last executing test programs:

28.073226639s ago: executing program 0 (id=715):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, 0x0)
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r5, 0x0, 0x0, 0x0, 0x6})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = timerfd_create(0x9, 0x0)
timerfd_gettime(r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'})
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

27.071088238s ago: executing program 0 (id=723):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25210000000a0001007770616e30ff0f00050020000100000009001f"], 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x10)

26.986250991s ago: executing program 0 (id=724):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
times(0x0)

26.757876415s ago: executing program 0 (id=727):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x61b, &(0x7f0000001080)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

26.656709962s ago: executing program 0 (id=728):
r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000440)={0x80000000, 0x0, &(0x7f00000003c0)=[{}, {{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, 0x0, 0x0})

26.328621112s ago: executing program 0 (id=729):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

26.210792669s ago: executing program 32 (id=729):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.132033825s ago: executing program 2 (id=998):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]})

1.131822266s ago: executing program 1 (id=999):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"])
ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040))

1.131528345s ago: executing program 2 (id=1000):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_open_dev$ndb(&(0x7f0000000dc0), 0x0, 0x121002)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x24000000)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000140)=0x7)

1.067649985s ago: executing program 1 (id=1001):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0)

1.065305173s ago: executing program 2 (id=1002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002)

1.056183567s ago: executing program 1 (id=1003):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

992.367443ms ago: executing program 1 (id=1005):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r3, 0x55, 0x84a23, 0xf, 0x0, 0x0)

943.44067ms ago: executing program 3 (id=1006):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRES8=r2], 0x0)

890.941753ms ago: executing program 2 (id=1007):
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040))

748.279105ms ago: executing program 3 (id=1008):
fanotify_mark(0xffffffffffffffff, 0x112, 0x40001009, 0xffffffffffffffff, 0x0)

