last executing test programs:

1m33.93074893s ago: executing program 1 (id=133):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x64, r1, 0x1, 0xff7fffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x82}, {0x6}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x2f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)

1m33.323344011s ago: executing program 1 (id=136):
socket$inet(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x58, 0x0, 0xa}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x15)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0)

1m32.484734424s ago: executing program 1 (id=143):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r1 = fanotify_init(0xf00, 0x2)
fanotify_mark(r1, 0x105, 0x8971, r0, 0x0)
readv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1)
creat(&(0x7f0000000180)='./file1\x00', 0x88)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

1m32.237829092s ago: executing program 1 (id=147):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000300)="$eJzs3O9uk1AYx/EftIXNP/H/G99qom8cdiYSXxi3O3Hp2Fxkaqxv2jSxxivxRrwVb6BN7A2IAVoKqBVRoK3fT7LsPPQczvM0oZzThArAf+uqJEOGOpKCIHj/4m5wpemcANQj0LegqKeLMQC2ROvrH3U3pHFluQCo0/SwZUY39bH0ZTbqTeZ/ndw6YTcTtZPW9DAefiBpkhpvFVx/TD8Y0f/b7ex4W9JOkfXLp3j8vcX8YWqzUS+Tb76Y/Pze5zhIzX+hcP5x/ffvZPO/KOmSpMthIfay/zVJ139S/3H2/bNvFZwf+BuG9vJx5oCpkzPfe5jEHZ1Y8rpJbEWv7+fiR0lsR/Fe77V/XFUJAEoyf7j+n5vpuKVwwb+8/tvR9dytL0EAlekPhi+PfN97W6ZhjIt1NspPQaOehrUeaZRohJu7NUgj1/ho/oPz7NSac7hzTh3JfVAU3dAD2BjOu/M3Tn8wfHB2fnTqnXqv9t0nrit1H7tOtPN3svv/2Iov1ABsjMXdf7fpRAAAAAAAAAAAAAAAQGk3JN1chgdN5gIAAACgWr97MEjzn/tZ+fDQs/nJftGn4RIBAAAAAAAAAAAAAAAAAACArfE9AAD//zpGOPg=")
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f00000002c0)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000", @ANYRESOCT=0x0], 0x1, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(&(0x7f00000034c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1m32.134502559s ago: executing program 1 (id=149):
bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x98)

1m31.678904067s ago: executing program 1 (id=153):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
accept(r0, 0x0, 0x0)

1m31.522174202s ago: executing program 32 (id=153):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
connect$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
accept(r0, 0x0, 0x0)

47.746990966s ago: executing program 2 (id=617):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

47.417141186s ago: executing program 2 (id=618):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

47.276401072s ago: executing program 2 (id=619):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

