last executing test programs:

1m19.821836929s ago: executing program 1 (id=1564):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020afc090700000026bd7002fedbdf2505001a00fe8000000000000000000000000000aa64010100000c00002c003000ca862220e83f1ad7"], 0x38}}, 0x40408c0)

1m19.755245837s ago: executing program 1 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000700), 0x6, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m19.754906226s ago: executing program 1 (id=1567):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="ffffffffffffff14"], 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m19.671304933s ago: executing program 1 (id=1568):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

1m19.601859265s ago: executing program 1 (id=1569):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1m19.517125395s ago: executing program 1 (id=1571):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)

1m19.315328468s ago: executing program 32 (id=1571):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
umount2(&(0x7f0000000080)='./file0\x00', 0x4)

39.65454572s ago: executing program 3 (id=2043):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x8000)
sendmmsg$inet6(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="976d7a07eb881aba56b6", 0xa}], 0x1}}], 0x1, 0x0)

39.653906058s ago: executing program 3 (id=2044):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40084149, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)

38.631066336s ago: executing program 3 (id=2050):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x0, 0x12, 0x2, "f725"}, 0x0, 0x0, 0x0, 0x0, 0x0})

36.939221236s ago: executing program 3 (id=2070):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

36.788880069s ago: executing program 3 (id=2073):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4001, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x36)

36.50496766s ago: executing program 3 (id=2080):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14927e, 0x20)

36.35608246s ago: executing program 33 (id=2080):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x256, &(0x7f0000000bc0)="$eJzs2s9rHGUYB/Bn0takqclG/EUL4ose1MvQ5OyhQVoQA4o2QhWkUzPRJeNuyCyBFaE56dWjR8/i0YMgSI9ecvEv6MFbLjn2II6ku9ZtE0sx224pn89lH3jmu/sM8zI8h91789svNtbrfL3oxVSWxdSF2IlbWSzEVPxjJ9547cpvL31w5aN3lldWLr6f0qXly4tLKaX5l3/9+KsfX7nRO/PhT/O/TMfuwid7+0t/7L6we3bvr8uft+vUrlOn20tFutbt9oprVZnW2vVGntJ7VVnUZWp36nLrrv561d3c7KeiszY3u7lV1nUqOv20UfZTr5t6W/1UfFa0OynP8zQ3GxzH6g+3mib2m1NXo2ma09/HmRsxdzNakT2TsmcvZM9fzV7cyc5+Nz3pQXlIHuj57zdNa9KD8lCMvNRnIqpvtle3Vwefg/7yerSjijLORyv+jINjMjSoL729cvF8um0hvq6uD/PXt1dPDPIxzC9GKxaOzi8O8unu/HTMjv7+UrTiuaPzS0fmZ+L1V0fyebTi90+jG1WsxUH2Tv7niEhvvbtyT/7c7esAAJ40ebrj0P5286Cf/1d/kL/ffjgTESP74T371ck4d3LSd0/d/3KjqKpySzG+4uDwPwZjTKg4dZz46eG5vM81Tx9uTcV4hn/qeN8zP6Yxxlec+P/xCb+YeCT+feiHe9kkBgIAAAAAAAAAAOCBPIo/IU76HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMfb3wEAAP//R7zIZg==")
chdir(&(0x7f0000000240)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14927e, 0x20)

4.413716855s ago: executing program 0 (id=2421):
statfs(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e000000e1f440994bb1d212fd0400b5063087117502d8c24f1fe97f61fd27a06d6a38a7004000"}, 0xd8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffeffff}]})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r4, &(0x7f0000000080)="c5cd3c7e3800"/20}, 0x20)
keyctl$join(0x1, 0x0)

3.43544506s ago: executing program 4 (id=2428):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4)

3.179232425s ago: executing program 0 (id=2429):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x486, &(0x7f0000001040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x108, 0x100000002, 0x4, 0x5})

2.364712376s ago: executing program 0 (id=2437):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)

2.222300243s ago: executing program 0 (id=2438):
syz_read_part_table(0x4089, &(0x7f0000000000)="$eJzszz1Ow0AQBeDnOP4JIQEhagRUVAg6qkgcItdBiBNwjpwSRRvHhhoEQt9X7Mzs2yk2/Kp+bKvJOdYks2RxHC5K6Uq5HoJ6yOdJ2twleU7y8JjmpARtKa9n88PLZbLdffd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv6tL3rvJPEvWpWuS1Ifbxde1/cXLJk+nSb9ff6vTbK6qXCY391mVR22SqrT95/Xt7md+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8U22SVbIe5ttlP4bnx676YH8OTgCEYSiARrBQlxC8OIZbOJGbuGikKsUFvL13SsJPIPm4m7PGsc1DqRHL2gaflRaZep353ig9MMaeP/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYKAAA//+auBfU")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000640), &(0x7f0000000680)={'enc=', 'raw', ' hash=', {'sha1-ni\x00'}}, 0x0, 0x0)

2.221900666s ago: executing program 4 (id=2439):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x443e, &(0x7f000000cd80)="$eJzs3b9Pm2ceAPDnfeEukMsPyGXISSedpcsQ3Z0QZLo7IpUQEgIJSZU2UdXFMeAQWoMjMFWHDHSL1KlSh6pD1ErdmCKGrumf0KVjOkdKhy6VKkWlsv0aeF9s4VIMTfT5SPDyPr/x18/jx4P9xInK/fnl3PxyrrCYK8/cWz6f+6BcWlkohviAHHb/tKcTcRL7w3Pz0pW37pwP4ZvZ755vbGxshKru0NTQtr9/+vHhzPZrQ5ypU223eWv75d0Qwukd46rqCiG883UIUQjhYpI2mlx7QwgnQj3vzsOP7+b2aTRPnhUv5F9OPVofPju59ni99f8ehfB56W//mVt48c+u4e//tU/dAwAAAAAAAAAAAAAAAADwihu/dfP2m4ND4WkUuteinZ/XHU+urT4fu7Fv/lFr70+d/ocBAAAAAAAAAAAAAAAAAADgD2jr8/+56FSTz/+PJdeRFvU33uj8GOmciRs3xy4PDiXnv0c78v+bJP1wsSv0Nzn3PXv++8VM/ebnv+/sZ68a42v02xeieCB1H8cDAyF8mRz8fiY6GpfKy5V/3yuvLM7u2zBeWen410/vrz6kRxoFkgP9243/aKb9zp///9cdz6bq/d39e4q91iZuvDi+Ff+uk63KffVR1Fb8L2XqHUT82bv0/O+upfVuLzBSXwCq8f+ke/f4j2Xa71T8T4QQclF1rLnUClDdw1TTW+1XSEvHv/7tS6mlM3kgW83/nzPxv5xp/zDW/64Qwmr2hYim0vH/cy2tJ1Via/73x7vP/yuZ9g8j/tXxr3r9b0uz+Z9ReyTbXf/HM5U7Ff/b1adl9eXqRJR6BqxF9fRW31dHWjr+PTvyt97/xW3t/65m6h/U+79Gv433f43l/1xUf/9Hc+n497Ys1+78n8jU22X+t+6wTSO1/R97lY7/0Vpaeu/cV/vdbvwnM+13av2v7Up6GvHfWk9+OVJP/8L+ry3p+P+lnhhvL7Fa+13b/0W77/+vZdo/jP1fdfyrcWd7fV2k43+sZblq/L9t4/X/eqZe5+MfwqC9/p6l43+8Zbna/O/ZPf5TmXqdjv+5TjYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AoYTa59IYoHUvdxPDAQwqXk/kw4Gk0XZvPTpfLM+8shjCXpuXAqmiuVpwul/PxiebaYL5RK5ZkQLif5p0NPtFwqV/ILhQdXNtvqje4XC0uV6WKhEkIYT9L/Ho432pqerywUHoQQrm7mnYzLSw/uFxbzs/NL/x8cHBwME5tj6I+KH1aKi5V67/XcECY36/ZF2wZXy762OZZj0XvllaXFQqmWfn1bnVJ5plDaVmcqyfs09EeVpZXFmUKlmC+V5xr9HaaR5Do2cevtW9eHduTfjerX0YMdFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/0dPh/30WQuiq38UhhFyU/BElPylPnhUv5F9OPVofPju59nj9ebMybZr7nUMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAX9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLv2jNBBEcQB+MxZaegyrZbezXVFEC1cET6DH8DB6FC/hHSxSpE0RAskshP0DaZIifF/zYH7MvAfzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cw8vnXvr3UTkeJqfRnx+/n3v58/l/p9N33/4gQzcjxPL939Q92Uf0+j/LYcLdq8TVfLr4+YqL2fwZ4M92ln3Gdobt/m5uv7XkfKVUS0Jb9JOVfVYW8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVwAAAP//LhMgPw==")

1.639202935s ago: executing program 4 (id=2442):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)

1.553447233s ago: executing program 4 (id=2444):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}, 0xfff2}], 0x1, 0x0, 0x0)

1.23510156s ago: executing program 2 (id=2449):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xfe, 0x61bc, &(0x7f00000016c0)="$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")
mknod(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0)

931.969094ms ago: executing program 2 (id=2450):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x9, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})
ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0xc, 0x5, 0x7, 0x5, 0x200, 0xfffffffd, 0x592f})

931.758514ms ago: executing program 2 (id=2451):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}})

931.276753ms ago: executing program 0 (id=2452):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[], 0x2a, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

930.584381ms ago: executing program 2 (id=2453):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f0000000000)=0x8328be7a30208093)