592.801018ms ago: executing program 2 (id=1009):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x6260, &(0x7f0000000740)="$eJzs3c9vHGf9B/DP/vSPfJtaPVT9Rgi5aflRSpM4KSFQoO0BDlx6QLmiRK5bRaSAkoDSyiKufOHAib8AhMQRIY6IQ/+AHrhy48SJSDYSqCcGjfd54tnNbteu45215/WS7JnPPDP2M37v7A/vzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDtVZE3Ph5WrAS8X/RiWhHLJX1akQsra7k9bsR8VzsNcezEdFbiCi33/v2dMSrEfHx2Yid3c31cvHlA/bju3/82+9+eOatv/6hd/E/f7rXeW3Sevfv/+rff35wtH0GAACApimKomill/nn0uv7dt2dAgBmIj/+F0lefurrX//jrb/MU3/UarVarZ5BXVWM96BaRMRWdZvyOYO34wHghNmKT+ruAjWSf6N1I+JM3Z0A5lqr7g5wLHZ2N9dbKd9W9fFgddCezwUZyn+r9ej6jknTaUbPMZnV7Ws7OvHMhP4szagP8yTn3x7N/8agvZ/WO+78Z2VS/v3BpU+Nk/PvjOY/4vTk3x6bf1Pl/LuHyr8jfwAAAAAAmGP5//8rNb//u3D0XTmQT3v/d3VGfQAAAAAAAACAJ+2o4/89Yvw/AAAAmFvla/XSb87uL5v0WWzl8uutiKdG1gca5qPBZLnufgAAAAAAAAAAAABAk3QH5/Beb0X0IuKp5eWiKMqvqtH6sI66/UnX9P2HJqv7Th4AAAY+PjtyLX8rYjEirkd777P+esvLy0WxuLRcLBdLC/n5bH9hsViqvK7N03LZQv8AT4i7/aL8YYuV7aqmvV6e1j7688rf1S86B+jYE9JLf80JzTWFDQDJ4NFoxyPSKVMUT0968gFDHP+n0Eqs1H27Yv7VfTMFAAAAjl9RFEUrDfN3Lo3v1667UwDATOTH/9H3BQ5UR4xvbx9yfbVarVar1TOpq4rxHlSLiNiqblM+ZzAcPwCcMFvxSd1doEbyb7RuRDxXdyeAudaquwMci53dzfVWyrdVfTxYHbTnc0GG8t9q7W2Xtx83nWb0HJNZ3b62oxPPTOjPszPqwzzJ+bdH878xaO+n9Y47/1mZlH9/75K55sn5d0bzH3F68m+Pzb+pcv7dQ+XfkT8AAAAAAMyx/P//Fe//5l0GAAAAAAAAgBNnZ3dzPV/3mt///9yY9Vz/eTrl/FuHzX8pzcv/RMv5t0fy//LIep3K/MM394//f+1urv/+3j//P08Pmv9CnmmlW1Yr3SJa6Te1uml6lL173Hav0y9/U6/V7nTTOT9F7524FbdjIy4NrdtOf4/99rWh9rKnvaH2y0Pt3cfarwy199LnDhRLuf1CrMdP4na8vddeti1M2f/FKe3FlPacf8f9fyPl/LuVrzL/5dTeGpmWHn7Yfuy4r07H/Z43bn3+l5eOf3em2o7Oo32rKvfvfA392fubnOnHz+5u3Llw/+a9e3fWIk2Gll6ONHnCcv69va+F/fv/Fwbt+X6/erw+/LB/6PznxXZ0J+b/QmW+3N+XZty3OuT8++kr5/92ah9//J/k/Ccf/y/X0B8AAAAAAAAAAAAAAAD4NEVR7F0i+kZEXE3X/9R1bSYAMFv58b9I8nK1Wq1Wz0sdK3vf56Y/6pNcVxXjvV4tIuKj6jblc4ZfjPthAMA8+29E/L3uTlAb+TdY/ry/cvpi3Z0BZuru+x/86Obt2xt37tbdEwAAAAAAAADgs8rjf65Wxn9+MSJWRtYbGv/1zVg96vif3TzzaIDRJzzQ9wTb7X6nXRlu/PnYG5/7wqTxv8/H4+N/5zFxO9X9mKA3pb0/pX1hSvvi2KX7aY290KMi5/98ZbzzMv9zI8OvN2H819Ex75sg53++cnsu8//SyHrV/Ivfzl3+WwddcTvaQ/lfvPfeTy/eff+DV269d/PdjXc3fnxlbe3SlatXr127dvGdW7c3Lg2+H0+v50DOP4997TzQZsn558zl3yw5/y+kWv7NkvP/Yqrl3yw5//x8T/7NkvPPr33k3yw5/5dSLf9myfl/JdXyb5ad3c2FMv+XUy3/ZsnH/1dTLf9myfm/kmr5N0vO/0Kq5d8sOf+LqT5A/j4e/hTJ+ed3uBz/zZLzX0v1lPyXZtUvZiPnfznVjv9myflfSbX8myXn/2qq5d8sOf+vpVr+zZLzv5pq+TdLzv/rqZZ/s+T8r6Va/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y/7n/5sxY+aUzfTjM29e9z0TAAAAAAAAAAAAADBqFich172PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOwgRCc1MDaMcY4S3Z9iS+0LiYQLgFKgYRCL9iud20WfMNrl0CRbBookTAqqqiafmgLKGojVRVWxQdapTQfql4+kfYD/VJRVUJqVJkooCK1Fc1WM+d9X8/Mzs6MveP12XN+Pyl5dmfOmfPOmfecnWfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTa/dfaLtSzL6v81/rchy15S/3rtxIbGbW+61SMEAAAAluv/Gv9/YX264VAfKzUt8/ev+e63FhYWFrIPD//e6FcXFtIdE1k2uibLGvdFV/79I7XmZYLHsvHaUNP3Qz02P9zj/pEe94/2uH+sx/1retw/3uP+RTtgkbX572MaD7a18eWGfJdmd2Sjjfu2dljrsdqaoaH4u5yGWmOdhdHj2Vx2MpvNpluWz5etNZZ/enN9W+/M4raGmra1qT5DfvTZY3EMtbCPt7Zs69pjRj98Szbx4x999tifnL96V6facze0PF4+zu1b6uP8fLglH2stW5P2SRznUNM4N3V4TYZbxllrrFf/un2cL/Q5zuFrw1xR7a/5eDbU+PrZxn4aaf61XtpPm8Jt/31PlmWXrg27fZlF28qGsnUttwxde33G8xlZf4z6VHp5NnJd83RzH/O0Xme2ts7T9mMivv6bw3ojS4yh+WX64efGFr3u1ztPo/qzXupYaZ+Dgz5WijIH47x4tvGkH+84B7eG5//ZbUvPwY5zp8McTM+7aQ5u6TUHh8aGG2NOL0Ktsc61ObizZfnhxpZqjfrctu5zcOr8qbNT85/+zBvnTh09MXti9vTunTund+/du3///qnjcydnp/P/3+DeLr512VA6BraEfRePgde3Lds8VRe+PrjjcLzLcbihbdlBH4cj7U+utjIH5OI5nR8bD9d3+vjloWyJY6zx+uxY/nGYnnfTcTjSdBx2/JnS4Tgc6eM4rC9zdkd/71lGmv7rNIab9bNgQ9McbH8/0j4HB/1+pChzcDzMi3/dsfTPgk1hvI9PXu/7keFFczA93XDuqd+S3u+P72+UTvPy7vodt41lF+Znz9336NHz58/tzEJZEa9omivt83Vd03PKFs3Xoeuer4fmXvP43R1u3xD21fgb6/8bX/K1qi+z577ur1Xjp1vn/dly664slAFb6f3Z6ad5fX+mXrLL/qwv8/mp5b8XT31p0/l3dInzb+z7X8y3lx7qseHRkfz4HU57Z7TlfNz6Uo00zl21xrZfmOrvfDwa/lvp8/EdXc7HG9uWHfT5eLT9ycXzca3XbzuWp/31HA/z5OR09/NxfZmNu653To50PR/fE2ot7P83hE4h9UVNc2epeZu2NTIyGp7XSNxC6zzd3bL8aOjN6tt6ateNzdPt9+SPNZye3TUrNU8n2pYd9DxN56ul5mmt12/fbkz76zke5sUdu7vP0/oyz+xZ/rlzbfyy6dw51msOjg6P1cc8miZhfr5fWBvn4H3ZsexMdjKbadw71phPtca2Ju/vbw6Ohf9W+ly5scsc3N627KDnYPo5ttTcq40sfvID0P56jod58cT93edgfZm37Rvse9ft4Za0TNN71/bfry31O6+723bTzfydV32cf7uv++9m68uc3H+9fWb3/XRvuOW2Dvup/fhd6piayVZmP20M47y6f+n9VB9PfZmvHuhzPh3KsuziJx9o/L43/H3lLy5871stf3fp9Dedi5984Pnbj//d9YwfgNXvxbysy3/WNf1lqp+//wMAAACrQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/Gt12de/FilpL5C0G8P+2Gh/LlYsZ1Onw/sXBN/fYHnpz9yV9d7G/bQ1mW/fSh3+y4/MaH4rhyE2GcVx5svX3xihf72v6RR64t15xf/1p4/Ph8+p0GnSK401mWPb3+y43tTHzkcqM+89CRRv3Apccfqy/zwoH8+7j+c6/Il//DEP49dPxoy/rPhf3wg1Cn3915f8T1vnn5DZv2feja9uJ6tS0vbTztJz6aP278nJyvPJYvH/fzUuP/6y899c368o++rvP4Lw51Hv9T4XGffPDqXH3G/c+r8+WbX4P693G9L4Txx+09Gda/7xvf6Tj+K1/Mlz/79ny5I6HG7W8P3299+9W55v31aO1oy/PK3pEvF7c//b3fadwfHy8+fvv4xw9fbtkf7fPjmX/OH2eqbfl4e9xO9Jdt268/TvP8jNt/6rePtOznXtu/8oHnXl1/3Pbt39u23HDb+u2f2PRHX/hyx+3F8Rz687Mtz+fQ+8NxHLb/xEfDfAz3/++VL7dsNzry/tbzT1z+axsutjyf6J0/zrd/5c0nGvU/Jn7yB7e95PaXXnptfd9l2bMfzB+v1/ZP/PGZlvF//c4djdcj3h8z+u3bX0rc/rlPTZ4+M39hbqZprzY+O+c9+XjWjK9dVx/v+nBubf/+8JnzH5s9NzE9MZ1lE+X9CL0b9o1Qn8/Lpetdf8cj4fW8+/efXrftn74Ub/+Xh/PbL787/7n1+rDcV8LtG/LXb6G2zO0/sfnOxvFdeyb/viXHPgCbtv7n/r4WDM+//X1BnO9nX/mxxn6o39f4uRGP62WO//sz+eN8O+zXhfDJzFvuvLa95uXjZyNc/mB+vC97/4XTXHxd/zS83u/9Qf74cVzx+X4/vI/5zsbW812cH9++ONT++I1P8bgUzifZpfz+uFTc35dfuLPj8OLnkGSX7mp8/7vpce66rqe5lPlPz0+dnDt94dGp87Pz56fmP/2Zw6fOXDh9/nDjszwPf7zX+tfOT+sa56eZ2b17sum1WZadyaZX4IR1c8Zf/6q/8Z995NjMvultM7PHj144fv6Rs7PnThybnz82OzO/7ejx47Of6rX+3MzBnbsO7N63a/LE3MzB/QcO7D4wOXf6TH0Y+aB62Dv9icnT5w43Vpk/uOfAzvvv3zM9eerMzOzBfdPTkxd6rd/42TRZX/s3Js/Nnjx6fu7U7OT83GdmD+48sHfvrp6fBnjq7PH5ialzF05PXZifPTeVP5eJ842b6z/7eq1POc3/W/5+tl0t/yC+7H337k2fz1r35OeWfKh8kbYPEL0aPovmH192dn8/38e+fzTUpCL9PwAAAFRB7PvHQk30/wAAAFAase9fE2qi/wcAAIDSiH3/eKhJRfp/+X/5//7y//n9g8z/d8rPZ33l/0fl/1co/3/2k3mudLXn/2N+Xv6/Gm5x/n/Z25f/l/8vX/6///z8ah+//L/8P4sVLf8f+/61WVbJ/h8AAACqIPb960JN9P8AAABQGrHvvy3URP8PAAAApRH7/peEmlSk/5f/7yv/v6tX4Kr8+f/BX///xvP/rv8v/5/rK/8fXxz5/8q47vz9hx5u+Vb+P5D/l/+X/5f/l/9n2UaXvOdW5f9j3397qElF+n8AAACogtj3vzTURP8PAAAApRH7/vWhJvp/AAAAKI3Y928INalI/y//7/r/8v/y/6XO/y/3+v9Ng5H/Xx1c/787+f8ebjj/Pz64/P/6pYcn/z/g8Y8OdvzFzv/3HL78PzdF0a7/H/v+l4WaVKT/BwAAgCqIff/LQ030/wAAAFAase9/RaiJ/h8AAABKI/b9d4SaVKT/X07+P2au5f/l/+X/c/L/uVLl/7te/z//Sv6/WOT/uyt//j9/P+P6/zemcvn/AY+/2Pn/QV//f/TB9vXl/+mkaPn/2Pe/MtSkIv0/AAAAVEHs++8MNdH/AwAAQGnEvv9VoSb6fwAAACiN2PdvDDWpSP/v+v/y//L/8v/y/5233zv/n5P/Lxb5/+7Kn/+/Vdf/l//P5P+rlf/v8OZX/p9Oipb/j33/XaEmFen/AQAAoApi3393qIn+HwAAAEoj9v0/E2qi/wcAAIDSiH3/plCTivT/8v/y//L/1cr/3zsm/y//X27y/93J//cg/y//L//f5/X/F7ue/P+aXg9GaRQt/x/7/leHmlSk/wcAAIAqiH3/a0JN9P8AAABQGrHvf22oif4fAAAASiP2/ROhJhXp/+X/y5X//7O/eeK1mfy//H+P7Zc0/x+ngfx/xcn/dyf/34P8v/z/Ks3/v+u7eV0t+X+qo2j5/9j3bw41qUj/DwAAAFUQ+/4toSb6fwAAACiN2PffE2qi/wcAAIDSiH3/1lCTivT/8v/lyv9H8v/y/922X9L8fyL/X23y/x00HaTy/z3I/8v/r9L8fzaw6//Hd7/y/wxG0fL/se9/XahJl8ZvsJ/EAwAAANxsse/fFmpSkb//AwAAQBXEvv/1oSb6fwAAACiN2PdvDzWpSP8v/y//L/8v/y//33n78v+r0+rK/69ZdEvRrv8/Jv8v/y//X7H8v+v/M1hFy//Hvv8NoSYV6f8BAACgCmLfvyPURP8PAAAApRH/5V3+7171/wAAAFBGse+fDDWpSP8v/y//X6X8f03+X/5f/r/0Vlf+f7Gi5f9d/1/+X/5f/l/+n+UoWv4/9v1vDDWpSP8PAAAAVRD7/vtCTfT/AAAAUBqx758KNdH/AwAAQGnEvn861KQi/b/8v/x/lfL/rv8v/y//X37y/93J//cg/1+q/H+Wyf/XBy//z61UtPx/7Pt3hppUpP8HAACAKoh9/65QE/0/AAAAlEbs+3eHmuj/AQAAoDRi378n1KQi/b/8v/y//L/8v/x/5+3L/69O8v/dyf/3IP+/Mvn/Tm+cVtP4l1DI/L/r/3OLFS3/H/v++0NNKtL/AwAAQBXEvn9vqIn+HwAAAEoj9v37Qk1C/3+T/nkSAAAAsIJi378/1KQif/+X/y9J/v+3/qFl2/L/8v/dtj+Y/P9a+f9Q5f+LpaT5//bD4obJ//cg/3/T8vPZ0ECGeMvGL/8v/8+NKVr+P/b9B0JNKtL/AwAAQBXEvv9NoSb6fwAAACiN2Pf/bKiJ/h8AAABKI/b9PxdqUpH+X/6/JPn/NvL/8v/dtu/6//L/ZVbS/P/AlCr/PyT/v5ry//3k51f7+OX/5f9Z7Obn/+NX/eX/Y99/MNSkIv0/AAAAVEHs+38+1ET/DwAAAKUR+/43h5ro/wEAAKA0Yt9/KNSkIv3/DeT/G3fK/7eS/28dv/x/5/lRrfz/m7N2Rcz/1yeP/H+5FDj/P9rP9uX/Xf9f/n9Fxt/+o2Yg45f/l/9nsaJd/z/2/W8JNalI/w8AAABVEPv+B0JN9P8AAABQGrHvf2uoif4fAAAASiP2/W8LNalI/+/6//L/8v/y/67/33n78v+rU4Hz/32R/5f/l/9fveOX/5f/Z7Gi5f9j3/9gqElF+n8AAACogtj3vz3URP8PAAAApRH7/neEmuj/AQAAoDRi3//OUJOK9P/y//L/8v/y//L/nbcv/786yf93J//fg/y//L/8v/w/A1W0/H/s+98ValKR/h8AAACqIPb9D4Wa6P8BAACgNGLf/+5QE/0/AAAAlEbs+98TalKR/l/+X/5f/l/+X/6/8/bl/1cn+f/uVib/P5oeRv5f/l/+X/5f/r/aipb/j33/e0NNKtL/AwAAQBXEvv8XQk30/wAAAFAase9/X6iJ/h8AAABKI/b9vxhqUpH+X/5f/r9Y+f+Fi83ryf/L/2eDyv/XV5L/rwT5/+5c/7+HDvn/NfL/8v/y//L/3LCi5f9j3//+UJOK9P8AAABQBbHv/0Coif4fAAAASiP2/R8MNdH/AwAAQGnEvv/hUJOK9P/y/5XM/6enXLz8v+v/95P/H1kv/5+5/r/8/xLk/7uT/+/B9f/l/+X/5f8ZqKLl/2Pf/0ioSUX6fwAAAKiC2Pd/KNRE/w8AAAClEfv+Xwo10f8DAABAacS+/8OhJhXp/+X/K5n/L/D1/8uW/x9pmR9Vuv7/eNPrmeal/L/8/wqQ/+9O/r8H+X/5/yLn/8NsXrvE+vL/FFHR8v+x7/9IqElF+n8AAACogtj3/3Koif4fAAAASiP2/b8SaqL/BwAAgNKIff+vhppUpP8vYf7/Uib/L/9fmPx/6/yoUv7f9f8Xk/9fGfL/3cn/9yD/L/9f5Px/D/L/FFHR8v+x7/+1UJMlG7/n/6uPpwkAAAAUSOz7PxpqUpG//wMAAEAVxL7/cKiJ/h8AAABKI/b9R0JNKtL/lzD/v8zr/8crqvbK/7deeVX+v3X88v9Zh/kxJP8v/y//vwIGl/9/1e1ZJv8v/y//L/8v/y//z3IULf8f+/6joSYV6f8BAACgCmLf/+uhJvp/AAAAKI3Y9x8LNdH/AwAAQOGNpERwd7Hvnwk1qUj/fwvz/6PFzP+X7fr/tfDYNz///1P5f9f/D+T/O5P/Xxmu/9+d/H8P8v/y//L/8v8MVNHy/7Hvnw01qUj/DwAAACWWfh0c+/7joSb6fwAAACiN2PefCDXR/wMAAEBpxL7/Y6EmFen/Xf+/7Pl/1/8vZv5/pGV5+f+c/L/8/yDI/3c3wPz/WByf/L/8fyT/L/8v/0+7ouX/Y98/F2pSkf4fAAAAqiD2/R8PNdH/AwAAQGnEvv8ToSb6fwAAACiN2Pf/P3v30WTXVfVx+NhYaQQfgbFHDGFkPgJTZlQxxUSTgyRyBpNzMBmTMybYYHLOOZicozHBUCXK0lpLat3b57bUR33P2ft5JgurLPeV3fit/6v6se8Xt3Sy//X/+v/e+//LhuGE9//1/+u+vv5/mfT/47z/v4H+X/+v/9f/M6m59f+5+6+OWzrZ/wAAANCD3P33j1vsfwAAAGhG7v4HxC32PwAAADQjd/8D45ZO9r/+X//fe/8/bOX9/51/vv7/DP2//n8KK/39Fev/vN2i8F37/7vd/Zr76P/1//r/Ufp//b/+n/PNrf/P3f+guKWT/Q8AAAA9yN3/4LjF/gcAAIBm5O5/SNxi/wMAAEAzcvdfE7d0sv/1//p//f8i+v/L8q9xyfv/m/T/+v9l8/7/OP3/Bvp//b/+X//PpObW/+fuf2jc0sn+BwAAgB7k7n9Y3GL/AwAAQDNy9z88brH/AQAAoBm5+x8Rt3Sy//X/+n/9/yL6/9tuOH7Y+//n/Xr0//r/dfT/4/T/G+j/9f/6f/0/k5pb/5+7/5FxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/6//1/xP2/yeHYbhk/f+g/z/v16P/1/+vc91w9t8J+v9V+v8NNvT/w6D/H7Pnfn79L285n38X+n/9P6vm1v/n7n9s3HLPYTh8sb9IAAAAYFZy9z8ubunk9/8BAACgB7n7j8ct9j8AAAA0I3f/ibilk/2v/9f/6/+X8v6//l//r//fC+//j9t//3/lXa6+b7/9v/f/x3n/f+r+/47vDP0/yza3/j93/8m4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7n9C3GL/AwAAQDNy9z8xbulk/+v/W+v/77Tj553T/5+uXfT/+v+L6f8P1V9J/6//nz/9/zjv/29w+l9zx+oP9f/6f+//6//Zn7n1/7n7nxS3dLL/AQAAoAe5+58ct9j/AAAA0Izc/U+JW+x/AAAAaEbu/qfGLZ3sf/1/a/3/zp/n/X/9/7qv7/1//X/LLq6/v7L+Zy70/6Hr/r+B9/8v8rtm2/38fm378+v/9f+smlv/n7v/aXFLJ/sfAAAAepC7/+lxi/0PAAAAzcjd/4y4xf4HAACAZuTuf2bc0sn+1//r/5fR/+dX0P/r/y99/5/0/8vk/f9x+v8NWun/L9K2+/mlf379v/6fVXPr/3P3Pytu6WT/AwAAQA9y9z87brH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ//p//f8y+n/v/+v/vf+v/98b/f84/f8G+n/9v/5f/8+k5tb/5+6/Nm7pZP8DAABAD3L3Py9usf8BAACgGbn7nx+3XMj+PzT1pwIAAACmlLv/BXFLJ7//r//X/+v/9f/6//VfX/+/TPr/cfr/DTrv/4cT+n/9v/6fac2o/z/nZx0dXhi3dLL/AQAAoAe5+18Ut9j/AAAA0Izc/S+OW+x/AAAAaEbu/pfELZ3s//b6/yNL7f9P53xt9f/HhmHQ/w+d9v/HzvnnWd+X+n/9/wHQ/4/T/2/Qef+/7X5+6Z9f/6//Z9WM+v/Tf5y7/6VxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/m+v//f+/zCb/t/7/+d/f/TU/3v/f5X+/2Do/8fp/zfQ/+v/9f/6fyY1t/4/d/8r46bDhy76lwgAAADMTO7+V8Utnfz+PwAAAPQgd/+r4xb7HwAAABbq2pUfyd3/mrilk/2v/5+2/z98zo/p//X/539/6P/1//r/S29Tf7/pb5n+P+j/9f/6f/2//p8JzK3/z93/2rilk/0PAAAAPcjdf13cYv8DAABAM3L3vy5usf8BAACgGbn7Xx+3dLL/9f/e/9f/6/839f9nn0PV/+v/58/7/+MW0f/frP/X/y/z80/Q/x85+x/1/7ThAvr/U6dOHb/k/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+b4hb7HwAAAJqRu//NcUsn+1//32n/n9/qy+r/TwyD/t/7//p//f84/f+4RfT/3v/X/y/083v/X//Pqrm9/5+7/y1xSyf7HwAAAHqQu/+tcYv9DwAAAM3I3X993GL/AwAAQDNy978tbulk/+v/O+3/vf+v/9f/H3T/f/ug/z8Qi+j/j+3+9efe/5/U/+v/R3TX/9/rHjv+UP+v/2fV3Pr/3P1vj1s62f8AAADQg9z974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KmKzrZ//p//b/+X/+v/1//9Q/4/f/DwzDo/yewiP5/xNz7/2ne/z//v+Vn6f/1/0v+/Pp//T+r5tb/5+5/d9zSyf4HAACAHuTuf0/cdMT+BwAAgGbk7n9v3GL/AwAAQDNy978vbulk/+v/9f/6f/1/8/3/yUX0/97/n4j+f9w8+v/d6f/1/0v+/Pp//T97t63+P3f/++OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/19I/5+fU//fVv9/ZHb9/9Edf71O3v/X/09E/z9O/7+B/l//r/+/Vv/PlOb2/n/u/g/HLZ3sfwAAAOhB7v4b4tb/69b+BwAAgGbk7v9I3GL/AwAAQDNy9380bulk/+v/9f/e/9f/N//+v/6/K/r/cfr/DfT/+n/9v/f/mdTc+v/c/R+LWzrZ/wAAANCD3P0fj1vsfwAAAGhG7v4b4xb7HwAAAJqRu/+muKWT/a//1//r//X/+v8z/wz1/23Q/487mP7/mP5f/1/9/GXx3wL9v/5/08+nTXPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+2+OW+x/AAAAWKQr1vxY7v5PxS2d7H/9v/5f/6//1/+v//r6/2XaSv+f3xT6f+//h376/7vu+KOlvf9//v/90v/r/5ne3Pr/3P2fjls62f8AAADQg9z9n4lb7H8AAABoRu7+z8Yt9j8AAAA0I3f/5+KWTva//l//r//X/+v/1399/f8yef9/nP5/A/3/Vt/PX/rn1//r/1k1t/4/d//n45ZO9j8AAAD0IHf/F+IW+x8AAACakbv/i3GL/Q8AAADNOL37My7rcP/r//X/+n/9v/5//dfX/y+T/n+c/n8D/b/+X/+v/2dSc+v/v3T6Zx0dvhy3dLL/AQAAoAe5+78St9j/AAAA0Izc/V+NW+x/AAAAaEbu/q/FLZ3s/733/6cG/f/u9P87P//0/f+pU6eO6//1/zt/PWf7/1v0/xT9/zj9/wb6f/2//l//z6Tm1v/n7v963NLJ/gcAAIAe5O7/Rtxi/wMAAEAzcvd/M26x/wEAAKAZufu/Fbd0sv+9/z+D/v+o/t/7//r/wfv/q/3/5Wf+paz/vzD6/3H6/w1a7P+P7v2Xv+1+fr+2/fn1//p/Vs2t/8/d/+24pZP9DwAAAD3I3f+duMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/D67/v+PvXS/v/x8b1n9+/b/+X//v/f9LTf8/Tv+/QYv9/wXYdj+/9M+v/9f/s2pu/X/u/u/HLTuH36EL+1UCAAAAc5K7/wdxSye//w8AAAA9yN3/w7jF/gcAAIBm5O7/UdzSyf7X/8/g/f8G+3/v/6///tD/z7r/v1z/3wb9/zj9/wb6f/2//n+i/j+/m/X/vZtb/5+7/8dxSyf7HwAAAHqQu/8ncYv9DwAAAM3I3f/TuMX+BwAAgGbk7r8lbjln/69ru1uh/9f/6//1//r/9V9f/79M+v9xe+3/jwz76/+T/l//r//vtf/3/j9nzK3/z93/s7jF7/8DAADA4hza5cdz9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MW269fFsf6UDp//X/+n/9v/5//dfX/y+T/n/cLN//v/7G+o/6/yb6/6v0/230/8Og/2f/5tb/5+7/Vdzi9/8BAACgGbn7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex//b/+f5/9/+k0U/9/hv7/DP3/evr/g6H/HzfL/v8c+v8m+n/v/zfS/3v/nynMrf/P3f+7uKWT/Q8AAAA9yN3/+7jF/gcAAIBm5O7/Q9xi/wMAAEAzcvf/MW7pZP9vrf+Pv9X6/8X3/97/1//r//X/s6L/H6f/30D/r//X/+v/mdTc+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v6/xC32PwAAADQjd/9f45ZO9r/3//X/+n/9v/5//dfX/y+T/n+c/n+9+gel/9f/6//1/0xqbv1/7v6/xS2d7H8AAADoQe7+v8ct9j8AAAA0I3f/rXGL/Q8AAADNyN3/j7ilk/2v/9f/6//1//r/9V9f/79M+v9x2+z/733nzV/W+/9b7//zI+j/9f/6fyYxt/4/d/9tcUsn+x8AAAB6kLv/n3GL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7f0P8fqT9R/z9K/7/z8+v/139/NNz/7whc9f/r6f8Phv5/3HLe/4+fr//fwfv/8/78+n/9P6vm1v/n7v9P3NLJ/gcAAIAe5O6/PW6x/wEAAKAZufv/G7fY/wAAANCM3P3/i1s62f/e/19S/3+V/l//P9f+fwf9/3r6/4Oh/x+3nP7f+//r6P/n/fn1//p/Vs2t/8/d//8AAAD//ym6NlQ=")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800007, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0\x00')