47.276055875s ago: executing program 2 (id=620):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3FyPXWd4B/Mx+eeNAYiCkTmrCxjHGOJvs+iP+oHUx4bPhqySEQj+wXe/aLPgLr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKkF7QW8QFSoXURVQQKrUVsBWM+d9352ZnZ3Z9Y7XZ875/ST78c6cmfedM++c2WfX/zkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLv7DbOfqmVZVqvV8gs2ZdmL6vWmiU2NS157Y+cHAAAArN3PG3+/cGu64PAKbtS0zT/d9e2vLiwsLGTvG/7T0c8tLKQrJrJsdEOWNa6Lrv7g/bXmbYIns/HaUNPXQz2GH+5x/UiP60d7XD/W4/oNPa4f73H9kh2wxE1ZLd3ZtsY/N+W7NLstG21ct63DrZ6sbRiq77t026zWuM3C6IlsLjuVzWbTLdvn29Ya23/97vpYb83iWENNY22pr5CfPH48zqEW9vG2lrEW7zP60euziZ/+5PHjf33h+Ts61Z67oeX+8nnu2Fqf5yfCJflca9mGtE/iPIea5rmlw3My3DLPWuN29X+3z/OFFc5zeHGa66r9OR/Phhr//k5jP43Usg77aUu47H/uybLs8uK027dZMlY2lG1suWRo8fkZz1dk/T7qS+ml2Uj3dbpQa1mnd69gndbrzLbWddr+mojP/93hdiPLzKH5afrRE2NNz/vPFq5lnUb1R73ca6V9Dfb7tVKUNRjXxXcaD/qpjmtwW3j8j29ffg12XDsd1mB63E1rcGuvNTg0NtyYc3oSao3bLK7BXS3bDzdGqjXqc9u7r8GpC6fPTc1/7OP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU7nf1/j3i6+jdlQeg1sDfsuvgZe3bZt81Jd+OLYkuPvtb4Ox7u8Dje1bdvv1+FI+4Orrc8Lcumazl8b76nv9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Dju8pHV6HIyt4Hda3ObdzZd+zjDT96TSH5d8L1rYGNzWtwfbvR9rXYL+/HynKGhwP6+J7O5d/L9gS5vvU5Gq/HxlesgbTww3Hnvol6fv98QON0mld3lm/4uax7OL87Pn7Hzt24cL5XVko6+JlTWulfb1ubHpM2ZL1OrTq9Xp47q6n7uxw+aawr8bvq/81vuxzVd9m7/3dn6vGu1vn/dly6e4slD4L+3Nhwzrtz07v5vX9OZZln//WEw9/4/HPv2HZ/VnvNz8xtfbvxVNf2nT8HV3m+Bv7/l/k46W7enJ4dCR//Q6nvTPacjxufapGGseuWmPsF6ZWdjweDX/W+3h8W5fj8ea2bft9PB5tf3DxeFzr9dOOtWl/PsfDOjk13f14XN9m8+7VrsmRrsfje0Kthf3/mtAppL6oae0st27TWCMjo+FxjcQRWtfpnpbtR0NvVh/rmd3Xtk533JPf13B6dIvWa51OtG3b73Wafva13Dqt9frp27Vpfz7Hw7q4bU/3dVrf5tm9az923hT/2XTsHOu1BkeHx+pzHk2LsHG8zxZuimvw/ux4djY7lc00rh1rrKdaY6zJB1a2BsfCn/U+Vm7usgZ3tG3b7zWY3seWW3u1kaUPvg/an8/xsC6efqD7Gqxv88b9/f3edUe4JG3T9L1r+8/XlvuZ151tu+l6rZWRMM9v7e/+s9n6NqcOrLbP7L6f7g2X3NxhP7W/fpd7Tc1k67OfNod5Pn9g+f1Un099m88dXOF6Opxl2aWPPNj4eW/4/crfXfzuV1t+79LpdzqXPvLgj1984h9XM38ABt8v8rIxf69r+s3USn7/DwAAAAyE2PcPhZro/wEAAKA0Yt8f/1d4ov8HAACA0oh9/0ioSUX6/81vfH7uF5eylMxfCOL1aTc8lG8XM67T4euJhUX1yx/88ux//8OllY09lGXZzx76g47bb34ozis3EeZ59U2tly/x1ftWNPbRRy+lcZvz618I9x8fz0qXQacI7nSWZV+/9TONcSbef6VRn33oaKM+fPmpJ+vbvHAw/zre/rmX5dv/RQj/Hj5xrOX2z4X98MNQp9/WeX/E233lymu27H/v4njxdrWttzQe9tMfyO83fk7OZ5/Mt4/7ebn5f+PTz3ylvv1jr+o8/0tDnef/TLjfL4f6v6/It29+Dupfx9t9Msw/jhdvd/+Xvtlx/lc/lW9/7s35dkdDjePvCF9ve/Pzc83767HasZbHlb0l3y6OP/3dP25cH+8v3n/7/MePXGnZH+3r49l/y+9nqm37eHkcJ/r7tvHr99O8PuP4z/zR0Zb93Gv8qw8/94r6/baPf2/bduc+srMx/uL9tX5i019+8jMdx4vzOfy351oez+F3h9dxGP/pD4T1GK7/v6v5/bV/usLRd7cef+L2X9h0qeXxRG/9aT7+1dedbNQN4zdtvPlFL77l8ivr+y7LvrMhv79e45/8q7Mt8//i7fn+iNfHjH77+MuJ45//6OSZs/MX52bSXn381sZn57w9n0+c763h2Nr+9ZGzFz44e35iemI6yybK+xF61+xLof44L5e7b72w5Ai689HwfN7551/fuP1fPx0v//f35JdfeVv+vvXqsN1nw+WbwvO3uvGXevru2xuv79qzYYYLSz8veC22bPuvAyvaMDz+9u8L4no/9/IPNvZD/brG+0Z8Xa9x/t+fye/na2G/LoRPZt56++J4zdvHz0a48kj+el/z/guHufi8/k14vt/xw/z+47zi4/1++D7mm5tbj3dxfXzt0lD7/Tc+xeNyOJ5kl/Pr41Zxf1954faO04ufQ5JdvqPx9Z+k+7ljVQ9zOfMfm586NXfm4mNTF2bnL0zNf+zjR06fvXjmwpHGZ3ke+VCv2y8enzY2jk8zs/v2Zo2j1dm8XGc3ev7nHj0+s396+8zsiWMXT1x49Nzs+ZPH5+ePz87Mbz924sTsR3vdfm7m0K7dB/fs3z15cm7m0IGDB/ccnJw7c7Y+jXxSPeyb/vDkmfNHGjeZP7T34K4HHtg7PXn67Mzsof3T05MXe92+8d40Wb/170+enz117MLc6dnJ+bmPzx7adXDfvt09Pw3w9LkT8xNT5y+embo4P3t+Kn8sExcaF9ff+3rdnnKa/4/8+9l2tfyD+LJ33bsvfT5r3ZefWPau8k3aPkD0+fBZNP/8knMHVvJ17PtHQ00q0v8DAABAFcS+fyzURP8PAAAApRH7/g2hJvp/AAAAKI3Y94+HmlSk/y9d/n/zpRWNL/8v/9+8v+T/K5b/f6Ro+f/8eCH/3x9rzd/L/wfy//L/8v8Dk/9fCG9I8v8UUdHy/7HvvynLKtn/AwAAQBXEvn9jqIn+HwAAAEoj9v03h5ro/wEAAKA0Yt//olCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/P5VVK/9/uZ/zd/5/+X+WKlr+P/b9Lw41qUj/DwAAAFUQ+/5bQk30/wAAAFAase+/NdRE/w8AAAClEfv+TaEmFen/5f/l/+X/5f/l/zuPL/8/mOT/u5P/70H+3/n/5f/l/+mrouX/Y9//klCTivT/AAAAUAWx739pqIn+HwAAAIpn5NpuFvv+l4WaLOn/r3EAAAAA4IaLff9tWVsQvCK//5f/l/8vfv5/Q7pO/l/+Pytk/n84k/8vDvn/7uT/e5D/l/+X/5f/p6+Klv9v9P3ZePbyUJOK9P8AAABQBbHvvz3URP8PAAAApRH7/l8KNdH/AwAAQGnEvn9zqElF+n/5f/n/G53/H22bu/P/L95O/j9X/Py/8/8Xifx/d/L/Pcj/y//L/8v/01dFy//Hvv+OUJOK9P8AAABQBbHvvzPURP8PAAAApRH7/l8ONdH/AwAAQGnEvn9LqElF+n/5/4Ln/2NytMT5/97n/5f/l/+X/5f/Xzn5/+7k/3uQ/5f/l/+X/6evipb/j33/K0JNKtL/AwAAQBXEvv+uUBP9PwAAAJRG7PtfGWqi/wcAAIDSiH3/RKhJRfp/+f+C5//zHPxYmc//L/8v/y//L//fT/L/3cn/9xAOcz/Kskz+X/5f/l/+n7UrWv4/9v13h5pUpP8HAACAKoh9/9ZQE/0/AAAAlEbs++8JNdH/AwAAQGnEvn9bqElF+n/5/4HI/2fy//L/8v/y//L/KyP/3538fw/O/y//L/8v/09fFS3/H/v+V4WaVKT/BwAAgCqIff/2UBP9PwAAAJRG7PtfHWqi/wcAAIDSiH3/jlCTivT/8v/y//L/8v/y/53Hl/8fTPL/3cn/9yD/L/8v/y//T18VLf8f+/7XhJpUpP8HAACAKoh9/85QE/0/AAAAlEbs++8NNdH/AwAAQGnEvn8y1KQi/b/8v/y//L/8v/x/5/Hl/weT/H938v89yP/L/8v/y//TV0XL/8e+/75Qk4r0/wAAAFAFse+/P9RE/w8AAAClEfv+qVAT/T8AAACURuz7p0NNKtL/y//L/8v/y/+vKv//ysX7lf/Pyf8Xi/x/d/L/Pcj/y//f8Pz/qPw/pVK0/H/s+3eFmqTGb+waHiUAAABQJLHv3x1qUpHf/wMAAEAVxL5/T6iJ/h8AAABKI/b9e0NNKtL/y//L/8v/y/87/3/n8eX/B5P8f3f9z//Hhyj/L/8v/+/8//L/LFW0/H/s+x8INalI/w8AAABVEPv+faEm+n8AAAAojdj37w810f8DAABAacS+/0CoSUX6f/l/+X/5f/l/+f/O48v/Dyb5/+6c/7+H4uX/X9d88/XM/9fHkv+X/5f/Z/Ue+cPmr4qW/499/8FQk4r0/wAAAFAFse9/baiJ/h8AAABKI/b9vxJq0r3/33B9ZwUAAAD0U+z7fzXUpCK//5f/l/+X/5f/l//vPL78/2CS/+9O/r+H4uX/Wzj/f7HnL/8v/89SRcv/x77/UKhJRfp/AAAAqILY9/9aqIn+HwAAAEoj9v2vCzXR/wMAAEBpxL7/cKhBpzh3Kcn/y/8PZv5/XP5f/r90+f+xeL/y/2si/9+d/H8P8v/y//L/8v/0VdHy/7Hvf32oid//AwAAQGnEvv/BUBP9PwAAAJRG7PvfEGqi/wcAAIDSiH3/G0NNKtL/y//L/w9m/t/5/zP5/9Ll/53/vz/k/7uT/+9B/l/+X/5f/p++Klr+P/b9bwo1qUj/DwAAAFUQ+/43h5ro/wEAAKA0Yt//llAT/T8AAACURuz73xpqUpH+X/5f/v9G5v9zl+X/5f8b5P/l//tB/r87+f8e5P/l/+X/5f/pq6Ll/2Pf/+uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f+d/1/+X/6/8/jy/4NJ/r+7Acv///yWcLn8f07+v9jzX23+f6Tt6+uS///Bcvn/hQ3tt5f/53ooWv4/9v3vCDWpSP8PAAAAVRD7/neGmuj/AQAAoDRi3/+uUJOm/r+v//EOAAAAWHex7/+NUJOK/P5f/r8+j8X0svy//H/jAvl/+X/5/4El/9/dgOX/nf+/jfx/sefv/P/y/yxVtPx/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/9IqIn+HwAAAEoj9v3vCTWpSP8v/+/8//L/8v/y/53Hl/8fTPL/3cn/9yD/L/9ftPz/f8r/M9iKlv+Pff+joSYV6f8BAACgCmLf/95QE/0/AAAAlEbs+38z1ET/DwAAAKUR+/73hZpUpP+X/x+U/P/EgOb/n5D/v475/7tuybeT/5f/Z5H8f3fy/z3I/8v/Fy3/7/z/DLii5f9j3//+UJOV9//jK94SAAAAuI5Glr0m9v2/FWpSkd//AwAAQBXEvv+3Q030/wAAAFAase//nVCTivT/8v+Dkv93/v9M/t/5/9sej/y//H8n65f/j0ce+X/5/2Ll/zet6gG3utH5+bW60fOvbv4/f2eU/6eTouX/Y9//u6EmFen/AQAAoApi3/+BUBP9PwAAAAyETv8nu13s+4+Emuj/AQAAoDRi33801KQi/b/8v/y//H9B8/9/tvVfvvftdx7dJf8v/y//vyrrev7/+ovf+f/l/wuW/1+LG52fX6/515Y5NZj8v/P/039Fy//Hvv9YqElF+n8AAACogtj3/16oif4fAAAASiP2/cdDTfT/AAAAUBqx758JNalI/y//L/8v/1/Q/P8An/8/7g/5/1Z9y//Hg678f0frmv9/72JOXP5/tfn/sY6Xyv/L/w/y/OX/5f9Zqmj5/9j3z4aaVKT/BwAAgCoIff/QibwuXqH/BwAAgNKIff/JUBP9PwAAAJRG7Ps/GGpSkf5f/l/+X/5f/t/5/zuP3y3/Xxtx/v+ikv/vrjj5/87k/+X/B3n+8v/y/yxVtPx/7PvnQk0q0v8DAABAFcS+/0OhJvp/AAAAKI3Y93841ET/DwAAAKUR+/5ToSYV6f/l/+X/5f/l/+X/O49f2PP/y/93Jf/fnfx/D/L/8v/y//L//8/enXxZWtd3HL8FDV19yCK7LLLJOVnmT2AR1sk+WWSTRXJOTs4JRFFxpnEeUVScFcVZwQEEERXnCZxQnEFFxXnECVFPe6j6fr9dw1P3VlXf6vs8v9/rteCbrlB9r31a6E9Xv31YqrH1/7n7/y9u6WT/AwAAQA9y918ct9j/AAAA0Izc/ZfELfY/AAAANCN3///HLZ3sf/2//r/Z/v+f9f97vb7+X//fMv3/fPr/BfT/+n/9v/6fpRpb/5+7/2FxSyf7HwAAAHqQu//hcYv9DwAAAM3I3X9p3GL/AwAAQDNy9z8ibulk/+/o/9dmffb/mfHq/1vq/z3/f8/X1/+fQf9/rv5/7M5u/3/FQ//k0//r//X/Qf+/r/7/+F6fr/+nRWPr/3P3PzJu6WT/AwAAQA9y9z8qbrH/AQAAoBm5+y+LW+x/AAAAaEbu/kfHLZ3s/+U9///Exscn2v8X/b/+f+MD+n/9/179/7HT39b/j5Pn/8/XU/9/6V0XXHz/zX9/y0FeX/+v//f8f/0/yzW2/j93/2Pilk72PwAAAPQgd/9j4xb7HwAAAJqRu/9xcYv9DwAAAM3I3f/4uKWT/b+8/n/Sz/8v+n/9/8YH9P/6/736/3/z/P+x0//P11P/f5jX1//r//X/+n+Wa9X9f37H+e3c/U+IWzrZ/wAAANCD3P1PjFvsfwAAAGhG7v7L4xb7HwAAAJqRu/9k3NLJ/tf/H33//xf9v/4/rv5f/6//P3r6//n0/wvo//X/+n/9P0u16v5/57dz918Rt3Sy/wEAAKAHufufFLfY/wAAANCM3P1PjlvsfwAAAGhG7v6nxC2d7H/9v+f/6//1//r/4dfX/0+T/n8+/f8C+v8z7efP0/9PsP+PX0jp/zkKB+z/H5zzj+2l9P+5+58at3Sy/wEAAKAHufufFrfY/wAAANCM3P1Pj1vsfwAAAGhG7v5nxC2d7H/9v/5f/6//P3T/v/un3gb9/zD9/9mh/59vNP3/2rHBD+v/J9//e/7/FPv/oP/nKIzt+f+5+58Zt3Sy/wEAAKAHufufFbfM2f8H/s18AAAAYKVy9z87bvH1fwAAAJi8rM5y9z8nbulk/+v/9f/6f/2/5/8Pv/68/v+WLe9P/z8u+v/5RtP/70H/r/+f8vvX/+v/2W1s/X/u/ufGLZ3sfwAAAOhB7v4r4xb7HwAAAJqRu/95cYv9DwAAAM3I3f/8uKWT/T/c/5/+/+v/90f/v/396/+Hf34sq//P71H/P7f/v8jz//uk/5/v7Pf/x/X/279//f8RWvX7b7z/P7Ho8/X/DBlb/5+7/6q4pZP9DwAAAD3I3f+CuMX+BwAAgGbk7n9h3GL/AwAAQDNy978obulk/6/4+f9XnL/X+9L/b9D/6/89/3+cz/+fnfX+/5j+f5/0//N5/v8C+n/9v/7f8/9ZqrH1/7n7r45bOtn/AAAA0IOrH5ht7P4Xz2b2PwAAAEzR1j87sPMPlIbc/S+JW+x/AAAAaEbu/pfGLZ3s/xX3/0f1/P/zFr22/l//v/XHS/+v/x96/XH1/57/v1/6//n0/wvo/4+inz/WWP9/zV6fP4b+/3L9PyOzrf+/7fTHV9X/5+5/WdzSyf4HAACAHuTuf3ncYv8DAABAM3L3vyJusf8BAACgGbn7Xxm3dLL/j7z/P7H3ax9h/7+Q/l//v/XHS/+v/x96ff3/NOn/59P/L6D/9/x/z//X/7NU2/r/LVbV/+fuf1Xc0sn+BwAAgB7k7n913GL/AwAAQDNy918Tt9j/AAAA0Izc/a+JWzrZ/40+/38h/b/+f+uPl/5f/z/0+vr/adL/z6f/X0D/r//X/y/u/3f+izro/xkytv4/d/9r45ZO9j8AAAD0IHf/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzSyf7X/x9t/58f1//r/2cH6f/jE/T/m/T/+v+DmFr/v/O/P4fu19eG/k202x79/x3/c/Jft39E/6//1//r/z3/nyUYRf9/6vSvLnP3vyFu6WT/AwAAQA9y978xbrH/AQAAoBm5+98Ut9j/AAAA0Izc/W+OWw64//92qe/q7NH/e/6//n+E/X/Q/2/S/+v/D2Jq/f9Onv+v/9f/T/f96//1/+w2iv5/y7dz978lbvH1fwAAAGhG7v63xi32PwAAADQjd//b4hb7HwAAAJqRu/+6uKWT/a//1//r//X/+v/h1z9s/78+G6b/Pzv0//Pp/xfQ/+v/9f/6f5ZqbP1/7v7r45ZO9j8AAAD0IHf/2+MW+x8AAACakbv/HXGL/Q8AAABTkunYoNz974xbOtn/+n/9v/5f/6//H359z/+fpon2//WPwan2/+dOqf+/Yc4bGOr/Tx3X/+v/9f/6fw5pbP1/7v53xS2d7H8AAADoQe7+G+IW+x8AAACakbv/xrjF/gcAAIBm5O5/d9zSyf7X/+v/9f/6f/3/8Ovr/6dpov1/mWr/7/n/+v+Z/l//r/9nwNj6/9z9N8Utnex/AAAA6EHu/pvjFvsfAAAAmpG7/z1xi/0PAAAAzcjdf0vc0sn+1//r//X/+n/9//Dr6/+n6ej6/9nq+v/7zjnod7Mn/f8C+n/9v/5f/89Sja3/z93/3rilk/0PAAAAPcjdf2vcYv8DAABAM3L3vy9usf8BAACgGbn73x+3dLL/9f/6/2n2/1etD71//b/+f6b/757n/8+n/19A/6//1//r/1mqsfX/ufs/ELd0sv8BAACgB7n7b4tb7H8AAABoRu7+D8Yt9j8AAAA0I3f/h+KWTva//l//v73/n82m0f97/v9M/99C/78+0/8vnf5/vv31/xfp//X/bfX/58wa6v9P7Pn5+n/GaGz9f+7+D8ctnex/AAAA6EHu/o/ELfY/AAAANGDzz87k7v9o3GL/AwAAwJgdO8jfnLv/Y3FLJ/t/+v3/8R2fqP+fzWZ3X9b88//1/zP9fwv9f/2o6v+XR/8/n+f/L6D/b7P/9/x//T8rM7b+P3f/x+OWTvY/AAAA9CB3/yfiFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9P/3+f+cn6v9nZ/T8f/3/xgf0//p//f9k6f/n0/8voP9f2M+v7fHrnpn+X/+v/2fA2Pr/3P2fjls62f8AAADQg9z9t8ct9j8AAAA0I3f/HXGL/Q8AAADNyN3/mbilk/2v/9f/6/+n2f+v6//1//r/QWPp/y+88F/u1P/r/1vs/+fR/+v/9f/sNLb+P3f/Z+OWTvY/AAAA9CB3/+fiFvsfAAAAmpG7//Nxi/0PAAAAzcjd/4W4pZP9v7v/P2+2WahuGur/o1HT/2+h/9/+/vX/wz8/PP9f/6//P3pj6f89//9w71//r/+f8vs/UP//D7s/X/9Pi8bW/+fuvzNu6WT/AwAAQA9y938xbrH/AQAAoBm5+78Ut9j/AAAA0Izc/XfFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8l/n6v9ZnrH1/7n7vxy3bAy/f/ybQ/7HBAAAAEYkd/9X4pZOvv4PAAAAPcjd/9W4xf4HAACAZuTu/1rc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76//WhD666nz9Tq37/zfT/nv/PEo2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy998dt3Sy//X/+v/2+///1P/veH39v/6/Zfr//Df6MP3/Av30/4NW3c9P/f3r//X/7Da2/j93/z1xSyf7HwAAAHqQu/9bcYv9DwAAAM3I3f/tuMX+BwAAgGbk7v9O3NLJ/tf/99X/r8167P89/1//r//vyXT6/2uPDX3U8//1//r/6b5//b/+n93G1v/n7r937ViX+x8AAACm6t//6X/v2e/fe+/GX9dn341b7H8AAABoRu7+78Ut9j8AAAA0I3f/9+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n92G1v/n7v/vrhly/Ab/B/oAQAAACYjd/8P4pZOvv4PAAAAPcjd/8O4Zdf+P7XPP9UOAAAAjE3u/h/FLZ18/V//P/L+f3ZE/X/8ffr/Tfp//f/Q6+v/p6m1/v/4bFT9/6k1/b/+fw79v/5f/89OY+v/c/ffetOsy/0PAAAAjdr2Owo/3vjr+uwncYv9DwAAAM3I3f/TuMX+BwAAgGbk7v9Z3NLJ/tf/j7z/P9Tz/0/U/+X5/533/1euD76+/l//37LW+n/P/9/8uP5/k/5/3O9f/6//Z7cD9P8bg/So+//c/T+PWzrZ/wAAANCD3P2/iFvsfwAAAGhG7v5fxi32PwAAADQjd/+v4pZO9r/+fwX9/1XHZ7Mj7f/38fx//X8f/f8er99O//93F5y8/T/++8br9f+cdjb7//y5oP/X/6+g/78ufv7p/0f0/vX/+n92G9vz/3P3/zpu6WT/AwAAQA9y998ft9j/AAAA0Izc/b+JW+x/AAAAaEbu/t/GLZ3sf/1/i8//n2b/nz/WK+j/T06v/8+muPf+3/P/9f+7ef7/fPr/BabT/2982/P/x/X+9f/6f3YbW/+fu/93cUsn+x8AAAB6kLv/93FL7v+1A//WPQAAADAyufv/ELf4+j8AAAA0I3f/A3FLJ/tf/6//H0v/nzz///Tnef7/Jv2//v8g9P/z6f8X0P/r//X/+n+Wamz9f+7+P8Ytnex/AAAA6EHu/gfjFvsfAAAAmpG7/09xi/0PAAAAzcjd/+e4pZP9r//X/+v/9f/6/+HX1/9Pk/5/Pv3/Q87f+w3o//X/+n/9P0s1tv4/d/9fAwAA//+9M2Fu")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

46.904038675s ago: executing program 2 (id=623):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

46.617094625s ago: executing program 2 (id=625):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000000140))

46.465527747s ago: executing program 33 (id=625):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000000140))

3.457171387s ago: executing program 0 (id=1079):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r1 = syz_io_uring_setup(0x8d3, &(0x7f0000000140)={0x0, 0xfb8f, 0x0, 0xfffffffe, 0x8069}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100)

3.066946432s ago: executing program 0 (id=1084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20)

