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.447410][ T5763] usb 8-1: Product: syz
[  237.449092][ T5763] usb 8-1: Manufacturer: syz
[  237.453655][ T5763] usb 8-1: SerialNumber: syz
[  237.459861][ T5763] usb 8-1: config 0 descriptor??
[  237.470850][ T5763] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  237.474934][ T5763] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  238.212058][ T5763] em28xx 8-1:0.0: chip ID is em2750
[  238.452856][ T5763] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  238.456517][ T5763] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  238.459424][ T5763] em28xx 8-1:0.0: No AC97 audio processor
[  238.469448][ T5763] usb 8-1: USB disconnect, device number 14
[  238.474888][ T5763] em28xx 8-1:0.0: Disconnecting em28xx
[  238.484899][ T5763] em28xx 8-1:0.0: Freeing device
[  239.194319][T12584] GUP no longer grows the stack in syz.7.1712 (12584): 200000003000-20000000a000 (200000001000)
[  239.201787][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.7.1712 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  239.201814][T12584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.201824][T12584] Call Trace:
[  239.201831][T12584]  <TASK>
[  239.201839][T12584]  dump_stack_lvl+0x189/0x250
[  239.201867][T12584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.201884][T12584]  ? __pfx__printk+0x10/0x10
[  239.201903][T12584]  ? find_vma+0xe7/0x160
[  239.201923][T12584]  ? __lock_acquire+0xab9/0xd20
[  239.201987][T12584]  __get_user_pages+0x24d0/0x2ce0
[  239.202007][T12584]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  239.202047][T12584]  ? rcu_is_watching+0x15/0xb0
[  239.202066][T12584]  __gup_longterm_locked+0xde9/0x1660
[  239.202093][T12584]  ? sanity_check_pinned_pages+0x123a/0x1300
[  239.202117][T12584]  gup_fast_fallback+0x1e6a/0x2010
[  239.202159][T12584]  ? __pfx_gup_fast_fallback+0x10/0x10
[  239.202187][T12584]  ? pin_user_pages_fast+0x4d/0xb0
[  239.202208][T12584]  iov_iter_extract_pages+0x35a/0x5e0
[  239.202232][T12584]  extract_iter_to_sg+0xe46/0x24e0
[  239.202266][T12584]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  239.202303][T12584]  ? __asan_memset+0x22/0x50
[  239.202321][T12584]  af_alg_get_rsgl+0x436/0x810
[  239.202355][T12584]  aead_recvmsg+0x4cc/0x13f0
[  239.202385][T12584]  ? rcu_is_watching+0x15/0xb0
[  239.202418][T12584]  ? __pfx_aead_recvmsg+0x10/0x10
[  239.202441][T12584]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  239.202457][T12584]  ? __pfx_aead_recvmsg+0x10/0x10
[  239.202478][T12584]  sock_recvmsg_nosec+0x186/0x1c0
[  239.202502][T12584]  ____sys_recvmsg+0x3aa/0x460
[  239.202526][T12584]  ? __pfx_____sys_recvmsg+0x10/0x10
[  239.202556][T12584]  ? import_iovec+0x74/0xa0
[  239.202577][T12584]  ___sys_recvmsg+0x1b5/0x510
[  239.202598][T12584]  ? __pfx____sys_recvmsg+0x10/0x10
[  239.202643][T12584]  ? __might_fault+0xb0/0x130
[  239.202667][T12584]  do_recvmmsg+0x307/0x770
[  239.202690][T12584]  ? __pfx_do_recvmmsg+0x10/0x10
[  239.202704][T12584]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  239.202736][T12584]  ? __pfx_do_futex+0x10/0x10
[  239.202769][T12584]  __x64_sys_recvmmsg+0x190/0x240
[  239.202788][T12584]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  239.202800][T12584]  ? rcu_is_watching+0x15/0xb0
[  239.202819][T12584]  ? do_syscall_64+0xbe/0x3b0
[  239.202843][T12584]  do_syscall_64+0xfa/0x3b0
[  239.202887][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.202906][T12584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.202920][T12584]  ? exc_page_fault+0x9f/0xf0
[  239.202968][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.202981][T12584] RIP: 0033:0x7fa7b1f8ebe9
[  239.202997][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.203011][T12584] RSP: 002b:00007fa7b2ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  239.203027][T12584] RAX: ffffffffffffffda RBX: 00007fa7b21b5fa0 RCX: 00007fa7b1f8ebe9
[  239.203037][T12584] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000007