412.484095ms ago: executing program 3 (id=1010):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socket(0x14, 0x2, 0x4)
close(0x4)

142.933817ms ago: executing program 3 (id=1011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)

56.215569ms ago: executing program 3 (id=1012):
symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3)

55.854289ms ago: executing program 1 (id=1013):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000007000)=@acquire={0x16c, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101, 0x6c}, @in6=@remote, {@in6=@private1, @in=@loopback, 0x4e24, 0xffff, 0x4e22, 0x5, 0xa, 0x20, 0xa0, 0x84}, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x20, 0x80, 0x87}, {0xb30, 0x3, 0x7, 0x1, 0x0, 0x1000, 0x3, 0x4}, {0xffffffffffffffe0, 0x7fff, 0xfaea, 0x4}, 0xf, 0x0, 0x1, 0x1, 0x0, 0x3}, 0x4, 0x40, 0x8001, 0x70bd2a}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d4, 0x2b}, 0x0, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x4, 0x40, 0x4, 0x1585}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004054)

702.655µs ago: executing program 3 (id=1014):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x52, 0x2}, @period={0x5d, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

314.562µs ago: executing program 2 (id=1015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = fsmount(r3, 0x0, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)

0s ago: executing program 1 (id=1016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r1, 0x0, &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = timerfd_create(0x8, 0x80800)
close(r3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[], 0x20)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000540)={@empty, @private=0xa010100, 0x1, 0x1, [@loopback]}, 0x14)
recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/184, 0xb8, 0x10002, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x40000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9782' (ED25519) to the list of known hosts.
syzkaller login: [   56.981980][ T5815] cgroup: Unknown subsys name 'net'
[   57.093828][ T5815] cgroup: Unknown subsys name 'cpuset'
[   57.099585][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.729489][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.417346][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.422155][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.426243][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.454329][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.458460][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.459475][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.465969][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.466228][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.472152][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.474211][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.478938][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.482161][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.482764][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.491262][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.518979][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.895730][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   65.949006][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.994537][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   66.084105][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.087176][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.090864][ T5847] bridge_slave_0: entered allmulticast mode
[   66.094881][ T5847] bridge_slave_0: entered promiscuous mode
[   66.155622][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.158909][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.162426][ T5847] bridge_slave_1: entered allmulticast mode
[   66.165460][ T5847] bridge_slave_1: entered promiscuous mode
[   66.198679][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.201955][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.205000][ T5852] bridge_slave_0: entered allmulticast mode
[   66.208731][ T5852] bridge_slave_0: entered promiscuous mode
[   66.249712][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.252968][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.255394][ T5852] bridge_slave_1: entered allmulticast mode
[   66.258469][ T5852] bridge_slave_1: entered promiscuous mode
[   66.277251][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.289698][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.292721][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.295435][ T5856] bridge_slave_0: entered allmulticast mode
[   66.299329][ T5856] bridge_slave_0: entered promiscuous mode
[   66.319993][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.350035][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.352975][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.356127][ T5856] bridge_slave_1: entered allmulticast mode
[   66.359904][ T5856] bridge_slave_1: entered promiscuous mode
[   66.364907][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.384352][ T5847] team0: Port device team_slave_0 added
[   66.402898][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.408613][ T5847] team0: Port device team_slave_1 added
[   66.428124][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.475460][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.477651][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.487773][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.496321][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.501151][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.503741][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.514280][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.522585][ T5852] team0: Port device team_slave_0 added
[   66.548069][ T5852] team0: Port device team_slave_1 added
[   66.596909][ T5856] team0: Port device team_slave_0 added
[   66.614500][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.617275][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.627437][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.635407][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.638129][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.648159][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.654719][ T5856] team0: Port device team_slave_1 added
[   66.714659][ T5847] hsr_slave_0: entered promiscuous mode
[   66.717848][ T5847] hsr_slave_1: entered promiscuous mode
[   66.724228][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.726881][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.737378][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.766053][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.768767][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.779743][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.810704][ T5852] hsr_slave_0: entered promiscuous mode
[   66.813672][ T5852] hsr_slave_1: entered promiscuous mode
[   66.816099][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.818053][ T5852] Cannot create hsr debugfs directory
[   66.944627][ T5856] hsr_slave_0: entered promiscuous mode
[   66.947737][ T5856] hsr_slave_1: entered promiscuous mode
[   66.951148][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   66.953447][ T5856] Cannot create hsr debugfs directory
[   67.207938][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.221047][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.228313][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.236017][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.292000][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.307865][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.316268][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.323412][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.411855][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.425276][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.434366][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.448219][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.502036][ T5850] Bluetooth: hci2: command tx timeout
[   67.515376][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.559829][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.580782][ T5237] Bluetooth: hci0: command tx timeout
[   67.583286][ T5850] Bluetooth: hci1: command tx timeout
[   67.593598][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.596521][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.604571][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.621893][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.624895][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.645998][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   67.674345][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.677282][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.692218][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.695122][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.724161][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.771944][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   67.785100][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.787865][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.796468][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.819925][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.822938][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.938379][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.987993][ T5852] veth0_vlan: entered promiscuous mode
[   67.997661][ T5852] veth1_vlan: entered promiscuous mode
[   68.037352][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.057783][ T5852] veth0_macvtap: entered promiscuous mode
[   68.067082][ T5852] veth1_macvtap: entered promiscuous mode
[   68.092248][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.109978][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.125854][ T5847] veth0_vlan: entered promiscuous mode
[   68.133817][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.139819][ T5847] veth1_vlan: entered promiscuous mode
[   68.158654][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.163417][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.166783][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.186851][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.200027][ T5856] veth0_vlan: entered promiscuous mode
[   68.244704][ T5856] veth1_vlan: entered promiscuous mode
[   68.255848][ T5847] veth0_macvtap: entered promiscuous mode
[   68.292649][ T5847] veth1_macvtap: entered promiscuous mode
[   68.320502][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.328062][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.337836][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.364636][ T5856] veth0_macvtap: entered promiscuous mode
[   68.372750][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.375809][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.380568][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.397709][ T5856] veth1_macvtap: entered promiscuous mode
[   68.405649][ T5709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.441824][ T5709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.445329][ T5709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.455408][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.462696][ T5709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.494268][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.503177][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.551691][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.565045][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.581711][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.596681][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.605226][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.608377][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.665916][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.672674][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.724889][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.727890][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.787226][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.798900][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.427174][ T5932] loop2: detected capacity change from 0 to 32768
[   69.436006][ T5932] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9 (5932)
[   69.460790][ T5932] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   69.470318][ T5932] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   69.530720][ T5940] loop1: detected capacity change from 0 to 32768
[   69.560716][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.565815][ T5940] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.584483][ T5850] Bluetooth: hci2: command tx timeout
[   69.603656][ T5940] XFS (loop1): Ending clean mount
[   69.613940][ T5932] BTRFS info (device loop2): enabling ssd optimizations
[   69.616064][ T5940] XFS (loop1): Quotacheck needed: Please wait.
[   69.616664][ T5932] BTRFS info (device loop2): enabling free space tree
[   69.640234][   T33] audit: type=1800 audit(1756259269.569:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=260 res=0 errno=0
[   69.673171][ T5850] Bluetooth: hci1: command tx timeout
[   69.675353][ T5850] Bluetooth: hci0: command tx timeout
[   69.681392][ T5940] XFS (loop1): Quotacheck: Done.
[   69.696078][ T5856] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[   69.724675][    T9] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64
[   69.729097][    T9] usb 1-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0
[   69.747816][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   69.764471][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad
[   69.768062][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.808069][ T5852] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.814419][    T9] usb 1-1: config 0 descriptor??
[   70.061900][    T9] usb 1-1: string descriptor 0 read error: -71
[   70.074147][    T9] usb 1-1: ucan: probing device on interface #0
[   70.086345][    T9] usb 1-1: ucan: invalid endpoint configuration
[   70.105071][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[   70.130667][    T9] usb 1-1: USB disconnect, device number 2
[   70.204101][ T5977] loop1: detected capacity change from 0 to 1024
[   70.241965][ T5977] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[   70.797314][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   70.797336][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   70.919006][ T5995] loop1: detected capacity change from 0 to 1024
[   70.963312][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.999525][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.198266][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.198355][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.367143][ T6008] loop1: detected capacity change from 0 to 512
[   71.380591][ T6008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.403146][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.403250][ T6008] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.454758][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.549356][ T6016] loop1: detected capacity change from 0 to 1024
[   71.557367][ T6016] =======================================================
[   71.557367][ T6016] WARNING: The mand mount option has been deprecated and
[   71.557367][ T6016]          and is ignored by this kernel. Remove the mand
[   71.557367][ T6016]          option from the mount to silence this warning.
[   71.557367][ T6016] =======================================================
[   71.557457][ T6016] EXT4-fs: inline encryption not supported
[   71.557519][ T6016] EXT4-fs: Ignoring removed bh option
[   71.583810][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.663015][ T5237] Bluetooth: hci2: command tx timeout
[   71.697198][ T6025] l2tp_ppp: sess 2/0: no socket in recv
[   71.697756][ T6016] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   71.712121][ T6016] EXT4-fs (loop1): Remounting filesystem read-only
[   71.740758][ T5237] Bluetooth: hci0: command tx timeout
[   71.742990][ T5237] Bluetooth: hci1: command tx timeout
[   71.795446][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.836439][ T6031] syzkaller1: entered promiscuous mode
[   71.838482][ T6031] syzkaller1: entered allmulticast mode
[   71.842966][ T6033] loop2: detected capacity change from 0 to 1024
[   71.882353][   T36] hfsplus: b-tree write err: -5, ino 4
[   71.913333][ T6037] netlink: 5 bytes leftover after parsing attributes in process `syz.2.42'.
[   71.932811][ T6035] geneve2: entered promiscuous mode
[   71.938357][ T6035] geneve2: entered allmulticast mode
[   72.031917][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'.
[   72.067746][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'.
[   72.323987][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[   72.343585][ T6057] IPVS: Error connecting to the multicast addr
[   72.462397][ T6061] netlink: 'syz.1.54': attribute type 3 has an invalid length.
[   72.557265][ T6047] loop0: detected capacity change from 0 to 32768
[   72.624690][ T6047] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   72.733522][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[   73.061509][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'.
[   73.248714][  T791] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.600630][  T791] usb 2-1: Using ep0 maxpacket: 16
[   73.609772][  T791] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.620726][  T791] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.624621][  T791] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.627296][  T791] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[   73.636649][ T6102] input: syz0 as /devices/virtual/input/input4
[   73.639304][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.649265][  T791] usb 2-1: config 0 descriptor??
[   73.751726][ T5850] Bluetooth: hci2: command tx timeout
[   73.804756][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'.
[   73.822293][ T5237] Bluetooth: hci0: command tx timeout
[   73.824671][ T5850] Bluetooth: hci1: command tx timeout
[   73.871776][ T5913] usb 2-1: USB disconnect, device number 2
[   73.895683][ T6108] sp0: Synchronizing with TNC
[   74.161498][ T6120] loop2: detected capacity change from 0 to 512
[   74.183134][ T6120] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.78: iget: bad i_size value: 38620345925642
[   74.196331][ T6120] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.78: couldn't read orphan inode 15 (err -117)
[   74.205371][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.244095][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.419702][ T6138] capability: warning: `syz.1.86' uses deprecated v2 capabilities in a way that may be insecure
[   74.645114][ T6151] loop0: detected capacity change from 0 to 2048
[   74.693043][ T5913] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   74.694321][ T6152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.751603][ T6151] NILFS (loop0): error -2 truncating bmap (ino=16)
[   74.777263][ T6152] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[   74.811073][ T6152] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[   74.827846][ T6152] Remounting filesystem read-only
[   74.904572][ T5847] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   75.157616][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.162952][ T5913] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   75.169349][ T5913] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[   75.176357][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   75.179931][ T5913] usb 3-1: SerialNumber: syz
[   75.187955][ T5913] usb 3-1: bad CDC descriptors
[   75.192965][ T5913] usb-storage 3-1:1.0: USB Mass Storage device detected
[   75.207960][ T5913] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[   75.394990][ T5913] usb 3-1: USB disconnect, device number 2
[   76.096627][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.100'.
[   76.155190][ T6176] loop0: detected capacity change from 0 to 1024
[   76.157570][ T6178] Invalid source name