3.066781984s ago: executing program 0 (id=1085):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x6cc, 0x4)
sendmmsg$inet6(r0, &(0x7f00000054c0)=[{{&(0x7f00000022c0)={0xa, 0x4e24, 0x1, @empty, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)

2.992428027s ago: executing program 0 (id=1086):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwritev(r0, 0x0, 0x0, 0x10, 0x7)

2.992203608s ago: executing program 0 (id=1087):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000", @ANYRESHEX=r3], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)

2.466863334s ago: executing program 3 (id=1093):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fcntl$setown(r0, 0x8, 0x0)
fcntl$getown(r0, 0x9)

2.382744276s ago: executing program 3 (id=1094):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x5}}, {@check_strict}, {@uid}, {@hide}, {@gid}]}, 0x1, 0x660, &(0x7f0000000fc0)="$eJzs3d+O1OYVAPAz/FHRVqJVGyGECHGglUAiy8xsWLTK1dTr2XUyMx7ZsxFcRSgsEWJJKkilwh03tFXbh8htH6CX7RNFfYRU9sySBXZ3KJBdin6/FXzf2Mf+jo3lI7NjOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAaKWr7XanFYN8tHE92Vu6WhbDJPnhF9PFXpi/vb5/P9PsM25Eq/4TJ07E6emk0+/9OPtU/df5ODv9dDZO1M2JePTzU7/85NfHjmwvv0/CB+LBw0d3b25tbd4/7EQOyVo2yqsiH/bWsiSvimRlebl9Zb1fJf18kFU3qkk2TNIy602KMrmYXko6KytLSbZ4o9gYra32Btn2xGsfddvt5eTTxXHWK6tidOXTxSpdzweDfLTWxNSz65hr9YH4WT5JJllvmCS372xtLs1Lsg7qvExQd15Qt93tdjrdbmf56srVa+32sRcmtJ8TL0Qc/kHL4XqTp294LUdm9T8GkccoNuJ6JLv+pLEaZRQx3GP+zHb9/+2VbN9xd9b/7Sp/+sfZZ6Kp/+emn87tVf/3yOXgfh7Ew3gUd+NmbMVWbMb9Q8/oYH/WIotR5FFFEXkMo9dMSWZTkliJ5ViOdnwR69GPKpLoRx6DyKKKG1HFJLLmiEqjjCx6MYkiykjiYqRxKZLoxEqsxFIkkcVi3IgiNmIUa7EavWYtt+NOs9+X9snxaVDnZYK6+wSp/7y+N38Sh1f0w3b9BwAAAN5ZreZ/3+vr/+PxftPr54OsfdhpAQAAAG9Q85v/s3VzvO69Hy3X/wAAAPCuaTX32LUiYiE+mPaaO6He++thZwYAAAC8Kc3v/8/VzULd+yBaT5+E4ksAAAAA8I7489xn7Ffjn7X+9Z8oy+Otx+Prv2nd69VxvXtHp8sdfX6Nk/6Z1snZSppm+djsU5qdbc2efvn0IZjfz5rb8/JovYEE4m/x4TTmw1vT9tb2nOkoC/18kC2mxeCTTvR6J49MsuuTP3x954/RbP5fRsOTrbh9Z2tz8ctvtm41uTyu1/L43uwBii88R3GfXL5tnrfQ3HOx6xYfb27EmI27MB23vXP7j0wXP/I/jPkkzk9jzi9M24Vnt/9EPWZnca+tn2XRec0tfxIXpjEXLl6YNrtk0Z2XRXdnFq+0L14ii6V5WSy9ZhYAh+X2nCrUerHwv8JZ7mCq+5O4OI25eKY5sR47s8sZvT3vjN5+zer2j7g0jbm0HbxXja3H/ftzVfW7eoHv9hy3GnRb9S48+u2938epBw/PfXTn3s2vNr/a/LrbXVpuf9xuX+3G8WYzZo3aA8Au5r9jZ25E6+M5V9W/evqVgsX4Mr6JrbgVl5u7DZpvHOy61oUdX0O4POeqdWHHG14uz7mqW9jxopeXj106gH8JADg45+fU4Zep/5fnXHc/W8v3vzreWcsBgJ9GVn7fWpj8qVWW+fiLzspKpzdZz5KySD9Lynx1LUvy0SQr0/XeaC1LxmUxKdJiUHc+z1ezKqk2xuOinCT9okzGRZVfb978nsxe/V5lw95okqfVeJD1qixJi9Gkl06S1bxKk/HG7wZ5tZ6VzcLVOEvzfp72JnkxSqpio0yzxSSpsmxHYL6ajSZ5P6+7o2Rc5sNeeSP5vBhsDLNkNavSMh9PiukKt8fKR/2iHDarXTzsnQ0Ab4kHDx/dvbm1tXn/J+wc9jYCAM9SpQEAAAAAAAAAAAAA4O13EPf/vYud7f33tuSj8//T+efs2Hlb8tn/CAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAt8d/AwAA//9eM1Gd")

2.382239205s ago: executing program 3 (id=1095):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
unshare(0x78000100)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r3)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
capset(0x0, &(0x7f00000000c0)={0x200000, 0x200002, 0x7})

1.798265546s ago: executing program 4 (id=1097):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1d, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])

1.772668913s ago: executing program 0 (id=1098):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES32, @ANYBLOB=',wf', @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e55"])
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0)

1.686617707s ago: executing program 4 (id=1099):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '\x00'}, 0x0, 0x0)

1.686399286s ago: executing program 4 (id=1100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

1.418167194s ago: executing program 3 (id=1101):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000f80)={0x0, @isdn={0x22, 0x58, 0x9, 0x0, 0x1}, @nfc={0x27, 0x0, 0xffffffffffffffff}, @ax25={0x3, @bcast, 0x7}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x33, 0x1ff})

1.41793362s ago: executing program 3 (id=1102):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00220b00000037c2c48bc5a360aca57d54fdeae5b3ea01413479c269bdc97bafc1c494fff010654a1ef2985f916eb20c6d1cb90d9d60795696aa4199ebc021a8554dac223a0fa53a59b0c8634abad5c1abafd59ed083e263b29911fe63ef08afd4be7fccd0564f6cf7dc7ec9"], 0x0}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c)
socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@nobh}, {@noload}, {@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c)

1.090477817s ago: executing program 4 (id=1103):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4000040)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000240)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==")
truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

68.953923ms ago: executing program 4 (id=1104):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x4, @val=@netfilter={0x5, 0x1, 0x4, 0x1}}, 0x20)

8.308852ms ago: executing program 3 (id=1105):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x4000)

0s ago: executing program 4 (id=1106):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x80000)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x28)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009})
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='M', 0x1}], 0x1, 0x2)

kernel console output (not intermixed with test programs):