790.478765ms ago: executing program 2 (id=2454):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0xff, 0x5a1a, &(0x7f00000016c0)="$eJzs3X+QHFd9IPDXM7Pa2V2ttJJNLGy8WgsrcUxAK/8qfqSCkksgZROXKFIE+QT22lo5AklW6UdsCyfIOZtDZUNBilRikj8cynAHKJSr4IIVF46NT/LxS+UL57oC18Gd4Q+uHB+qgHUuimOvdqbf7EzP9Pbs7Kx+2J9PSdvTb958+/XrNz39fTO7EwAAAHhFOH7vvlPXX/h73/jz6Rc/9Pv/uOvuMFKulVdjhbF0eceZaiGn02BlTW2ZHRe/9sHP/2jilt/5+sPDn3np2LZLtn/vd8+75dH3X3v0gb954mejX/7lc0Vx43i6fG49eSEJofrVk3/54WPfvGC2LFkx+7N0KIRVyeonViWZEJM/DyFsS1fWZO780otXbp9d3n3fYEv5ykw94/2VbfY4zw6sg6duf134/m9vuefba7/49wNHnj80VyWpNo2nEFbc1Pz4gRDCUPp/VhxtcTzGQbs5hDDc9Lg3FrTrtV22f0PO+kXpclm6HCmIE+9fl1kvZepl16OBzHK4YHuLldeOXusVWZ5Zz56MFiuvnbF8Vbr8Srq8fIHxy+k+lJNQSkKl0fydydwYCU3HLQlJ7VhWG+ulxrEN6f5n1pPMeimzXh7I7Fdtu+lAKydJa3mslymPp+NKWn5J87m6g3fllL86XVbTJ+pLcT1kb9SNtN1o7FdNbNfJedpyOpSazkGdyhsHPj0YI2nZSLK67TEzHcT7jm25f31569eOj+W0I3k4SeMnPcU/+K1Vy9/3hcMHsq/rjfg3ldL4pZ7i/+C6Ez+54fCnP5Ub/+Mxfrmn+Fc8NvzCdU/euy63f07G/qn0FH/quac+uvb8m4/ktv/BGL/aU/xNR08Mjp567PHc9k/G/hnqKf6zb3nbDz/3zCPP58YPMf5wT/G3Ht3zscHxU5flxn889s9Ib+Pnp0eu+e74+I8n8uI/HeOP9hT/s4ceePNDK++7Nvf4bo79M9ZT/Hdc+ug9y089cnHeuTN5sF+vnACvTOel11gfSdd7zTMXqylf+OuJSv2ab3n6f7SfG8pcfM5uZ0U/4wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACOFVr/svb/9f7x57oZKuD6Y3ni3Vl7F8WQjJUAhh3/6pvft37L514v23Hdi7e2rnxNT+iend+/feOXHVb0zsnd6zc+rO2XsnX39l/XGrQ1JfJhe3bXtwZmamNNZaFrf3by498v31b/zf/xLC5Ku+M17Jbf+GB3Y9dH6HnxnJppm37jpw/Xeu/rt0v8bSdo11aNfMzMxMyGnX/3nPLx76i5M/uiyEyV+Zr11PPftb/9TSoFrBXJxUaTDUGzSYDHdsR6PVaXtif1W279g5PTl//84+vpyzH//2g8//fPsdn/hFvX+rufvRZf8ObZrZWfqrLe/4f391V72gqF1n6rgX9Xfci9i+2H/VtL9XpPu1Ime/Kjn7de+3H3/mqxce/tmhMFn56dr2bRft10A6AAaSV3e13biF4WRVS3k1rR+PeHzchv279mzYd+fB1+/YNXXr9K3Tu9+08aqN10xefc3VG2p7vqHP+x+3/6td7n/eeBpIl/0ZTyv/5NBX4s/uxlNru5YtuD9m21XcH80tynv+Db/rw5980wNPXl8vKBrnsXbjfJIuh2eP88bQNN7a+6rTfhU930MIE5364Sc/uzZc8N933FN0Hmo+Ms0/M5JNM99c969/98a/XfOb9YLTcp5vblCP5/lGq+faU+uvano8Zs7S/h0M5XS/Rjq2a+M3nxy4//i//GmjfcuWhTum9u/fu7H+c3na0uXJRR3blS2N+7W29rMc0m4JjWHaYbyG2nmi3r7s+TNWz/bqSHrfSLK6435lxfuObbl/fXnr147n9XTycH2LQ2G0vkxek1NzZ+aB5UaDO23/bH3+FY2P8bf/7Zff/eV/uKptfFxR/1m0X0nOfn3xmc9+8jOf+Pf/0L/9evtvnRj71//xx+vrBWf9eaVcb0ij1Wl7kubzyhUhFD3/1obO+5H7/Ct13p+i5192O3P1O8ebyKyPhHJPz9crHht+4bon712X+3w9Od/ztXln72p5XLng+Xq2jJ/s8yuptLZj6Z5fLQMl2TTz9Y+cd+iJD22+sF5Q9HrZqN1pXF/ZRf6Rs1//dMN3x2+b+Hf/rX/njc//xpdu/N7Upj+rF/R+3GNb+nPcq2n/VnP6t9HqmHc29+8bbrlt57Z6eVE/n7nr33RZkP/EU8m+Ow9+YGrnzum9+7rbr25fT+N2sr3c6+tpPLutLtivUtt+Ld2Nbvqr2+dbbP+2nvur9fk2EpKeXhcOfmvV8vd94fCBsbZHpRu6qZTGL/UU/wfXnfjJDYc//anc+B+P8Ss9xZ967qmPrj3/5iO58R9M0vjVnuJvOnpicPTUY4/nxp+M7R/qKf6zb3nbDz/3zCPP58YPMf5Ib/3/0yPXfHd8/Me58Z9O0u3MXiOF8KUXr9xeX09qcw7VpnYMtLQrZNeTzHops15uXi/FWYR0A+UkaS2P9dLyS5ra0skf5ZTHq7DqmvrypbgesjfmLz/blJrO/Z3Ki65TAQBe7uL7//EaNL7/P51eKOXPNMCcxeZha3Lixjxsbj6n9T3WNWn8+Pg4Dzj+hjA5u7x7on6hv9D3EeLzITvPGbdz2WtbYxTOc87Utt82z1k0/74usx7bVZ8vrzTloan2vKYSuph/b9/O/PPvmd0vfj9r4iNtzZpomrfKHr+BdMas0+cdMu2tzEbIGx/ZebH4eY7xFWFzbXtdjo/s52jicch+jiZu58LMibPXz9HkjY+x9n5oaVccH7HePOOj1uTi9yPbj1+Yp3/njl/naNnjt4DjXZ2tv9Tvz/Zh3rDjKe30zRsu7fth5iVz4qdPsLN93jCWx/2odDmf+O6c8n7NJ8bTRWzXyXnacjqYTwRermL+H18jZvP/2Qvw/5upV5SnZK8aY7zczwmVO7enKO9o/5ze8EJfx4dm79t6dM/HBsdPXZZ7nfN4t5/T29OyNlzwuZ+iflyfWS/sx5wJmqJ8L7udon7Pfi5jJIz2dP302UMPvPmhlfddm9vvm+svpMX9/smWtdGCfj8H8oXO8eULr4h8Yannz/qUj4w1rXeXj6QffFqqfOQPc8oXmo8Mt91o7FfN2ZuPzL2QtuQjA6e3XQDAuSPm/433z9L8/3/GCul1RFHeenlmPcbLzVtzrk/y8tY/SJd3ZOqPpL9RsZDr5tlr33dc+ug9y089cnFu3vJgt3nof2xZGyvMQxeXN+fmEZv783nx3DyikWctLk/MbX8jT1xcnp7zNm1Tnr64PDq3fxp5dOs8wCdPdBc/zgPkxm/MA/Qxz/3lXKXTl+cWzNdlNhZXu52vOyN59IrW/VyS9/XSX59dqjz6XTnlC82jR9puNPar5uzNo1vL5dEAwMtVzP/jZVzM/5/M1OvhffaaeN2emxf06bo9+/dAGvGfXpK8ci5+n97/Lc77ljpvXeq8fqnnJc7193+Xel5orPYHPBcav9t5sjP2edezJS9enqkgLwYA4CwU8/+hdD0//x/N/Q2nbvKTtvxtoH4JOZefnHv5eXM9+XlO/JdNfn6uz38t/HMyQf7f6/viL83I/wEAOAvF/D/+2mP8+3//OV3P/t36czFPD95Hl6efM3n64j4HkHt8mz8HYB7g9H4+fmiuvnkAAADOhIFaptT+e/bvTZfZ37PP+738G3Lqd6uSXh7fvH/v9PSNB/Zsm9o/fePu27ZN77vx9r079u+f3l2vt9i8MTdvSfPGgVBJ+6NzvWzetjL9ewgrc/4eQrZ+DHtR7Ub730PIbnao4O8IzB2/7tqbd/xK89TvND7yjnde/D/KqR81jv8tf3zFjdv33bhj9479O6Z27jg43VpvNmsdXsD3Zibp/wV9X2rmR5vSwr+/Mx6exbWj1NaOgbQ/8r6fPcm0Y1XaklV533+Q0+5v/Ne/+JNLZ37xuRAmX1V+zaL6L9k085/eM/0H+49/Z89s+0vztr9RM21X0feVZuvH/ansvG3f/tdtv+3A7uw3SvYmzmeUGutLNJ+RPv3LXc5PbM0pX+jv75fbbpydup6fAACgRXz/P17PxvcPP5FeQMXy7vP0xb1/nJunT3aXp2e/l6woT8/Wj/vbbZ5eXWSent1+UZ7eqX6nPD0v786L/4c59Req+3HSxec87s78HbiYfn7h8IHccXJTd+Mk+30GReMkW3+h4yRZ5DjJbr9onHSq32mc5B33vPjvzKmfp2g8VBrjYXGfy8kdDx/vbjz8ema9aDxk6y90PJQWOR6y2y8aD53qdxoPecc3L/71OfW71To+ZgdGbVxM33j7bXs/0FRv/vEx1NaH8b5uv/8itH8ko5v2LZt77NJ+/0evuu/fPn3uKznU2v7JfrU/hE21krz2L+3nyhbf/qL+X8DnylaEts+V5bb/6cXNhHXf/qX9fpeMvOrtjz9d87XpmaDo82dF87hbcsoXOo+7rO3G2ck8Lpw5Mf+Pb/fE/P++dNnvt4HO/e9J8z1mHeP36XvMiq5jzsTreelMvp5n33L3eg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwsjBYWVNbHr9336nrL/y9b/z59Isf+v1/3HX3r33w8z+auOV3vv7w8GdeOrbtku3f+93zbnn0/dcefeBvnvjZ6Jd/+Vxh4LHaz8rl6Wo1hOSFJITqV0/+5YePffOC2bIkhFBOxg6FsCpZ/cSqJBNh8uchhG2Ndrbe+aUXr9w+u7z7vsGW8pWZINn9CiPl2J7mdoZwR+EecQ6qpuPs4KnbXxe+/9tb7vn22i/+/cCR5w/NVUmqTeMphBU3NT9+IIQwlP6fFUfbmvjgdLk5hDDc9Lg3FrTrtV22f0PO+kXpclm6HCmIE+9fl1kvZepl16OBzHK4YHuLldeOXusVWZ5Zz56MFiuvnbF8Vbr8Srq8fIHxy/F/EkpJqDSavzOZGyOh6bglIakdy2pjvdQ4tiHd/8x6klkvZdbLA5n9qm03HWjlJGktj/Uy5fF0XEnLL2k+V3fwrpzyV6fLavpEfSmuh+yNupG2G439qontOjlPW1L/obhK70ohDA52Lq+dmxoHPj0YI2nZSLK67TEzHcT7jm25f31569eOj+W0I3k4SeMnPcU/+K1Vy9/3hcMH1uTFv6mUxi/1FP8H1534yQ2HP/2p3Pgfj/HLPcW/4rHhF6578t51uf1zMvZPpaf4U8899dG15998JLf9D8b41Z7ibzp6YnD01GOP57Z/MvbPUE/xn33L2374uWceeT43fojxh3uKv/Xono8Njp+6LDf+47F/RnobPz89cs13x8d/PJEX/+kYf7Sn+J899MCbH1p537W5x3dz7J+xnuK/49JH71l+6pGL886dyYP9euUEeGU6L73G+ki63mueuVhN+cJfT1Tq13zL0/+j/dxQxux2VixhfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXp7++a6r3vuet75zSyUJIcmpM9NBvK+8bNOmiR62O/XcUx9de/7NR5rL1vQQBwAAACgW8/BSo6Qa1oTbk6FwUcf6cY7goriWtJZn5xBinOwcQa9xSh3ilHqIU+5Teyp9ijPQpzjL+hRnsE9xqgVxqqG7OEPzxKnMjoAu2zM8b3u6jzPSpzjL+xRntE9xVvQpzso+xRmbN07343BVn+Ks7lOc8/oU5/w+xXlVn+L8Sp/iXNCnONk55YWOw9G05oV5cWo3yoVxKkm5cUen+fQL0u1cvMjtjBRsZ7To9bjL7Qx1uZ3XZh5XWuB2ql1u51cXuZ2ky+38+iK3UyrYThy3d2TbF7cT17oc/3f2Kc7BPsX5YJ/i3NWnOH/apzh/1qc4H1pkHIBuxfx/Lt8bC4OV3wzD6RknOwsQ8921tZ/tr3d5J6QY7zWZ8mVF8bKJeibe2oW2LzuBkIm3LlM+0BKv0shH5olXbY63PnPnfPv7lk2d29Yc7/JM+eA88Vp2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOg3++66r3vuet79wSkjD7r6OZDuJ95WWbNk30sN1jW+5fX976tePNZYOVHgIBAAAAhWIePtAoqYbBysYwmCxrqVdN5wGq6Xp5rL4cXxE2zy6TiVJtfThZNe/jKunjNuzftWfDvjsPvn7Hrqlbp2+d3v2mjVdtvGby6muu3rB9x87pyfrPEAYL4oUQatMP++48+IGpnTun9+6rF2bbvyZ93Jp0PUkfN/6GMDm7vDtt/+qC7ZXatrd0N4qPHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/Z9fuQiWtywCAP+/MnJnx6LYTfo2Luw7rKlZWasfQEs8LQYIfiwch5lgnWXIl6eguuitmky6kphSBsrBseNGGSZp040dK5AcLhllCZ5NQKS/qotAyVLwIZeKcmXfOzJyZ5jiIx4/f7+L9eP7P//+8//fiwPOeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID31kJjaq4+PTM7mUQkQ3KaA2Rj+WKa1sao+7VHd/6otOnNU7pjpcIYCwEAAAAjZX34RCdSjlIhH/k4buluc3QNxHLfDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfPQsNKbm6tMzs4cnEcmQnOYA2Vi+mKa1Meq+9Pr9n39+06Z/dMeqY6wDAAAAjJb14blOpBzVODEmkuMWO/9ONPs2sKFvfitvWbbOxlXm9X87GJZ34irzTl5l3idG5G1tn68PAAAA+ODL+v9CJ1KJUmHdin446/9H9fVZ3gl9efn2efW/FSiuOhMAAAD4/7L+v9SJVKNUqHb69dX2+5v78rL5o/5vn80/acj8Uf/Pv6h99n96AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjgWGhMzdWnZ2bzSUQyJKc5QDaWL6ZpbYy6Zzw2+a8LDt6yuTtWKoyxEAAAADBS1ocvt97lKBUmYyIOX+r7N51314NfefDhqYhotfnFYly/bdeua85oHbO80585OPHDp1757oq801vHNdsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwrlloTM3Vp2dmD0sikiE5zQGysXwxTWtj1H3xi1/+273PPfJyd6w6xjoAAADAaFkfvtz7l6MaxSjGMUt33b3+olzf/GHfDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPj2u/fcO3ts3Pb7/GxdpcNPMR74PHcOGi92Kt/zIBAADvthMiieY7dOzFa/3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+8FCY2quPj0zW04ikiE5zQGysXwxTWtj1E0ffba07s3HnuiOVcdYBwAAABgt68OXe/9yVGMiJuLopbtB3wSW+v/Ke/iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPvKQmNqrj49M7suiUiG5DQHyMbyxTStjVH3nj37v3D3+h+c3x0rFcZYCAAAABgp68OLnUg5SoVPRimOb9/P905I8u3z4O8Cy/N29kybXPW8Rs+8/Krn3da3s0J7N6155Wy9SuvcmVdbnpdrz6t1zatGp3ytM2/pZe3tqbZuxHO20yYCAAAA1kDW/5c6kUqUCqWu/v/nPfmV1fW5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBH0EJjaq4+PTObJBHJkJzmANlYvpimtTHq3vD7jx/x9V/cvrs7Vh1jHQAAAGC0rA9f7v3LUY2N8bHYuNT3R6U3P8v7d/2tu+/8z99PiTjtmEObCv3L/iS7+O2L5z7ef4jI9WbnIta36yVD6v3uj3det6X51r0Rpx2dP35Fveir11wf0VWvd8m0+VB9+0W7njq0c8TLAQAAgA+JrP+f6EQqUSpcPbT/zzrvEf1/x1IDvv66Pb86qn1sd+R9M3KVdr3ckHpf2nL/X08665+vLPb/K+t9unP12f1X3X1UT8FWpE+SNqev2r310JkHctmuW/XzffWz9/LV77z83yuuv+OtVv1ylNvxDX2P0qq28thXPtLmfG7f7IVv72v01i8M2f8tf3jiud9suP2NxfqvnzDZqX9yDKrf2nlhaP04LG1OXnLr3rP3H9zaWz8iaoPqv/rG+XHsn6+8uX//k30Ld7/57mP/C0ibz2x+7cBZd1XP6a2f9NXP3v8vn7tn78/u+P7DWf3styKnnLja+rm++k/fduSeJ2+6eENv/dyQ/T9+6fObdtS+96f+/V/es2ph6FOs3P99pz5w2Qvb0hv7hwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5cFhpTc/XpmdlcEpEMyWkOkI3li2laG6PuSxc8++qlt//0x92x6hjrAAAAAKNlffhy71+OahSjGJNLff9D9e0X7Xrq0M6otEaT9rkwv+PaXZ+6Ysfuqy9foycHAAAAVuulC5Kl/r/QiVSiVNgSE+3+f/qq3VsPnXkgl/X/ucVzEhFXXDm//bTo5D1925F7nrzp4g2d7wQRSz8LKC/mfW4577xzn6289pdvnjQw74zlvGc2v3bgrLuq52R50Z13enS+T9x36gOXvbAtvbHzfN15n/nGjvn254ls3clLbt179v6DW3PZd4z2ebK9bpY3n9s3e+Hb+xq5SpQWx/PtvHJ73wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASguNqbn69Mxs5COSITnNbu1ANpYvpmmtfT3xDupeuOXXNx/x5iMbu2Olwjg7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX26y9EqiqOA/g5M7vtuLOruxq0Fa2rFYU9KAUR9VJRERoh9GRIWJoPURBEFPbQGhqJFb0EWS8SFVRbCAa5SaLFGv2TXnqooMB6CERaqF2kh4yZOXecvc5t1tGC6vOB4ew5997v/d17z5zZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8mfT0j9fbw9kdm77zo1s+eun/myds/eGjrFU+89dPYxps/3dP/+ompTcs2f3vLko37H1g9ueuVQ78NvvfH0Y7BjzeaFalbCSEejyFUPpx+8empzy+ojcUQQjkOjYcwHBcfGo65hFW/hxA2Neucu3HvzDWba+3WnX1zxhflQvLXFarlrJ6Gobn18t9SSfNsy+xjV4Xvb1q37cul777TO3Fs/NQusbZPOc2nEBZuaD2+N4SwIH1qstk2kh2c2rUhhP6W467rUNel86x/ZUH/4tSel9pqh5xs+/Jcv5TbL9/P9Oba/g7nm5eTfYWbiurodr9OBnL9/GJ0tpp1rmw/Ppza91O74gzzy9knhlIMPc3yH4yn5khoeW4xxPqzrDT7peazDen6c/2Y65dy/XJv7rrq500TrRzj3PFsv9x4thz3pPFlrWt1G3cVjF+Y2kr6op7I+iH/R0P1tD+a11WX1TX9F7X8E0ota1C78eaDTw+jmsaqcfFpx5xsI9s2te7Zy8vrPzo8VFBH3BNTfuwqf8sXwwP3vL3j0ZGi/A2llF/qKv+HNUd+uXvHqy8X5r+Q5Ze7yr/6QP/xNR9vX154f6az+9Mzr/yY+tm2e49+8tzS8++bKFoh4+4sv9JV/TdOHukbnD1wsLD+Vdn9WdBV/nc33Pbjm1/vO1aYH7L8/q7y108+/Hzf6OyVhfkHG1+Fan2GdjF/fp249pvR0Z/HivK/yu7/YJv82DH/jfFd17+2aOfqwvm5Nrs/Qyl/wRnVf8dl+7cNzO67pGjtjLvP1S8nwP/TkvQ/1jOp3+k9c+9Mqe175tlqeV94aayn8Qs0kD6D5/JEObXzLPwb8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//wM3H94=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)