[  239.203047][T12584] RBP: 00007fa7b2011e19 R08: 0000000000000000 R09: 0000000000000000
[  239.203055][T12584] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  239.203064][T12584] R13: 00007fa7b21b6038 R14: 00007fa7b21b5fa0 R15: 00007ffcf90c7008
[  239.203088][T12584]  </TASK>
[  239.713391][T12602] ==================================================================
[  239.716788][T12602] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  239.720099][T12602] Read of size 2 at addr ffff888027769342 by task syz.5.1719/12602
[  239.723294][T12602] 
[  239.724484][T12602] CPU: 1 UID: 0 PID: 12602 Comm: syz.5.1719 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  239.724508][T12602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.724520][T12602] Call Trace:
[  239.724527][T12602]  <TASK>
[  239.724534][T12602]  dump_stack_lvl+0x189/0x250
[  239.724557][T12602]  ? __kasan_check_byte+0x12/0x40
[  239.724580][T12602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.724598][T12602]  ? lock_release+0x4b/0x3e0
[  239.724622][T12602]  ? __virt_addr_valid+0x4a5/0x5c0
[  239.724642][T12602]  print_report+0xca/0x240
[  239.724657][T12602]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  239.724678][T12602]  kasan_report+0x118/0x150
[  239.724698][T12602]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  239.724722][T12602]  __xfrm_state_lookup+0x6ad/0x8d0
[  239.724746][T12602]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  239.724771][T12602]  xfrm_state_add+0x27d/0xc40
[  239.724790][T12602]  xfrm_add_sa+0x35a1/0x4070
[  239.724808][T12602]  ? __pfx_xfrm_add_sa+0x10/0x10
[  239.724824][T12602]  ? apparmor_capable+0x137/0x1b0
[  239.724842][T12602]  ? __nla_parse+0x40/0x60
[  239.724865][T12602]  xfrm_user_rcv_msg+0x7a3/0xab0
[  239.724883][T12602]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  239.724942][T12602]  ? __pfx___mutex_trylock_common+0x10/0x10
[  239.724973][T12602]  ? rcu_is_watching+0x15/0xb0
[  239.724989][T12602]  ? trace_contention_end+0x39/0x120
[  239.725004][T12602]  ? __mutex_lock+0x335/0x1360
[  239.725025][T12602]  netlink_rcv_skb+0x208/0x470
[  239.725048][T12602]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  239.725067][T12602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  239.725091][T12602]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.725111][T12602]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.725131][T12602]  xfrm_netlink_rcv+0x79/0x90
[  239.725146][T12602]  netlink_unicast+0x82f/0x9e0
[  239.725167][T12602]  ? __pfx_netlink_unicast+0x10/0x10
[  239.725186][T12602]  ? netlink_sendmsg+0x642/0xb30
[  239.725204][T12602]  ? skb_put+0x11b/0x210
[  239.725218][T12602]  netlink_sendmsg+0x805/0xb30
[  239.725241][T12602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.725263][T12602]  ? aa_sock_msg_perm+0xf1/0x1d0
[  239.725285][T12602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  239.725300][T12602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.725321][T12602]  __sock_sendmsg+0x21c/0x270
[  239.725340][T12602]  ____sys_sendmsg+0x505/0x830
[  239.725356][T12602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.725374][T12602]  ? import_iovec+0x74/0xa0
[  239.725402][T12602]  ___sys_sendmsg+0x21f/0x2a0
[  239.725418][T12602]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.725445][T12602]  ? __fget_files+0x2a/0x420
[  239.725458][T12602]  ? __fget_files+0x3a0/0x420
[  239.725475][T12602]  __x64_sys_sendmsg+0x19b/0x260
[  239.725492][T12602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.725511][T12602]  ? rcu_is_watching+0x15/0xb0
[  239.725527][T12602]  ? do_syscall_64+0xbe/0x3b0
[  239.725550][T12602]  do_syscall_64+0xfa/0x3b0
[  239.725569][T12602]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.725588][T12602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.725603][T12602]  ? exc_page_fault+0x9f/0xf0
[  239.725623][T12602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.725638][T12602] RIP: 0033:0x7fa51bf8ebe9