ket incorrectly unset in freespace btree
[   74.813998][ T3567]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[   74.826292][ T5850] bcachefs (loop0): shutting down
[   74.826373][ T5850] bcachefs (loop0): going read-only
[   74.826544][ T5850] bcachefs (loop0): finished waiting for writes to stop
[   74.836125][ T3567] bcachefs (loop0): bucket incorrectly unset in freespace btree
[   74.836135][ T3567]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[   74.844033][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[   74.873095][   T26] bcachefs (loop0): bucket incorrectly unset in freespace btree
[   74.873104][   T26]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[   74.897573][ T5871] team0: Port device bridge0 removed
[   74.905604][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11
[   74.919919][ T5850] bcachefs (loop0): unclean shutdown complete, journal seq 12
[   74.926747][ T5850] bcachefs (loop0): done going read-only, filesystem not clean
[   74.946056][ T5850] bcachefs (loop0): shutdown complete
[   75.057295][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.062908][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.067458][ T5871] bond0 (unregistering): Released all slaves
[   75.223573][ T5871] tipc: Left network mode
[   75.495302][ T6357] chnl_net:caif_netlink_parms(): no params data found
[   75.628969][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.637183][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.641618][ T6357] bridge_slave_0: entered allmulticast mode
[   75.645637][ T6357] bridge_slave_0: entered promiscuous mode
[   75.653908][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.656931][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.660020][ T6357] bridge_slave_1: entered allmulticast mode
[   75.673324][ T6357] bridge_slave_1: entered promiscuous mode
[   75.690293][ T5871] hsr_slave_0: left promiscuous mode
[   75.696419][ T5871] hsr_slave_1: left promiscuous mode
[   75.699471][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.703050][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.710882][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.714087][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.737647][ T5871] veth1_vlan: left allmulticast mode
[   75.740236][ T5871] veth1_macvtap: left promiscuous mode
[   75.746004][ T5871] veth0_macvtap: left promiscuous mode
[   75.748628][ T5871] veth1_vlan: left promiscuous mode
[   75.753481][ T5871] veth0_vlan: left promiscuous mode
[   76.212207][ T5235] Bluetooth: hci0: command tx timeout
[   76.453150][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   76.476206][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   76.746361][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'.
[   76.790849][    C1] vcan0: j1939_tp_txtimer: 0xffff88810d6a7000: tx aborted with unknown reason: -2
[   76.797909][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d6a4c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   76.809338][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d6a7000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   76.915743][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.261991][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.314742][ T6357] team0: Port device team_slave_0 added
[   77.321408][ T6357] team0: Port device team_slave_1 added
[   77.351505][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.355412][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.367105][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.373259][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.376281][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.388936][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.442269][ T6357] hsr_slave_0: entered promiscuous mode
[   77.445243][ T6357] hsr_slave_1: entered promiscuous mode
[   77.447663][ T6357] debugfs: 'hsr0' already exists in 'hsr'
[   77.449833][ T6357] Cannot create hsr debugfs directory
[   77.813840][ T6357] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.823785][ T6357] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.834823][ T6357] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.857889][ T6357] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.957611][ T6443] loop0: detected capacity change from 0 to 1024
[   77.974429][ T6443] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.006187][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.019247][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.044738][ T6357] 8021q: adding VLAN 0 to HW filter on device team0
[   78.050062][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.062544][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.065018][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.099046][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.101600][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.110254][ T6454] loop0: detected capacity change from 0 to 512
[   78.129158][ T6454] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   78.173533][ T6454] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   78.245202][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.277924][ T6357] veth0_vlan: entered promiscuous mode
[   78.283246][ T6357] veth1_vlan: entered promiscuous mode
[   78.290708][ T5235] Bluetooth: hci0: command tx timeout
[   78.303981][ T6357] veth0_macvtap: entered promiscuous mode
[   78.308912][ T6357] veth1_macvtap: entered promiscuous mode
[   78.320274][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.328084][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.335512][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.338813][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.347416][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.350359][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.406607][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.409302][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.428801][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.432586][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.833169][ T6493] loop3: detected capacity change from 0 to 32768
[   78.888210][ T6493] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   78.888226][ T6493]   allowing incompatible features above 0.9: (unknown version)
[   78.888232][ T6493]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   78.909368][ T6493] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   78.912919][ T6493] bcachefs (loop3): initializing new filesystem
[   78.923015][ T6493] bcachefs (loop3): going read-write
[   78.927792][ T6493] bcachefs (loop3): marking superblocks
[   78.945273][ T6493] bcachefs (loop3): initializing freespace
[   78.952453][ T6493] bcachefs (loop3): done initializing freespace
[   78.957555][ T6493] bcachefs (loop3): reading snapshots table
[   78.959700][ T6493] bcachefs (loop3): reading snapshots done
[   78.974571][ T6493] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[   78.982360][ T6493] bcachefs (loop3): done starting filesystem
[   79.022224][ T6493] syz.3.189 (6493) used greatest stack depth: 17448 bytes left
[   79.042368][ T6357] bcachefs (loop3): shutting down
[   79.049926][ T6357] bcachefs (loop3): going read-only
[   79.056728][ T6357] bcachefs (loop3): finished waiting for writes to stop
[   79.063038][ T6357] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[   79.099117][ T6357] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[   79.104859][ T6357] bcachefs (loop3): clean shutdown complete, journal seq 6
[   79.111098][ T6357] bcachefs (loop3): marking filesystem clean
[   79.135848][ T6357] bcachefs (loop3): shutdown complete
[   79.663596][ T6554] Unsupported ieee802154 address type: 0
[   79.670535][ T6554] loop0: detected capacity change from 0 to 256
[   79.684029][ T6554] FAT-fs (loop0): Directory bread(block 64) failed
[   79.686267][ T6554] FAT-fs (loop0): Directory bread(block 65) failed
[   79.688632][ T6554] FAT-fs (loop0): Directory bread(block 66) failed
[   79.693037][ T6554] FAT-fs (loop0): Directory bread(block 67) failed
[   79.695954][ T6554] FAT-fs (loop0): Directory bread(block 68) failed
[   79.698367][ T6554] FAT-fs (loop0): Directory bread(block 69) failed
[   79.701222][ T6554] FAT-fs (loop0): Directory bread(block 70) failed
[   79.704690][ T6554] FAT-fs (loop0): Directory bread(block 71) failed
[   79.707043][ T6554] FAT-fs (loop0): Directory bread(block 72) failed
[   79.709231][ T6554] FAT-fs (loop0): Directory bread(block 73) failed
[   80.380577][ T5235] Bluetooth: hci0: command tx timeout
[   81.548687][   T33] audit: type=1326 audit(1755507147.118:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[   81.583350][   T33] audit: type=1326 audit(1755507147.118:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.203" exe="/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[   81.609878][   T33] audit: type=1326 audit(1755507147.118:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[   81.620262][   T33] audit: type=1326 audit(1755507147.118:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6573 comm="syz.3.203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[   81.940266][ T6598] loop0: detected capacity change from 0 to 1024
[   81.968920][ T6598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[   81.977540][ T6598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.994253][   T33] audit: type=1800 audit(1755507147.568:8): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.213" name="file1" dev="loop0" ino=15 res=0 errno=0
[   82.001877][ T6598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.213: bg 0: block 88: padding at end of block bitmap is not set
[   82.044809][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.407321][ T6635] loop0: detected capacity change from 0 to 128
[   82.450807][ T5235] Bluetooth: hci0: command tx timeout
[   82.530934][ T6620] loop2: detected capacity change from 0 to 32768
[   82.553873][ T6620] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   82.564378][ T6644] loop0: detected capacity change from 0 to 128
[   82.567898][ T6620] XFS (loop2): Ending clean mount
[   82.580656][   T33] audit: type=1800 audit(1755507148.148:9): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="file1" dev="loop0" ino=1048619 res=0 errno=0
[   83.053413][ T5844] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   83.221670][ T6662] Bluetooth: MGMT ver 1.23
[   83.228159][ T6662] Bluetooth: hci0: load_link_keys: too big key_count value 32768
[   83.305431][ T6664] loop3: detected capacity change from 0 to 1024
[   83.360150][   T27] hfsplus: b-tree write err: -5, ino 4
[   83.526393][ T6674] netlink: 536 bytes leftover after parsing attributes in process `syz.3.243'.
[   83.665967][ T6562] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.826485][ T6562] usb 3-1: Using ep0 maxpacket: 8
[   83.859647][ T6562] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[   83.892564][ T6562] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[   83.896667][ T6562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[   84.110477][ T6562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   84.138846][ T6562] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   84.153569][ T6562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.156966][ T6562] usb 3-1: Product: syz
[   84.158404][ T6562] usb 3-1: Manufacturer: syz
[   84.159985][ T6562] usb 3-1: SerialNumber: syz
[   84.171845][ T6562] usb 3-1: config 0 descriptor??
[   84.181385][ T6562] powermate 3-1:0.0: probe with driver powermate failed with error -5
[   84.280921][ T6685] loop0: detected capacity change from 0 to 32768
[   84.316759][ T6685] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   84.316772][ T6685]   allowing incompatible features above 0.0: (unknown version)
[   84.316776][ T6685]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   84.334743][ T6685] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   84.338179][ T6685] bcachefs (loop0): initializing new filesystem
[   84.346691][ T6685] bcachefs (loop0): going read-write
[   84.351920][ T6685] bcachefs (loop0): marking superblocks
[   84.360126][ T6685] bcachefs (loop0): initializing freespace
[   84.364760][ T6685] bcachefs (loop0): done initializing freespace
[   84.369619][ T6685] bcachefs (loop0): reading snapshots table
[   84.372079][ T6685] bcachefs (loop0): reading snapshots done
[   84.384232][ T6562] usb 3-1: USB disconnect, device number 5
[   84.410529][ T6685] bcachefs (loop0): done starting filesystem
[   84.452101][ T5850] bcachefs (loop0): shutting down
[   84.454304][ T5850] bcachefs (loop0): going read-only
[   84.462781][ T5850] bcachefs (loop0): finished waiting for writes to stop
[   84.466221][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   84.485501][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2
[   84.491336][ T5850] bcachefs (loop0): clean shutdown complete, journal seq 3
[   84.494922][ T5850] bcachefs (loop0): marking filesystem clean
[   84.522464][ T5850] bcachefs (loop0): shutdown complete
[   84.657379][ T1278] IPVS: starting estimator thread 0...
[   84.660539][ T6703] tipc: Started in network mode
[   84.662391][ T6703] tipc: Node identity ac1414aa, cluster identity 4711
[   84.665637][ T6703] tipc: Enabled bearer <udp:s>, priority 10
[   84.704488][ T6706] loop6: detected capacity change from 0 to 524287999
[   84.727049][ T5842] Buffer I/O error on dev loop6, logical block 65535999, async page read
[   84.740605][ T6704] IPVS: using max 80 ests per chain, 192000 per kthread
[   85.114558][ T6716] loop3: detected capacity change from 0 to 32768
[   85.123088][ T6716] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.254 (6716)
[   85.139045][ T6716] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.144020][ T6716] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   85.193257][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   85.196085][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   85.200164][   T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3
[   85.211309][   T10] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0
[   85.219612][ T6716] BTRFS info (device loop3): rebuilding free space tree
[   85.238159][ T6716] BTRFS info (device loop3): disabling free space tree
[   85.241324][ T6716] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.244467][ T6716] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.278903][ T6357] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.468256][ T6764] loop3: detected capacity change from 0 to 256
[   85.490197][ T6764] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   85.781697][   T10] tipc: Node number set to 2886997162
[   85.862195][ T6782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.865499][ T6782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.881154][ T6770] loop3: detected capacity change from 0 to 40427
[   85.890543][ T6770] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   85.893403][ T6770] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   85.931952][ T6770] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.937273][ T6770] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   85.939869][ T6770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   85.970957][ T6791] warning: `syz.0.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.978107][ T6770] syz.3.270: attempt to access beyond end of device
[   85.978107][ T6770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.986484][ T6770] syz.3.270: attempt to access beyond end of device
[   85.986484][ T6770] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   85.999539][ T6793] binder: 6792:6793 ioctl 4018620d 0 returned -22
[   86.017705][ T6770] syz.3.270: attempt to access beyond end of device
[   86.017705][ T6770] loop3: rw=34817, sector=45104, nr_sectors = 8 limit=40427
[   86.068170][ T6796] binder: 6792:6796 ioctl c0306201 200000000540 returned -14
[   86.633336][ T6798] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[   86.798629][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[   86.966052][ T6810] loop2: detected capacity change from 0 to 1024
[   87.045606][   T26] hfsplus: b-tree write err: -5, ino 4
[   87.451692][ T6818] syzkaller0: entered promiscuous mode
[   87.453832][ T6818] syzkaller0: entered allmulticast mode
[   87.494961][ T6824] loop3: detected capacity change from 0 to 512
[   87.511578][ T6824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   87.515613][ T6824] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.633931][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   87.729844][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   87.733538][ T6837] netlink: 'syz.2.295': attribute type 2 has an invalid length.
[   87.736095][ T6837] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   87.743445][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'.
[   88.704968][ T6844] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.298'.
[   89.073591][ T6861] loop0: detected capacity change from 0 to 256
[   89.078994][ T6861] exfat: Unknown parameter 'pcr'
[   89.423505][ T6859] team0: Device gtp0 is of different type
[   90.158649][ T6883] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   90.742880][ T6902] loop3: detected capacity change from 0 to 32768
[   90.748086][ T6902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.319 (6902)
[   90.770849][ T6902] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.776289][ T6902] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   90.779583][ T6902] BTRFS info (device loop3): using free-space-tree
[   90.863547][ T6357] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.188568][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'.
[   91.219102][ T6956] netlink: 'syz.0.326': attribute type 6 has an invalid length.
[   91.231945][ T6956] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.326'.
[   91.345275][ T6964] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   91.679537][ T6967] loop3: detected capacity change from 0 to 32768
[   91.713755][ T6967] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.746534][ T6967] XFS (loop3): Ending clean mount
[   91.767037][ T6967] XFS (loop3): Quotacheck needed: Please wait.
[   91.805835][ T7001] netlink: 'syz.0.336': attribute type 3 has an invalid length.
[   91.873885][ T7008] loop2: detected capacity change from 0 to 8
[   91.908619][ T6967] XFS (loop3): Quotacheck: Done.
[   91.927897][ T7008] SQUASHFS error: Failed to read block 0x2d7: -5
[   91.935106][ T7010] loop0: detected capacity change from 0 to 256
[   91.960815][ T7008] SQUASHFS error: Unable to read metadata cache entry [2d5]
[   91.964901][ T7008] SQUASHFS error: Failed to read block 0x8f: -5
[   91.968404][   T33] audit: type=1800 audit(1755507157.538:10): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.337" name="file1" dev="loop2" ino=5 res=0 errno=0
[   92.029748][ T6357] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.046050][ T7010] FAT-fs (loop0): Directory bread(block 64) failed
[   92.048957][ T7010] FAT-fs (loop0): Directory bread(block 65) failed
[   92.070658][ T7010] FAT-fs (loop0): Directory bread(block 66) failed
[   92.086963][ T7010] FAT-fs (loop0): Directory bread(block 67) failed