295.868216ms ago: executing program 4 (id=2455):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0)

101.519667ms ago: executing program 4 (id=2456):
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
mremap(&(0x7f0000c4c000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

520.787µs ago: executing program 0 (id=2457):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0xd, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000)

0s ago: executing program 2 (id=2458):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$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")

kernel console output (not intermixed with test programs):

27][   T24] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  179.584146][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  179.590963][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.594342][   T24] usb 2-1: Product: syz
[  179.599340][   T24] usb 2-1: Manufacturer: syz
[  179.601290][   T24] usb 2-1: SerialNumber: syz
[  179.606066][   T24] usb 2-1: config 0 descriptor??
[  179.626904][   T24] yurex 2-1:0.50: Could not submitting URB
[  179.629840][   T24] yurex 2-1:0.50: probe with driver yurex failed with error -5
[  179.854842][ T5852] usb 2-1: USB disconnect, device number 24
[  179.865917][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'.
[  179.871564][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'.
[  179.875788][ T8793] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  179.996597][ T8799] loop0: detected capacity change from 0 to 256
[  180.013936][ T8799] FAT-fs (loop0): Directory bread(block 64) failed
[  180.016840][ T8799] FAT-fs (loop0): Directory bread(block 65) failed
[  180.019726][ T8799] FAT-fs (loop0): Directory bread(block 66) failed
[  180.022754][ T8799] FAT-fs (loop0): Directory bread(block 67) failed
[  180.029941][ T8799] FAT-fs (loop0): Directory bread(block 68) failed
[  180.032619][ T8799] FAT-fs (loop0): Directory bread(block 69) failed
[  180.036681][ T8799] FAT-fs (loop0): Directory bread(block 70) failed
[  180.039542][ T8799] FAT-fs (loop0): Directory bread(block 71) failed
[  180.042464][ T8799] FAT-fs (loop0): Directory bread(block 72) failed
[  180.045339][ T8799] FAT-fs (loop0): Directory bread(block 73) failed
[  180.172159][ T8803] loop0: detected capacity change from 0 to 2048
[  180.181341][ T8803] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  180.184625][ T8803] UDF-fs: Scanning with blocksize 512 failed
[  180.197509][ T8803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.212141][ T8803] overlayfs: conflicting options: userxattr,redirect_dir=on
[  180.311608][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'.
[  181.349079][ T8832] loop0: detected capacity change from 0 to 16
[  181.360633][ T8832] erofs (device loop0): mounted with root inode @ nid 36.
[  181.715201][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  181.863782][ T8836] loop1: detected capacity change from 0 to 512
[  181.884004][ T8836] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1168: casefold flag without casefold feature
[  181.890113][ T5912] usb 1-1: config index 0 descriptor too short (expected 1051, got 27)
[  181.893528][ T5912] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  181.896512][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  181.903261][ T8836] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1168: couldn't read orphan inode 15 (err -117)
[  181.908286][ T5912] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149
[  181.914473][ T8836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.920262][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0
[  181.933860][ T5912] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[  181.937719][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.942067][ T5912] usb 1-1: Product: syz
[  181.943910][ T5912] usb 1-1: Manufacturer: syz
[  181.949488][ T5912] usb 1-1: SerialNumber: syz
[  181.955086][ T5912] usb 1-1: config 0 descriptor??
[  181.958812][ T8834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.972173][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.202436][ T5912] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected
[  182.205366][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  182.216224][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  182.219670][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  182.220107][ T8848] syz.1.1173(8848): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  182.226108][ T5912] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  182.235576][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82
[  182.238980][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  182.243760][ T5912] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  182.254826][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  182.258203][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  182.263607][ T5912] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  182.269375][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84
[  182.272708][ T5912] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  182.279480][ T5912] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  182.287796][ T5912] usb 1-1: USB disconnect, device number 21
[  182.308595][ T5912] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  182.342369][ T5912] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  182.359429][ T5912] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  182.371121][ T5912] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  182.376804][ T5912] keyspan 1-1:0.0: device disconnected
[  182.562226][   T34] audit: type=1326 audit(2000000619.927:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.1.1176" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccb8ebe9 code=0x7ffc0000
[  182.573162][   T34] audit: type=1326 audit(2000000619.927:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.1.1176" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccb8ebe9 code=0x7ffc0000
[  182.584332][   T34] audit: type=1326 audit(2000000619.936:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.1.1176" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f4eccb8ebe9 code=0x7ffc0000
[  182.595673][   T34] audit: type=1326 audit(2000000619.936:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.1.1176" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccb8ebe9 code=0x7ffc0000
[  182.606418][   T34] audit: type=1326 audit(2000000619.936:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.1.1176" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eccb8ebe9 code=0x7ffc0000
[  182.683778][ T8860] smc: net device bond0 applied user defined pnetid SYZ2
[  182.746683][ T8862] loop1: detected capacity change from 0 to 2048
[  182.755218][ T8862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.912069][ T8866] dvmrp17: entered allmulticast mode
[  182.944210][ T8866] dvmrp17: left allmulticast mode
[  183.457333][ T5912] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  183.637048][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.641811][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.646253][ T5912] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  183.649938][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.656223][ T5912] usb 1-1: config 0 descriptor??
[  183.698558][   T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  183.874628][   T24] usb 2-1: Using ep0 maxpacket: 8
[  183.886924][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  183.893458][   T24] usb 2-1: config 250 has an invalid interface number: 4 but max is 0
[  183.899906][   T24] usb 2-1: config 250 has no interface number 0
[  183.902227][   T24] usb 2-1: config 250 interface 4 altsetting 43 endpoint 0x6 has invalid wMaxPacketSize 0
[  183.905713][   T24] usb 2-1: config 250 interface 4 has no altsetting 0
[  183.911194][   T24] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=1b.8a
[  183.914355][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.916970][   T24] usb 2-1: Product: syz
[  183.919437][   T24] usb 2-1: Manufacturer: syz
[  183.921661][   T24] usb 2-1: SerialNumber: syz
[  184.122113][ T5912] hid-u2fzero 0003:10C4:8ACF.000C: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0
[  184.153310][ T5912] hid-u2fzero 0003:10C4:8ACF.000C: U2F Zero LED initialised
[  184.156617][ T5912] hid-u2fzero 0003:10C4:8ACF.000C: U2F Zero RNG initialised
[  184.186359][   T24] powermate 2-1:250.4: probe with driver powermate failed with error -5
[  184.197184][   T24] usb 2-1: USB disconnect, device number 25
[  184.331770][ T5912] usb 1-1: USB disconnect, device number 22
[  184.951939][ T8919] loop1: detected capacity change from 0 to 16
[  184.972227][ T8919] erofs (device loop1): mounted with root inode @ nid 36.
[  185.026660][ T8919] overlayfs: failed to get redirect (-117)
[  185.175775][ T8932] loop1: detected capacity change from 0 to 512
[  185.219471][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.228432][ T8932] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.248683][   T34] audit: type=1800 audit(2000000622.374:139): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1208" name="file1" dev="loop1" ino=15 res=0 errno=0
[  185.348629][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.443522][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  185.930437][ T8948] 9pnet_fd: p9_fd_create_tcp (8948): problem connecting socket to 127.0.0.1
[  186.453355][ T8966] vxcan0: tx address claim with different name
[  186.575835][ T8974] loop0: detected capacity change from 0 to 2048
[  186.606496][ T8956] loop1: detected capacity change from 0 to 32768
[  186.619544][ T8974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.622384][ T8956] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.652123][ T8971] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  186.657822][ T8956] XFS (loop1): Ending clean mount
[  186.674110][ T8956] XFS (loop1): Quotacheck needed: Please wait.
[  186.677518][ T8971] EXT4-fs (loop0): Remounting filesystem read-only
[  186.683574][ T8971] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  186.728038][ T8956] XFS (loop1): Quotacheck: Done.
[  186.752337][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.824285][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.972771][ T8993] wireguard0: entered promiscuous mode
[  186.977772][ T8993] wireguard0: entered allmulticast mode
[  188.320274][ T9022] loop0: detected capacity change from 0 to 256
[  188.324397][ T9022] exfat: Deprecated parameter 'namecase'
[  188.333604][ T9022] exfat: Deprecated parameter 'namecase'
[  188.368193][ T9022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  189.453063][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'.
[  189.456823][ T9056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'.
[  190.172175][ T9082] sctp: [Deprecated]: syz.0.1264 (pid 9082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.172175][ T9082] Use struct sctp_sack_info instead
[  190.251494][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'.
[  191.116434][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'.
[  192.795367][ T9159] ceph: No mds server is up or the cluster is laggy
[  193.703234][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'.
[  193.832395][ T9195] loop0: detected capacity change from 0 to 64
[  193.932349][ T9200] syz.0.1309: attempt to access beyond end of device
[  193.932349][ T9200] loop0: rw=0, sector=1310720, nr_sectors = 2 limit=64
[  194.251972][ T9165] Bluetooth: hci1: command 0x0406 tx timeout
[  194.254568][ T9165] Bluetooth: hci0: command 0x0406 tx timeout
[  194.518859][ T9237] loop1: detected capacity change from 0 to 256
[  194.525009][ T9237] exfat: Deprecated parameter 'utf8'
[  194.527446][ T9237] exfat: Deprecated parameter 'namecase'
[  194.529771][ T9237] exfat: Deprecated parameter 'namecase'
[  194.532639][ T9237] exfat: Deprecated parameter 'utf8'
[  194.543250][ T9237] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  194.588343][ T5913] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  194.751753][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  194.764550][ T5913] usb 1-1: config 0 has an invalid interface number: 24 but max is 0
[  194.767872][ T5913] usb 1-1: config 0 has no interface number 0
[  194.773928][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  194.784011][ T5913] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  194.799678][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.802861][ T5913] usb 1-1: Product: syz
[  194.804505][ T5913] usb 1-1: Manufacturer: syz
[  194.808131][ T5913] usb 1-1: SerialNumber: syz
[  194.812631][ T5913] usb 1-1: config 0 descriptor??
[  195.042209][ T5913] pegasus 1-1:0.24: probe with driver pegasus failed with error -71
[  195.052160][ T5913] usb 1-1: USB disconnect, device number 23
[  195.143936][ T5852] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  195.308312][ T5852] usb 2-1: Using ep0 maxpacket: 8
[  195.313165][ T5852] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  195.316326][ T5852] usb 2-1: config 0 has no interface number 0
[  195.322079][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  195.325320][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.328063][ T5852] usb 2-1: Product: syz
[  195.331005][ T5852] usb 2-1: Manufacturer: syz
[  195.332662][ T5852] usb 2-1: SerialNumber: syz
[  195.336458][ T5852] usb 2-1: config 0 descriptor??
[  195.566774][ T5852] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  195.569766][ T5852] usb 2-1: No streaming interface found for terminal 6.
[  195.578843][ T5852] usb 2-1: USB disconnect, device number 26
[  195.772884][ T9262] netlink: 'syz.0.1341': attribute type 3 has an invalid length.
[  195.814380][ T9264] loop6: detected capacity change from 0 to 2560
[  195.820116][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.823648][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.826870][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.830022][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.833561][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.836816][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.839842][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.845792][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.849249][ T9264] ldm_validate_partition_table(): Disk read failed.
[  195.851709][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.855767][ T9264] Buffer I/O error on dev loop6, logical block 0, async page read
[  195.858332][ T9264] Dev loop6: unable to read RDB block 0
[  195.861429][ T9264]  loop6: unable to read partition table
[  195.863844][ T9264] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  196.000193][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1344'.
[  196.004258][ T9268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1344'.
[  196.424786][ T9272] loop0: detected capacity change from 0 to 32768
[  196.450377][ T9272] JBD2: Invalid start block of journal: 2147483648
[  196.472659][ T9272] (syz.0.1346,9272,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  196.483944][ T9272] (syz.0.1346,9272,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  196.488039][ T9272] (syz.0.1346,9272,0):ocfs2_check_volume:2432 ERROR: status = -22
[  196.546590][ T9272] (syz.0.1346,9272,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  196.712638][ T9272] (syz.0.1346,9272,0):ocfs2_fill_super:1177 ERROR: status = -22
[  197.230809][ T9315] loop0: detected capacity change from 0 to 8
[  197.285835][ T9315] SQUASHFS error: xz decompression failed, data probably corrupt
[  197.289169][ T9315] SQUASHFS error: Failed to read block 0x108: -5
[  197.322754][ T9315] SQUASHFS error: Unable to read metadata cache entry [106]
[  197.325534][ T9315] SQUASHFS error: Unable to read inode 0x11f
[  197.482135][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  197.489248][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  197.602618][ T9338] loop1: detected capacity change from 0 to 2048
[  197.642241][ T9341] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.688200][ T9338] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '..'
[  197.693517][ T9338] Remounting filesystem read-only
[  197.712750][ T5854] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  197.833964][ T9349] loop1: detected capacity change from 0 to 4096
[  197.854238][ T9349] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  197.890689][ T9349] ntfs3(loop1): ino=19, mi_enum_attr
[  197.893783][ T9349] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  197.985232][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1384'.
[  198.004163][ T9356] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  199.335850][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1406'.
[  199.602291][ T9421] loop1: detected capacity change from 0 to 8
[  200.967893][ T5913] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  201.141789][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  201.147960][ T5913] usb 1-1: too many configurations: 97, using maximum allowed: 8
[  201.173273][ T5913] usb 1-1: string descriptor 0 read error: -71
[  201.176628][ T5913] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  201.184811][ T5913] usb 1-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  201.192084][ T9446] loop1: detected capacity change from 0 to 128
[  201.202142][ T5913] usb 1-1: rejected 8 configurations due to insufficient available bus power
[  201.205932][ T5913] usb 1-1: no configuration chosen from 8 choices
[  201.206178][ T9446] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.229197][ T5913] usb 1-1: USB disconnect, device number 24
[  201.469968][ T9466] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.682971][ T9476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.664282][ T9475] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  202.667325][ T9475] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  202.691659][ T9475] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  202.694567][ T9475] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  202.754620][ T9475] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  202.757719][ T9475] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  203.079109][ T5852] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  203.151912][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'.
[  203.262212][ T5852] usb 1-1: Using ep0 maxpacket: 32
[  203.268477][ T5852] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  203.278052][ T5852] usb 1-1: config 0 has no interface number 0
[  203.281453][ T5852] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10
[  203.286625][ T5852] usb 1-1: config 0 interface 85 has no altsetting 0
[  203.326555][ T5852] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  203.341191][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.344761][ T5852] usb 1-1: Product: syz
[  203.346685][ T5852] usb 1-1: Manufacturer: syz
[  203.348592][ T5852] usb 1-1: SerialNumber: syz
[  203.377835][ T5852] usb 1-1: config 0 descriptor??
[  203.469446][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'.
[  203.491834][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.576054][ T9495] bridge_slave_1 (unregistering): left allmulticast mode
[  203.579373][ T9495] bridge_slave_1 (unregistering): left promiscuous mode
[  203.584568][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.630822][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'.
[  203.914467][ T5856] Bluetooth: hci0: command 0x0406 tx timeout
[  203.926768][ T9512] netlink: 'syz.2.1455': attribute type 9 has an invalid length.
[  204.046031][ T5852] appletouch 1-1:0.85: Geyser mode initialized.
[  204.050469][ T5852] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input11
[  204.273546][ T5852] usb 1-1: USB disconnect, device number 25
[  204.297459][ T5852] appletouch 1-1:0.85: input: appletouch disconnected
[  204.474077][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  204.477914][ T9524] netlink: 'syz.2.1460': attribute type 21 has an invalid length.
[  204.916744][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  204.958578][ T5856] Bluetooth: hci2: command 0x0405 tx timeout
[  205.202245][ T9537] loop0: detected capacity change from 0 to 128
[  205.402076][ T5856] Bluetooth: hci1: unexpected event for opcode 0x041b
[  205.609699][ T9553] loop0: detected capacity change from 0 to 4096