[   76.513304][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[   76.516920][ T6198] netlink: 'syz.0.111': attribute type 5 has an invalid length.
[   76.526491][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'.
[   76.672051][ T6198] geneve2: entered promiscuous mode
[   76.677898][ T6198] geneve2: entered allmulticast mode
[   76.767565][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   76.927598][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   76.951139][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   76.978878][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   78.019766][ T6230] loop2: detected capacity change from 0 to 16
[   78.062606][ T6230] erofs (device loop2): mounted with root inode @ nid 36.
[   78.604898][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.760213][    T9] usb 3-1: Using ep0 maxpacket: 16
[   78.764891][    T9] usb 3-1: config 9 has an invalid interface number: 196 but max is 2
[   78.768202][    T9] usb 3-1: config 9 has an invalid interface number: 15 but max is 2
[   78.773878][    T9] usb 3-1: config 9 has an invalid interface number: 223 but max is 2
[   78.777182][    T9] usb 3-1: config 9 has no interface number 0
[   78.779497][    T9] usb 3-1: config 9 has no interface number 1
[   78.783748][    T9] usb 3-1: config 9 has no interface number 2
[   78.787284][    T9] usb 3-1: config 9 interface 196 has no altsetting 0
[   78.790046][    T9] usb 3-1: config 9 interface 223 has no altsetting 0
[   78.797654][    T9] usb 3-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=7b.09
[   78.802974][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.806176][    T9] usb 3-1: Product: syz
[   78.808054][    T9] usb 3-1: Manufacturer: syz
[   78.809975][    T9] usb 3-1: SerialNumber: syz
[   79.026703][ T6221] loop1: detected capacity change from 0 to 262144
[   79.044766][ T6221] F2FS-fs (loop1): invalid crc value
[   79.054664][ T6221] F2FS-fs (loop1): Mismatch valid blocks 2 vs. 6
[   79.064718][ T6221] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[   79.067270][    T9] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[   79.081688][    T9] usb 3-1: selecting invalid altsetting 0
[   79.088321][ T2396] pvrusb2: Invalid write control endpoint
[   79.094898][    T9] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[   79.195302][    T9] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[   79.199546][    T9] usb 3-1: selecting invalid altsetting 0
[   79.232044][    T9] usb 3-1: USB disconnect, device number 3
[   79.338417][ T2396] pvrusb2: Invalid write control endpoint
[   79.360693][ T2396] pvrusb2: Invalid write control endpoint
[   79.363058][ T2396] pvrusb2: Invalid write control endpoint
[   79.387579][ T2396] pvrusb2: Invalid write control endpoint
[   79.389879][ T2396] pvrusb2: Invalid write control endpoint
[   79.410624][ T2396] pvrusb2: Invalid write control endpoint
[   79.412966][ T2396] pvrusb2: Invalid write control endpoint
[   79.415365][ T2396] pvrusb2: Invalid write control endpoint
[   79.441744][ T2396] pvrusb2: Invalid write control endpoint
[   79.444120][ T2396] pvrusb2: Invalid write control endpoint
[   79.446400][ T2396] pvrusb2: Invalid write control endpoint
[   79.448818][ T2396] pvrusb2: Invalid write control endpoint
[   79.461833][ T2396] pvrusb2: Invalid write control endpoint
[   79.470997][ T2396] pvrusb2: Invalid write control endpoint
[   79.473476][ T2396] pvrusb2: Invalid write control endpoint
[   79.490530][ T2396] pvrusb2: Invalid write control endpoint
[   79.492957][ T2396] pvrusb2: Invalid write control endpoint
[   79.495310][ T2396] pvrusb2: Invalid write control endpoint
[   79.497892][ T2396] pvrusb2: Invalid write control endpoint
[   79.511952][ T2396] pvrusb2: Invalid write control endpoint
[   79.514089][ T2396] pvrusb2: Invalid write control endpoint
[   79.516032][ T2396] pvrusb2: Invalid write control endpoint
[   79.518239][ T2396] pvrusb2: Invalid write control endpoint
[   79.530477][ T2396] pvrusb2: Invalid write control endpoint
[   79.542545][ T2396] pvrusb2: Invalid write control endpoint
[   79.545480][ T2396] pvrusb2: Invalid write control endpoint
[   79.547971][ T2396] pvrusb2: Invalid write control endpoint
[   79.551030][ T2396] pvrusb2: Invalid write control endpoint
[   79.553473][ T2396] pvrusb2: Invalid write control endpoint
[   79.556081][ T2396] pvrusb2: Invalid write control endpoint
[   79.558431][ T2396] pvrusb2: Invalid write control endpoint
[   79.562614][ T2396] pvrusb2: Invalid write control endpoint
[   79.583488][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   79.794505][ T6264] input: syz0 as /devices/virtual/input/input5
[   79.803902][ T2396] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[   79.806802][ T2396] pvrusb2: Invalid write control endpoint
[   79.809160][ T2396] pvrusb2: Invalid write control endpoint
[   79.838885][ T2396] pvrusb2: Invalid write control endpoint
[   79.859722][ T2396] pvrusb2: Invalid write control endpoint
[   79.864644][ T2396] pvrusb2: Invalid write control endpoint
[   79.875151][ T2396] pvrusb2: Invalid write control endpoint
[   79.889702][ T2396] pvrusb2: Invalid write control endpoint
[   79.892694][ T6267] openvswitch: netlink: Flow key attr not present in new flow.
[   79.899314][ T2396] pvrusb2: Invalid write control endpoint
[   79.919095][ T2396] pvrusb2: Invalid write control endpoint
[   79.937043][ T2396] pvrusb2: Invalid write control endpoint
[   79.965055][ T2396] pvrusb2: Invalid write control endpoint
[   79.967256][ T2396] pvrusb2: Invalid write control endpoint
[   79.969548][ T2396] pvrusb2: Invalid write control endpoint
[   79.980197][ T2396] pvrusb2: Invalid write control endpoint
[   79.984397][ T2396] pvrusb2: Invalid write control endpoint
[   79.986771][ T2396] pvrusb2: Invalid write control endpoint
[   79.989168][ T2396] pvrusb2: Invalid write control endpoint
[   79.996037][ T2396] pvrusb2: Invalid write control endpoint
[   79.998122][ T2396] pvrusb2: Invalid write control endpoint
[   79.999959][ T2396] pvrusb2: Invalid write control endpoint
[   80.005025][ T2396] pvrusb2: Invalid write control endpoint
[   80.012669][ T2396] pvrusb2: Attached sub-driver cs53l32a
[   80.107660][ T2396] pvrusb2: Invalid write control endpoint
[   80.109930][ T2396] pvrusb2: Invalid write control endpoint
[   80.115716][ T2396] pvrusb2: Invalid write control endpoint
[   80.117696][ T2396] pvrusb2: Invalid write control endpoint
[   80.132704][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   80.141727][ T2396] pvrusb2: Device being rendered inoperable
[   80.144232][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[   80.175783][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[   80.195216][ T2396] pvrusb2: Invalid write control endpoint
[   80.258795][ T2396] pvrusb2: Invalid write control endpoint
[   80.262468][ T2396] pvrusb2: Invalid write control endpoint
[   80.264277][ T2396] pvrusb2: Invalid write control endpoint
[   80.266176][ T2396] pvrusb2: Invalid write control endpoint
[   80.267960][ T2396] pvrusb2: Invalid write control endpoint
[   80.269709][ T2396] pvrusb2: Invalid write control endpoint
[   80.271803][ T2396] pvrusb2: Invalid write control endpoint
[   80.273634][ T2396] pvrusb2: Invalid write control endpoint
[   80.276127][ T2396] pvrusb2: Invalid write control endpoint
[   80.279280][ T2396] pvrusb2: Invalid write control endpoint
[   80.289076][ T2396] pvrusb2: Invalid write control endpoint
[   80.291394][ T2396] pvrusb2: Invalid write control endpoint
[   80.293442][ T2396] pvrusb2: Invalid write control endpoint
[   80.295560][ T2396] pvrusb2: Invalid write control endpoint
[   80.297694][ T2396] pvrusb2: Invalid write control endpoint
[   80.300579][ T2396] pvrusb2: Invalid write control endpoint
[   80.303396][ T2396] pvrusb2: Invalid write control endpoint
[   80.305706][ T2396] pvrusb2: Invalid write control endpoint
[   80.307823][ T2396] pvrusb2: Invalid write control endpoint
[   80.309793][ T2396] pvrusb2: Invalid write control endpoint
[   80.320799][ T2396] pvrusb2: Invalid write control endpoint
[   80.324034][ T2396] pvrusb2: Invalid write control endpoint
[   80.333039][ T2396] pvrusb2: Invalid write control endpoint
[   80.336863][ T2396] pvrusb2: Invalid write control endpoint
[   80.344059][ T2396] pvrusb2: Invalid write control endpoint
[   80.350771][ T2396] pvrusb2: Invalid write control endpoint
[   80.355169][ T2396] pvrusb2: Invalid write control endpoint
[   80.371275][ T2396] pvrusb2: Invalid write control endpoint
[   80.377337][ T2396] pvrusb2: Invalid write control endpoint
[   80.385672][ T2396] pvrusb2: Invalid write control endpoint
[   80.388712][ T2396] pvrusb2: Invalid write control endpoint
[   80.392682][ T2396] pvrusb2: Invalid write control endpoint
[   80.402748][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   80.449295][ T2396] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_b)
[   80.459541][ T2396] pvrusb2: Invalid write control endpoint
[   80.463284][ T2396] pvrusb2: Invalid write control endpoint
[   80.466417][ T2396] pvrusb2: Invalid write control endpoint
[   80.468403][ T2396] pvrusb2: Invalid write control endpoint
[   80.477502][ T2396] pvrusb2: Invalid write control endpoint
[   80.481859][ T2396] pvrusb2: Invalid write control endpoint
[   80.488046][ T2396] pvrusb2: Invalid write control endpoint
[   80.500621][ T2396] pvrusb2: Invalid write control endpoint
[   80.506409][ T2396] pvrusb2: Invalid write control endpoint
[   80.519409][ T2396] pvrusb2: Invalid write control endpoint
[   80.533654][ T2396] pvrusb2: Invalid write control endpoint
[   80.547719][ T2396] pvrusb2: Invalid write control endpoint
[   80.557156][ T2396] pvrusb2: Invalid write control endpoint
[   80.564088][ T2396] pvrusb2: Invalid write control endpoint
[   80.570296][ T2396] pvrusb2: Invalid write control endpoint
[   80.576569][ T2396] pvrusb2: Invalid write control endpoint
[   80.585376][ T2396] pvrusb2: Invalid write control endpoint
[   80.594050][ T2396] pvrusb2: Invalid write control endpoint
[   80.600018][ T2396] pvrusb2: Invalid write control endpoint
[   80.610646][ T2396] pvrusb2: Invalid write control endpoint
[   80.617192][ T2396] pvrusb2: Invalid write control endpoint
[   80.630188][ T2396] pvrusb2: Attached sub-driver cs53l32a
[   80.746803][ T2396] pvrusb2: Invalid write control endpoint
[   80.749454][ T2396] pvrusb2: Invalid write control endpoint
[   80.757394][ T2396] pvrusb2: Invalid write control endpoint
[   80.759813][ T2396] pvrusb2: Invalid write control endpoint
[   80.774258][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   80.809778][ T2396] pvrusb2: Device being rendered inoperable
[   80.822444][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[   80.827686][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[   80.844255][ T2396] pvrusb2: Invalid write control endpoint
[   81.002652][ T2396] pvrusb2: Invalid write control endpoint
[   81.005689][ T2396] pvrusb2: Invalid write control endpoint
[   81.008234][ T2396] pvrusb2: Invalid write control endpoint
[   81.010917][ T2396] pvrusb2: Invalid write control endpoint
[   81.013467][ T2396] pvrusb2: Invalid write control endpoint
[   81.018899][ T2396] pvrusb2: Invalid write control endpoint
[   81.051634][ T2396] pvrusb2: Invalid write control endpoint
[   81.054301][ T2396] pvrusb2: Invalid write control endpoint
[   81.056951][ T2396] pvrusb2: Invalid write control endpoint
[   81.059430][ T2396] pvrusb2: Invalid write control endpoint
[   81.089832][ T2396] pvrusb2: Invalid write control endpoint
[   81.114518][ T2396] pvrusb2: Invalid write control endpoint
[   81.117045][ T2396] pvrusb2: Invalid write control endpoint
[   81.119745][ T2396] pvrusb2: Invalid write control endpoint
[   81.135658][ T2396] pvrusb2: Invalid write control endpoint
[   81.138077][ T2396] pvrusb2: Invalid write control endpoint
[   81.143079][ T2396] pvrusb2: Invalid write control endpoint
[   81.145599][ T2396] pvrusb2: Invalid write control endpoint
[   81.148224][ T2396] pvrusb2: Invalid write control endpoint
[   81.170042][ T2396] pvrusb2: Invalid write control endpoint
[   81.172666][ T2396] pvrusb2: Invalid write control endpoint
[   81.210309][ T2396] pvrusb2: Invalid write control endpoint
[   81.212934][ T2396] pvrusb2: Invalid write control endpoint
[   81.215840][ T2396] pvrusb2: Invalid write control endpoint
[   81.218332][ T2396] pvrusb2: Invalid write control endpoint
[   81.230470][ T2396] pvrusb2: Invalid write control endpoint
[   81.233440][ T2396] pvrusb2: Invalid write control endpoint
[   81.235854][ T2396] pvrusb2: Invalid write control endpoint
[   81.238576][ T2396] pvrusb2: Invalid write control endpoint
[   81.239079][ T6284] loop1: detected capacity change from 0 to 512
[   81.242749][ T2396] pvrusb2: Invalid write control endpoint
[   81.246552][ T2396] pvrusb2: Invalid write control endpoint
[   81.249198][ T2396] pvrusb2: Invalid write control endpoint
[   81.259229][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   81.393872][ T6284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.422225][ T6284] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.427639][ T2396] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_c)
[   81.460705][ T2396] pvrusb2: Invalid write control endpoint
[   81.463067][ T2396] pvrusb2: Invalid write control endpoint
[   81.465515][ T2396] pvrusb2: Invalid write control endpoint
[   81.467810][ T2396] pvrusb2: Invalid write control endpoint
[   81.500179][ T2396] pvrusb2: Invalid write control endpoint
[   81.502563][ T2396] pvrusb2: Invalid write control endpoint
[   81.504955][ T2396] pvrusb2: Invalid write control endpoint
[   81.537005][ T2396] pvrusb2: Invalid write control endpoint
[   81.539694][ T2396] pvrusb2: Invalid write control endpoint
[   81.570258][ T2396] pvrusb2: Invalid write control endpoint
[   81.572921][ T2396] pvrusb2: Invalid write control endpoint
[   81.575504][ T2396] pvrusb2: Invalid write control endpoint
[   81.577854][ T2396] pvrusb2: Invalid write control endpoint
[   81.612201][ T2396] pvrusb2: Invalid write control endpoint
[   81.614766][ T2396] pvrusb2: Invalid write control endpoint
[   81.617162][ T2396] pvrusb2: Invalid write control endpoint
[   81.640282][ T2396] pvrusb2: Invalid write control endpoint
[   81.643585][ T2396] pvrusb2: Invalid write control endpoint
[   81.658558][ T2396] pvrusb2: Invalid write control endpoint
[   81.678597][ T2396] pvrusb2: Invalid write control endpoint
[   81.680360][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.688415][ T2396] pvrusb2: Invalid write control endpoint
[   81.702953][ T2396] pvrusb2: Attached sub-driver cs53l32a
[   81.812691][ T2396] pvrusb2: Invalid write control endpoint
[   81.814994][ T2396] pvrusb2: Invalid write control endpoint
[   81.817244][ T2396] pvrusb2: Invalid write control endpoint
[   81.819530][ T2396] pvrusb2: Invalid write control endpoint
[   81.823995][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   81.840412][ T2396] pvrusb2: Device being rendered inoperable
[   81.842805][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[   81.849987][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[   81.935960][ T6296] loop2: detected capacity change from 0 to 128
[   81.961824][ T6296] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   81.968646][ T6296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.419706][ T6305] loop2: detected capacity change from 0 to 32768
[   82.426751][ T6305] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.135 (6305)
[   82.438305][ T6305] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   82.450784][ T6305] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   82.588272][ T6305] BTRFS info (device loop2): enabling ssd optimizations
[   82.592527][ T6305] BTRFS info (device loop2): enabling free space tree
[   82.603418][ T6304] loop0: detected capacity change from 0 to 32768
[   82.607228][ T6305] BTRFS info (device loop2): use lzo compression, level 0
[   82.637268][ T6304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.136 (6304)
[   82.678505][ T6304] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.698547][ T6304] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   82.943849][ T5856] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   83.339870][ T6304] BTRFS info (device loop0): enabling ssd optimizations
[   83.346060][ T6304] BTRFS info (device loop0): enabling free space tree
[   83.434477][ T5847] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   83.767104][ T6360] loop0: detected capacity change from 0 to 8192
[   83.950718][ T5914] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.092943][ T6366] loop2: detected capacity change from 0 to 32768
[   84.118855][ T6366] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   84.126695][ T5879] (kworker/u8:3,5879,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   84.134123][ T6366] (syz.2.147,6366,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   84.139472][ T6366] (syz.2.147,6366,1):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 33554432 from the device.
[   84.139843][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.157829][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   84.181803][ T5914] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00
[   84.188712][ T5856] ocfs2: Unmounting device (7,2) on (node local)
[   84.197254][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.204075][ T5914] usb 2-1: config 0 descriptor??
[   84.212180][ T5914] usbhid 2-1:0.0: can't add hid device: -22
[   84.216747][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[   84.286352][ T6380] loop0: detected capacity change from 0 to 2048
[   84.308247][ T6380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.420428][ T5914] usb 2-1: USB disconnect, device number 3
[   84.931558][ T6400] netlink: 180 bytes leftover after parsing attributes in process `syz.2.159'.
[   85.298702][   T33] audit: type=1326 audit(1756259285.229:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.1.163" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e2eb8ebe9 code=0x0
[   85.692993][ T6418] loop2: detected capacity change from 0 to 256
[   85.714034][ T6418] FAT-fs (loop2): Directory bread(block 64) failed
[   85.717054][ T6418] FAT-fs (loop2): Directory bread(block 65) failed
[   85.719872][ T6418] FAT-fs (loop2): Directory bread(block 66) failed
[   85.723791][ T6418] FAT-fs (loop2): Directory bread(block 67) failed
[   85.726526][ T6418] FAT-fs (loop2): Directory bread(block 68) failed
[   85.729237][ T6418] FAT-fs (loop2): Directory bread(block 69) failed
[   85.733484][ T6418] FAT-fs (loop2): Directory bread(block 70) failed
[   85.736031][ T6418] FAT-fs (loop2): Directory bread(block 71) failed
[   85.738683][ T6418] FAT-fs (loop2): Directory bread(block 72) failed
[   85.747053][ T6418] FAT-fs (loop2): Directory bread(block 73) failed
[   86.273478][ T6427] loop0: detected capacity change from 0 to 512
[   86.296416][ T6427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.374063][ T6427] EXT4-fs (loop0): 1 orphan inode deleted
[   86.385013][ T3440] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   86.390532][ T6427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.394065][ T3440] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u9:3: Failed to release dquot type 1
[   86.396518][ T6427] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.468531][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.546437][   T10] cfg80211: failed to load regulatory.db
[   86.567385][ T6425] loop1: detected capacity change from 0 to 32768
[   86.629547][   T33] audit: type=1800 audit(1756259286.549:4): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.171" name="file1" dev="loop1" ino=4 res=0 errno=0
[   86.948701][ T6436] loop0: detected capacity change from 0 to 32768
[   87.317022][ T6436] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   87.317047][ T6436]   allowing incompatible features above 0.0: (unknown version)
[   87.317057][ T6436]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   87.333700][ T6436] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   87.336428][ T6436] bcachefs (loop0): initializing new filesystem