[   92.090016][ T7010] FAT-fs (loop0): Directory bread(block 68) failed
[   92.102393][ T7010] FAT-fs (loop0): Directory bread(block 69) failed
[   92.105595][ T7010] FAT-fs (loop0): Directory bread(block 70) failed
[   92.120560][ T7010] FAT-fs (loop0): Directory bread(block 71) failed
[   92.128109][ T7010] FAT-fs (loop0): Directory bread(block 72) failed
[   92.133887][ T7010] FAT-fs (loop0): Directory bread(block 73) failed
[   92.138899][ T7015] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   92.162052][ T7015] : entered promiscuous mode
[   92.665590][ T7053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'.
[   92.669533][ T7053] unsupported nlmsg_type 40
[   92.772529][ T7044] loop0: detected capacity change from 0 to 32768
[   92.780292][ T7044] (syz.0.356,7044,0):ocfs2_verify_volume:2322 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[   92.788921][ T7044] (syz.0.356,7044,0):ocfs2_verify_volume:2331 ERROR: status = -22
[   92.794797][ T7044] (syz.0.356,7044,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   92.797751][ T7044] (syz.0.356,7044,0):ocfs2_fill_super:1177 ERROR: status = -22
[   93.130554][ T7083] program syz.3.371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.278958][ T7089] loop3: detected capacity change from 0 to 8
[   93.610582][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.765114][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.770088][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[   93.781169][   T10] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[   93.785288][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.788979][   T10] usb 4-1: Product: syz
[   93.791413][   T10] usb 4-1: Manufacturer: syz
[   93.793614][   T10] usb 4-1: SerialNumber: syz
[   93.799663][   T10] usb 4-1: config 0 descriptor??
[   94.237758][ T5235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   94.241018][ T5235] Bluetooth: hci1: Injecting HCI hardware error event
[   94.244104][ T5235] Bluetooth: hci1: hardware error 0x00
[   94.251244][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   94.275007][   T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[   94.292844][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.424533][ T5891] usb 4-1: USB disconnect, device number 2
[   94.875524][ T7111] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   94.905179][ T7113] loop2: detected capacity change from 0 to 16
[   94.957948][ T7117] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   94.994077][ T7119] loop3: detected capacity change from 0 to 2048
[   95.005167][ T7119] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   95.011370][ T7119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.016372][ T7119] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh
[   95.019807][ T7119] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0
[   95.054778][ T7121] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   95.054778][ T7121] The task syz.2.384 (7121) triggered the difference, watch for misbehavior.
[   95.072642][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[   96.290862][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   96.315807][ T7156] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.354057][ T7158] gretap0: entered promiscuous mode
[   96.434249][ T7160] loop3: detected capacity change from 0 to 8192
[   96.518772][ T7162] syz.3.404: attempt to access beyond end of device
[   96.518772][ T7162] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0
[   96.527154][ T7162] SQUASHFS error: Failed to read block 0x0: -5
[   96.540999][ T7162] unable to read squashfs_super_block
[   96.951951][ T7169] loop2: detected capacity change from 0 to 32768
[   97.039221][ T7169] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   97.039240][ T7169]   allowing incompatible features above 0.0: (unknown version)
[   97.039244][ T7169]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   97.056244][ T7169] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   97.058934][ T7169] bcachefs (loop2): initializing new filesystem
[   97.065722][ T7169] bcachefs (loop2): going read-write
[   97.075386][ T7169] bcachefs (loop2): marking superblocks
[   97.080919][ T7169] bcachefs (loop2): initializing freespace
[   97.085135][ T7169] bcachefs (loop2): done initializing freespace
[   97.088529][ T7169] bcachefs (loop2): reading snapshots table
[   97.091281][ T7169] bcachefs (loop2): reading snapshots done
[   97.107970][ T7169] bcachefs (loop2): done starting filesystem
[   97.232803][ T5844] bcachefs (loop2): shutting down
[   97.234946][ T5844] bcachefs (loop2): going read-only
[   97.236730][ T5844] bcachefs (loop2): finished waiting for writes to stop
[   97.242981][ T5844] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   97.274979][ T5844] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   97.290982][ T5844] bcachefs (loop2): clean shutdown complete, journal seq 4
[   97.296316][ T5844] bcachefs (loop2): marking filesystem clean
[   97.324147][ T5844] bcachefs (loop2): shutdown complete
[   97.590156][ T7187] loop3: detected capacity change from 0 to 40427
[   97.889938][ T7187] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.894298][ T7187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   97.935715][ T6357] syz-executor: attempt to access beyond end of device
[   97.935715][ T6357] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   97.941841][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   97.941861][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.941868][ T6357] Call Trace:
[   97.941873][ T6357]  <TASK>
[   97.941878][ T6357]  dump_stack_lvl+0x189/0x250
[   97.941900][ T6357]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.941914][ T6357]  ? __pfx_queue_work_on+0x10/0x10
[   97.941927][ T6357]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.941942][ T6357]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.941965][ T6357]  f2fs_handle_critical_error+0x37c/0x540
[   97.941987][ T6357]  f2fs_write_end_io+0x886/0xb60
[   97.942011][ T6357]  __submit_merged_bio+0x27a/0x6a0
[   97.942031][ T6357]  __submit_merged_write_cond+0x255/0x530
[   97.942052][ T6357]  f2fs_write_data_pages+0x261d/0x3000
[   97.942093][ T6357]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.942150][ T6357]  ? unwind_next_frame+0xa5/0x2390
[   97.942162][ T6357]  ? rcu_is_watching+0x15/0xb0
[   97.942173][ T6357]  ? __kasan_check_byte+0x12/0x40
[   97.942200][ T6357]  ? __lock_acquire+0xab9/0xd20
[   97.942223][ T6357]  ? do_raw_spin_lock+0x121/0x290
[   97.942246][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   97.942258][ T6357]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   97.942274][ T6357]  do_writepages+0x32e/0x550
[   97.942297][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   97.942314][ T6357]  filemap_fdatawrite+0x199/0x240
[   97.942330][ T6357]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   97.942345][ T6357]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[   97.942391][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   97.942432][ T6357]  f2fs_sync_dirty_inodes+0x31f/0x830
[   97.942457][ T6357]  f2fs_write_checkpoint+0x95a/0x1df0
[   97.942486][ T6357]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   97.942538][ T6357]  ? kill_f2fs_super+0x298/0x6c0
[   97.942554][ T6357]  kill_f2fs_super+0x2c3/0x6c0
[   97.942570][ T6357]  ? __pfx_kill_f2fs_super+0x10/0x10
[   97.942580][ T6357]  ? radix_tree_delete_item+0x2b6/0x400
[   97.942599][ T6357]  ? shrinker_free+0x2ce/0x3e0
[   97.942614][ T6357]  deactivate_locked_super+0xbc/0x130
[   97.942630][ T6357]  cleanup_mnt+0x425/0x4c0
[   97.942643][ T6357]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.942661][ T6357]  task_work_run+0x1d4/0x260
[   97.942679][ T6357]  ? __pfx_task_work_run+0x10/0x10
[   97.942693][ T6357]  ? __x64_sys_umount+0x122/0x160
[   97.942712][ T6357]  ? exit_to_user_mode_loop+0x40/0x110
[   97.942731][ T6357]  exit_to_user_mode_loop+0xec/0x110
[   97.942748][ T6357]  do_syscall_64+0x2bd/0x3b0
[   97.942764][ T6357]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.942799][ T6357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.942812][ T6357]  ? exc_page_fault+0x9f/0xf0
[   97.942829][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.942840][ T6357] RIP: 0033:0x7f71b0b8ff17
[   97.942851][ T6357] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   97.942861][ T6357] RSP: 002b:00007fff34418478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   97.942874][ T6357] RAX: 0000000000000000 RBX: 00007f71b0c11c05 RCX: 00007f71b0b8ff17
[   97.942882][ T6357] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff34418530
[   97.942888][ T6357] RBP: 00007fff34418530 R08: 0000000000000000 R09: 0000000000000000
[   97.942895][ T6357] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff344195c0
[   97.942902][ T6357] R13: 00007f71b0c11c05 R14: 0000000000017e0a R15: 00007fff34419600
[   97.942921][ T6357]  </TASK>
[   97.944734][ T6357] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   98.098693][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   98.098713][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.098720][ T6357] Call Trace:
[   98.098726][ T6357]  <TASK>
[   98.098731][ T6357]  dump_stack_lvl+0x189/0x250
[   98.098754][ T6357]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.098769][ T6357]  ? __pfx_queue_work_on+0x10/0x10
[   98.098780][ T6357]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.098796][ T6357]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.098821][ T6357]  f2fs_handle_critical_error+0x37c/0x540
[   98.098845][ T6357]  f2fs_write_end_io+0x886/0xb60
[   98.098872][ T6357]  __submit_merged_bio+0x27a/0x6a0
[   98.098895][ T6357]  __submit_merged_write_cond+0x255/0x530
[   98.098918][ T6357]  f2fs_write_data_pages+0x261d/0x3000
[   98.098966][ T6357]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.099031][ T6357]  ? unwind_next_frame+0xa5/0x2390
[   98.099043][ T6357]  ? rcu_is_watching+0x15/0xb0
[   98.099054][ T6357]  ? __kasan_check_byte+0x12/0x40
[   98.099082][ T6357]  ? __lock_acquire+0xab9/0xd20
[   98.099107][ T6357]  ? do_raw_spin_lock+0x121/0x290
[   98.099131][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   98.099146][ T6357]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.099190][ T6357]  do_writepages+0x32e/0x550
[   98.099216][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   98.099234][ T6357]  filemap_fdatawrite+0x199/0x240
[   98.099251][ T6357]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   98.099265][ T6357]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[   98.099319][ T6357]  ? do_raw_spin_unlock+0x4d/0x240
[   98.099338][ T6357]  f2fs_sync_dirty_inodes+0x31f/0x830
[   98.099364][ T6357]  f2fs_write_checkpoint+0x95a/0x1df0
[   98.099396][ T6357]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.099484][ T6357]  ? kill_f2fs_super+0x298/0x6c0
[   98.099502][ T6357]  kill_f2fs_super+0x2c3/0x6c0
[   98.099520][ T6357]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.099529][ T6357]  ? radix_tree_delete_item+0x2b6/0x400
[   98.099552][ T6357]  ? shrinker_free+0x2ce/0x3e0
[   98.099567][ T6357]  deactivate_locked_super+0xbc/0x130
[   98.099584][ T6357]  cleanup_mnt+0x425/0x4c0
[   98.099596][ T6357]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.099615][ T6357]  task_work_run+0x1d4/0x260
[   98.099632][ T6357]  ? __pfx_task_work_run+0x10/0x10
[   98.099644][ T6357]  ? __x64_sys_umount+0x122/0x160
[   98.099664][ T6357]  ? exit_to_user_mode_loop+0x40/0x110
[   98.099683][ T6357]  exit_to_user_mode_loop+0xec/0x110
[   98.099701][ T6357]  do_syscall_64+0x2bd/0x3b0
[   98.099716][ T6357]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.099731][ T6357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.099743][ T6357]  ? exc_page_fault+0x9f/0xf0
[   98.099761][ T6357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.099772][ T6357] RIP: 0033:0x7f71b0b8ff17
[   98.099785][ T6357] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   98.099794][ T6357] RSP: 002b:00007fff34418478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.099808][ T6357] RAX: 0000000000000000 RBX: 00007f71b0c11c05 RCX: 00007f71b0b8ff17
[   98.099816][ T6357] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff34418530
[   98.099823][ T6357] RBP: 00007fff34418530 R08: 0000000000000000 R09: 0000000000000000
[   98.099830][ T6357] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff344195c0
[   98.099837][ T6357] R13: 00007f71b0c11c05 R14: 0000000000017e0a R15: 00007fff34419600
[   98.099861][ T6357]  </TASK>
[   98.102238][ T6357] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   98.353912][ T7205] loop0: detected capacity change from 0 to 64
[   98.359354][ T7205] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   98.632615][ T7218] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.422'.
[   98.872351][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'.
[   98.921955][ T1278] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.080708][ T1278] usb 4-1: Using ep0 maxpacket: 32
[   99.087372][ T1278] usb 4-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2
[   99.092594][ T1278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.096043][ T1278] usb 4-1: Product: syz
[   99.097935][ T1278] usb 4-1: Manufacturer: syz
[   99.100003][ T1278] usb 4-1: SerialNumber: syz
[   99.106106][ T1278] usb 4-1: config 0 descriptor??
[   99.113310][ T1278] xr_serial 4-1:0.0: invalid descriptor buffer length
[   99.300838][ T7248] loop2: detected capacity change from 0 to 16
[   99.326277][ T7248] erofs (device loop2): mounted with root inode @ nid 36.
[   99.379607][ T7220] loop3: detected capacity change from 0 to 128
[   99.398292][ T7220] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   99.418489][ T7220] hpfs: filesystem error: improperly stopped
[   99.425198][ T7220] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   99.428628][ T7220] hpfs: You really don't want any checks? You are crazy...
[   99.433143][ T7220] hpfs: hpfs_map_sector(): read error
[   99.451881][ T7220] hpfs: code page support is disabled
[   99.455206][ T7220] hpfs: hpfs_map_sector(): read error
[   99.457880][ T7220] hpfs: hpfs_map_sector(): read error
[   99.460153][ T7220] hpfs: filesystem error: unable to find root dir
[   99.486769][ T7220] loop3: detected capacity change from 0 to 16
[   99.494624][ T7220] erofs: Unknown parameter '00000000000000000005'
[   99.638148][ T7257] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.979680][ T7263] loop2: detected capacity change from 0 to 40427
[   99.986898][ T7263] F2FS-fs (loop2): invalid crc value
[  100.024159][ T7263] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.027929][ T7263] F2FS-fs (loop2): Start checkpoint disabled!
[  100.035730][ T7263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  100.051177][   T33] audit: type=1800 audit(1755507165.628:11): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.436" name="file1" dev="loop2" ino=10 res=0 errno=0
[  100.056743][ T7263] syz.2.436: attempt to access beyond end of device
[  100.056743][ T7263] loop2: rw=2049, sector=77824, nr_sectors = 800 limit=40427
[  100.078638][   T33] audit: type=1800 audit(1755507165.648:12): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.436" name="file1" dev="loop2" ino=10 res=0 errno=0
[  100.092264][ T7263] syz.2.436: attempt to access beyond end of device
[  100.092264][ T7263] loop2: rw=2049, sector=78624, nr_sectors = 800 limit=40427
[  100.117950][ T1088] kworker/u10:4: attempt to access beyond end of device
[  100.117950][ T1088] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.125083][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u10:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  100.125103][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.125111][ T1088] Workqueue: writeback wb_workfn (flush-7:2)
[  100.125130][ T1088] Call Trace:
[  100.125135][ T1088]  <TASK>
[  100.125141][ T1088]  dump_stack_lvl+0x189/0x250
[  100.125159][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.125171][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[  100.125183][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.125198][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.125223][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  100.125269][ T1088]  f2fs_write_end_io+0x886/0xb60
[  100.125298][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  100.125320][ T1088]  __submit_merged_write_cond+0x255/0x530
[  100.125343][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  100.125420][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.125451][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  100.125494][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  100.125520][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  100.125538][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  100.125558][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  100.125586][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.125604][ T1088]  do_writepages+0x32e/0x550
[  100.125625][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  100.125637][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  100.125660][ T1088]  __writeback_single_inode+0x145/0xff0
[  100.125675][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  100.125693][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  100.125731][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  100.125784][ T1088]  ? rcu_is_watching+0x15/0xb0
[  100.125805][ T1088]  wb_writeback+0x43b/0xaf0
[  100.125827][ T1088]  ? queue_io+0x3c1/0x590
[  100.125845][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  100.125868][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.125887][ T1088]  wb_workfn+0x409/0xef0
[  100.125913][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  100.125931][ T1088]  ? __lock_acquire+0xab9/0xd20
[  100.125957][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  100.125975][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.125987][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  100.125997][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  100.126010][ T1088]  process_scheduled_works+0xae1/0x17b0
[  100.126048][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  100.126076][ T1088]  worker_thread+0x8a0/0xda0
[  100.126113][ T1088]  kthread+0x711/0x8a0
[  100.126130][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  100.126142][ T1088]  ? __pfx_kthread+0x10/0x10
[  100.126158][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.126170][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.126184][ T1088]  ? __pfx_kthread+0x10/0x10
[  100.126200][ T1088]  ret_from_fork+0x3fc/0x770
[  100.126215][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  100.126233][ T1088]  ? __switch_to_asm+0x39/0x70
[  100.126247][ T1088]  ? __switch_to_asm+0x33/0x70
[  100.126260][ T1088]  ? __pfx_kthread+0x10/0x10
[  100.126275][ T1088]  ret_from_fork_asm+0x1a/0x30
[  100.126305][ T1088]  </TASK>
[  100.127218][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  100.720576][   T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  100.870610][   T47] usb 3-1: Using ep0 maxpacket: 16