[  205.634739][ T9553] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  205.651151][ T9553] ntfs3(loop0): Failed to load $Extend (-22).
[  205.654783][ T9553] ntfs3(loop0): Failed to initialize $Extend.
[  205.671351][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  205.904865][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'.
[  206.325243][ T9557] loop1: detected capacity change from 0 to 32768
[  206.335766][ T9557] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1475 (9557)
[  206.406852][ T9557] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.420513][ T9557] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  206.424502][ T9557] BTRFS info (device loop1): using free-space-tree
[  206.708006][ T9557] BTRFS info (device loop1): rebuilding free space tree
[  207.132705][ T5854] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  207.218724][ T5856] Bluetooth: hci2: command 0x0405 tx timeout
[  207.767998][ T9588] loop0: detected capacity change from 0 to 256
[  207.783207][ T9588] exFAT-fs (loop0): bogus sectors bits per cluster : 143
[  207.789832][ T9588] exFAT-fs (loop0): failed to read boot sector
[  207.805221][ T9588] exFAT-fs (loop0): failed to recognize exfat type
[  207.852141][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.099638][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.112500][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.273745][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.277797][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.281753][ T9595] loop0: detected capacity change from 0 to 32768
[  208.296359][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.306084][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.308154][ T9595] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  208.349611][ T9595] XFS (loop0): Ending clean mount
[  208.410825][ T5849] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  209.405965][ T9640] overlayfs: failed to clone upperpath
[  209.441876][ T9636] loop1: detected capacity change from 0 to 32768
[  209.484544][ T9636] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  209.695879][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  210.259812][ T9682] loop0: detected capacity change from 0 to 32768
[  210.263819][ T9682] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal buckets entry with bad nr: 21474967553+0
[  210.263819][ T9682] journal_v2 (size 2912):
[  210.263819][ T9682] Buckets:  0-10 21474902017-21474902025 21474967553-21474967553 21474836481-21474836481 21491613697-21491613697 21508390913-21508390913 21525168129-21525168129 25769803778-25769806594 65795-25769869573 0-65794 25769803778-25769803794 65796-34359804197 0-0 0-83 0-0 25-6177 248-256 2048-2048 11-2827 0-1 16-256 0-0 0-0 0-0 0-0 0-0 0-0 0-0 0-30064771074 0-0 30064771074-30064771075 1280-4294968587 1179915-1179915 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 14322110933576210885-14322110933576210901 0-0 110593-4295143436 1179915-1179915 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 8469488994664696954-8469488994664696978 0-0 155649-4295254028 393483-459019 18446744069414584320-18446744069414584319 18446744073709551615-18446744073709551615 11142619451731364831-11142619451731364
[  210.263996][ T9682] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  210.533477][ T9699] netlink: 'syz.2.1524': attribute type 178 has an invalid length.
[  210.790430][ T9703] ceph: No mds server is up or the cluster is laggy
[  210.805054][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1522'.
[  210.808039][ T9707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1522'.
[  211.004966][ T9711] overlayfs: failed to clone upperpath
[  212.771187][ T9727] loop0: detected capacity change from 0 to 32768
[  212.860714][ T9727] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  212.899974][ T9727] XFS (loop0): Ending clean mount
[  212.984134][ T5849] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  214.076725][ T9789] loop1: detected capacity change from 0 to 4096
[  214.102576][ T9789] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  215.068683][ T9820] JFS: charset not found
[  215.154759][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.162732][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.168473][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.173340][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.180332][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.731622][   T12] bridge_slave_0: left allmulticast mode
[  215.742436][   T12] bridge_slave_0: left promiscuous mode
[  215.755238][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.791649][   T12] smc: removing net device bond0 with user defined pnetid SYZ2
[  216.799747][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.807169][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.811374][   T12] bond0 (unregistering): Released all slaves
[  216.846262][ T9826] chnl_net:caif_netlink_parms(): no params data found
[  217.040057][   T12] tipc: Left network mode
[  217.151507][   T12] IPVS: stopping backup sync thread 9356 ...
[  217.310982][ T5913] IPVS: starting estimator thread 0...
[  217.316807][ T9869] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  217.343625][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.346120][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.365181][ T9826] bridge_slave_0: entered allmulticast mode
[  217.370336][ T9826] bridge_slave_0: entered promiscuous mode
[  217.381048][ T5856] Bluetooth: hci1: command tx timeout
[  217.423378][ T9870] IPVS: using max 53 ests per chain, 127200 per kthread
[  217.445769][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.448575][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.451450][ T9826] bridge_slave_1: entered allmulticast mode
[  217.458929][ T9826] bridge_slave_1: entered promiscuous mode
[  217.581158][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.588612][ T9878] binder: 9877:9878 ioctl c018620c 2000000000c0 returned -22
[  217.626172][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.751762][ T9826] team0: Port device team_slave_0 added
[  217.776831][ T9826] team0: Port device team_slave_1 added
[  217.861677][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.866088][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.877418][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.893190][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.895555][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.905579][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.947331][   T12] hsr_slave_0: left promiscuous mode
[  217.949748][   T12] hsr_slave_1: left promiscuous mode
[  217.951936][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.955335][ T5899] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  217.961472][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.126962][ T5899] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7
[  218.143599][ T5899] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  218.147993][ T5899] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  218.164204][ T5899] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  218.167292][ T5899] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  218.170121][ T5899] usb 1-1: Manufacturer: syz
[  218.184772][ T5899] usb 1-1: SerialNumber: syz
[  218.458087][ T5899] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[  218.479309][ T5899] usb 1-1: USB disconnect, device number 26
[  218.557948][   T12] team0 (unregistering): Port device team_slave_1 removed
[  218.632899][   T12] team0 (unregistering): Port device team_slave_0 removed
[  219.438445][ T9826] hsr_slave_0: entered promiscuous mode
[  219.448101][ T9826] hsr_slave_1: entered promiscuous mode
[  219.650045][ T5856] Bluetooth: hci1: command 0x041b tx timeout
[  219.865875][ T9826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  219.877916][ T9826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  219.885210][ T9826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  219.893621][ T9826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  219.965341][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.982848][ T9826] 8021q: adding VLAN 0 to HW filter on device team0
[  219.992988][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.995439][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.009331][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.011921][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.210566][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.258767][ T9826] veth0_vlan: entered promiscuous mode
[  220.269516][ T9826] veth1_vlan: entered promiscuous mode
[  220.302450][ T9826] veth0_macvtap: entered promiscuous mode
[  220.306603][ T9826] veth1_macvtap: entered promiscuous mode
[  220.319320][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.336569][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.349309][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.356235][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.359197][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.366859][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.516697][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.519346][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.587668][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.596333][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.828513][ T9972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1617'.
[  221.892958][ T5856] Bluetooth: hci1: command 0x041b tx timeout
[  222.208152][T10002] netlink: 'syz.3.1626': attribute type 3 has an invalid length.
[  222.740101][ T5913] IPVS: starting estimator thread 0...
[  222.847706][T10019] IPVS: using max 54 ests per chain, 129600 per kthread
[  223.169126][T10049] netlink: 'syz.2.1641': attribute type 10 has an invalid length.
[  223.185549][T10049] team0: Port device dummy0 added
[  223.384356][T10036] loop0: detected capacity change from 0 to 32768
[  223.573727][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  223.611093][T10072] netlink: 'syz.0.1650': attribute type 21 has an invalid length.
[  223.741742][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.746438][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.757760][ T5852] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  223.768950][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.774962][ T5852] usb 4-1: config 0 descriptor??
[  223.885184][T10084] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1656'.
[  223.889544][T10086] loop0: detected capacity change from 0 to 128
[  223.894903][T10086] EXT4-fs (loop0): Test dummy encryption mode enabled
[  223.942058][T10086] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.953827][T10086] ext4 filesystem being mounted at /486/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.058454][T10086] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  224.125866][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.148646][ T5856] Bluetooth: hci1: command 0x041b tx timeout
[  224.178247][T10090] ceph: No mds server is up or the cluster is laggy
[  224.324893][T10105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1661'.
[  224.388884][T10111] netlink: 'syz.2.1663': attribute type 4 has an invalid length.
[  224.392278][T10111] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1663'.
[  224.440224][T10113] can0: slcan on ptm0.
[  224.506887][T10112] can0 (unregistered): slcan off ptm0.
[  224.522424][T10118] netlink: 'syz.2.1666': attribute type 2 has an invalid length.
[  224.678926][ T5852] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0
[  224.709413][ T5852] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized
[  224.891948][   T52] usb 4-1: USB disconnect, device number 2
[  225.048890][T10151] loop0: detected capacity change from 0 to 128
[  225.072134][T10151] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.079169][T10151] ext4 filesystem being mounted at /496/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  225.103778][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.554466][T10166] loop0: detected capacity change from 0 to 32768
[  225.695602][T10175] loop3: detected capacity change from 0 to 2048
[  225.726273][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop3
[  225.729857][T10175] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  225.754570][T10175] syz.3.1687: attempt to access beyond end of device
[  225.754570][T10175] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  225.761918][T10176] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.086931][T10188] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  226.101290][ T5852] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  226.174424][T10193] loop0: detected capacity change from 0 to 256
[  226.183762][T10193] exfat: Deprecated parameter 'namecase'
[  226.186346][T10193] exfat: Deprecated parameter 'utf8'
[  226.203486][T10193] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  226.208942][T10193] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1)
[  226.212125][T10193] exFAT-fs (loop0): failed to load alloc-bitmap
[  226.214675][T10193] exFAT-fs (loop0): failed to recognize exfat type
[  226.264760][ T5852] usb 4-1: Using ep0 maxpacket: 32
[  226.278110][ T5852] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  226.281789][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.303302][ T5852] usb 4-1: Product: syz
[  226.305110][ T5852] usb 4-1: Manufacturer: syz
[  226.313280][ T5852] usb 4-1: SerialNumber: syz
[  226.323714][ T5852] usb 4-1: config 0 descriptor??
[  226.335287][ T5852] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  226.404699][ T5856] Bluetooth: hci1: command 0x041b tx timeout
[  226.594345][T10200] loop0: detected capacity change from 0 to 32768
[  226.651846][T10200] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.673406][T10200] XFS (loop0): Ending clean mount
[  226.724197][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.748822][   T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  227.897230][ T5852] gspca_topro: reg_r err -71
[  227.900025][ T5852] gspca_topro: Sensor soi763a
[  227.910164][ T5852] usb 4-1: USB disconnect, device number 3
[  227.913788][   T52] usb 1-1: Using ep0 maxpacket: 32
[  227.925484][   T52] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  227.944327][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  227.948910][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  227.952703][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  227.963386][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  227.972448][   T52] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  227.975321][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.979275][   T52] usb 1-1: Product: syz
[  227.981264][   T52] usb 1-1: Manufacturer: syz
[  227.983153][   T52] usb 1-1: SerialNumber: syz
[  228.007392][   T52] usb 1-1: config 0 descriptor??
[  228.338735][T10228] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1706'.
[  228.466026][   T52] input input12: Device does not respond to id packet M
[  228.501509][T10236] loop3: detected capacity change from 0 to 256
[  228.685989][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.694115][   T52] input input12: Device does not respond to id packet P
[  228.697412][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.699935][   T52] input input12: Device does not respond to id packet B
[  228.706085][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.708628][   T52] input input12: Device does not respond to id packet N
[  228.711880][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.716116][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.719040][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.721903][   T52] iforce 1-1:0.0: usb_submit_urb failed: -71
[  228.728796][T10243] loop3: detected capacity change from 0 to 4096
[  228.732850][   T52] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  228.760379][   T52] usb 1-1: USB disconnect, device number 27
[  228.885769][T10245] loop3: detected capacity change from 0 to 512
[  228.892849][T10245] EXT4-fs: Ignoring removed bh option
[  228.911590][T10245] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  228.935224][T10245] EXT4-fs (loop3): 1 truncate cleaned up
[  228.939646][T10245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.913861][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.063010][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1721'.
[  230.114183][T10270] delete_channel: no stack
[  230.468425][T10286] loop0: detected capacity change from 0 to 8192
[  230.485844][T10286] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  230.582009][T10283] loop3: detected capacity change from 0 to 32768
[  230.634370][   T34] audit: type=1800 audit(2000000664.123:140): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1728" name="file1" dev="loop3" ino=4 res=0 errno=0
[  230.728802][T10299] loop0: detected capacity change from 0 to 512
[  230.745007][T10299] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  230.766091][T10299] EXT4-fs (loop0): orphan cleanup on readonly fs
[  230.790690][T10299] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.1735: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  230.816380][T10299] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1735: Bad quota inode: 3, type: 0
[  230.850276][T10299] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  230.856315][T10299] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  230.860283][T10299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.875181][T10299] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1735: bg 0: block 64: padding at end of block bitmap is not set
[  230.905005][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.945982][T10304] loop0: detected capacity change from 0 to 128
[  230.964071][T10304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  230.976531][T10304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.045688][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1739'.
[  231.283654][T10317] overlayfs: failed to resolve './file0': -2
[  231.586282][T10322] netlink: 'syz.0.1744': attribute type 29 has an invalid length.
[  231.589609][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  231.711541][T10330] loop0: detected capacity change from 0 to 8
[  231.728162][T10330] SQUASHFS error: lzo decompression failed, data probably corrupt
[  231.731004][T10330] SQUASHFS error: Failed to read block 0x91: -5
[  231.734272][T10330] SQUASHFS error: Unable to read metadata cache entry [8f]
[  231.737584][T10330] SQUASHFS error: Unable to read inode 0x11f
[  231.993634][T10342] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1754'.
[  232.146650][T10345] loop3: detected capacity change from 0 to 4096
[  232.158304][T10345] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  232.189195][T10345] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  232.224586][T10345] overlayfs: upper fs does not support tmpfile.
[  232.235174][T10345] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  233.773750][T10348] loop0: detected capacity change from 0 to 65536
[  233.826363][T10391] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  233.954735][T10348] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  234.052885][T10348] XFS (loop0): Ending clean mount
[  234.232486][ T5849] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  235.434881][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1774'.
[  235.889650][T10486] vxcan1: tx drop: invalid da for name 0x00000000000000c7
[  236.160229][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888030ea2000: rx timeout, send abort
[  236.694108][T10524] gtp0: entered promiscuous mode
[  236.702329][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888030ea0000: rx timeout, send abort
[  236.705729][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888030ea2000: abort rx timeout. Force session deactivation
[  237.247033][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888030ea0000: abort rx timeout. Force session deactivation
[  237.402275][T10562] loop0: detected capacity change from 0 to 2048
[  237.409513][T10562] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  237.419554][T10564] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.692249][   T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  237.706227][T10576] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  237.750847][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'.