[  239.725653][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.725666][T12602] RSP: 002b:00007fa51cdad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.725684][T12602] RAX: ffffffffffffffda RBX: 00007fa51c1b5fa0 RCX: 00007fa51bf8ebe9
[  239.725696][T12602] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003
[  239.725707][T12602] RBP: 00007fa51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  239.725716][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.725725][T12602] R13: 00007fa51c1b6038 R14: 00007fa51c1b5fa0 R15: 00007ffe9a4978d8
[  239.725741][T12602]  </TASK>
[  239.725747][T12602] 
[  239.879452][T12602] Allocated by task 9610:
[  239.881384][T12602]  kasan_save_track+0x3e/0x80
[  239.883456][T12602]  __kasan_slab_alloc+0x6c/0x80
[  239.885538][T12602]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  239.887783][T12602]  xfrm_state_alloc+0x24/0x2f0
[  239.889663][T12602]  xfrm_state_find+0x37d4/0x5400
[  239.891582][T12602]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  239.893909][T12602]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  239.896170][T12602]  xfrm_lookup_route+0x3c/0x1c0
[  239.898262][T12602]  udp_sendmsg+0x142e/0x2170
[  239.900297][T12602]  __sock_sendmsg+0x19c/0x270
[  239.902393][T12602]  ____sys_sendmsg+0x52d/0x830
[  239.904375][T12602]  ___sys_sendmsg+0x21f/0x2a0
[  239.906216][T12602]  __sys_sendmmsg+0x227/0x430
[  239.908074][T12602]  __x64_sys_sendmmsg+0xa0/0xc0
[  239.910116][T12602]  do_syscall_64+0xfa/0x3b0
[  239.912012][T12602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.914647][T12602] 
[  239.915691][T12602] Freed by task 5763:
[  239.917537][T12602]  kasan_save_track+0x3e/0x80
[  239.919715][T12602]  kasan_save_free_info+0x46/0x50
[  239.921636][T12602]  __kasan_slab_free+0x5b/0x80
[  239.923470][T12602]  kmem_cache_free+0x18f/0x400
[  239.925341][T12602]  xfrm_state_gc_task+0x52d/0x6b0
[  239.927539][T12602]  process_scheduled_works+0xae1/0x17b0
[  239.929966][T12602]  worker_thread+0x8a0/0xda0
[  239.931942][T12602]  kthread+0x711/0x8a0
[  239.933578][T12602]  ret_from_fork+0x3fc/0x770
[  239.935567][T12602]  ret_from_fork_asm+0x1a/0x30
[  239.937496][T12602] 
[  239.938476][T12602] The buggy address belongs to the object at ffff888027769200
[  239.938476][T12602]  which belongs to the cache xfrm_state of size 928
[  239.944222][T12602] The buggy address is located 322 bytes inside of
[  239.944222][T12602]  freed 928-byte region [ffff888027769200, ffff8880277695a0)
[  239.949438][T12602] 
[  239.950385][T12602] The buggy address belongs to the physical page:
[  239.953074][T12602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802776a400 pfn:0x27768
[  239.957488][T12602] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  239.960929][T12602] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  239.964286][T12602] page_type: f5(slab)
[  239.965962][T12602] raw: 00fff00000000240 ffff8881052a9280 ffff88801c366708 ffffea0000a13610
[  239.969536][T12602] raw: ffff88802776a400 00000000000e0004 00000000f5000000 0000000000000000
[  239.973082][T12602] head: 00fff00000000240 ffff8881052a9280 ffff88801c366708 ffffea0000a13610
[  239.976592][T12602] head: ffff88802776a400 00000000000e0004 00000000f5000000 0000000000000000
[  239.980031][T12602] head: 00fff00000000002 ffffea00009dda01 00000000ffffffff 00000000ffffffff
[  239.983564][T12602] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  239.987219][T12602] page dumped because: kasan: bad access detected
[  239.989865][T12602] page_owner tracks the page as allocated
[  239.992232][T12602] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6187, tgid 6186 (syz.2.107), ts 84455487251, free_ts 82389412691
[  239.999575][T12602]  post_alloc_hook+0x240/0x2a0
[  240.001556][T12602]  get_page_from_freelist+0x21e4/0x22c0
[  240.003863][T12602]  __alloc_frozen_pages_noprof+0x181/0x370
[  240.006276][T12602]  alloc_pages_mpol+0x232/0x4a0
[  240.008159][T12602]  allocate_slab+0x8a/0x370
[  240.009945][T12602]  ___slab_alloc+0xbeb/0x1410
[  240.011817][T12602]  kmem_cache_alloc_noprof+0x283/0x3c0