[  100.874977][   T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.879484][   T47] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.883460][   T47] usb 3-1: config 1 has no interface number 1
[  100.886527][   T47] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  100.892163][   T47] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  100.897031][   T47] usb 3-1: config 1 interface 2 has no altsetting 0
[  100.902852][   T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.906898][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.910630][   T47] usb 3-1: Product: syz
[  100.912678][   T47] usb 3-1: Manufacturer: syz
[  100.914817][   T47] usb 3-1: SerialNumber: syz
[  101.127519][   T47] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  101.131932][   T47] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  101.135477][   T47] usb 3-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  101.139150][   T47] usb 3-1: selecting invalid altsetting 0
[  101.147532][   T47] usb 3-1: USB disconnect, device number 6
[  101.161806][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.621176][ T6562] usb 4-1: USB disconnect, device number 3
[  101.695159][ T7269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.438'.
[  101.816604][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'.
[  101.827023][ T7278] vlan2: entered allmulticast mode
[  101.829471][ T7278] bridge0: port 3(vlan2) entered blocking state
[  101.835820][ T7278] bridge0: port 3(vlan2) entered disabled state
[  101.840058][ T7278] vlan2: entered promiscuous mode
[  101.910812][   T33] audit: type=1326 audit(1755507167.448:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429df8ebe9 code=0x7ffc0000
[  101.931811][   T33] audit: type=1326 audit(1755507167.448:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429df8ebe9 code=0x7ffc0000
[  102.024053][ T7283] netlink: 'syz.2.444': attribute type 1 has an invalid length.
[  102.125205][ T7290] loop2: detected capacity change from 0 to 256
[  102.136407][ T7290] FAT-fs (loop2): Directory bread(block 1285) failed
[  102.146267][ T7290] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  102.206634][ T7293] usb usb8: usbfs: process 7293 (syz.2.448) did not claim interface 0 before use
[  102.681615][ T7303] loop2: detected capacity change from 0 to 32768
[  102.685364][ T7303] XFS: ikeep mount option is deprecated.
[  102.704019][ T7303] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.731177][ T7303] XFS (loop2): Ending clean mount
[  102.735034][ T7303] XFS (loop2): Quotacheck needed: Please wait.
[  102.759506][ T7303] XFS (loop2): Quotacheck: Done.
[  102.797943][ T7303] XFS (loop2): User initiated shutdown received.
[  102.800151][ T7303] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  102.805375][ T7303] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  102.882743][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.026443][ T7319] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  103.091202][ T7325] loop2: detected capacity change from 0 to 2048
[  103.103443][ T7325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.352687][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  105.023133][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'.
[  105.823620][ T7389] loop2: detected capacity change from 0 to 32768
[  106.154982][ T6562] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.390555][ T6562] usb 3-1: Using ep0 maxpacket: 32
[  106.395202][ T6562] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  106.398395][ T6562] usb 3-1: config 0 has no interface number 0
[  106.423972][ T6562] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  106.433439][ T6562] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  106.436395][ T6562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.438997][ T6562] usb 3-1: Product: syz
[  106.440364][ T6562] usb 3-1: Manufacturer: syz
[  106.470535][ T6562] usb 3-1: SerialNumber: syz
[  106.490093][ T6562] usb 3-1: config 0 descriptor??
[  106.510233][ T7390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  106.759780][ T7406] loop3: detected capacity change from 0 to 512
[  106.772076][ T7406] EXT4-fs: Ignoring removed orlov option
[  106.778822][ T7406] EXT4-fs: Ignoring removed mblk_io_submit option
[  106.795335][ T7406] EXT4-fs (loop3): orphan cleanup on readonly fs
[  106.799732][ T7406] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  106.822135][ T7406] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.494: attempt to clear invalid blocks 2 len 1
[  106.842324][ T7406] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  106.871684][ T7406] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.494: invalid indirect mapped block 1819239214 (level 0)
[  106.896985][ T7406] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.494: invalid indirect mapped block 1819239214 (level 1)
[  106.937832][ T7406] EXT4-fs (loop3): 1 truncate cleaned up
[  106.962868][ T7406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.059740][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.136084][ T6562] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  107.150703][ T6562] asix 3-1:0.191: probe with driver asix failed with error -71
[  107.168802][ T7421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.184329][ T7420] loop0: detected capacity change from 0 to 256
[  107.199490][ T6562] usb 3-1: USB disconnect, device number 7
[  107.610095][ T7428] loop3: detected capacity change from 0 to 40427
[  107.614598][ T7428] F2FS-fs (loop3): Image doesn't support compression
[  107.617569][ T7428] F2FS-fs (loop3): build fault injection rate: 690
[  107.630389][ T7428] F2FS-fs (loop3): build fault injection type: 0x35f7
[  107.638771][ T7428] F2FS-fs (loop3): invalid crc value
[  107.755850][ T7428] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.789244][ T7428] F2FS-fs (loop3): Start checkpoint disabled!
[  107.802593][ T7428] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  107.901211][   T27] kworker/u10:0: attempt to access beyond end of device
[  107.901211][   T27] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.907210][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  107.907228][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.907236][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  107.907257][   T27] Call Trace:
[  107.907262][   T27]  <TASK>
[  107.907292][   T27]  dump_stack_lvl+0x189/0x250
[  107.907313][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.907327][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  107.907338][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.907354][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.907377][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  107.907398][   T27]  f2fs_write_end_io+0x886/0xb60
[  107.907423][   T27]  __submit_merged_bio+0x27a/0x6a0
[  107.907444][   T27]  __submit_merged_write_cond+0x255/0x530
[  107.907483][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  107.907526][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.907554][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  107.907592][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  107.907617][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  107.907634][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  107.907654][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  107.907680][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.907698][   T27]  do_writepages+0x32e/0x550
[  107.907717][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  107.907729][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  107.907750][   T27]  __writeback_single_inode+0x145/0xff0
[  107.907765][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  107.907782][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  107.907816][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  107.907862][   T27]  ? rcu_is_watching+0x15/0xb0
[  107.907881][   T27]  wb_writeback+0x43b/0xaf0
[  107.907902][   T27]  ? queue_io+0x3c1/0x590
[  107.907919][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  107.907940][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.907958][   T27]  wb_workfn+0x409/0xef0
[  107.907981][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  107.907998][   T27]  ? __lock_acquire+0xab9/0xd20
[  107.908022][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  107.908039][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.908051][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  107.908062][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  107.908075][   T27]  process_scheduled_works+0xae1/0x17b0
[  107.908109][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.908139][   T27]  worker_thread+0x8a0/0xda0
[  107.908171][   T27]  kthread+0x711/0x8a0
[  107.908188][   T27]  ? __pfx_worker_thread+0x10/0x10
[  107.908200][   T27]  ? __pfx_kthread+0x10/0x10
[  107.908216][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.908229][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.908243][   T27]  ? __pfx_kthread+0x10/0x10
[  107.908259][   T27]  ret_from_fork+0x3fc/0x770
[  107.908299][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  107.908316][   T27]  ? __switch_to_asm+0x39/0x70
[  107.908330][   T27]  ? __switch_to_asm+0x33/0x70
[  107.908343][   T27]  ? __pfx_kthread+0x10/0x10
[  107.908358][   T27]  ret_from_fork_asm+0x1a/0x30
[  107.908384][   T27]  </TASK>
[  107.908411][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.359969][ T7469] loop0: detected capacity change from 0 to 764
[  108.397903][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'.
[  109.550569][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.792303][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  109.796838][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.804175][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.808579][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  109.815781][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  109.819698][   T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  109.874556][   T10] usb 4-1: Manufacturer: syz
[  109.879326][   T10] usb 4-1: config 0 descriptor??
[  110.355941][   T10] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  110.375880][   T10] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  110.594919][ T5891] usb 4-1: USB disconnect, device number 4
[  110.856618][ T7531] loop0: detected capacity change from 0 to 1024
[  110.875221][ T7531] hfsplus: xattr searching failed
[  110.898124][  T187] hfsplus: bad catalog file entry
[  110.900329][  T187] hfsplus: b-tree write err: -5, ino 3
[  110.932919][ T7533] loop0: detected capacity change from 0 to 2048
[  110.956114][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.969066][ T7533] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.550: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  110.979342][ T7533] EXT4-fs (loop0): Remounting filesystem read-only
[  110.997320][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.241758][ T7550] netlink: 'syz.0.557': attribute type 1 has an invalid length.
[  111.244551][ T7550] netlink: 228 bytes leftover after parsing attributes in process `syz.0.557'.
[  111.298634][ T7552] loop0: detected capacity change from 0 to 2048
[  111.309980][ T7552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.071006][ T7555] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 212992 lbcount: 217088 extent 129+181248
[  112.728345][ T7568] netlink: 256 bytes leftover after parsing attributes in process `syz.0.563'.
[  113.111778][ T7578] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.566'.
[  113.116143][ T7578] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.566'.
[  113.742543][ T7590] netlink: zone id is out of range
[  114.309341][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.2.574'.
[  114.472061][ T7596] bridge0: port 3(syz_tun) entered blocking state
[  114.477357][ T7596] bridge0: port 3(syz_tun) entered disabled state
[  114.484262][ T7596] syz_tun: entered allmulticast mode
[  114.492963][ T7596] syz_tun: entered promiscuous mode
[  114.496734][ T7596] bridge0: port 3(syz_tun) entered blocking state
[  114.499627][ T7596] bridge0: port 3(syz_tun) entered forwarding state
[  114.704831][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[  114.758847][ T7604] bridge: RTM_NEWNEIGH with invalid ether address
[  115.467925][ T7638] loop3: detected capacity change from 0 to 4096
[  115.629710][ T7642] netlink: 'syz.3.598': attribute type 1 has an invalid length.
[  115.634622][ T7642] netlink: 144 bytes leftover after parsing attributes in process `syz.3.598'.
[  115.638303][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'.
[  116.006818][ T7656] loop2: detected capacity change from 0 to 32768
[  116.013357][ T7656] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.605 (7656)
[  116.028980][ T7656] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  116.033668][ T7656] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  116.041230][ T7656] BTRFS info (device loop2): using free-space-tree
[  116.172091][   T33] audit: type=1800 audit(1755507181.748:15): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="file1" dev="loop2" ino=260 res=0 errno=0
[  116.194206][ T5844] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  116.701722][ T7682] capability: warning: `syz.2.608' uses deprecated v2 capabilities in a way that may be insecure
[  116.710859][ T5907] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.880992][ T5907] usb 4-1: Using ep0 maxpacket: 32
[  116.889440][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short
[  116.894576][ T5907] usb 4-1: config 2 has an invalid interface number: 189 but max is 0
[  116.897485][ T5907] usb 4-1: config 2 has no interface number 0
[  116.899635][ T5907] usb 4-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping
[  116.904860][ T5907] usb 4-1: config 2 interface 189 has no altsetting 0
[  116.926640][ T5907] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52
[  116.930724][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.934129][ T5907] usb 4-1: Product: syz
[  116.935934][ T5907] usb 4-1: Manufacturer: syz
[  116.937967][ T5907] usb 4-1: SerialNumber: syz
[  116.976945][ T7694] loop2: detected capacity change from 0 to 16384
[  117.019889][ T7695] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.125717][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'.
[  117.195764][ T7699] loop2: detected capacity change from 0 to 2048
[  117.203777][ T7699] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504
[  117.215765][ T7699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.509614][ T7703] loop2: detected capacity change from 0 to 32768
[  117.522961][ T7703] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  117.537931][ T7703] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  117.574781][ T7703] overlayfs: upper fs does not support tmpfile.
[  117.583452][ T7703] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  117.586621][ T7703] overlayfs: failed to set xattr on upper
[  117.589212][ T7703] overlayfs: ...falling back to redirect_dir=nofollow.
[  117.592319][ T7703] overlayfs: ...falling back to index=off.
[  117.594943][ T7703] overlayfs: ...falling back to uuid=null.
[  117.597576][ T7703] overlayfs: upper fs missing required features.
[  117.631968][ T5844] ocfs2: Unmounting device (7,2) on (node local)
[  118.043837][ T7711] loop2: detected capacity change from 0 to 32768
[  118.058961][ T7711] 
[  118.058961][ T7711]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.058961][ T7711] 
[  118.121873][ T5844] non-latin1 character 0x3ff found in JFS file name
[  118.129165][ T5844] mount with iocharset=utf8 to access
[  118.136581][ T5844] 
[  118.136581][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.136581][ T5844] 
[  118.140524][ T5844] 
[  118.140524][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.140524][ T5844] 
[  118.145085][ T5844] 
[  118.145085][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.145085][ T5844] 
[  118.148885][ T5844] 
[  118.148885][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.148885][ T5844] 
[  118.168291][  T115] 
[  118.168291][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.168291][  T115] 
[  118.175439][ T5844] read_mapping_page failed!
[  118.179886][ T5844] ERROR: (device loop2): txCommit: 
[  118.179886][ T5844] 
[  118.190713][ T5844] ERROR: (device loop2): remounting filesystem as read-only
[  118.255122][ T6373] bridge0: port 3(syz_tun) entered disabled state
[  118.277403][ T6373] syz_tun (unregistering): left allmulticast mode
[  118.279800][ T6373] syz_tun (unregistering): left promiscuous mode
[  118.283964][ T6373] bridge0: port 3(syz_tun) entered disabled state
[  118.478873][ T5905] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.539311][ T5905] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.626883][ T5905] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.686612][ T5905] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.783086][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.790105][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.796292][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.802067][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.807392][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.832790][ T5905] bridge_slave_1: left allmulticast mode
[  118.837551][ T5905] bridge_slave_1: left promiscuous mode
[  118.839731][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.845536][ T5905] bridge_slave_0: left allmulticast mode
[  118.847811][ T5905] bridge_slave_0: left promiscuous mode
[  118.850243][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.128370][ T5907] usb 4-1: unknown interface protocol 0x3b, assuming v1
[  119.143086][ T5907] usb 4-1: 189:2 : does not exist
[  119.164713][ T5907] usb 4-1: USB disconnect, device number 5
[  119.184289][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.211532][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.216889][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.221805][ T5905] bond0 (unregistering): Released all slaves
[  119.294165][ T5905] bond1 (unregistering): Released all slaves
[  119.370229][ T5905] : left promiscuous mode
[  119.468189][ T7719] chnl_net:caif_netlink_parms(): no params data found
[  119.480542][ T5907] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  119.565856][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.568709][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.576934][ T7719] bridge_slave_0: entered allmulticast mode
[  119.579820][ T7719] bridge_slave_0: entered promiscuous mode
[  119.596998][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.599706][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.605756][ T7719] bridge_slave_1: entered allmulticast mode
[  119.609036][ T7719] bridge_slave_1: entered promiscuous mode
[  119.643927][ T5907] usb 4-1: not running at top speed; connect to a high speed hub
[  119.648502][ T5907] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[  119.652214][ T5907] usb 4-1: config 95 has no interface number 0
[  119.654965][ T5907] usb 4-1: config 95 interface 1 has no altsetting 0