[  237.874276][   T52] usb 4-1: Using ep0 maxpacket: 32
[  237.880679][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  237.884143][   T52] usb 4-1: config 3 has an invalid interface number: 43 but max is 0
[  237.895901][   T52] usb 4-1: config 3 has no interface number 0
[  237.898041][   T52] usb 4-1: config 3 interface 43 has no altsetting 0
[  237.902649][   T52] usb 4-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=9a.31
[  237.906264][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.910416][   T52] usb 4-1: Product: syz
[  237.912127][   T52] usb 4-1: Manufacturer: syz
[  237.914017][   T52] usb 4-1: SerialNumber: syz
[  238.154242][   T52] rndis_host 4-1:3.43: More than one union descriptor, skipping ...
[  238.162815][   T52] usb 4-1: bad CDC descriptors
[  238.168248][   T52] cdc_acm 4-1:3.43: More than one union descriptor, skipping ...
[  238.179029][   T52] usb 4-1: USB disconnect, device number 4
[  238.838017][T10624] 9pnet_fd: Insufficient options for proto=fd
[  238.954888][T10631] loop3: detected capacity change from 0 to 736
[  239.031400][T10631] rock: directory entry would overflow storage
[  239.034512][T10631] rock: sig=0x3b10, size=4, remaining=3
[  239.176725][ T5856] Bluetooth: hci2: unexpected event for opcode 0x080c
[  239.380729][ T5852] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  239.549101][T10655] loop0: detected capacity change from 0 to 1024
[  239.557082][ T5852] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  239.560138][ T5852] usb 4-1: config 0 has no interface number 1
[  239.564092][ T5852] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  239.575641][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  239.585846][ T5852] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  239.592894][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  239.595963][ T5852] usb 4-1: SerialNumber: syz
[  239.603285][T10655] hfsplus: bad catalog entry type
[  239.610625][ T5852] usb 4-1: config 0 descriptor??
[  239.629529][ T5852] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  239.633923][ T5852] usb 4-1: No valid video chain found.
[  239.869426][ T5899] usb 4-1: USB disconnect, device number 5
[  240.659955][T10670] vlan2: entered promiscuous mode
[  240.661823][T10670] vlan2: entered allmulticast mode
[  240.665325][T10670] hsr_slave_1: entered allmulticast mode
[  241.058952][T10681] loop3: detected capacity change from 0 to 512
[  241.067577][T10681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  241.091491][T10681] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  241.100535][T10681] EXT4-fs (loop3): 1 truncate cleaned up
[  241.106400][T10681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.154099][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.643553][   T34] audit: type=1326 audit(2000000674.271:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.2.1874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907eb8ebe9 code=0x7ffc0000
[  241.677705][   T34] audit: type=1326 audit(2000000674.280:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.2.1874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907eb8ebe9 code=0x7ffc0000
[  241.697398][   T34] audit: type=1326 audit(2000000674.290:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.2.1874" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f907eb8ebe9 code=0x7ffc0000
[  241.718900][T10721] loop3: detected capacity change from 0 to 1024
[  241.721203][   T34] audit: type=1326 audit(2000000674.290:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.2.1874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907eb8ebe9 code=0x7ffc0000
[  241.743389][   T34] audit: type=1326 audit(2000000674.290:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.2.1874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907eb8ebe9 code=0x7ffc0000
[  241.784286][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.790467][T10721] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.900322][T10710] loop0: detected capacity change from 0 to 32768
[  241.921327][T10710] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.953306][T10710] XFS (loop0): Ending clean mount
[  242.002609][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.090358][   T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  242.258703][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  242.262729][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  242.276043][   T52] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  242.283357][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65267, setting to 1024
[  242.288884][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  242.296549][   T52] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  242.300220][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.303403][   T52] usb 4-1: Product: syz
[  242.305162][   T52] usb 4-1: Manufacturer: syz
[  242.308022][   T52] usb 4-1: SerialNumber: syz
[  242.318964][   T52] usb 4-1: config 0 descriptor??
[  242.322030][T10721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  242.335264][   T52] redrat3 4-1:0.0: Couldn't find all endpoints
[  242.352372][T10751] loop0: detected capacity change from 0 to 512
[  242.357404][T10751] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  242.372633][T10751] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  242.380884][T10751] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1884: iget: bad i_size value: 360287970189639680
[  242.387967][T10751] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1884: couldn't read orphan inode 15 (err -117)
[  242.396937][T10751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.552955][ T5899] usb 4-1: USB disconnect, device number 6
[  243.120994][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.353285][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.518401][T10759] loop3: detected capacity change from 0 to 32768
[  243.521962][T10759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1887 (10759)
[  243.538762][T10759] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.554741][T10759] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  243.558084][T10759] BTRFS info (device loop3): using free-space-tree
[  243.593822][T10775] loop0: detected capacity change from 0 to 512
[  243.621242][T10775] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.1894: inode #0: comm syz.0.1894: iget: illegal inode #
[  243.644845][T10775] EXT4-fs (loop0): get orphan inode failed
[  243.647712][T10775] EXT4-fs (loop0): mount failed
[  243.853471][ T9826] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.991995][T10803] openvswitch: netlink: Flow key attribute not present in set flow.
[  244.230556][T10809] 9pnet_virtio: no channels available for device 127.0.0.1
[  244.398260][T10820] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  244.402898][T10820] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  244.429774][T10820] 8021q: adding VLAN 0 to HW filter on device bond2
[  244.576371][T10834] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1914'.
[  244.649457][T10839] IPv6: Can't replace route, no match found
[  244.676563][T10843] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  244.716262][T10843] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.752349][T10843] bond3: (slave geneve2): making interface the new active one
[  244.767392][T10843] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  244.781292][T10843] bond3: entered promiscuous mode
[  244.783710][T10843] geneve2: entered promiscuous mode
[  245.255124][   T52] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  245.463824][   T52] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  245.467433][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.473820][   T52] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  245.477600][   T52] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  245.480925][   T52] usb 1-1: Manufacturer: syz
[  245.488307][   T52] usb 1-1: config 0 descriptor??
[  245.551081][   T52] rc_core: IR keymap rc-hauppauge not found
[  245.554996][   T52] Registered IR keymap rc-empty
[  245.560225][   T52] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  245.566774][   T52] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  245.756225][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  245.757310][T10859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.762665][T10859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.791223][ T5899] usb 1-1: USB disconnect, device number 28
[  246.214343][T10878] loop3: detected capacity change from 0 to 40427
[  246.218433][T10878] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  246.222666][T10878] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  246.226212][T10878] F2FS-fs (loop3): build fault injection rate: 17008
[  246.228929][T10878] F2FS-fs (loop3): build fault injection type: 0x5
[  246.238255][T10878] F2FS-fs (loop3): invalid crc value
[  246.305377][T10878] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.312246][T10878] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  246.315199][T10878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  246.342392][   T53] kworker/u9:2: attempt to access beyond end of device
[  246.342392][   T53] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  246.356434][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  246.356461][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.356471][   T53] Workqueue: writeback wb_workfn (flush-7:3)
[  246.356498][   T53] Call Trace:
[  246.356504][   T53]  <TASK>
[  246.356513][   T53]  dump_stack_lvl+0x189/0x250
[  246.356535][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.356551][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  246.356565][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.356584][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.356609][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  246.356634][   T53]  f2fs_write_end_io+0x886/0xb60
[  246.356660][   T53]  __submit_merged_bio+0x27a/0x6a0
[  246.356709][   T53]  __submit_merged_write_cond+0x255/0x530
[  246.356733][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  246.356777][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  246.356803][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  246.356842][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  246.356870][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  246.356887][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  246.356907][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  246.356935][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  246.356955][   T53]  do_writepages+0x32e/0x550
[  246.356974][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  246.356985][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  246.357004][   T53]  __writeback_single_inode+0x145/0xff0
[  246.357018][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  246.357037][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  246.357069][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  246.357119][   T53]  ? rcu_is_watching+0x15/0xb0
[  246.357142][   T53]  wb_writeback+0x43b/0xaf0
[  246.357167][   T53]  ? queue_io+0x3c1/0x590
[  246.357186][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  246.357210][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.357232][   T53]  wb_workfn+0x409/0xef0
[  246.357259][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  246.357278][   T53]  ? __lock_acquire+0xab9/0xd20
[  246.357307][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  246.357325][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.357340][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  246.357353][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  246.357368][   T53]  process_scheduled_works+0xae1/0x17b0
[  246.357404][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  246.357433][   T53]  worker_thread+0x8a0/0xda0
[  246.357469][   T53]  kthread+0x711/0x8a0
[  246.357490][   T53]  ? __pfx_worker_thread+0x10/0x10
[  246.357503][   T53]  ? __pfx_kthread+0x10/0x10
[  246.357520][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.357536][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.357552][   T53]  ? __pfx_kthread+0x10/0x10
[  246.357569][   T53]  ret_from_fork+0x3fc/0x770
[  246.357587][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  246.357603][   T53]  ? __switch_to_asm+0x39/0x70
[  246.357620][   T53]  ? __switch_to_asm+0x33/0x70
[  246.357634][   T53]  ? __pfx_kthread+0x10/0x10
[  246.357650][   T53]  ret_from_fork_asm+0x1a/0x30
[  246.357704][   T53]  </TASK>
[  246.357713][   T53] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  246.488035][T10878] VFS:Filesystem freeze failed
[  246.933506][T10893] netlink: 'syz.3.1937': attribute type 1 has an invalid length.
[  247.464096][T10901] loop0: detected capacity change from 0 to 4096
[  247.716565][T10903] loop3: detected capacity change from 0 to 32768
[  247.768777][ T5850]  loop3: p1 p3 < >
[  247.820072][T10903]  loop3: p1 p3 < >
[  248.318752][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  248.330957][ T6624] udevd[6624]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  248.346474][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  248.351004][ T6624] udevd[6624]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  248.818938][T10933] loop0: detected capacity change from 0 to 512
[  248.822462][T10933] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  248.825839][T10933] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  248.828943][T10933] EXT4-fs (loop0): group descriptors corrupted!
[  249.087617][T10948] delete_channel: no stack
[  249.672163][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  249.829395][T10980] loop3: detected capacity change from 0 to 256
[  249.832381][T10980] exfat: Deprecated parameter 'namecase'
[  249.838079][T10980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  251.413777][   T34] audit: type=1326 audit(2000000683.296:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11021 comm="syz.0.1993" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5855b8ebe9 code=0x0
[  251.589902][T11030] bridge_slave_0: left allmulticast mode
[  251.607066][T11030] bridge_slave_0: left promiscuous mode
[  251.609901][T11030] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.625116][T11030] bridge_slave_1: left allmulticast mode
[  251.628209][T11030] bridge_slave_1: left promiscuous mode
[  251.630956][T11030] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.655628][T11030] bond0: (slave bond_slave_0): Releasing backup interface
[  251.667310][T11030] bond0: (slave bond_slave_1): Releasing backup interface
[  251.692149][T11030] team0: Port device team_slave_0 removed
[  251.709825][T11030] team0: Port device team_slave_1 removed
[  251.716677][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.721818][T11030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.729497][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.732866][T11030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.315815][T11056] loop3: detected capacity change from 0 to 32768
[  252.334871][T11056] JBD2: Ignoring recovery information on journal
[  252.403542][T11056] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  252.492975][ T9826] ocfs2: Unmounting device (7,3) on (node local)
[  253.410223][T11084] loop0: detected capacity change from 0 to 32768
[  253.522863][T11084] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  253.522878][T11084]   allowing incompatible features above 0.0: (unknown version)
[  253.522884][T11084]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  253.540038][T11084] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  253.543079][T11084] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  253.546067][T11084] bcachefs (loop0): Version upgrade required:
[  253.546067][T11084] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  253.546067][T11084] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  253.546067][T11084]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  253.576224][T11084] bcachefs (loop0): dropping and reconstructing all alloc info
[  253.598764][T11084] bcachefs (loop0): accounting_read... done
[  253.616463][T11084] bcachefs (loop0): alloc_read... done
[  253.619165][T11084] bcachefs (loop0): snapshots_read... done
[  253.622194][T11084] bcachefs (loop0): check_allocations... done
[  253.644518][T11084] bcachefs (loop0): going read-write
[  253.646830][T11084] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[  253.646830][T11084] rw journal devs:
[  253.666367][T11084] bcachefs (loop0): done starting filesystem
[  253.705763][ T5849] bcachefs (loop0): shutting down
[  253.715761][ T5849] bcachefs (loop0): going read-only
[  253.720595][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  253.740161][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  253.743312][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  253.752278][ T5849] bcachefs (loop0): unclean shutdown complete, journal seq 10
[  253.775329][ T5849] bcachefs (loop0): done going read-only, filesystem not clean
[  253.806475][ T5849] bcachefs (loop0): shutdown complete
[  254.104679][T11127] netlink: 'syz.3.2037': attribute type 1 has an invalid length.
[  254.120233][T11129] netlink: 'syz.2.2039': attribute type 1 has an invalid length.
[  254.170632][T11129] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.188671][T11129] bond1: (slave veth0_to_bond): making interface the new active one
[  254.207309][T11129] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  255.546111][T11156] netlink: 'syz.2.2051': attribute type 2 has an invalid length.
[  255.554263][T11156] netlink: 'syz.2.2051': attribute type 2 has an invalid length.
[  255.696814][T11161] loop0: detected capacity change from 0 to 256
[  255.703563][T11161] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  255.707290][T11161] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  255.718640][T11161] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  255.821936][   T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  255.828802][   T34] audit: type=1804 audit(2000000687.365:147): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2053" name="/newroot/612/bus/file0" dev="overlay" ino=3213 res=1 errno=0
[  255.988755][   T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  255.991596][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.998839][   T24] usb 4-1: config 0 descriptor??
[  256.006023][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  256.230576][   T24] gp8psk: usb in 128 operation failed.
[  256.451973][   T24] gp8psk: usb in 146 operation failed.
[  256.454347][   T24] gp8psk: failed to get FW version
[  256.462733][   T24] gp8psk: usb in 149 operation failed.
[  256.465485][   T24] gp8psk: failed to get FPGA version
[  256.686457][   T24] gp8psk: usb out operation failed.
[  256.694191][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  256.699309][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  256.711161][   T24] usb 4-1: USB disconnect, device number 7
[  256.721231][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  256.960638][T11196] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.303254][T11205] loop3: detected capacity change from 0 to 2048
[  257.322771][T11205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.376832][ T9826] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  257.385126][ T9826] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  257.760584][ T9949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.855719][ T9949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.984739][ T9949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.136158][ T9949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.213515][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.229394][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.234281][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.241940][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.254988][T11230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.263346][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.320873][T11230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.390582][T11236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.461963][T11240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.542553][T11231] chnl_net:caif_netlink_parms(): no params data found