[   87.346229][ T6436] bcachefs (loop0): going read-write
[   87.373080][ T6436] bcachefs (loop0): marking superblocks
[   87.385380][ T6436] bcachefs (loop0): initializing freespace
[   87.391249][ T6436] bcachefs (loop0): done initializing freespace
[   87.395365][ T6436] bcachefs (loop0): reading snapshots table
[   87.397726][ T6436] bcachefs (loop0): reading snapshots done
[   87.428077][ T6436] bcachefs (loop0): done starting filesystem
[   88.059824][  T791] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   88.074228][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'.
[   88.092028][ T6436] syz.0.175 (6436) used greatest stack depth: 15320 bytes left
[   88.198341][ T5847] bcachefs (loop0): shutting down
[   88.202362][ T5847] bcachefs (loop0): going read-only
[   88.204961][ T5847] bcachefs (loop0): finished waiting for writes to stop
[   88.213732][ T5847] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   88.248616][ T5847] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   88.257660][ T5847] bcachefs (loop0): clean shutdown complete, journal seq 4
[   88.262059][ T5847] bcachefs (loop0): marking filesystem clean
[   88.295859][ T5847] bcachefs (loop0): shutdown complete
[   88.323744][  T791] usb 2-1: unable to get BOS descriptor or descriptor too short
[   88.330189][  T791] usb 2-1: not running at top speed; connect to a high speed hub
[   88.341441][  T791] usb 2-1: config 6 has an invalid interface number: 7 but max is 0
[   88.344611][  T791] usb 2-1: config 6 has no interface number 0
[   88.347010][  T791] usb 2-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[   88.351528][  T791] usb 2-1: config 6 interface 7 has no altsetting 0
[   88.356637][  T791] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[   88.360271][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.363418][  T791] usb 2-1: Product: syz
[   88.365159][  T791] usb 2-1: Manufacturer: syz
[   88.367080][  T791] usb 2-1: SerialNumber: syz
[   88.384730][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.540349][ T5914] usb 3-1: Using ep0 maxpacket: 32
[   88.544603][ T5914] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[   88.547852][ T5914] usb 3-1: config 0 has no interface number 0
[   88.550444][ T5914] usb 3-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   88.554368][ T5914] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[   88.561391][ T5914] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[   88.564947][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.568042][ T5914] usb 3-1: Product: syz
[   88.569680][ T5914] usb 3-1: Manufacturer: syz
[   88.571722][ T5914] usb 3-1: SerialNumber: syz
[   88.576427][ T5914] usb 3-1: config 0 descriptor??
[   88.584997][ T6461] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   88.590895][ T5914] kvaser_usb 3-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[   88.595267][  T791] usb 2-1: Error in usbnet_get_endpoints (-22)
[   88.619260][  T791] usb 2-1: USB disconnect, device number 4
[   88.815944][ T5914] usb 3-1: USB disconnect, device number 4
[   89.124530][ T6463] loop1: detected capacity change from 0 to 128
[   89.130778][ T6463] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   89.299149][ T6471] loop0: detected capacity change from 0 to 1024
[   89.303293][ T6469] warning: `syz.1.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.342885][ T6471] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[   89.345531][ T6471] hfsplus: xattr searching failed
[   89.348200][ T6471] syz.0.182: attempt to access beyond end of device
[   89.348200][ T6471] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   89.439954][   T33] audit: type=1326 audit(1756259289.369:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.474918][ T6476] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   89.479040][   T33] audit: type=1326 audit(1756259289.399:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.497651][ T6478] loop0: detected capacity change from 0 to 512
[   89.507608][   T33] audit: type=1326 audit(1756259289.399:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.525587][ T6478] journal_path: Non-blockdev passed as './bus'
[   89.528401][ T6478] EXT4-fs: error: could not find journal device path
[   89.535231][   T33] audit: type=1326 audit(1756259289.399:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.545260][   T33] audit: type=1326 audit(1756259289.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.554645][   T33] audit: type=1326 audit(1756259289.429:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.564071][   T33] audit: type=1326 audit(1756259289.429:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.0.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0535f8ebe9 code=0x7ffc0000
[   89.603093][ T6476] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.653336][ T6483] bond1: (slave geneve2): making interface the new active one
[   89.666017][ T6483] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   89.769279][ T6492] loop0: detected capacity change from 0 to 2048
[   89.823915][ T6492] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=1)
[   89.924588][ T6498] loop2: detected capacity change from 0 to 8192
[   90.782405][ T6509] loop2: detected capacity change from 0 to 131072
[   90.785726][ T6509] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   90.788366][ T6509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   90.792932][ T6509] F2FS-fs (loop2): invalid crc value
[   90.832239][ T6509] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   90.839544][ T6509] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   90.843042][ T6509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   92.648234][ T6553] comedi comedi0: Minor 7 could not be opened
[   92.948645][ T6566] netlink: 96 bytes leftover after parsing attributes in process `syz.1.222'.
[   93.034844][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.223'.
[   93.185989][ T6577] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[   93.518621][ T6596] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   94.391015][   T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   94.542666][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[   94.597573][   T24] usb 3-1: config 6 has an invalid interface number: 152 but max is 0
[   94.601398][   T24] usb 3-1: config 6 has an invalid interface number: 94 but max is 0
[   94.604557][   T24] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[   94.608173][   T24] usb 3-1: config 6 has no interface number 0
[   94.620529][   T24] usb 3-1: config 6 has no interface number 1
[   94.623992][   T24] usb 3-1: config 6 interface 94 altsetting 85 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   94.629050][   T24] usb 3-1: config 6 interface 152 has no altsetting 0
[   94.640679][   T24] usb 3-1: config 6 interface 94 has no altsetting 0
[   94.646378][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=e0.67
[   94.651948][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.655073][   T24] usb 3-1: Product: syz
[   94.656709][   T24] usb 3-1: Manufacturer: syz
[   94.658503][   T24] usb 3-1: SerialNumber: syz
[   94.863418][ T6629] loop0: detected capacity change from 0 to 40427
[   94.874804][ T6629] F2FS-fs (loop0): Image doesn't support compression
[   94.882179][ T6629] F2FS-fs (loop0): build fault injection type: 0x2
[   94.899631][ T6629] F2FS-fs (loop0): invalid crc value
[   94.913975][   T24] usb 3-1: USB disconnect, device number 5
[   94.964131][ T6629] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.969323][ T6629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.278664][ T6662] loop0: detected capacity change from 0 to 512
[   95.307528][ T6662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.322108][ T6662] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.387441][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.679413][ T6685] loop2: detected capacity change from 0 to 4096
[   95.702944][ T6685] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   95.752485][ T6685] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   96.251737][ T6715] netlink: 'syz.2.283': attribute type 7 has an invalid length.
[   96.254879][ T6715] netlink: 'syz.2.283': attribute type 8 has an invalid length.
[   96.550197][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.701004][   T24] usb 3-1: Using ep0 maxpacket: 16
[   96.705168][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   96.708776][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   96.714258][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   96.717062][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.719432][   T24] usb 3-1: Product: syz
[   96.720989][   T24] usb 3-1: Manufacturer: syz
[   96.722451][   T24] usb 3-1: SerialNumber: syz
[   96.784365][   T24] usb 3-1: config 0 descriptor??
[   97.075248][   T24] appledisplay 3-1:0.0: Error while getting initial brightness: -110
[   97.085631][   T24] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110
[   97.219476][ T6725] process 'syz.0.289' launched '/dev/fd/3' with NULL argv: empty string added
[   97.599906][ T5913] usb 3-1: USB disconnect, device number 6
[   97.717713][ T6749] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.728812][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'.
[   97.733456][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.799377][ T6749] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.139284][ T5913] Process accounting resumed
[   98.580177][ T6766] loop0: detected capacity change from 0 to 32768
[   98.638685][   T33] kauditd_printk_skb: 21 callbacks suppressed
[   98.638705][   T33] audit: type=1800 audit(1756259298.569:33): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.305" name="file1" dev="loop0" ino=4 res=0 errno=0
[   98.651630][ T6766] ERROR: (device loop0): diWrite: ixpxd invalid
[   98.651630][ T6766] 
[   98.662579][ T6766] ERROR: (device loop0): remounting filesystem as read-only
[   98.665859][ T6766] ERROR: (device loop0): txCommit: 
[   98.665859][ T6766] 
[   98.679367][ T6769] loop2: detected capacity change from 0 to 32768
[   98.685621][ T6769] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[   98.891843][ T6772] 9pnet_fd: Insufficient options for proto=fd
[   99.082886][ T6780] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   99.089557][ T6782] loop0: detected capacity change from 0 to 8
[   99.281130][ T6788] netlink: 'syz.2.315': attribute type 20 has an invalid length.
[   99.480781][ T6792] SQUASHFS error: lzo decompression failed, data probably corrupt
[   99.484474][ T6792] SQUASHFS error: Failed to read block 0x0: -5
[   99.489558][ T6792] SQUASHFS error: lzo decompression failed, data probably corrupt
[   99.493088][ T6792] SQUASHFS error: Failed to read block 0x0: -5
[   99.544941][   T33] audit: type=1800 audit(1756259299.429:34): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.312" name="file2" dev="loop0" ino=3 res=0 errno=0
[  100.264459][   T10] IPVS: starting estimator thread 0...
[  100.360331][ T6827] IPVS: using max 46 ests per chain, 110400 per kthread
[  100.754895][ T6849] bridge1: entered promiscuous mode
[  100.844538][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[  100.848315][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[  101.575814][ T6829] loop2: detected capacity change from 0 to 262144
[  101.581803][ T6829] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.334 (6829)
[  101.604735][ T6829] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  101.608828][ T6829] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  101.761442][ T6829] BTRFS info (device loop2): enabling ssd optimizations
[  101.764478][ T6829] BTRFS info (device loop2): enabling free space tree
[  101.922826][ T5856] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  102.223235][ T6883] loop2: detected capacity change from 0 to 2048
[  102.248258][ T6883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.621142][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.794632][ T5914] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  102.798526][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.810201][ T5914] usb 3-1: Product: syz
[  102.812071][ T5914] usb 3-1: Manufacturer: syz
[  102.814332][ T5914] usb 3-1: SerialNumber: syz
[  102.818649][ T5914] usb 3-1: config 0 descriptor??
[  102.833221][ T5914] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  103.028269][ T5914] gspca_sunplus: reg_r err -71
[  103.038365][ T5914] usb 3-1: USB disconnect, device number 7
[  103.079791][ T6907] netlink: 'syz.1.363': attribute type 8 has an invalid length.
[  103.345930][ T6911] 9pnet_fd: Insufficient options for proto=fd
[  104.307977][ T6925] loop0: detected capacity change from 0 to 256
[  104.337788][ T6927] netlink: 'syz.1.370': attribute type 1 has an invalid length.
[  104.509558][ T6935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.374'.
[  104.540190][ T6935] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  104.955840][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'.
[  104.996264][ T6961] loop2: detected capacity change from 0 to 8
[  105.008029][ T6961] SQUASHFS error: Failed to read block 0x6e6: -5
[  105.014159][ T6961] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  105.017039][ T6961] SQUASHFS error: Unable to read directory block [631:26]
[  105.054676][ T6951] loop0: detected capacity change from 0 to 32768
[  105.073312][ T6951] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  105.073312][ T6951] 
[  105.120574][   T32] read_mapping_page failed!
[  105.123679][   T32] ERROR: (device loop0): txCommit: 
[  105.123679][   T32] 
[  105.126746][   T32] jfs_write_inode: jfs_commit_inode failed!
[  105.181729][ T6965] loop2: detected capacity change from 0 to 128
[  105.203459][ T6965] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  105.247562][ T6965] hpfs: hpfs_map_sector(): read error
[  105.306586][ T6967] loop0: detected capacity change from 0 to 4096
[  105.314062][ T6967] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  105.349932][ T6967] ntfs3(loop0): ino=19, mi_enum_attr
[  105.355415][ T6967] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  105.900294][ T5913] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  106.052863][ T5913] usb 3-1: unable to get BOS descriptor or descriptor too short
[  106.056581][ T5913] usb 3-1: not running at top speed; connect to a high speed hub
[  106.062943][ T5913] usb 3-1: config 4 has an invalid interface number: 32 but max is 0
[  106.065977][ T5913] usb 3-1: config 4 has no interface number 0
[  106.071352][ T5913] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  106.075050][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.078090][ T5913] usb 3-1: Product: syz
[  106.079734][ T5913] usb 3-1: Manufacturer: syz
[  106.081860][ T5913] usb 3-1: SerialNumber: syz
[  106.305866][ T5913] usb 3-1: Found UVC 0.02 device syz (17dc:0202)
[  106.308437][ T5913] usb 3-1: No valid video chain found.
[  106.312968][ T5913] usb 3-1: USB disconnect, device number 8
[  106.992274][ T6995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.400'.
[  108.005777][ T7019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.923543][ T7032] loop0: detected capacity change from 0 to 32768
[  108.931129][ T7032] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.418 (7032)
[  108.974903][ T7032] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  108.978182][ T7032] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  109.083009][ T7032] BTRFS info (device loop0): rebuilding free space tree
[  109.152093][ T7032] BTRFS info (device loop0): disabling free space tree
[  109.154847][ T7032] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.158763][ T7032] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.216137][ T7032] BTRFS info (device loop0): enabling ssd optimizations
[  109.218937][ T7032] BTRFS info (device loop0): turning on sync discard
[  109.222068][ T7032] BTRFS info (device loop0): force clearing of disk cache
[  109.224843][ T7032] BTRFS info (device loop0): enabling auto defrag
[  109.227317][ T7032] BTRFS info (device loop0): doing ref verification
[  109.229896][ T7032] BTRFS info (device loop0): max_inline set to 0
[  109.558638][ T5847] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.075165][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.434'.
[  110.133492][ T7082] fuse: Bad value for 'fd'
[  111.371409][ T7106] netlink: 596 bytes leftover after parsing attributes in process `syz.0.446'.
[  111.545570][ T7113] tap0: tun_chr_ioctl cmd 2148553947
[  112.389271][ T7122] loop2: detected capacity change from 0 to 512
[  112.415760][ T7122] EXT4-fs (loop2): Test dummy encryption mode enabled
[  112.437346][ T7122] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  112.460956][ T7122] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  112.481567][ T7122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.617473][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.995566][ T7134] loop2: detected capacity change from 0 to 2048
[  113.006758][ T7136] loop0: detected capacity change from 0 to 1024
[  113.016027][ T7136] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  113.020277][ T7136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  113.036577][ T7136] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  113.041424][ T7136] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.459: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  113.045642][ T7134] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.054029][ T7136] EXT4-fs (loop0): no journal found
[  113.056161][ T7136] EXT4-fs (loop0): can't get journal size
[  113.057621][ T7134] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  113.062502][ T7134] UDF-fs: Scanning with blocksize 512 failed
[  113.066786][ T7136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  113.077383][ T7134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.093427][ T7134] netlink: 'syz.2.458': attribute type 21 has an invalid length.
[  113.096566][ T7134] netlink: 'syz.2.458': attribute type 15 has an invalid length.
[  113.099493][ T7134] netlink: 156 bytes leftover after parsing attributes in process `syz.2.458'.
[  113.103541][ T7134] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.107254][ T7134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.110530][ T7134] IPv6: NLM_F_CREATE should be set when creating new route
[  113.113436][ T7134] IPv6: NLM_F_CREATE should be set when creating new route
[  113.116252][ T7134] IPv6: NLM_F_CREATE should be set when creating new route
[  113.127588][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.545955][ T7141] loop2: detected capacity change from 0 to 40427
[  113.566819][ T7141] F2FS-fs (loop2): invalid crc value
[  113.568991][ T7141] F2FS-fs (loop2): Wrong cp_pack_start_sum: 1
[  113.590589][ T7141] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  114.118288][ T7163] netlink: 52 bytes leftover after parsing attributes in process `syz.0.471'.
[  114.172228][ T7165] loop2: detected capacity change from 0 to 1024
[  114.202878][ T7165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.213283][   T33] audit: type=1800 audit(1756259532.150:35): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="file1" dev="loop2" ino=15 res=0 errno=0
[  114.247373][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.421863][ T7180] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  114.426966][ T7179] IPVS: stopping master sync thread 7180 ...
[  116.194817][ T7229] netem: change failed
[  116.729319][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'.
[  117.381699][ T7263] __vm_enough_memory: pid: 7263, comm: syz.1.510, bytes: 4503599627366400 not enough memory for the allocation
[  117.468098][ T7267] cifs: Bad value for 'port'
[  117.840135][ T7289] loop2: detected capacity change from 0 to 2048
[  117.932963][ T7289] hpfs: filesystem error: improperly stopped; already mounted read-only
[  117.935773][ T7289] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  117.938591][ T7289] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  118.098810][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.119204][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.127324][ T7297] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  118.135785][ T7299] loop0: detected capacity change from 0 to 2048