[  119.659919][ T5907] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  119.665935][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.669614][ T5907] usb 4-1: Product: syz
[  119.672175][ T5907] usb 4-1: Manufacturer: syz
[  119.674395][ T5907] usb 4-1: SerialNumber: syz
[  119.677679][ T5905] hsr_slave_0: left promiscuous mode
[  119.681539][ T5905] hsr_slave_1: left promiscuous mode
[  119.684103][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.687236][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.691160][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.694304][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.704675][ T5905] veth1_macvtap: left promiscuous mode
[  119.706894][ T5905] veth0_macvtap: left promiscuous mode
[  119.709070][ T5905] veth1_vlan: left promiscuous mode
[  119.711890][ T5905] veth0_vlan: left promiscuous mode
[  119.973471][ T5907] usb 4-1: USB disconnect, device number 6
[  120.058539][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.079038][ T5905] team0 (unregistering): Port device team_slave_1 removed
[  120.125183][ T5905] team0 (unregistering): Port device team_slave_0 removed
[  120.534292][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.539778][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.566262][ T7719] team0: Port device team_slave_0 added
[  120.570210][ T7719] team0: Port device team_slave_1 added
[  120.612325][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.615823][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.634302][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.644474][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.647453][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.658692][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.709419][ T7719] hsr_slave_0: entered promiscuous mode
[  120.712713][ T7719] hsr_slave_1: entered promiscuous mode
[  120.854264][ T5905] IPVS: stop unused estimator thread 0...
[  120.857726][ T5235] Bluetooth: hci1: command tx timeout
[  120.943970][ T7719] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  120.950976][ T7719] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  120.957867][ T7719] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  120.971479][ T7719] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.067671][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.081784][ T7719] 8021q: adding VLAN 0 to HW filter on device team0
[  121.087965][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.090489][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.106142][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.109325][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.275269][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.484005][   T33] audit: type=1326 audit(1755507187.058:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.633" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x0
[  121.514832][ T7719] veth0_vlan: entered promiscuous mode
[  121.526728][ T7719] veth1_vlan: entered promiscuous mode
[  121.571617][ T7719] veth0_macvtap: entered promiscuous mode
[  121.577278][ T7719] veth1_macvtap: entered promiscuous mode
[  121.591584][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.599170][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.626280][ T5905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.629337][ T5905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.678688][ T5905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.690264][ T5905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.780164][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.783663][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.809258][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.815839][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.411434][ T7826] loop4: detected capacity change from 0 to 512
[  122.457305][ T7826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.467428][ T7826] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.477157][ T7810] loop3: detected capacity change from 0 to 32768
[  122.519987][ T7810] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.565154][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.619754][ T7810] XFS (loop3): Ending clean mount
[  122.632422][ T7810] XFS (loop3): Quotacheck needed: Please wait.
[  122.674169][ T7810] XFS (loop3): Quotacheck: Done.
[  122.743336][   T33] audit: type=1800 audit(1755507188.318:17): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.641" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  122.812432][ T6357] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.941243][ T5235] Bluetooth: hci1: command tx timeout
[  123.626792][   T33] audit: type=1326 audit(1755507189.198:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  123.653521][   T33] audit: type=1326 audit(1755507189.198:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[  123.672050][   T33] audit: type=1326 audit(1755507189.198:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b0b8ebe9 code=0x7ffc0000
[  123.689531][   T33] audit: type=1326 audit(1755507189.198:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  123.706836][   T33] audit: type=1326 audit(1755507189.198:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  123.721636][   T33] audit: type=1326 audit(1755507189.198:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  123.742539][   T33] audit: type=1326 audit(1755507189.198:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  123.751872][   T33] audit: type=1326 audit(1755507189.198:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.3.647" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b0b2add9 code=0x7ffc0000
[  124.250284][ T7892] loop3: detected capacity change from 0 to 1024
[  124.276218][ T7892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.283563][ T7892] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.318958][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.566793][ T7913] loop3: detected capacity change from 0 to 256
[  124.576846][ T7913] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  124.748188][ T7915] loop3: detected capacity change from 0 to 2048
[  124.761690][ T7915] NILFS (loop3): couldn't find nilfs on the device
[  124.770116][ T5842] udevd[5842]: incorrect nilfs2 checksum on /dev/loop3
[  124.869287][ T7919] loop3: detected capacity change from 0 to 512
[  124.890338][ T7919] EXT4-fs: Ignoring removed orlov option
[  124.913679][ T7919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002]
[  124.925351][ T7919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.932799][ T7919] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.958490][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.011350][ T5235] Bluetooth: hci1: command tx timeout
[  125.642542][ T7933] loop0: detected capacity change from 0 to 32768
[  125.645129][ T7933] BTRFS warning: excessive commit interval 491628334, use with care
[  125.648270][ T7933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.676 (7933)
[  125.668892][ T7933] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.673205][ T7933] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  125.676008][ T7933] BTRFS info (device loop0): using free-space-tree
[  125.782528][ T5850] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.419069][ T7985] loop0: detected capacity change from 0 to 164
[  126.445666][ T7985] iso9660: Corrupted directory entry in block 2 of inode 1920
[  126.658216][   T33] kauditd_printk_skb: 373 callbacks suppressed
[  126.658230][   T33] audit: type=1326 audit(1755507192.228:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.0.698" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94b1f8ebe9 code=0x0
[  126.807135][ T8002] uprobe: syz.0.698:8002 failed to unregister, leaking uprobe
[  126.965414][ T8004] loop3: detected capacity change from 0 to 4096
[  127.028802][ T8005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.090969][ T5235] Bluetooth: hci1: command tx timeout
[  128.018795][ T8009] loop0: detected capacity change from 0 to 40427
[  128.024200][ T8009] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  128.027095][ T8009] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  128.031342][ T8009] F2FS-fs (loop0): invalid crc value
[  128.073546][ T8009] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.086229][ T8009] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  128.089023][ T8009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  128.096142][ T8009] syz.0.702: attempt to access beyond end of device
[  128.096142][ T8009] loop0: rw=2051, sector=36912, nr_sectors = 8144 limit=40427
[  128.101731][ T8009] syz.0.702: attempt to access beyond end of device
[  128.101731][ T8009] loop0: rw=2051, sector=45096, nr_sectors = 20440 limit=40427
[  128.116171][ T8009] F2FS-fs (loop0): Issue discard(4614, 4614, 1018) failed, ret: -5
[  128.119469][ T8009] F2FS-fs (loop0): Issue discard(5637, 5637, 2555) failed, ret: -5
[  128.167653][ T8015] loop4: detected capacity change from 0 to 32768
[  128.172636][ T8015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.704 (8015)
[  128.188642][ T8015] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.200696][ T8015] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  128.204101][ T8015] BTRFS info (device loop4): using free-space-tree
[  128.362373][ T8041] loop3: detected capacity change from 0 to 8192
[  128.526706][ T7719] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.602729][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'.
[  128.613121][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'.
[  128.621081][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'.
[  128.640566][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'.
[  129.526687][ T8054] loop4: detected capacity change from 0 to 40427
[  129.730060][ T8054] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.734958][ T8054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  129.871239][ T7719] syz-executor: attempt to access beyond end of device
[  129.871239][ T7719] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.887274][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.887287][ T7719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.887292][ T7719] Call Trace:
[  129.887295][ T7719]  <TASK>
[  129.887299][ T7719]  dump_stack_lvl+0x189/0x250
[  129.887313][ T7719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.887321][ T7719]  ? __pfx_queue_work_on+0x10/0x10
[  129.887328][ T7719]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.887338][ T7719]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.887350][ T7719]  f2fs_handle_critical_error+0x37c/0x540
[  129.887363][ T7719]  f2fs_write_end_io+0x886/0xb60
[  129.887377][ T7719]  __submit_merged_bio+0x27a/0x6a0
[  129.887389][ T7719]  __submit_merged_write_cond+0x255/0x530
[  129.887400][ T7719]  f2fs_write_data_pages+0x261d/0x3000
[  129.887408][ T7719]  ? __lock_acquire+0xab9/0xd20
[  129.887430][ T7719]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.887466][ T7719]  ? __lock_acquire+0xab9/0xd20
[  129.887478][ T7719]  ? do_raw_spin_lock+0x121/0x290
[  129.887490][ T7719]  ? do_raw_spin_unlock+0x4d/0x240
[  129.887497][ T7719]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.887507][ T7719]  do_writepages+0x32e/0x550
[  129.887520][ T7719]  ? do_raw_spin_unlock+0x4d/0x240
[  129.887530][ T7719]  filemap_fdatawrite+0x199/0x240
[  129.887540][ T7719]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.887566][ T7719]  ? do_raw_spin_unlock+0x4d/0x240
[  129.887575][ T7719]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.887587][ T7719]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.887603][ T7719]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.887627][ T7719]  ? kill_f2fs_super+0x298/0x6c0
[  129.887636][ T7719]  kill_f2fs_super+0x2c3/0x6c0
[  129.887645][ T7719]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.887651][ T7719]  ? radix_tree_delete_item+0x2b6/0x400
[  129.887663][ T7719]  ? shrinker_free+0x2ce/0x3e0
[  129.887671][ T7719]  deactivate_locked_super+0xbc/0x130
[  129.887681][ T7719]  cleanup_mnt+0x425/0x4c0
[  129.887689][ T7719]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.887698][ T7719]  task_work_run+0x1d4/0x260
[  129.887709][ T7719]  ? __pfx_task_work_run+0x10/0x10
[  129.887716][ T7719]  ? __x64_sys_umount+0x122/0x160
[  129.887727][ T7719]  ? exit_to_user_mode_loop+0x40/0x110
[  129.887737][ T7719]  exit_to_user_mode_loop+0xec/0x110
[  129.887749][ T7719]  do_syscall_64+0x2bd/0x3b0
[  129.887758][ T7719]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.887766][ T7719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.887772][ T7719]  ? exc_page_fault+0x9f/0xf0
[  129.887781][ T7719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.887790][ T7719] RIP: 0033:0x7f7f1d78ff17
[  129.887800][ T7719] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.887809][ T7719] RSP: 002b:00007ffde85eb6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.887820][ T7719] RAX: 0000000000000000 RBX: 00007f7f1d811c05 RCX: 00007f7f1d78ff17
[  129.887827][ T7719] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde85eb760
[  129.887833][ T7719] RBP: 00007ffde85eb760 R08: 0000000000000000 R09: 0000000000000000
[  129.887838][ T7719] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde85ec7f0
[  129.887845][ T7719] R13: 00007f7f1d811c05 R14: 000000000001fa8e R15: 00007ffde85ec830
[  129.887862][ T7719]  </TASK>
[  129.887868][ T7719] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  129.942574][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'.
[  130.045519][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'.
[  130.049426][ T8068] netlink: 'syz.0.714': attribute type 4 has an invalid length.
[  130.136498][ T8074] loop0: detected capacity change from 0 to 2048
[  130.162262][ T8074] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  130.165794][ T8074] UDF-fs: Scanning with blocksize 512 failed
[  130.176963][ T8074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.192634][   T33] audit: type=1800 audit(1755507195.758:400): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.717" name="file2" dev="loop0" ino=819 res=0 errno=0
[  130.562251][ T8103] loop0: detected capacity change from 0 to 32768
[  130.566462][ T8103] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.729 (8103)
[  130.573442][ T8103] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.576909][ T8103] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  130.579830][ T8103] BTRFS info (device loop0): using free-space-tree
[  130.668920][ T8093] loop4: detected capacity change from 0 to 32768
[  130.697568][ T8093] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  130.726933][ T8093] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  130.889777][ T7719] ocfs2: Unmounting device (7,4) on (node local)
[  132.182188][ T5850] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.236245][ T8150] loop4: detected capacity change from 0 to 8
[  132.272168][ T8150] SQUASHFS error: zlib decompression failed, data probably corrupt
[  132.284451][ T8150] SQUASHFS error: Failed to read block 0x9b: -5
[  132.292483][ T8150] SQUASHFS error: Unable to read metadata cache entry [99]
[  132.311931][ T8150] SQUASHFS error: Unable to read inode 0x127
[  132.543359][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.545833][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.640541][  T792] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  133.770722][ T8189] loop0: detected capacity change from 0 to 32768
[  133.842107][  T792] usb 4-1: Using ep0 maxpacket: 32
[  133.853716][  T792] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[  133.857263][  T792] usb 4-1: config 4 has no interface number 0
[  133.872024][  T792] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  133.876631][  T792] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  133.882408][ T8189] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  133.882424][ T8189]   allowing incompatible features above 0.0: (unknown version)
[  133.882430][ T8189]   features: lz4
[  133.884635][  T792] usb 4-1: config 4 interface 228 has no altsetting 0
[  133.890992][ T8189] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  133.891026][ T8189] bcachefs (loop0): initializing new filesystem
[  133.897144][ T8189] bcachefs (loop0): going read-write
[  133.905670][  T792] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  133.915838][ T8189] bcachefs (loop0): marking superblocks
[  133.920716][  T792] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  133.924098][  T792] usb 4-1: Product: syz
[  133.925840][  T792] usb 4-1: Manufacturer: syz
[  133.926543][ T8189] bcachefs (loop0): initializing freespace
[  133.927864][  T792] usb 4-1: SerialNumber: syz
[  133.932986][ T8189] bcachefs (loop0): done initializing freespace
[  133.938368][ T8189] bcachefs (loop0): reading snapshots table
[  133.941128][ T8189] bcachefs (loop0): reading snapshots done
[  133.967753][ T8189] bcachefs (loop0): done starting filesystem
[  134.052105][ T8189] syz.0.754 (8189) used greatest stack depth: 15768 bytes left
[  134.098088][ T5850] bcachefs (loop0): shutting down
[  134.100342][ T5850] bcachefs (loop0): going read-only
[  134.131708][ T5850] bcachefs (loop0): finished waiting for writes to stop
[  134.141644][ T5850] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  134.174333][ T5850] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  134.178338][ T5850] bcachefs (loop0): clean shutdown complete, journal seq 4
[  134.184612][ T5850] bcachefs (loop0): marking filesystem clean
[  134.208538][ T5850] bcachefs (loop0): shutdown complete
[  134.218249][  T792] usb 4-1: USB disconnect, device number 7
[  134.238425][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.898008][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.761'.
[  135.413128][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  135.416661][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[  135.501472][   T47] IPVS: starting estimator thread 0...
[  135.544050][ T8270] loop0: detected capacity change from 0 to 1024
[  135.573253][ T8270] hfsplus: bad catalog folder thread
[  135.591057][ T8268] IPVS: using max 48 ests per chain, 115200 per kthread
[  135.878871][ T8278] loop4: detected capacity change from 0 to 1024
[  135.923350][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.926605][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.950598][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.954074][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.957174][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.970339][ T8276] loop0: detected capacity change from 0 to 32768
[  135.974039][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.978530][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.984336][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.995659][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  135.998453][ T8278] hfsplus: request for non-existent node 16777216 in B*Tree
[  136.006410][   T33] audit: type=1800 audit(1755507201.578:401): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.772" name="file1" dev="loop4" ino=20 res=0 errno=0
[  136.064817][ T8276] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  136.108155][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'.