[  258.739027][T11231] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.742686][T11231] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.747042][T11231] bridge_slave_0: entered allmulticast mode
[  258.751160][T11231] bridge_slave_0: entered promiscuous mode
[  258.761314][T11231] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.764502][T11231] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.768040][T11231] bridge_slave_1: entered allmulticast mode
[  258.771724][T11231] bridge_slave_1: entered promiscuous mode
[  258.819186][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.829296][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.873986][T11231] team0: Port device team_slave_0 added
[  258.879827][T11231] team0: Port device team_slave_1 added
[  258.923453][T11231] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.926329][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.939650][T11231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.983057][T11231] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.986088][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.008397][T11231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.160696][T11231] hsr_slave_0: entered promiscuous mode
[  259.163426][T11231] hsr_slave_1: entered promiscuous mode
[  259.165897][T11231] debugfs: 'hsr0' already exists in 'hsr'
[  259.169314][T11231] Cannot create hsr debugfs directory
[  259.206631][ T5899] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  259.222494][ T5899] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  259.231832][T11261] loop0: detected capacity change from 0 to 1024
[  259.246966][T11261] EXT4-fs: Ignoring removed nomblk_io_submit option
[  259.254976][T11261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  259.290173][T11261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.347795][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.602318][T11231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  259.609289][T11231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  259.618611][T11231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  259.625293][T11231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  259.707999][T11231] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.726465][T11231] 8021q: adding VLAN 0 to HW filter on device team0
[  259.736861][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.739846][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.749585][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.752448][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.797955][   T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  259.928022][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.981517][   T52] usb 1-1: Using ep0 maxpacket: 16
[  259.986320][   T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.001636][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  260.019709][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  260.026204][   T52] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  260.031697][   T52] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.049147][   T52] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  260.053844][   T52] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  260.059309][   T52] usb 1-1: Manufacturer: syz
[  260.079893][   T52] usb 1-1: config 0 descriptor??
[  260.407017][   T52] rc_core: IR keymap rc-hauppauge not found
[  260.409216][   T52] Registered IR keymap rc-empty
[  260.411018][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.435787][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.458910][   T52] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  260.464065][   T52] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14
[  260.483116][ T5856] Bluetooth: hci1: command tx timeout
[  260.488172][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.531890][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.558459][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.588325][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.620245][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.665936][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.701320][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.720395][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.741452][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.780708][   T52] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  260.825978][   T52] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  260.830144][   T52] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  260.844127][   T52] usb 1-1: USB disconnect, device number 29
[  260.965729][ T9949] bond0 (unregistering): Released all slaves
[  261.519123][T11311] openvswitch: netlink: Duplicate or invalid key (type 0).
[  261.528245][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.588191][T11231] veth0_vlan: entered promiscuous mode
[  261.606070][T11314] input: syz1 as /devices/virtual/input/input15
[  261.705929][T11231] veth1_vlan: entered promiscuous mode
[  261.787916][ T9949] hsr_slave_0: left promiscuous mode
[  262.210671][ T9949] veth1_macvtap: left promiscuous mode
[  262.217403][ T9949] veth0_macvtap: left promiscuous mode
[  262.219926][ T9949] veth1_vlan: left promiscuous mode
[  262.225225][ T9949] veth0_vlan: left promiscuous mode
[  262.445312][T11320] loop0: detected capacity change from 0 to 40427
[  262.451086][T11320] F2FS-fs (loop0): invalid crc value
[  262.510227][T11320] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  262.515023][T11320] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  262.564241][ T5849] syz-executor: attempt to access beyond end of device
[  262.564241][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  262.569134][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  262.569158][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.569166][ T5849] Call Trace:
[  262.569173][ T5849]  <TASK>
[  262.569180][ T5849]  dump_stack_lvl+0x189/0x250
[  262.569209][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.569226][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  262.569241][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  262.569259][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.569288][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  262.569316][ T5849]  f2fs_write_end_io+0x886/0xb60
[  262.569347][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  262.569374][ T5849]  __submit_merged_write_cond+0x255/0x530
[  262.569400][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  262.569419][ T5849]  ? __pfx_usage_match+0x10/0x10
[  262.569432][ T5849]  ? __bfs+0x154/0x2a0
[  262.569502][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.569522][ T5849]  ? __switch_to+0xdae/0x1670
[  262.569583][ T5849]  ? rcu_is_watching+0x15/0xb0
[  262.569606][ T5849]  ? trace_sched_exit_tp+0x36/0x110
[  262.569624][ T5849]  ? __schedule+0x17ae/0x4cc0
[  262.569645][ T5849]  ? folios_put_refs+0x559/0x640
[  262.569674][ T5849]  ? __lock_acquire+0xab9/0xd20
[  262.569702][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  262.569728][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  262.569744][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  262.569765][ T5849]  do_writepages+0x32e/0x550
[  262.569796][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  262.569821][ T5849]  filemap_fdatawrite+0x199/0x240
[  262.569842][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  262.569906][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  262.569927][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  262.569957][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  262.569995][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  262.570055][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  262.570075][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  262.570096][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  262.570107][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  262.570133][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  262.570151][ T5849]  deactivate_locked_super+0xbc/0x130
[  262.570171][ T5849]  cleanup_mnt+0x425/0x4c0
[  262.570188][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.570209][ T5849]  task_work_run+0x1d4/0x260
[  262.570232][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  262.570248][ T5849]  ? __x64_sys_umount+0x122/0x160
[  262.570289][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  262.570314][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  262.570334][ T5849]  do_syscall_64+0x2bd/0x3b0
[  262.570352][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.570369][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.570383][ T5849]  ? exc_page_fault+0x9f/0xf0
[  262.570404][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.570418][ T5849] RIP: 0033:0x7f5855b8ff17
[  262.570433][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  262.570445][ T5849] RSP: 002b:00007ffd61a24e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  262.570486][ T5849] RAX: 0000000000000000 RBX: 00007f5855c11c05 RCX: 00007f5855b8ff17
[  262.570495][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd61a24f50
[  262.570504][ T5849] RBP: 00007ffd61a24f50 R08: 0000000000000020 R09: 0000000000000000
[  262.570512][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd61a25fe0
[  262.570521][ T5849] R13: 00007f5855c11c05 R14: 000000000003dffb R15: 00007ffd61a26020
[  262.570549][ T5849]  </TASK>
[  262.636666][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  262.746355][ T5856] Bluetooth: hci1: command tx timeout
[  263.387947][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  263.392273][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  263.397254][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  264.132277][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  264.135015][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  264.330669][T11231] veth0_macvtap: entered promiscuous mode
[  264.368590][T11231] veth1_macvtap: entered promiscuous mode
[  264.437796][T11231] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.451545][T11231] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.507856][ T5878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.512671][ T5878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.516035][ T5878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.640216][ T5878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.765915][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.774758][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.778631][ T5852] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  264.842372][ T9949] IPVS: stop unused estimator thread 0...
[  264.847828][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.851274][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.960052][ T5852] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  264.988716][ T5856] Bluetooth: hci1: command tx timeout
[  264.990210][ T5852] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  264.994201][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.997365][ T5852] usb 1-1: Product: syz
[  265.000252][ T5852] usb 1-1: Manufacturer: syz
[  265.002130][ T5852] usb 1-1: SerialNumber: syz
[  265.027981][ T5852] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  265.457819][ T5852] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  265.478993][ T5852] usb 1-1: USB disconnect, device number 30
[  266.252413][T11436] netlink: 'syz.2.2151': attribute type 4 has an invalid length.
[  266.765396][T11453] 9pnet_fd: Insufficient options for proto=fd
[  267.246804][ T5856] Bluetooth: hci1: command tx timeout
[  268.004317][T11496] loop0: detected capacity change from 0 to 32768
[  268.187494][T11497] jfs_create: dtSearch returned -5
[  269.262626][ T5912] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  269.449507][ T5912] usb 1-1: Using ep0 maxpacket: 32
[  269.454483][ T5912] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.459133][ T5912] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.465534][ T5912] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  269.469264][ T5912] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  269.472542][ T5912] usb 1-1: Product: syz
[  269.479883][ T5912] usb 1-1: Manufacturer: syz
[  269.500094][ T5912] hub 1-1:4.0: USB hub found
[  269.746622][ T5912] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[  270.101746][ T5852] usb 1-1: USB disconnect, device number 31
[  271.010625][T11528] loop0: detected capacity change from 0 to 128
[  271.138419][T11533] batadv_slave_0: entered promiscuous mode
[  271.142462][T11528] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.149159][T11530] batadv_slave_0: left promiscuous mode
[  271.153845][T11528] ext4 filesystem being mounted at /647/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.234531][T11528] EXT4-fs (loop0): shut down requested (1)
[  271.240550][T11528] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  271.346947][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  271.440719][T11543] loop4: detected capacity change from 0 to 4096
[  271.531099][T11543] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  271.548364][T11543] ntfs3(loop4): RAW NTFS volume: Filesystem size 8192.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  271.552900][T11543] ntfs3(loop4): NTFS 8192.00 Gb is too big to use 32 bits per cluster.
[  271.578400][T11543] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  271.658556][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'.
[  271.720347][T11560] loop4: detected capacity change from 0 to 128
[  271.725179][T11560] FAT-fs (loop4): bogus number of reserved sectors
[  271.736422][T11560] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  271.745877][T11560] FAT-fs (loop4): Can't find a valid FAT filesystem
[  271.808225][T11565] loop4: detected capacity change from 0 to 256
[  271.823554][T11565] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.832594][T11565] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  271.835310][   T52] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  271.850554][T11565] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  271.900236][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.913653][T11565] exFAT-fs (loop4): Filesystem has been set read-only
[  271.919230][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 8, err : -5)
[  271.928246][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.930719][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 8, err : -5)
[  271.946384][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.948817][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 9, err : -5)
[  271.953233][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.961174][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 10, err : -5)
[  271.966027][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.969428][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 11, err : -5)
[  271.974044][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.978685][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 12, err : -5)
[  271.982992][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.985565][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 13, err : -5)
[  271.989833][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  271.992479][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 14, err : -5)
[  271.996804][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.001710][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 15, err : -5)
[  272.006718][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.011270][T11565] exFAT-fs (loop4): error, failed to bmap (inode : ffff888043ca07c8 iblock : 16, err : -5)
[  272.015680][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.018289][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.019173][   T52] usb 1-1: Using ep0 maxpacket: 16
[  272.023456][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.026115][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.028716][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.033308][   T52] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  272.033633][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.038085][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  272.041333][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.047602][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.050933][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.063661][   T52] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  272.063973][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.070683][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.070782][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.075067][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.080423][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.081633][   T52] usb 1-1: Product: syz
[  272.084520][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.087583][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.089319][   T52] usb 1-1: Manufacturer: syz
[  272.091299][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.093023][   T52] usb 1-1: SerialNumber: syz
[  272.096800][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.096828][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.096996][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.115129][   T52] usb 1-1: config 0 descriptor??
[  272.120009][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.122909][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.125454][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.129598][   T52] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  272.130988][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.135827][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.140026][   T52] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  272.148246][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.152106][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.154608][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.157062][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.159691][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.166710][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.169297][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.179675][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.185705][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.188365][T11565] exFAT-fs (loop4): error, broken FAT chain.
[  272.191258][   T34] audit: type=1800 audit(2000000702.464:148): pid=11565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2193" name="file1" dev="loop4" ino=1048653 res=0 errno=0
[  272.788601][   T52] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  272.824425][T11605] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.846105][T11607] netlink: 'syz.2.2208': attribute type 16 has an invalid length.
[  272.865072][T11605] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.887022][T11607] netlink: 'syz.2.2208': attribute type 17 has an invalid length.
[  272.958405][T11607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.467974][   T52] em28xx 1-1:0.0: Config register raw data: 0xfa
[  273.470615][   T52] em28xx 1-1:0.0: I2S Audio (3 sample rate(s))
[  273.487307][   T52] em28xx 1-1:0.0: No AC97 audio processor
[  273.820769][   T52] usb 1-1: USB disconnect, device number 32
[  274.058486][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  274.076663][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  274.105211][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  274.135282][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  274.412421][T11644] loop0: detected capacity change from 0 to 512
[  274.416754][T11644] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  274.455445][ T1092] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  274.779373][T11657] comedi comedi0: Minor 48 is invalid!
[  274.970106][T11667] binder: 11666:11667 unknown command 0
[  274.972366][T11667] binder: 11666:11667 ioctl c0306201 200000000080 returned -22
[  275.342720][T11691] delete_channel: no stack
[  275.429096][T11698] loop4: detected capacity change from 0 to 4096