[  240.014112][T12602]  xfrm_state_alloc+0x24/0x2f0
[  240.016088][T12602]  xfrm_add_sa+0x17d1/0x4070
[  240.017970][T12602]  xfrm_user_rcv_msg+0x7a3/0xab0
[  240.020046][T12602]  netlink_rcv_skb+0x208/0x470
[  240.021993][T12602]  xfrm_netlink_rcv+0x79/0x90
[  240.023905][T12602]  netlink_unicast+0x82f/0x9e0
[  240.025863][T12602]  netlink_sendmsg+0x805/0xb30
[  240.027887][T12602]  __sock_sendmsg+0x21c/0x270
[  240.029834][T12602]  ____sys_sendmsg+0x505/0x830
[  240.031848][T12602] page last free pid 5763 tgid 5763 stack trace:
[  240.034262][T12602]  __free_frozen_pages+0xbc4/0xd30
[  240.036289][T12602]  stack_depot_save_flags+0x436/0x860
[  240.038504][T12602]  kasan_save_track+0x4f/0x80
[  240.040507][T12602]  __kasan_slab_alloc+0x6c/0x80
[  240.042488][T12602]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  240.044716][T12602]  __kernfs_new_node+0xd7/0x7e0
[  240.046661][T12602]  kernfs_new_node+0x102/0x210
[  240.048567][T12602]  kernfs_create_link+0xa7/0x200
[  240.050564][T12602]  sysfs_do_create_link_sd+0x83/0x110
[  240.052667][T12602]  device_add_class_symlinks+0x133/0x240
[  240.054849][T12602]  device_add+0x475/0xb50
[  240.056601][T12602]  cdev_device_add+0x1d6/0x390
[  240.058530][T12602]  evdev_connect+0x34f/0x3f0
[  240.060448][T12602]  input_register_device+0xd00/0x1140
[  240.062644][T12602]  bcm5974_probe+0x1679/0x21c0
[  240.064507][T12602]  usb_probe_interface+0x668/0xc30
[  240.066495][T12602] 
[  240.067422][T12602] Memory state around the buggy address:
[  240.069595][T12602]  ffff888027769200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.072757][T12602]  ffff888027769280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.075991][T12602] >ffff888027769300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.079231][T12602]                                            ^
[  240.081540][T12602]  ffff888027769380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.084643][T12602]  ffff888027769400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.087825][T12602] ==================================================================
[  240.091376][T12602] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  240.094147][T12602] CPU: 1 UID: 0 PID: 12602 Comm: syz.5.1719 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  240.099184][T12602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.103342][T12602] Call Trace:
[  240.104659][T12602]  <TASK>
[  240.105785][T12602]  dump_stack_lvl+0x99/0x250
[  240.107601][T12602]  ? __asan_memcpy+0x40/0x70
[  240.109397][T12602]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.111407][T12602]  ? __pfx__printk+0x10/0x10
[  240.113310][T12602]  vpanic+0x281/0x750
[  240.114996][T12602]  ? __pfx_vpanic+0x10/0x10
[  240.117086][T12602]  ? irqentry_exit+0x74/0x90
[  240.119003][T12602]  panic+0xb9/0xc0
[  240.120585][T12602]  ? __pfx_panic+0x10/0x10
[  240.122316][T12602]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  240.124628][T12602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.126943][T12602]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  240.129114][T12602]  check_panic_on_warn+0x89/0xb0
[  240.131191][T12602]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  240.133485][T12602]  end_report+0x78/0x160
[  240.135474][T12602]  kasan_report+0x129/0x150
[  240.137362][T12602]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  240.139437][T12602]  __xfrm_state_lookup+0x6ad/0x8d0
[  240.141540][T12602]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  240.143954][T12602]  xfrm_state_add+0x27d/0xc40
[  240.145949][T12602]  xfrm_add_sa+0x35a1/0x4070
[  240.147885][T12602]  ? __pfx_xfrm_add_sa+0x10/0x10
[  240.149977][T12602]  ? apparmor_capable+0x137/0x1b0
[  240.152065][T12602]  ? __nla_parse+0x40/0x60
[  240.153888][T12602]  xfrm_user_rcv_msg+0x7a3/0xab0
[  240.155904][T12602]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  240.158162][T12602]  ? __pfx___mutex_trylock_common+0x10/0x10
[  240.160704][T12602]  ? rcu_is_watching+0x15/0xb0