[  118.171135][ T7300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  118.262944][ T7300] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  118.267150][ T7300] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  118.273144][ T7300] Remounting filesystem read-only
[  118.276835][ T5847] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  118.451792][ T7306] loop0: detected capacity change from 0 to 4096
[  118.521580][ T7306] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  118.524262][ T7306] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  118.526873][ T7306] ntfs3(loop0): mft corrupted
[  118.528758][ T7306] ntfs3(loop0): Failed to load root (-22).
[  118.541183][ T7306] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  118.552090][ T7302] loop2: detected capacity change from 0 to 32768
[  118.725866][ T7302] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  118.725996][ T7302]   allowing incompatible features above 0.0: (unknown version)
[  118.726007][ T7302]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  118.756070][ T7302] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  118.766583][ T7302] bcachefs (loop2): initializing new filesystem
[  118.797480][ T7302] bcachefs (loop2): going read-write
[  118.809318][ T7302] bcachefs (loop2): marking superblocks
[  118.849046][ T7302] bcachefs (loop2): initializing freespace
[  118.877675][ T7302] bcachefs (loop2): done initializing freespace
[  118.904385][ T7302] bcachefs (loop2): reading snapshots table
[  118.906870][ T7302] bcachefs (loop2): reading snapshots done
[  118.951664][ T7302] bcachefs (loop2): done starting filesystem
[  119.031007][ T5856] bcachefs (loop2): shutting down
[  119.033854][ T5856] bcachefs (loop2): going read-only
[  119.036618][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  119.046767][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  119.085387][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  119.094416][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 4
[  119.104393][ T5856] bcachefs (loop2): marking filesystem clean
[  119.135432][ T5856] bcachefs (loop2): shutdown complete
[  119.736407][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'.
[  120.767962][ T7380] loop0: detected capacity change from 0 to 512
[  120.782205][ T7380] EXT4-fs: journaled quota format not specified
[  121.127253][ T7393] loop2: detected capacity change from 0 to 4096
[  121.139849][ T7393] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  121.191661][ T7393] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  121.197984][ T7393] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  121.368782][   T33] audit: type=1326 audit(1756259539.299:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.0.568" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0535f8ebe9 code=0x0
[  121.426935][ T7407] netlink: 128 bytes leftover after parsing attributes in process `syz.2.570'.
[  121.430961][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  121.477148][ T7410] loop2: detected capacity change from 0 to 256
[  121.480536][ T7410] exfat: Deprecated parameter 'utf8'
[  121.483804][ T7410] exfat: Deprecated parameter 'utf8'
[  121.485959][ T7410] exfat: Deprecated parameter 'utf8'
[  121.506306][ T7410] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  121.969021][ T7441] loop2: detected capacity change from 0 to 512
[  122.002695][ T7441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.007397][ T7441] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.039274][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.207218][ T7456] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  122.231271][ T7456] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  122.540901][ T7464] loop2: detected capacity change from 0 to 1024
[  122.548832][ T7464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.957107][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.271672][ T7478] loop2: detected capacity change from 0 to 32768
[  124.781378][ T7509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  125.018970][ T7519] netlink: 104 bytes leftover after parsing attributes in process `syz.1.617'.
[  125.034195][ T7519] netlink: 104 bytes leftover after parsing attributes in process `syz.1.617'.
[  125.269406][ T7529] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  125.279638][ T7529] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  125.335545][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.338511][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.350081][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.366983][ T7535] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  125.395446][ T7535] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  125.435774][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.440076][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.443148][ T7535] virt_wifi0 speed is unknown, defaulting to 1000
[  125.622192][ T7555] syz.1.635 uses obsolete (PF_INET,SOCK_PACKET)
[  125.848593][ T5913] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  125.888068][ T5913] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  125.916412][ T7577] tmpfs: Bad value for 'mpol'
[  126.029223][ T7579] loop0: detected capacity change from 0 to 2048
[  126.036248][ T7579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.399339][ T7592] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  126.863446][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  127.031395][   T33] audit: type=1326 audit(1756259544.959:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.1.657" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2eb8ebe9 code=0x0
[  128.136849][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'.
[  128.197576][ T7632] syzkaller1: entered promiscuous mode
[  128.199882][ T7632] syzkaller1: entered allmulticast mode
[  128.563787][ T7640] loop2: detected capacity change from 0 to 32768
[  128.587801][ T7640] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.608646][ T7640] XFS (loop2): Ending clean mount
[  128.618316][ T7640] XFS (loop2): Quotacheck needed: Please wait.
[  128.651457][ T7640] XFS (loop2): Quotacheck: Done.
[  128.707103][ T5856] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.156523][ T7668] openvswitch: netlink: IPv4 tun info is not correct
[  129.273368][ T5914] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  129.428195][ T5914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  129.433620][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.436887][ T5914] usb 3-1: Product: syz
[  129.438551][ T5914] usb 3-1: Manufacturer: syz
[  129.440433][ T5914] usb 3-1: SerialNumber: syz
[  129.450020][ T5914] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  129.480764][   T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  129.696961][    C0] usb 3-1: ath: unknown panic pattern!
[  129.742517][ T7672] syz_tun: entered allmulticast mode
[  129.764587][ T7671] syz_tun: left allmulticast mode
[  129.813047][ T7676] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  129.907402][ T5914] usb 3-1: USB disconnect, device number 9
[  129.912165][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'.
[  129.924564][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'.
[  130.012172][ T7686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.691'.
[  130.092408][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.099921][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.461145][ T7706] xfrm0: entered promiscuous mode
[  130.464773][ T7706] xfrm0: entered allmulticast mode
[  130.475592][ T7705] loop0: detected capacity change from 0 to 4096
[  130.491427][ T7705] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  130.529618][ T7705] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  130.538210][ T7705] ntfs3(loop0): mft corrupted
[  130.539826][ T7705] ntfs3(loop0): Failed to load $Extend (-22).
[  130.541704][ T7705] ntfs3(loop0): Failed to initialize $Extend.
[  130.561081][ T7705] ntfs3(loop0): ino=1e, mi_enum_attr
[  130.563026][   T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  130.563633][   T10] ath9k_htc: Failed to initialize the device
[  130.565737][ T7705] ntfs3(loop0): ino=1e, mi_enum_attr
[  130.571112][ T7705] ntfs3(loop0): ino=1e, "file1" mi_enum_attr
[  130.575580][ T7705] ntfs3(loop0): ino=1e, "file1" mi_enum_attr
[  130.578381][ T5914] usb 3-1: ath9k_htc: USB layer deinitialized
[  130.579811][ T7705] ntfs3(loop0): ino=1e, "file1" mi_enum_attr
[  130.801301][ T7723] loop2: detected capacity change from 0 to 8192
[  130.812157][ T7729] loop0: detected capacity change from 0 to 128
[  132.035515][ T7759] loop2: detected capacity change from 0 to 2048
[  132.063725][ T5973] Dev loop2: RDB in block 1 has bad checksum
[  132.068711][ T7759] Dev loop2: RDB in block 1 has bad checksum
[  132.192683][ T7764] loop0: detected capacity change from 0 to 1024
[  132.199081][ T7764] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  132.207733][ T7764] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53445!=20869)
[  132.210944][ T7764] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  132.215542][ T7764] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.727: iget: special inode unallocated
[  132.220101][ T7764] EXT4-fs (loop0): no journal found
[  132.222017][ T7764] EXT4-fs (loop0): can't get journal size
[  132.244028][ T7764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  132.269751][ T5847] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block
[  132.274807][ T5847] EXT4-fs error (device loop0): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block
[  132.568871][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  132.628397][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.631003][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.635081][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  132.635133][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.719244][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.722647][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  132.795533][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.799107][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  132.905249][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.913048][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  132.970707][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.973422][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'.
[  133.018822][   T13] bridge_slave_1: left allmulticast mode
[  133.022506][   T13] bridge_slave_1: left promiscuous mode
[  133.028038][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.036788][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.047610][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.053516][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.056709][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.094097][   T13] bridge_slave_0: left allmulticast mode
[  133.096437][   T13] bridge_slave_0: left promiscuous mode
[  133.098840][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.338211][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'.
[  133.557745][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.563695][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.568445][   T13] bond0 (unregistering): Released all slaves
[  133.617436][ T7776] virt_wifi0 speed is unknown, defaulting to 1000
[  133.792016][ T7813] loop2: detected capacity change from 0 to 8
[  133.799511][ T7813] SQUASHFS error: zlib decompression failed, data probably corrupt
[  133.802847][ T7813] SQUASHFS error: Failed to read block 0x9b: -5
[  133.806551][ T7813] SQUASHFS error: Unable to read metadata cache entry [99]
[  133.809584][ T7813] SQUASHFS error: Unable to read inode 0x127
[  134.082728][   T13] hsr_slave_0: left promiscuous mode
[  134.091581][   T13] hsr_slave_1: left promiscuous mode
[  134.100021][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.102513][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.107486][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.115162][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.138958][   T13] veth1_macvtap: left promiscuous mode
[  134.141170][   T13] veth0_macvtap: left promiscuous mode
[  134.145980][   T13] veth1_vlan: left promiscuous mode
[  134.148392][   T13] veth0_vlan: left promiscuous mode
[  134.259128][ T7837] Zero length message leads to an empty skb
[  134.379214][ T7833] loop2: detected capacity change from 0 to 32768
[  134.385602][ T7833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.753 (7833)
[  134.399020][ T7833] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.413341][ T7833] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  134.490068][ T7833] BTRFS info (device loop2): rebuilding free space tree
[  134.495728][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  134.509613][ T7833] BTRFS info (device loop2): disabling free space tree
[  134.511893][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.517301][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.532693][ T7833] BTRFS info (device loop2): enabling ssd optimizations
[  134.536320][ T7833] BTRFS info (device loop2): force clearing of disk cache
[  134.538572][ T7833] BTRFS info (device loop2): enabling auto defrag
[  134.540557][ T7833] BTRFS info (device loop2): doing ref verification
[  134.556991][ T7833] BTRFS info (device loop2): max_inline set to 57
[  134.579898][   T33] audit: type=1800 audit(1756259552.508:38): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.753" name="file1" dev="loop2" ino=260 res=0 errno=0
[  134.765680][   T13] team0 (unregistering): Port device team_slave_1 removed
[  134.791326][ T5856] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.815631][   T13] team0 (unregistering): Port device team_slave_0 removed
[  135.023739][ T7864] loop2: detected capacity change from 0 to 4096
[  135.032065][ T7864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.064498][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.105678][ T5850] Bluetooth: hci0: command tx timeout
[  135.453962][ T7776] chnl_net:caif_netlink_parms(): no params data found
[  135.716934][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.732778][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.753230][ T7776] bridge_slave_0: entered allmulticast mode
[  135.765140][ T7776] bridge_slave_0: entered promiscuous mode
[  135.772524][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.775725][ T7890] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  135.778998][ T7890] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.768'.
[  135.782979][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.786947][ T7776] bridge_slave_1: entered allmulticast mode
[  135.800019][ T7776] bridge_slave_1: entered promiscuous mode
[  135.887513][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.911366][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.964427][ T7776] team0: Port device team_slave_0 added
[  135.979805][ T7776] team0: Port device team_slave_1 added
[  136.022537][ T7897] netlink: ct family unspecified
[  136.024485][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.029376][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.031548][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.031656][   T13] IPVS: stop unused estimator thread 0...
[  136.043422][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.048593][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.051318][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.060674][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.121483][ T7776] hsr_slave_0: entered promiscuous mode
[  136.139928][ T7776] hsr_slave_1: entered promiscuous mode
[  136.578954][ T7776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  136.586772][ T7776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  136.592834][ T7776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  136.599956][ T7776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  136.678607][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.697617][ T7776] 8021q: adding VLAN 0 to HW filter on device team0
[  136.710652][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.713031][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.737692][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.740444][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.780298][ T7776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  136.784314][ T7776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.835885][ T7935] loop2: detected capacity change from 0 to 4096
[  136.997330][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.058746][ T7776] veth0_vlan: entered promiscuous mode
[  137.071573][ T7776] veth1_vlan: entered promiscuous mode
[  137.096070][ T7776] veth0_macvtap: entered promiscuous mode
[  137.101564][ T7776] veth1_macvtap: entered promiscuous mode
[  137.112246][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.116991][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.133128][ T6207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.157348][ T6207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.160073][ T6207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.181720][ T6207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.184864][ T5850] Bluetooth: hci0: command tx timeout
[  137.254255][ T7952] Unsupported ieee802154 address type: 0
[  137.284688][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.287850][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.322206][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.325239][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.385704][ T7956] trusted_key: syz.2.785 sent an empty control message without MSG_MORE.
[  137.653308][ T7962] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.615393][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'.
[  138.622175][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'.
[  138.836074][ T7969] IPVS: Scheduler module ip_vs_sip not found
[  138.839384][ T7972] IPVS: length: 146 != 8
[  139.266326][ T5850] Bluetooth: hci0: command tx timeout
[  139.303474][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'.
[  139.306495][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[  139.391587][ T7985] mmap: syz.1.791 (7985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  139.552927][ T7987] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  139.584033][  T791] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  139.617010][ T7989] loop3: detected capacity change from 0 to 1024
[  139.640361][ T7989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.654394][ T7989] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.3.795: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  139.664348][ T7989] EXT4-fs (loop3): Remounting filesystem read-only
[  139.685577][ T7776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.749018][  T791] usb 3-1: config 1 has an invalid interface number: 2 but max is 1
[  139.764898][  T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.768987][  T791] usb 3-1: config 1 has no interface number 0
[  139.780267][  T791] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.783140][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.787337][  T791] usb 3-1: Product: syz
[  139.788797][  T791] usb 3-1: Manufacturer: syz
[  139.790277][  T791] usb 3-1: SerialNumber: syz
[  139.801395][  T791] usb 3-1: selecting invalid altsetting 1
[  140.105792][  T791] cdc_ncm 3-1:1.2: bind() failure
[  140.149351][  T791] cdc_ncm 3-1:1.1: skipping garbage
[  140.153214][  T791] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  140.165509][  T791] cdc_ncm 3-1:1.1: bind() failure
[  140.192716][  T791] usb 3-1: USB disconnect, device number 10
[  141.272122][ T8017] overlayfs: failed to clone upperpath
[  141.330837][ T8023] loop3: detected capacity change from 0 to 128