[  275.454840][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:4' failed: Read-only file system
[  275.470310][T11702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.478187][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  275.665574][ T5913] usb 1-1: Using ep0 maxpacket: 32
[  275.685528][ T5913] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  275.688842][ T5913] usb 1-1: config 0 has no interface number 0
[  275.691325][ T5913] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  275.709773][ T5913] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  275.714218][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.724734][ T5913] usb 1-1: Product: syz
[  275.726495][ T5913] usb 1-1: Manufacturer: syz
[  275.730028][ T5913] usb 1-1: SerialNumber: syz
[  275.735626][ T5913] usb 1-1: config 0 descriptor??
[  275.741449][ T5913] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  275.745142][ T5913] em28xx 1-1:0.132: Video interface 132 found:
[  275.974586][ T5852] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  276.073180][T11723] trusted_key: encrypted_key: keylen parameter is missing
[  276.141818][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.147475][ T5852] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  276.150847][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.153943][ T5852] usb 5-1: Product: syz
[  276.155502][ T5852] usb 5-1: Manufacturer: syz
[  276.156987][ T5852] usb 5-1: SerialNumber: syz
[  276.162210][ T5852] usb 5-1: config 0 descriptor??
[  276.178024][ T5913] em28xx 1-1:0.132: chip ID is em2840
[  276.184603][ T5852] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  276.208357][ T6624] udevd[6624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.387683][ T5852] usb 5-1: USB disconnect, device number 2
[  276.476928][ T5913] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  276.480504][ T5913] em28xx 1-1:0.132: board has no eeprom
[  276.550062][ T5913] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  276.553323][ T5913] em28xx 1-1:0.132: analog set to bulk mode.
[  276.556422][ T5898] em28xx 1-1:0.132: Registering V4L2 extension
[  276.575044][ T5913] usb 1-1: USB disconnect, device number 33
[  276.578611][ T5913] em28xx 1-1:0.132: Disconnecting em28xx
[  276.641918][ T5898] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  276.644923][ T5898] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  276.648898][ T5898] em28xx 1-1:0.132: No AC97 audio processor
[  276.655074][ T5898] usb 1-1: Decoder not found
[  276.660169][ T5898] em28xx 1-1:0.132: failed to create media graph
[  276.662871][ T5898] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  276.668968][ T5898] em28xx 1-1:0.132: Remote control support is not available for this card.
[  276.673652][ T5913] em28xx 1-1:0.132: Closing input extension
[  276.684691][ T5913] em28xx 1-1:0.132: Freeing device
[  277.413154][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  277.550038][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'.
[  277.557637][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'.
[  277.601522][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  277.734478][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.800590][ T5913] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  277.831693][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  277.835483][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.842003][ T5913] usb 5-1: Product: syz
[  277.843825][ T5913] usb 5-1: Manufacturer: syz
[  277.845789][ T5913] usb 5-1: SerialNumber: syz
[  278.094833][ T5913] usb 5-1: USB disconnect, device number 3
[  278.151753][ T5898] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  278.278365][T11771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2279'.
[  278.286228][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'.
[  278.326629][ T5898] usb 1-1: Using ep0 maxpacket: 8
[  278.332835][ T5898] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  278.341242][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.344519][ T5898] usb 1-1: Product: syz
[  278.346284][ T5898] usb 1-1: Manufacturer: syz
[  278.348703][ T5898] usb 1-1: SerialNumber: syz
[  278.352989][ T5898] usb 1-1: config 0 descriptor??
[  278.358506][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  278.676605][T11782] netlink: 'syz.4.2283': attribute type 10 has an invalid length.
[  278.684347][T11782] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.687787][T11782] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.701926][T11782] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.704729][T11782] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.707418][T11782] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.709780][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.714836][T11782] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  279.012749][ T5898] gspca_sonixj: reg_w1 err -71
[  279.018666][ T5898] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  279.025909][ T5898] usb 1-1: USB disconnect, device number 34
[  279.989207][   T34] audit: type=1326 audit(2000000709.663:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.0.2299" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5855b8ebe9 code=0x0
[  280.118323][   T34] audit: type=1400 audit(2000000709.783:150): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=11822 comm="syz.4.2301"
[  280.145952][T11827] loop4: detected capacity change from 0 to 512
[  280.157711][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  280.172603][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  281.155939][T11849] loop4: detected capacity change from 0 to 512
[  281.183437][T11849] EXT4-fs: Ignoring removed nobh option
[  281.192414][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  281.206572][T11849] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2311: iget: bad i_size value: 38620345925642
[  281.216091][T11849] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2311: couldn't read orphan inode 15 (err -117)
[  281.225102][T11849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.271733][T11231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.421535][T11870] loop4: detected capacity change from 0 to 512
[  281.427771][T11870] EXT4-fs: Ignoring removed i_version option
[  281.433278][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  281.438415][T11870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  281.451524][T11870] EXT4-fs (loop4): 1 truncate cleaned up
[  281.454433][T11870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.471488][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  281.675306][T11231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.948458][T11895] netlink: 'syz.0.2330': attribute type 2 has an invalid length.
[  281.951698][T11895] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2330'.
[  281.967155][T11895] nbd: must specify at least one socket
[  282.389858][T11912] loop0: detected capacity change from 0 to 32768
[  282.395923][T11912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2339 (11912)
[  282.403927][T11912] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.407858][T11912] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  282.410906][T11912] BTRFS info (device loop0): using free-space-tree
[  282.441746][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:0' failed: Read-only file system
[  282.817691][T11922] loop4: detected capacity change from 0 to 32768
[  282.821042][T11922] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2341 (11922)
[  283.208866][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:4' failed: Read-only file system
[  283.216722][ T5849] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  283.220634][T11922] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  283.243468][T11922] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  283.270299][T11922] BTRFS info (device loop4): using free-space-tree
[  283.462663][T11922] BTRFS info (device loop4): rebuilding free space tree
[  283.623763][T11231] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  284.305666][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  284.470210][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  284.474696][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.478695][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  284.500116][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.518083][T12004] loop0: detected capacity change from 0 to 40427
[  284.538953][    T9] usb 5-1: config 0 descriptor??
[  284.539905][T12004] F2FS-fs (loop0): invalid crc value
[  284.584511][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  284.626579][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  284.715479][T12004] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  284.727594][   T34] audit: type=1800 audit(2000000714.038:151): pid=12027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2360" name="nullb0" dev="tmpfs" ino=4973 res=0 errno=0
[  284.738315][T12004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  284.876087][ T5849] syz-executor: attempt to access beyond end of device
[  284.876087][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  284.881893][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  284.881913][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.881919][ T5849] Call Trace:
[  284.881924][ T5849]  <TASK>
[  284.881929][ T5849]  dump_stack_lvl+0x189/0x250
[  284.881963][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.881974][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  284.881984][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  284.881996][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  284.882012][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  284.882028][ T5849]  f2fs_write_end_io+0x886/0xb60
[  284.882047][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  284.882062][ T5849]  __submit_merged_write_cond+0x255/0x530
[  284.882081][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  284.882122][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.882157][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  284.882177][ T5849]  ? folios_put_refs+0x560/0x640
[  284.882202][ T5849]  ? __lock_acquire+0xab9/0xd20
[  284.882230][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  284.882249][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  284.882258][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.882269][ T5849]  do_writepages+0x32e/0x550
[  284.882289][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  284.882308][ T5849]  filemap_fdatawrite+0x199/0x240
[  284.882327][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  284.882381][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  284.882393][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  284.882409][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  284.882442][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  284.882500][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  284.882519][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  284.882534][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  284.882540][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  284.882561][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  284.882577][ T5849]  deactivate_locked_super+0xbc/0x130
[  284.882597][ T5849]  cleanup_mnt+0x425/0x4c0
[  284.882613][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.882634][ T5849]  task_work_run+0x1d4/0x260
[  284.882660][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  284.882675][ T5849]  ? __x64_sys_umount+0x122/0x160
[  284.882699][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  284.882724][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  284.882741][ T5849]  do_syscall_64+0x2bd/0x3b0
[  284.882756][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.882799][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.882813][ T5849]  ? exc_page_fault+0x9f/0xf0
[  284.882833][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.882846][ T5849] RIP: 0033:0x7f5855b8ff17
[  284.882861][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  284.882871][ T5849] RSP: 002b:00007ffd61a24e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  284.882884][ T5849] RAX: 0000000000000000 RBX: 00007f5855c11c05 RCX: 00007f5855b8ff17
[  284.882892][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd61a24f50
[  284.882900][ T5849] RBP: 00007ffd61a24f50 R08: 0000000000000020 R09: 0000000000000000
[  284.882908][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd61a25fe0
[  284.882917][ T5849] R13: 00007f5855c11c05 R14: 000000000004306a R15: 00007ffd61a26020
[  284.882943][ T5849]  </TASK>
[  284.884362][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  285.034257][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  285.034276][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.034282][ T5849] Call Trace:
[  285.034286][ T5849]  <TASK>
[  285.034291][ T5849]  dump_stack_lvl+0x189/0x250
[  285.034310][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.034320][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  285.034329][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  285.034341][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.034356][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  285.034372][ T5849]  f2fs_write_end_io+0x886/0xb60
[  285.034388][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  285.034402][ T5849]  __submit_merged_write_cond+0x255/0x530
[  285.034416][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  285.034443][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.034474][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  285.034491][ T5849]  ? folios_put_refs+0x560/0x640
[  285.034506][ T5849]  ? __lock_acquire+0xab9/0xd20
[  285.034522][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  285.034537][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.034546][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.034558][ T5849]  do_writepages+0x32e/0x550
[  285.034574][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.034585][ T5849]  filemap_fdatawrite+0x199/0x240
[  285.034598][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  285.034636][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.034647][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  285.034662][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  285.034700][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  285.034732][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  285.034743][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  285.034782][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  285.034793][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  285.034808][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  285.034819][ T5849]  deactivate_locked_super+0xbc/0x130
[  285.034830][ T5849]  cleanup_mnt+0x425/0x4c0
[  285.034840][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.034852][ T5849]  task_work_run+0x1d4/0x260
[  285.034866][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  285.034876][ T5849]  ? __x64_sys_umount+0x122/0x160
[  285.034889][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  285.034903][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  285.034913][ T5849]  do_syscall_64+0x2bd/0x3b0
[  285.034925][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.034935][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.034943][ T5849]  ? exc_page_fault+0x9f/0xf0
[  285.034954][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.034962][ T5849] RIP: 0033:0x7f5855b8ff17
[  285.034972][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  285.034980][ T5849] RSP: 002b:00007ffd61a24e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  285.034990][ T5849] RAX: 0000000000000000 RBX: 00007f5855c11c05 RCX: 00007f5855b8ff17
[  285.034996][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd61a24f50
[  285.035000][ T5849] RBP: 00007ffd61a24f50 R08: 0000000000000020 R09: 0000000000000000
[  285.035005][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd61a25fe0
[  285.035010][ T5849] R13: 00007f5855c11c05 R14: 000000000004306a R15: 00007ffd61a26020
[  285.035024][ T5849]  </TASK>
[  285.035389][    T9] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  285.089224][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'.
[  285.090595][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  285.090705][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  285.090722][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.090731][ T5849] Call Trace:
[  285.090737][ T5849]  <TASK>
[  285.090743][ T5849]  dump_stack_lvl+0x189/0x250
[  285.090800][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.090817][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[  285.090832][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  285.090848][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.090871][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[  285.090895][ T5849]  f2fs_write_end_io+0x886/0xb60
[  285.090921][ T5849]  __submit_merged_bio+0x27a/0x6a0
[  285.090943][ T5849]  __submit_merged_write_cond+0x255/0x530
[  285.090966][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[  285.091016][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.091075][ T5849]  ? __mod_zone_page_state+0xd7/0x140
[  285.091104][ T5849]  ? folios_put_refs+0x560/0x640
[  285.091134][ T5849]  ? __lock_acquire+0xab9/0xd20
[  285.091164][ T5849]  ? do_raw_spin_lock+0x121/0x290
[  285.091185][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.091195][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.091207][ T5849]  do_writepages+0x32e/0x550
[  285.091225][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.091237][ T5849]  filemap_fdatawrite+0x199/0x240
[  285.091250][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  285.091286][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[  285.091302][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[  285.091331][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[  285.091370][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  285.091408][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[  285.091420][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[  285.091437][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[  285.091448][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[  285.091475][ T5849]  ? shrinker_free+0x2ce/0x3e0
[  285.091494][ T5849]  deactivate_locked_super+0xbc/0x130
[  285.091515][ T5849]  cleanup_mnt+0x425/0x4c0
[  285.091532][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.091553][ T5849]  task_work_run+0x1d4/0x260
[  285.091577][ T5849]  ? __pfx_task_work_run+0x10/0x10
[  285.091592][ T5849]  ? __x64_sys_umount+0x122/0x160
[  285.091609][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[  285.091631][ T5849]  exit_to_user_mode_loop+0xec/0x110
[  285.091643][ T5849]  do_syscall_64+0x2bd/0x3b0
[  285.091655][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.091664][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.091673][ T5849]  ? exc_page_fault+0x9f/0xf0
[  285.091688][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.091701][ T5849] RIP: 0033:0x7f5855b8ff17
[  285.091717][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  285.091729][ T5849] RSP: 002b:00007ffd61a24e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  285.091774][ T5849] RAX: 0000000000000000 RBX: 00007f5855c11c05 RCX: 00007f5855b8ff17
[  285.091783][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd61a24f50
[  285.091790][ T5849] RBP: 00007ffd61a24f50 R08: 0000000000000020 R09: 0000000000000000
[  285.091797][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd61a25fe0
[  285.091803][ T5849] R13: 00007f5855c11c05 R14: 000000000004306a R15: 00007ffd61a26020
[  285.091828][ T5849]  </TASK>
[  285.091835][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  285.287135][    T9] usb 5-1: USB disconnect, device number 4
[  285.963566][    T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  286.139149][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  286.145888][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  286.152724][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  286.162388][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  286.166027][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.172045][    T9] usb 1-1: Product: syz