[  240.162690][T12602]  ? trace_contention_end+0x39/0x120
[  240.164894][T12602]  ? __mutex_lock+0x335/0x1360
[  240.166813][T12602]  netlink_rcv_skb+0x208/0x470
[  240.168749][T12602]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  240.170884][T12602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.173033][T12602]  ? netlink_deliver_tap+0x2e/0x1b0
[  240.175169][T12602]  ? netlink_deliver_tap+0x2e/0x1b0
[  240.177342][T12602]  xfrm_netlink_rcv+0x79/0x90
[  240.179362][T12602]  netlink_unicast+0x82f/0x9e0
[  240.181276][T12602]  ? __pfx_netlink_unicast+0x10/0x10
[  240.183357][T12602]  ? netlink_sendmsg+0x642/0xb30
[  240.185398][T12602]  ? skb_put+0x11b/0x210
[  240.187064][T12602]  netlink_sendmsg+0x805/0xb30
[  240.189012][T12602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.191276][T12602]  ? aa_sock_msg_perm+0xf1/0x1d0
[  240.193296][T12602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  240.195382][T12602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.197472][T12602]  __sock_sendmsg+0x21c/0x270
[  240.199366][T12602]  ____sys_sendmsg+0x505/0x830
[  240.201306][T12602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.203557][T12602]  ? import_iovec+0x74/0xa0
[  240.205406][T12602]  ___sys_sendmsg+0x21f/0x2a0
[  240.207314][T12602]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.209371][T12602]  ? __fget_files+0x2a/0x420
[  240.211203][T12602]  ? __fget_files+0x3a0/0x420
[  240.213057][T12602]  __x64_sys_sendmsg+0x19b/0x260
[  240.214989][T12602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.217115][T12602]  ? rcu_is_watching+0x15/0xb0
[  240.219113][T12602]  ? do_syscall_64+0xbe/0x3b0
[  240.221111][T12602]  do_syscall_64+0xfa/0x3b0
[  240.223016][T12602]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.225020][T12602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.227419][T12602]  ? exc_page_fault+0x9f/0xf0
[  240.229280][T12602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.231731][T12602] RIP: 0033:0x7fa51bf8ebe9
[  240.233618][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.241469][T12602] RSP: 002b:00007fa51cdad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.244671][T12602] RAX: ffffffffffffffda RBX: 00007fa51c1b5fa0 RCX: 00007fa51bf8ebe9
[  240.247883][T12602] RDX: 0000000000000010 RSI: 00002000000035c0 RDI: 0000000000000003
[  240.251253][T12602] RBP: 00007fa51c011e19 R08: 0000000000000000 R09: 0000000000000000
[  240.254672][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.258069][T12602] R13: 00007fa51c1b6038 R14: 00007fa51c1b5fa0 R15: 00007ffe9a4978d8
[  240.261202][T12602]  </TASK>
[  240.263229][T12602] Kernel Offset: disabled
[  240.265255][T12602] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:39:15  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff9350da18 RBX=0000000000000003 RCX=000000006248604f RDX=0000000000000000
RSI=ffff888035d88b68 RDI=ffff888035d88000 RBP=0000000000000000 RSP=ffffc900038aed28
R8 =0000000000000000 R9 =ffffffff8975f881 R10=dffffc0000000000 R11=fffff940001420cf
R12=00000000c6ad6fa1 R13=ffff888035d88af0 R14=ffff888035d88b68 R15=822c5b6b6248604f
RIP=ffffffff819d6971 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa7b2ea76c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3251dff8 CR3=0000000035b7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa7b2012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000013f8c RDI=0000000000013f8d RBP=ffffffff99dee630 RSP=ffffc900038fe970
R8 =ffff88801fd78237 R9 =1ffff11003faf046 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa51cdad6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000380 CR3=0000000110bf4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa51c187498 00007fa51c187470 XMM03=00007fa51c1874a8 00007fa51c1874a0
XMM04=00007fa51cced100 00007fa51c187460 XMM05=00007fa51c187478 00007fa51c1874c0
XMM06=00007fa51c1874b8 00007fa51c1874b0 XMM07=00007fa51c1874a8 00007fa51c1874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa51c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