[  141.336340][ T8023] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  141.345440][ T8023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.347314][ T5850] Bluetooth: hci0: command tx timeout
[  141.502838][ T8036] netlink: 'syz.2.812': attribute type 2 has an invalid length.
[  141.526898][ T8036] : entered promiscuous mode
[  141.671456][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[  141.724692][   T33] audit: type=1326 audit(1756259559.657:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.818" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fcb8ebe9 code=0x0
[  141.945295][ T8066] loop2: detected capacity change from 0 to 8
[  141.960317][ T8066] squashfs image failed sanity check
[  142.052899][ T8068] loop2: detected capacity change from 0 to 8
[  142.072293][ T8068] squashfs image failed sanity check
[  142.142733][ T8062] loop3: detected capacity change from 0 to 32768
[  142.151554][ T8062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.826 (8062)
[  142.176321][ T8062] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.186819][ T8062] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  142.279674][ T8062] BTRFS info (device loop3): enabling ssd optimizations
[  142.286655][ T8062] BTRFS info (device loop3): enabling free space tree
[  142.351175][ T7776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.607190][ T8101] sctp: [Deprecated]: syz.2.836 (pid 8101) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.607190][ T8101] Use struct sctp_sack_info instead
[  142.962290][ T8113] capability: warning: `syz.2.842' uses 32-bit capabilities (legacy support in use)
[  143.028303][ T8115] netlink: 'syz.3.843': attribute type 2 has an invalid length.
[  143.473174][ T8142] sp0: Synchronizing with TNC
[  143.501765][ T8145] cgroup: Unknown subsys name '@﬽4*oңhoU'
[  143.560584][ T8148] input: syz1 as /devices/virtual/input/input6
[  143.917230][ T8156] loop3: detected capacity change from 0 to 32768
[  145.359871][ T8183] loop2: detected capacity change from 0 to 1024
[  145.389988][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.394316][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.397710][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.401463][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.404674][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.407627][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.410132][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.412622][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.416598][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.419529][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.422559][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.425045][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  145.429038][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.432110][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.435689][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.438337][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.440942][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.444013][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.448663][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.461973][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.465180][ T8183] hfsplus: request for non-existent node 16777216 in B*Tree
[  145.476229][   T33] audit: type=1800 audit(1756259563.406:40): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.874" name="file1" dev="loop2" ino=20 res=0 errno=0
[  145.594892][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  145.601126][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.608938][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.704709][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  145.708347][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.724997][ T5886] usb 4-1: config 0 descriptor??
[  145.738324][ T5886] hub 4-1:0.0: USB hub found
[  145.945629][ T5886] hub 4-1:0.0: 1 port detected
[  146.152433][ T8215] openvswitch: netlink: IP tunnel dst address not specified
[  146.295064][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  146.446974][ T5913] usb 3-1: config 0 has an invalid interface number: 170 but max is 0
[  146.450564][ T5913] usb 3-1: config 0 has no interface number 0
[  146.453647][ T5913] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  146.460176][ T5913] usb 3-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  146.463835][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.469742][ T5913] usb 3-1: config 0 descriptor??
[  146.477812][ T5913] HFC-S_USB 3-1:0.170: probe with driver HFC-S_USB failed with error -5
[  146.610201][ T5886] hub 4-1:0.0: activate --> -90
[  146.678793][   T10] usb 3-1: USB disconnect, device number 11
[  147.120142][ T8261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.911'.
[  147.126889][   T10] usb 4-1: USB disconnect, device number 2
[  147.321790][ T8267] loop2: detected capacity change from 0 to 8192
[  147.637798][ T8281] loop3: detected capacity change from 0 to 512
[  147.690869][ T8281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.917: bg 0: block 16: invalid block bitmap
[  147.719480][ T8281] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  147.722710][ T8281] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.917: attempt to clear invalid blocks 1669132790 len 1
[  147.728483][ T8281] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.917: invalid indirect mapped block 4294967295 (level 1)
[  147.733777][ T8281] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.917: invalid indirect mapped block 4294967295 (level 2)
[  147.740310][ T8281] EXT4-fs (loop3): 1 truncate cleaned up
[  147.743562][ T8281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.807402][ T8289] tls_set_device_offload_rx: netdev not found
[  147.838715][ T7776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.922156][ T8294] loop2: detected capacity change from 0 to 4096
[  147.958896][ T8294] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  147.978878][ T8294] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  147.982761][ T8294] NILFS (loop2): mounting unchecked fs
[  148.003512][ T8294] NILFS (loop2): invalid segment: Checksum error in segment payload
[  148.016249][ T8294] NILFS (loop2): unable to fall back to spare super block
[  148.018892][ T8294] NILFS (loop2): error -22 while searching super root
[  148.462214][ T8307] debugfs: 'ttyS3' already exists in 'caif_serial'
[  149.492951][ T8330] loop2: detected capacity change from 0 to 32768
[  149.515574][ T8330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.932 (8330)
[  149.565534][ T8330] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.569557][ T8330] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  149.593853][ T8330] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  149.648531][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  149.732120][ T8330] BTRFS info (device loop2): rebuilding free space tree
[  149.761269][ T8330] BTRFS info (device loop2): disabling free space tree
[  149.770783][ T8330] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.774584][ T8330] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.796962][ T8330] BTRFS info (device loop2): setting nodatasum
[  149.799466][ T8330] BTRFS info (device loop2): setting nodatacow
[  149.801782][ T8330] BTRFS info (device loop2): enabling ssd optimizations
[  149.815855][ T8330] BTRFS info (device loop2): turning off barriers
[  149.825814][ T8330] BTRFS info (device loop2): turning on flush-on-commit
[  149.828650][ T8330] BTRFS info (device loop2): enabling disk space caching
[  149.831766][ T8330] BTRFS info (device loop2): force clearing of disk cache
[  149.838982][ T8330] BTRFS info (device loop2): doing ref verification
[  149.841606][ T8330] BTRFS info (device loop2): max_inline set to 4096
[  150.015376][ T5856] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.177402][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  150.203012][ T8374] netlink: 'syz.1.938': attribute type 1 has an invalid length.
[  150.215956][ T8374] netlink: 'syz.1.938': attribute type 2 has an invalid length.
[  150.304913][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'.
[  151.820114][ T8410] loop3: detected capacity change from 0 to 16
[  151.831827][ T8410] erofs (device loop3): mounted with root inode @ nid 36.
[  151.882990][ T7776] erofs (device loop3): invalid de[0].nameoff 0 @ nid 46
[  151.894629][ T7776] syz-executor: attempt to access beyond end of device
[  151.894629][ T7776] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  151.909321][ T7776] erofs (device loop3): invalid de[0].nameoff 0 @ nid 89
[  151.913346][ T7776] erofs (device loop3): invalid de[0].nameoff 0 @ nid 89
[  151.982370][ T8412] Bluetooth: MGMT ver 1.23
[  151.984378][ T8412] Bluetooth: hci0: load_link_keys: too big key_count value 32768
[  152.712796][ T8430] bridge0: entered allmulticast mode
[  152.720704][ T8430] pim6reg: entered allmulticast mode
[  152.725286][ T8430] pim6reg: left allmulticast mode
[  152.729534][ T8430] bridge0: left allmulticast mode
[  153.999817][ T8426] loop3: detected capacity change from 0 to 262144
[  154.006734][ T8426] F2FS-fs (loop3): invalid crc value
[  154.093091][ T8426] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.097717][ T8426] F2FS-fs (loop3): Start checkpoint disabled!
[  154.115766][ T8426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.081726][ T8527] loop2: detected capacity change from 0 to 4096
[  156.347290][ T8537] loop2: detected capacity change from 0 to 8
[  156.866199][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.992593][ T8563] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[  156.999729][ T8563] bond0: (slave bond_slave_0): Releasing backup interface
[  157.019922][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.024056][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  157.041509][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.045180][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  157.056046][   T10] usb 3-1: SerialNumber: syz
[  157.276130][   T10] usb 3-1: bad CDC descriptors
[  157.287983][   T10] usb 3-1: USB disconnect, device number 12
[  157.812319][   T33] audit: type=1326 audit(1756259575.735:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.2.998" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fcb8ebe9 code=0x0
[  157.956363][ T8587] vlan2: entered promiscuous mode
[  157.961343][ T8587] macvtap0: entered promiscuous mode
[  158.795024][ T8604] loop2: detected capacity change from 0 to 32768
[  158.941758][ T5856] non-latin1 character 0x2e66 found in JFS file name
[  158.944050][ T5856] mount with iocharset=utf8 to access
[  159.009202][  T116] ------------[ cut here ]------------
[  159.011368][  T116] WARNING: CPU: 1 PID: 116 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  159.014544][  T116] Modules linked in:
[  159.016850][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  159.021358][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.025635][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  159.027697][  T116] Code: 5a ff ff ff e8 fd 25 81 fe eb 05 e8 f6 25 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 dd 25 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  159.035295][  T116] RSP: 0018:ffffc9000243f508 EFLAGS: 00010293
[  159.038041][  T116] RAX: ffffffff833e85b3 RBX: ffff888107c2c010 RCX: ffff888105db8000
[  159.041229][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  159.044376][  T116] RBP: 0000000000020056 R08: ffffea00041f0b07 R09: 1ffffd400083e160
[  159.047778][  T116] R10: dffffc0000000000 R11: fffff9400083e161 R12: ffff888107c2c018
[  159.050989][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  159.054186][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  159.058176][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.059857][ T8621] loop3: detected capacity change from 0 to 2048
[  159.060705][  T116] CR2: 00007f1e2f90dfb8 CR3: 0000000025d8a000 CR4: 00000000000006f0
[  159.066078][  T116] Call Trace:
[  159.068043][  T116]  <TASK>
[  159.069215][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  159.071335][  T116]  dbJoin+0x238/0x300
[  159.072900][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  159.075025][  T116]  dbFreeBits+0x4e1/0xdb0
[  159.077080][  T116]  dbFree+0x336/0x650
[  159.078722][  T116]  txFreeMap+0x9e6/0xde0
[  159.080432][ T8621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.080472][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  159.085406][  T116]  xtTruncate+0xcea/0x2e70
[  159.087637][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  159.094163][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  159.097132][  T116]  ? __mark_inode_dirty+0x4cc/0xe10
[  159.099619][  T116]  ? __asan_memset+0x22/0x50
[  159.101537][  T116]  ? __dquot_initialize+0x218/0xcb0
[  159.103594][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  159.105643][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  159.108197][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  159.110634][  T116]  jfs_evict_inode+0x363/0x440
[  159.112540][  T116]  ? evict+0x4f8/0x9c0
[  159.114246][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  159.116985][  T116]  evict+0x504/0x9c0
[  159.118648][  T116]  ? __pfx_evict+0x10/0x10
[  159.120511][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  159.122611][  T116]  ? _raw_spin_unlock+0x28/0x50
[  159.124607][  T116]  ? iput+0x6d8/0x9d0
[  159.126725][  T116]  jfs_lazycommit+0x43f/0xa90
[  159.128585][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  159.132153][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  159.134480][  T116]  ? __kthread_parkme+0x7b/0x200
[  159.136981][  T116]  ? __kthread_parkme+0x1a1/0x200
[  159.139125][  T116]  kthread+0x711/0x8a0
[  159.140778][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  159.142927][  T116]  ? __pfx_kthread+0x10/0x10
[  159.144789][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.147368][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.149478][  T116]  ? __pfx_kthread+0x10/0x10
[  159.151378][  T116]  ret_from_fork+0x3fc/0x770
[  159.153133][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  159.156755][  T116]  ? __switch_to_asm+0x39/0x70
[  159.158666][  T116]  ? __switch_to_asm+0x33/0x70
[  159.160576][  T116]  ? __pfx_kthread+0x10/0x10
[  159.162401][  T116]  ret_from_fork_asm+0x1a/0x30
[  159.164329][  T116]  </TASK>
[  159.165569][  T116] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  159.168579][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  159.172344][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.176409][  T116] Call Trace:
[  159.177777][  T116]  <TASK>
[  159.178964][  T116]  dump_stack_lvl+0x99/0x250
[  159.180841][  T116]  ? __asan_memcpy+0x40/0x70
[  159.182783][  T116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.184826][  T116]  ? __pfx__printk+0x10/0x10
[  159.186675][  T116]  vpanic+0x281/0x750
[  159.188348][  T116]  ? __pfx__printk+0x10/0x10
[  159.190244][  T116]  ? __pfx_vpanic+0x10/0x10
[  159.192126][  T116]  ? is_bpf_text_address+0x26/0x2b0
[  159.194254][  T116]  panic+0xb9/0xc0
[  159.195829][  T116]  ? __pfx_panic+0x10/0x10
[  159.197669][  T116]  __warn+0x31b/0x4b0
[  159.199327][  T116]  ? dbAdjTree+0x454/0x4e0
[  159.201170][  T116]  ? dbAdjTree+0x454/0x4e0
[  159.203001][  T116]  report_bug+0x2be/0x4f0
[  159.204773][  T116]  ? dbAdjTree+0x454/0x4e0
[  159.206635][  T116]  ? dbAdjTree+0x454/0x4e0
[  159.208519][  T116]  ? dbAdjTree+0x456/0x4e0
[  159.210374][  T116]  handle_bug+0x84/0x160
[  159.212126][  T116]  exc_invalid_op+0x1a/0x50
[  159.214008][  T116]  asm_exc_invalid_op+0x1a/0x20
[  159.216041][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  159.218102][  T116] Code: 5a ff ff ff e8 fd 25 81 fe eb 05 e8 f6 25 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 dd 25 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  159.225948][  T116] RSP: 0018:ffffc9000243f508 EFLAGS: 00010293
[  159.228441][  T116] RAX: ffffffff833e85b3 RBX: ffff888107c2c010 RCX: ffff888105db8000
[  159.231636][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  159.234825][  T116] RBP: 0000000000020056 R08: ffffea00041f0b07 R09: 1ffffd400083e160
[  159.237962][  T116] R10: dffffc0000000000 R11: fffff9400083e161 R12: ffff888107c2c018
[  159.241095][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  159.244311][  T116]  ? dbAdjTree+0x453/0x4e0
[  159.246190][  T116]  ? dbAdjTree+0x453/0x4e0
[  159.248088][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  159.250143][  T116]  dbJoin+0x238/0x300
[  159.251710][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  159.253801][  T116]  dbFreeBits+0x4e1/0xdb0
[  159.255512][  T116]  dbFree+0x336/0x650
[  159.257095][  T116]  txFreeMap+0x9e6/0xde0
[  159.259220][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  159.261203][  T116]  xtTruncate+0xcea/0x2e70
[  159.263064][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  159.264934][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  159.267091][  T116]  ? __mark_inode_dirty+0x4cc/0xe10
[  159.269210][  T116]  ? __asan_memset+0x22/0x50
[  159.271061][  T116]  ? __dquot_initialize+0x218/0xcb0
[  159.273052][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  159.275133][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  159.277411][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  159.279943][  T116]  jfs_evict_inode+0x363/0x440
[  159.281913][  T116]  ? evict+0x4f8/0x9c0
[  159.283589][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  159.285754][  T116]  evict+0x504/0x9c0
[  159.287423][  T116]  ? __pfx_evict+0x10/0x10
[  159.289281][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  159.291389][  T116]  ? _raw_spin_unlock+0x28/0x50
[  159.293412][  T116]  ? iput+0x6d8/0x9d0
[  159.295031][  T116]  jfs_lazycommit+0x43f/0xa90
[  159.296997][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  159.299075][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  159.301508][  T116]  ? __kthread_parkme+0x7b/0x200
[  159.303530][  T116]  ? __kthread_parkme+0x1a1/0x200
[  159.305589][  T116]  kthread+0x711/0x8a0
[  159.307262][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  159.309319][  T116]  ? __pfx_kthread+0x10/0x10
[  159.311242][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.313478][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.315644][  T116]  ? __pfx_kthread+0x10/0x10
[  159.317817][  T116]  ret_from_fork+0x3fc/0x770
[  159.319738][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  159.321762][  T116]  ? __switch_to_asm+0x39/0x70
[  159.324088][  T116]  ? __switch_to_asm+0x33/0x70
[  159.326049][  T116]  ? __pfx_kthread+0x10/0x10
[  159.327815][  T116]  ret_from_fork_asm+0x1a/0x30
[  159.330405][  T116]  </TASK>
[  159.332372][  T116] Kernel Offset: disabled
[  159.334139][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:49:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000008 RBX=ffff8881071e44e8 RCX=b82d06c1ad43c500 RDX=0000000000000000
RSI=ffffffff8e139ee0 RDI=ffff8881071e44e8 RBP=00000000ffffffff RSP=ffffc90006c472b0
R8 =0000000000000000 R9 =ffffffff822e510d R10=dffffc0000000000 R11=fffff940001b2341
R12=0000000000000246 R13=ffff8881071e3980 R14=ffffffff8e139ee0 R15=0000000000000003
RIP=ffffffff8b79ae13 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557522c500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e2f8e56c0 CR3=000000010b1d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1e2ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000023 RBX=0000000000000023 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000243ecb0
R8 =ffff88801f750237 R9 =1ffff11003eea046 R10=dffffc0000000000 R11=ffffffff854f3340
R12=dffffc0000000000 R13=ffffffff99afa915 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e2f90dfb8 CR3=0000000025d8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055555fb774a0
XMM02=060a016cf4041000 1280040c08005208 XMM03=ffffffff040c0800 5208000100000008
XMM04=010010000fffffff ffffff040c080052 XMM05=0800010000000806 0a016cf404100012
XMM06=80040c0800520800 0100000008060a01 XMM07=6cf4605804081280 0300080002100014
XMM08=ffef080003001000 0e800401c7080006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