[  286.174007][    T9] usb 1-1: Manufacturer: syz
[  286.175902][    T9] usb 1-1: SerialNumber: syz
[  286.182722][    T9] usb 1-1: config 0 descriptor??
[  286.189170][T12063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  286.195536][T12063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  286.200655][    T9] usb 1-1: ucan: probing device on interface #0
[  286.245091][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  286.408117][ T5852] usb 5-1: Using ep0 maxpacket: 16
[  286.414992][ T5852] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.421595][ T5852] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  286.427039][ T5852] usb 5-1: config 1 has no interface number 1
[  286.432907][ T5852] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  286.436632][ T5852] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  286.438191][T12085] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2381'.
[  286.441124][ T5852] usb 5-1: config 1 interface 2 has no altsetting 0
[  286.449547][ T5852] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  286.461290][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.465302][ T5852] usb 5-1: Product: syz
[  286.467106][ T5852] usb 5-1: Manufacturer: syz
[  286.469097][ T5852] usb 5-1: SerialNumber: syz
[  286.754860][ T5852] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  286.757946][ T5852] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  286.760819][ T5852] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  286.764000][ T5852] usb 5-1: selecting invalid altsetting 0
[  286.779961][ T5852] usb 5-1: USB disconnect, device number 5
[  286.813336][ T6624] udevd[6624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.907350][T12096] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2385'.
[  286.911938][T12096] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2385'.
[  287.125907][    T9] ucan 1-1:0.0 can0: registered device
[  287.266735][    T9] ucan 1-1:0.0 can0: firmware string: unknown
[  287.274385][    T9] usb 1-1: USB disconnect, device number 35
[  287.956257][T12116] netlink: 'syz.0.2394': attribute type 9 has an invalid length.
[  288.898389][T12128] loop0: detected capacity change from 0 to 32768
[  288.940442][T12128] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  288.940442][T12128] 
[  288.941573][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system
[  288.972099][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system
[  289.240757][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2408'.
[  289.305603][T12158] loop0: detected capacity change from 0 to 64
[  289.460069][T12168] loop0: detected capacity change from 0 to 512
[  289.467525][T12168] EXT4-fs: inline encryption not supported
[  289.471821][ T5850] udevd[5850]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  289.477275][T12168] EXT4-fs (loop0): can't mount with both data=journal and dax
[  289.565623][T12173] loop4: detected capacity change from 0 to 136
[  289.580075][ T6624] udevd[6624]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system
[  289.589879][ T6624] udevd[6624]: symlink '../../loop4' '/dev/disk/by-uuid/202\x20-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system
[  289.617471][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system
[  289.621740][T12173] rock: directory entry would overflow storage
[  289.623967][T12173] rock: sig=0x4f50, size=4, remaining=3
[  289.630975][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-uuid/202\x20-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system
[  289.635039][T12173] iso9660: Corrupted directory entry in block 2 of inode 1472
[  290.069649][   T34] audit: type=1326 audit(2000000718.930:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.2421" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5855b8ebe9 code=0x7ffe0000
[  290.512120][T12193] loop4: detected capacity change from 0 to 32768
[  290.521606][T12193] XFS: attr2 mount option is deprecated.
[  290.566568][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  290.586241][ T5850] udevd[5850]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  290.637711][T12193] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  290.642207][T12193] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  290.659830][T12193] XFS (loop4): Ending clean mount
[  290.671925][T12193] XFS (loop4): Quotacheck needed: Please wait.
[  290.704955][T12193] XFS (loop4): Quotacheck: Done.
[  290.775707][T11231] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  291.488679][T12227] loop0: detected capacity change from 0 to 512
[  291.745865][T12227] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2429: casefold flag without casefold feature
[  291.768673][T12227] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2429: couldn't read orphan inode 15 (err -117)
[  291.779784][T12227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.848738][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.122446][T12234] loop0: detected capacity change from 0 to 32768
[  292.167805][ T5850]  loop0: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[  292.305724][T12236] loop4: detected capacity change from 0 to 32768
[  292.338643][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.391643][T12236] (syz.4.2439,12236,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  292.391679][T12236] (syz.4.2439,12236,1):ocfs2_check_volume:2432 ERROR: status = -27
[  292.396051][ T6624] udevd[6624]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  292.412168][T12236] (syz.4.2439,12236,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  292.417334][T12236] (syz.4.2439,12236,1):ocfs2_fill_super:1177 ERROR: status = -27
[  292.437168][T12242] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024)
[  292.466326][T12242] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  292.812368][T12254] 9pnet_fd: Insufficient options for proto=fd
[  293.463826][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  293.468875][ T7480] udevd[7480]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  293.472426][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  293.477139][ T6624] udevd[6624]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  293.500981][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  293.529860][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  293.876194][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory
[  293.896311][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop0p19, 10) failed: No such file or directory
[  293.902368][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory
[  294.312485][T12283] ==================================================================
[  294.315352][T12283] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  294.318457][T12283] Read of size 2 at addr ffff888029859342 by task syz.0.2457/12283
[  294.322185][T12283] 
[  294.323584][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.0.2457 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  294.323602][T12283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.323614][T12283] Call Trace:
[  294.323622][T12283]  <TASK>
[  294.323630][T12283]  dump_stack_lvl+0x189/0x250
[  294.323654][T12283]  ? __kasan_check_byte+0x12/0x40
[  294.323679][T12283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.323688][T12283]  ? lock_release+0x4b/0x3e0
[  294.323703][T12283]  ? __virt_addr_valid+0x4a5/0x5c0
[  294.323716][T12283]  print_report+0xca/0x240
[  294.323725][T12283]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  294.323738][T12283]  kasan_report+0x118/0x150
[  294.323750][T12283]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  294.323764][T12283]  __xfrm_state_lookup+0x6ad/0x8d0
[  294.323778][T12283]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  294.323792][T12283]  xfrm_state_add+0x27d/0xc40
[  294.323803][T12283]  pfkey_add+0x1edd/0x2e00
[  294.323819][T12283]  ? __pfx_pfkey_add+0x10/0x10
[  294.323829][T12283]  ? kmem_cache_free+0x18f/0x400
[  294.323842][T12283]  pfkey_sendmsg+0xbfe/0x1090
[  294.323853][T12283]  ? trace_sched_exit_tp+0x36/0x110
[  294.323866][T12283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  294.323882][T12283]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.323894][T12283]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.323904][T12283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  294.323914][T12283]  __sock_sendmsg+0x21c/0x270
[  294.323925][T12283]  ____sys_sendmsg+0x505/0x830
[  294.323934][T12283]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.323943][T12283]  ? import_iovec+0x74/0xa0
[  294.323953][T12283]  ___sys_sendmsg+0x21f/0x2a0
[  294.323963][T12283]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.323978][T12283]  ? __fget_files+0x2a/0x420
[  294.323985][T12283]  ? __fget_files+0x3a0/0x420
[  294.323994][T12283]  __x64_sys_sendmsg+0x19b/0x260
[  294.324002][T12283]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.324011][T12283]  ? rcu_is_watching+0x15/0xb0
[  294.324021][T12283]  ? do_syscall_64+0xbe/0x3b0
[  294.324033][T12283]  do_syscall_64+0xfa/0x3b0
[  294.324044][T12283]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.324086][T12283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.324096][T12283]  ? exc_page_fault+0x9f/0xf0
[  294.324107][T12283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.324116][T12283] RIP: 0033:0x7f5855b8ebe9
[  294.324125][T12283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.324133][T12283] RSP: 002b:00007f58569ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.324143][T12283] RAX: ffffffffffffffda RBX: 00007f5855db5fa0 RCX: 00007f5855b8ebe9
[  294.324151][T12283] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  294.324156][T12283] RBP: 00007f5855c11e19 R08: 0000000000000000 R09: 0000000000000000
[  294.324162][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.324167][T12283] R13: 00007f5855db6038 R14: 00007f5855db5fa0 R15: 00007ffd61a25c08
[  294.324177][T12283]  </TASK>
[  294.324181][T12283] 
[  294.431344][T12283] Allocated by task 9288:
[  294.432724][T12283]  kasan_save_track+0x3e/0x80
[  294.434242][T12283]  __kasan_slab_alloc+0x6c/0x80
[  294.435784][T12283]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  294.437522][T12283]  xfrm_state_alloc+0x24/0x2f0
[  294.439060][T12283]  __find_acq_core+0x8a7/0x1c00
[  294.440626][T12283]  xfrm_find_acq+0x78/0xa0
[  294.442244][T12283]  pfkey_getspi+0x65d/0xee0
[  294.444067][T12283]  pfkey_sendmsg+0xbfe/0x1090
[  294.445916][T12283]  __sock_sendmsg+0x21c/0x270
[  294.447692][T12283]  ____sys_sendmsg+0x505/0x830
[  294.449512][T12283]  ___sys_sendmsg+0x21f/0x2a0
[  294.451401][T12283]  __x64_sys_sendmsg+0x19b/0x260
[  294.453378][T12283]  do_syscall_64+0xfa/0x3b0
[  294.455149][T12283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.457244][T12283] 
[  294.458013][T12283] Freed by task 792:
[  294.459546][T12283]  kasan_save_track+0x3e/0x80
[  294.461432][T12283]  kasan_save_free_info+0x46/0x50
[  294.463478][T12283]  __kasan_slab_free+0x5b/0x80
[  294.465379][T12283]  kmem_cache_free+0x18f/0x400
[  294.467278][T12283]  xfrm_state_gc_task+0x52d/0x6b0
[  294.469029][T12283]  process_scheduled_works+0xae1/0x17b0
[  294.471201][T12283]  worker_thread+0x8a0/0xda0
[  294.472780][T12283]  kthread+0x711/0x8a0
[  294.474083][T12283]  ret_from_fork+0x3fc/0x770
[  294.475538][T12283]  ret_from_fork_asm+0x1a/0x30
[  294.477244][T12283] 
[  294.478114][T12283] The buggy address belongs to the object at ffff888029859200
[  294.478114][T12283]  which belongs to the cache xfrm_state of size 928
[  294.483583][T12283] The buggy address is located 322 bytes inside of
[  294.483583][T12283]  freed 928-byte region [ffff888029859200, ffff8880298595a0)
[  294.489021][T12283] 
[  294.490068][T12283] The buggy address belongs to the physical page:
[  294.492220][T12283] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029858d80 pfn:0x29858
[  294.495730][T12283] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  294.498620][T12283] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  294.501215][T12283] page_type: f5(slab)
[  294.502620][T12283] raw: 00fff00000000040 ffff888104cc7c80 dead000000000122 0000000000000000
[  294.505796][T12283] raw: ffff888029858d80 00000000800e000a 00000000f5000000 0000000000000000
[  294.509175][T12283] head: 00fff00000000040 ffff888104cc7c80 dead000000000122 0000000000000000
[  294.512581][T12283] head: ffff888029858d80 00000000800e000a 00000000f5000000 0000000000000000
[  294.515720][T12283] head: 00fff00000000002 ffffea0000a61601 00000000ffffffff 00000000ffffffff
[  294.518626][T12283] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  294.521333][T12283] page dumped because: kasan: bad access detected
[  294.523401][T12283] page_owner tracks the page as allocated
[  294.525192][T12283] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6489, tgid 6487 (syz.1.228), ts 91529517709, free_ts 84274149831
[  294.531815][T12283]  post_alloc_hook+0x240/0x2a0
[  294.533750][T12283]  get_page_from_freelist+0x21e4/0x22c0
[  294.535935][T12283]  __alloc_frozen_pages_noprof+0x181/0x370
[  294.538267][T12283]  alloc_pages_mpol+0x232/0x4a0
[  294.540204][T12283]  allocate_slab+0x8a/0x370
[  294.542025][T12283]  ___slab_alloc+0xbeb/0x1410
[  294.543902][T12283]  kmem_cache_alloc_noprof+0x283/0x3c0
[  294.545994][T12283]  xfrm_state_alloc+0x24/0x2f0
[  294.547892][T12283]  __find_acq_core+0x8a7/0x1c00
[  294.549803][T12283]  xfrm_find_acq+0x78/0xa0
[  294.551597][T12283]  pfkey_getspi+0x65d/0xee0
[  294.553409][T12283]  pfkey_sendmsg+0xbfe/0x1090
[  294.555181][T12283]  __sock_sendmsg+0x21c/0x270
[  294.556862][T12283]  ____sys_sendmsg+0x505/0x830
[  294.558732][T12283]  ___sys_sendmsg+0x21f/0x2a0
[  294.560538][T12283]  __x64_sys_sendmsg+0x19b/0x260
[  294.562123][T12283] page last free pid 5858 tgid 5858 stack trace:
[  294.564602][T12283]  __free_frozen_pages+0xbc4/0xd30
[  294.566648][T12283]  __slab_free+0x303/0x3c0
[  294.568432][T12283]  qlist_free_all+0x97/0x140
[  294.570281][T12283]  kasan_quarantine_reduce+0x148/0x160
[  294.572289][T12283]  __kasan_slab_alloc+0x22/0x80
[  294.574142][T12283]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  294.575839][T12283]  getname_flags+0xb8/0x540
[  294.577340][T12283]  do_sys_openat2+0xbc/0x1c0
[  294.579058][T12283]  __x64_sys_openat+0x138/0x170
[  294.580861][T12283]  do_syscall_64+0xfa/0x3b0
[  294.582672][T12283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.584836][T12283] 
[  294.585627][T12283] Memory state around the buggy address:
[  294.587449][T12283]  ffff888029859200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  294.589936][T12283]  ffff888029859280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  294.592555][T12283] >ffff888029859300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  294.595110][T12283]                                            ^
[  294.597059][T12283]  ffff888029859380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  294.599579][T12283]  ffff888029859400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  294.602115][T12283] ==================================================================
[  294.605421][T12283] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  294.607679][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.0.2457 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  294.612435][T12283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.616274][T12283] Call Trace:
[  294.617649][T12283]  <TASK>
[  294.618910][T12283]  dump_stack_lvl+0x99/0x250
[  294.620849][T12283]  ? __asan_memcpy+0x40/0x70
[  294.622588][T12283]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.624644][T12283]  ? __pfx__printk+0x10/0x10
[  294.626572][T12283]  vpanic+0x281/0x750
[  294.628225][T12283]  ? __pfx_vpanic+0x10/0x10
[  294.629788][T12283]  ? irqentry_exit+0x74/0x90
[  294.631307][T12283]  panic+0xb9/0xc0
[  294.632654][T12283]  ? __pfx_panic+0x10/0x10
[  294.634480][T12283]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  294.636907][T12283]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  294.639061][T12283]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  294.640696][T12283]  check_panic_on_warn+0x89/0xb0
[  294.642281][T12283]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  294.643933][T12283]  end_report+0x78/0x160
[  294.645278][T12283]  kasan_report+0x129/0x150
[  294.646978][T12283]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  294.648931][T12283]  __xfrm_state_lookup+0x6ad/0x8d0
[  294.650600][T12283]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  294.652493][T12283]  xfrm_state_add+0x27d/0xc40
[  294.654456][T12283]  pfkey_add+0x1edd/0x2e00
[  294.656297][T12283]  ? __pfx_pfkey_add+0x10/0x10
[  294.657828][T12283]  ? kmem_cache_free+0x18f/0x400
[  294.659408][T12283]  pfkey_sendmsg+0xbfe/0x1090
[  294.660913][T12283]  ? trace_sched_exit_tp+0x36/0x110
[  294.662825][T12283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  294.664575][T12283]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.666250][T12283]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.668100][T12283]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  294.669717][T12283]  __sock_sendmsg+0x21c/0x270
[  294.671421][T12283]  ____sys_sendmsg+0x505/0x830
[  294.673366][T12283]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.675464][T12283]  ? import_iovec+0x74/0xa0
[  294.677267][T12283]  ___sys_sendmsg+0x21f/0x2a0
[  294.679144][T12283]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.681235][T12283]  ? __fget_files+0x2a/0x420
[  294.683097][T12283]  ? __fget_files+0x3a0/0x420
[  294.684968][T12283]  __x64_sys_sendmsg+0x19b/0x260
[  294.686984][T12283]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.689577][T12283]  ? rcu_is_watching+0x15/0xb0
[  294.691619][T12283]  ? do_syscall_64+0xbe/0x3b0
[  294.693569][T12283]  do_syscall_64+0xfa/0x3b0
[  294.695481][T12283]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.697716][T12283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.700236][T12283]  ? exc_page_fault+0x9f/0xf0
[  294.702277][T12283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.704779][T12283] RIP: 0033:0x7f5855b8ebe9
[  294.706668][T12283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.714630][T12283] RSP: 002b:00007f58569ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.718098][T12283] RAX: ffffffffffffffda RBX: 00007f5855db5fa0 RCX: 00007f5855b8ebe9
[  294.721185][T12283] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  294.724362][T12283] RBP: 00007f5855c11e19 R08: 0000000000000000 R09: 0000000000000000
[  294.727499][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.730622][T12283] R13: 00007f5855db6038 R14: 00007f5855db5fa0 R15: 00007ffd61a25c08
[  294.733686][T12283]  </TASK>
[  294.735542][T12283] Kernel Offset: disabled
[  294.737370][T12283] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:38:10  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015d6 RDI=00000000000015d7 RBP=00000000000003f8 RSP=ffffc9000377ed90
R8 =ffff8881079d8237 R9 =1ffff11020f3b046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af990d R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58569ef6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7ea6e56c0 CR3=00000000417a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5855d87498 00007f5855d87470 XMM03=00007f5855d874a8 00007f5855d874a0
XMM04=00007f58568ed100 00007f5855d87460 XMM05=00007f5855d87478 00007f5855d874c0
XMM06=00007f5855d874b8 00007f5855d874b0 XMM07=00007f5855d874a8 00007f5855d874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5855c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffff888110b30000 RDX=0000000000000000
RSI=ffffffff822e4bbd RDI=ffffffff8e139ee0 RBP=ffff88801b9091e0 RSP=ffffc900061af2c0
R8 =ffff88801b9091df R9 =1ffff1100372123b R10=dffffc0000000000 R11=ffffed100372123c
R12=ffffffff822e4bbd R13=ffffffff822e4bbd R14=ffffffff8e139ee0 R15=0000000000000001
RIP=ffffffff81a65d90 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555594251500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a1fff8 CR3=000000004083e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=0000000000000100 0000000000000000
XMM02=00007ff1a4ff1b70 00007f006b736964 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000ff000000 XMM05=0000000000000051 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f353179 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