[  136.137322][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'.
[  136.159816][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  136.189535][ T8280] loop3: detected capacity change from 0 to 32768
[  136.207422][ T8280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.773 (8280)
[  136.243495][ T8280] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.247786][ T8280] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  136.259678][ T8280] BTRFS info (device loop3): using free-space-tree
[  136.431140][ T6357] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.678339][ T8329] loop4: detected capacity change from 0 to 1764
[  136.713329][ T8329] iso9660: Corrupted directory entry in block 2 of inode 1920
[  136.740076][ T8333] bond1: entered promiscuous mode
[  136.743343][ T8333] bond1: entered allmulticast mode
[  136.745556][ T8333] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.771203][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.786'.
[  136.827405][ T8336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.786'.
[  136.872043][ T8341] loop3: detected capacity change from 0 to 4096
[  136.876231][ T8341] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  136.907415][ T8341] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  136.914124][ T8341] ntfs3(loop3): Failed to initialize $Secure::$SII (-22).
[  136.918599][ T8341] ntfs3(loop3): Failed to initialize $Secure (-22).
[  137.079614][ T8351] loop4: detected capacity change from 0 to 512
[  137.085955][ T8351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  137.097564][ T8351] EXT4-fs (loop4): 1 truncate cleaned up
[  137.103718][ T8351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.112384][ T8351] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.793: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  137.124023][ T8351] EXT4-fs (loop4): Remounting filesystem read-only
[  137.126260][ T8351] EXT4-fs warning (device loop4): ext4_rename_delete:3735: inode #2: comm syz.4.793: Deleting old file: nlink 5, error=-117
[  137.140139][ T8347] loop3: detected capacity change from 0 to 32768
[  137.165184][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.360663][ T8363] binder: 8361:8363 ioctl c018620c 0 returned -14
[  137.485048][ T8365] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  137.801508][ T5907] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.960558][ T5907] usb 4-1: Using ep0 maxpacket: 16
[  137.965817][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.969948][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.975353][ T5907] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  137.978811][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.986572][ T5907] usb 4-1: config 0 descriptor??
[  138.517753][ T8377] binder: 8376:8377 ioctl 541b 0 returned -22
[  139.013822][ T5907] letsketch 0003:6161:4D15.0003: Device info: ᣍ哙覗돿
[  139.024078][ T5907] letsketch 0003:6161:4D15.0003: Device info: ఁ
[  139.251209][ T5907] usb 4-1: Max retries (5) exceeded reading string descriptor 202
[  139.254014][ T5907] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -71
[  139.260565][ T5907] usb 4-1: USB disconnect, device number 8
[  139.690642][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  139.822824][ T8398] loop0: detected capacity change from 0 to 4096
[  139.842299][   T10] usb 5-1: Using ep0 maxpacket: 16
[  139.846921][   T10] usb 5-1: config 15 has an invalid interface number: 107 but max is 0
[  139.850098][   T10] usb 5-1: config 15 has no interface number 0
[  139.854578][   T10] usb 5-1: config 15 interface 107 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  139.860507][   T10] usb 5-1: config 15 interface 107 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64
[  139.864203][   T10] usb 5-1: config 15 interface 107 has no altsetting 0
[  139.870156][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3
[  139.875871][   T33] audit: type=1800 audit(1755507205.438:402): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name="bus" dev="loop0" ino=33 res=0 errno=0
[  139.884662][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.888365][   T10] usb 5-1: Product: syz
[  139.891420][   T10] usb 5-1: Manufacturer: syz
[  139.895359][   T10] usb 5-1: SerialNumber: syz
[  139.996545][ T8400] loop0: detected capacity change from 0 to 4096
[  140.064123][ T8400] ntfs3(loop0): failed to convert "0080" to maccroatian
[  140.069602][ T8400] ntfs3(loop0): failed to convert name for inode 1e.
[  140.082313][ T8400] ntfs3(loop0): ino=1f, mi_enum_attr
[  140.144526][   T10] usb 5-1: USB disconnect, device number 2
[  140.347297][ T8404] loop0: detected capacity change from 0 to 32768
[  140.355753][ T8404] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 9 smaller than btree node size 256
[  140.355753][ T8404] members_v2 (size 152):
[  140.355753][ T8404] Device:                        0
[  140.355753][ T8404]   Label:                       (none)
[  140.355753][ T8404]   UUID:                        7af6772b-00de-4159-84cd-1faead05e13e
[  140.355753][ T8404]   Size:                        589824
[  140.355753][ T8404]   read errors:                 0
[  140.355753][ T8404]   write errors:                0
[  140.355753][ T8404]   checksum errors:             0
[  140.355753][ T8404]   seqread iops:                0
[  140.355753][ T8404]   seqwrite iops:               0
[  140.355753][ T8404]   randread iops:               0
[  140.355753][ T8404]   randwrite iops:              0
[  140.355753][ T8404]   Bucket size:                 4608
[  140.355753][ T8404]   First bucket:                0
[  140.355753][ T8404]   Buckets:                     128
[  140.355753][ T8404]   Last mount:                  1714618368
[  140.355753][ T8404]   Last superblock write:       42
[  140.355753][ T8404]   State:                       rw
[  140.355753][ T8404]   Data allowed:                journal,btree,user
[  140.355753][ T8404]   Has data:                    (none)
[  140.355753][ T8404]   Btree allocated bitmap blocksize:1
[  140.355753][ T8404]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  140.355753][ T8404]   Durab
[  140.355919][ T8404] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  140.833187][ T8424] loop3: detected capacity change from 0 to 512
[  140.857358][ T8424] EXT4-fs: Ignoring removed orlov option
[  140.864158][ T8424] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  140.883149][ T8424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  140.890369][ T8424] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.822: corrupted in-inode xattr: e_value size too large
[  140.917331][ T8424] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.822: couldn't read orphan inode 15 (err -117)
[  140.955515][ T8424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.996530][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.182475][ T8451] loop3: detected capacity change from 0 to 4096
[  141.194591][ T8451] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  141.485697][ T8459] loop3: detected capacity change from 0 to 32768
[  141.488159][ T8459] XFS: ikeep mount option is deprecated.
[  141.523938][ T8459] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.560118][ T8459] XFS (loop3): Ending clean mount
[  141.566807][ T8459] XFS (loop3): Quotacheck needed: Please wait.
[  141.595732][ T8459] XFS (loop3): Quotacheck: Done.
[  141.598934][ T8459] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.969879][ T8491] loop3: detected capacity change from 0 to 1024
[  141.988027][ T8491] ext3: Unknown parameter 'nouser_xattr'
[  142.207153][ T8488] loop0: detected capacity change from 0 to 32768
[  142.217379][ T8487] loop4: detected capacity change from 0 to 40427
[  142.221198][ T8487] F2FS-fs (loop4): build fault injection rate: 14
[  142.223556][ T8487] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  142.226382][ T8488] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.848 (8488)
[  142.240236][ T8487] F2FS-fs (loop4): invalid crc value
[  142.245078][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  142.248946][ T8488] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  142.255305][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  142.260544][ T8488] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  142.263745][ T8488] BTRFS info (device loop0): using free-space-tree
[  142.295573][ T8487] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.299015][ T8487] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  142.326979][ T8491] loop3: detected capacity change from 0 to 32768
[  142.329571][ T8487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.335654][ T8491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.849 (8491)
[  142.362039][ T8487] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  142.366066][ T8491] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.369925][ T8491] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  142.375279][   T33] audit: type=1800 audit(1755507207.948:403): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.848" name="file1" dev="loop0" ino=260 res=0 errno=0
[  142.391457][ T8487] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  142.396219][ T8487] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  142.397876][ T8491] BTRFS info (device loop3): disk space caching is enabled
[  142.421023][ T8491] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  142.445620][    C1] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  142.450115][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  142.450132][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.450139][    C1] Call Trace:
[  142.450144][    C1]  <TASK>
[  142.450148][    C1]  dump_stack_lvl+0x189/0x250
[  142.450165][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.450178][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  142.450190][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.450205][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.450218][    C1]  ? f2fs_hw_is_readonly+0x39b/0x470
[  142.450236][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  142.450253][    C1]  f2fs_write_end_io+0x886/0xb60
[  142.450268][    C1]  blk_update_request+0x57e/0xe60
[  142.450290][    C1]  blk_mq_end_request+0x3e/0x70
[  142.450302][    C1]  blk_flush_complete_seq+0x678/0xcc0
[  142.450321][    C1]  flush_end_io+0xbaf/0xe60
[  142.450341][    C1]  __blk_mq_end_request+0x426/0x600
[  142.450351][    C1]  blk_done_softirq+0x10a/0x160
[  142.450364][    C1]  handle_softirqs+0x286/0x870
[  142.450377][    C1]  ? run_ksoftirqd+0x9b/0x100
[  142.450392][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  142.450405][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  142.450418][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  142.450428][    C1]  run_ksoftirqd+0x9b/0x100
[  142.450439][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  142.450454][    C1]  smpboot_thread_fn+0x542/0xa60
[  142.450461][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  142.450475][    C1]  kthread+0x711/0x8a0
[  142.450490][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  142.450501][    C1]  ? __pfx_kthread+0x10/0x10
[  142.450515][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.450526][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.450539][    C1]  ? __pfx_kthread+0x10/0x10
[  142.450552][    C1]  ret_from_fork+0x3fc/0x770
[  142.450566][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  142.450580][    C1]  ? __switch_to_asm+0x39/0x70
[  142.450592][    C1]  ? __switch_to_asm+0x33/0x70
[  142.450600][    C1]  ? __pfx_kthread+0x10/0x10
[  142.450612][    C1]  ret_from_fork_asm+0x1a/0x30
[  142.450634][    C1]  </TASK>
[  142.450637][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  142.551165][ T7719] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint
[  142.587230][ T8491] BTRFS info (device loop3): rebuilding free space tree
[  142.599607][ T5850] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  142.641693][ T8491] BTRFS info (device loop3): disabling free space tree
[  142.644091][ T8491] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.650642][ T8491] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.849137][ T6357] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.969059][ T8537] loop4: detected capacity change from 0 to 64
[  142.979260][ T8537] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  143.069621][ T8539] loop3: detected capacity change from 0 to 512
[  143.091176][ T8539] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.093512][ T8530] loop0: detected capacity change from 0 to 32768
[  143.095194][ T8539] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  143.118041][ T8539] EXT4-fs (loop3): 1 truncate cleaned up
[  143.122297][ T8539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.129104][ T8530] jfs_strtoUCS: char2uni returned -22.
[  143.135402][ T8530] charset = cp869, char = 0x81
[  143.167331][   T33] audit: type=1800 audit(1755507208.738:404): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.854" name="file1" dev="loop3" ino=15 res=0 errno=0
[  143.211292][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.349475][ T8550] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.856'.
[  143.523523][ T8556] tipc: Failed to remove unknown binding: 66,1,1/0:2705223542/2705223544
[  143.613687][ T8549] loop3: detected capacity change from 0 to 32768
[  143.636754][ T8549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.859 (8549)
[  143.704231][ T8560] sctp: [Deprecated]: syz.4.860 (pid 8560) Use of int in max_burst socket option deprecated.
[  143.704231][ T8560] Use struct sctp_assoc_value instead
[  144.017541][ T8549] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.026966][ T8549] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  144.035320][ T8549] BTRFS info (device loop3): using free-space-tree
[  144.631716][ T6357] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.912197][ T8588] loop0: detected capacity change from 0 to 2048
[  144.928985][ T8588] EXT4-fs (loop0): bad block size 8192
[  144.948535][ T8590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  145.257636][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'.
[  145.412334][ T8611] loop4: detected capacity change from 0 to 32768
[  145.415928][ T8611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.877 (8611)
[  145.505261][ T8611] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.516539][ T8611] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  145.520384][ T8611] BTRFS info (device loop4): using free-space-tree
[  145.701500][ T8641] bond1: left promiscuous mode
[  146.519633][ T7719] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.268828][ T8680] loop3: detected capacity change from 0 to 8
[  147.397063][ T8690] loop3: detected capacity change from 0 to 1764
[  147.405476][ T8690] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  147.970009][ T8696] netlink: 'syz.4.904': attribute type 3 has an invalid length.
[  147.975639][ T8696] netlink: 236 bytes leftover after parsing attributes in process `syz.4.904'.
[  148.040006][ T8700] loop6: detected capacity change from 0 to 524287999
[  148.044858][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.048718][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.055480][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.058536][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.061597][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.065267][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.068894][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.075491][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.078958][ T5842] ldm_validate_partition_table(): Disk read failed.
[  148.082229][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.085799][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.088638][ T5842] Dev loop6: unable to read RDB block 0
[  148.091548][ T5842]  loop6: unable to read partition table
[  148.154718][ T8700] ldm_validate_partition_table(): Disk read failed.
[  148.157973][ T8700] Dev loop6: unable to read RDB block 0
[  148.161062][ T8700]  loop6: unable to read partition table
[  148.167792][ T8700] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5)
[  148.406889][ T8715] loop4: detected capacity change from 0 to 1024
[  148.412217][ T8715] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  148.439317][ T8715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.493761][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.518342][ T8724] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  148.775047][ T8740] Falling back ldisc for ptm0.
[  148.846426][ T8744] syz.0.925: attempt to access beyond end of device
[  148.846426][ T8744] loop0: rw=0, sector=1, nr_sectors = 1 limit=0
[  148.872062][ T8744] qnx4: unable to read the superblock
[  148.952899][ T8750] IPv6: sit1: Disabled Multicast RS
[  148.987414][ T8733] loop4: detected capacity change from 0 to 32768
[  149.016444][ T8753] loop3: detected capacity change from 0 to 2048
[  149.044920][ T8753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.123424][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.300820][ T8767] loop3: detected capacity change from 0 to 2048
[  149.461437][ T8771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.588170][ T8780] loop0: detected capacity change from 0 to 1024
[  149.609683][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.623334][ T8780] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.939: attempt to clear invalid blocks 1886221359 len 1
[  149.665910][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.953811][ T8771] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  149.959978][ T8771] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  150.031537][ T8771] Remounting filesystem read-only
[  150.381401][ T6357] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  150.457399][ T8796] loop3: detected capacity change from 0 to 64
[  150.487139][ T8794] loop4: detected capacity change from 0 to 2048
[  150.516736][ T8794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.545674][ T8800] program syz.3.946 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.586244][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.778637][ T8808] loop0: detected capacity change from 0 to 16
[  150.795523][ T8808] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 25144)
[  150.830575][  T792] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  150.920814][ T2299] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  151.010531][  T792] usb 4-1: Using ep0 maxpacket: 16
[  151.016087][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.021414][  T792] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  151.025424][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.036033][  T792] usb 4-1: config 0 descriptor??
[  151.070546][ T2299] usb 5-1: Using ep0 maxpacket: 16
[  151.075469][ T2299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.079280][ T2299] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  151.090942][ T2299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.098126][ T2299] usb 5-1: config 0 descriptor??
[  151.470924][  T792] aquacomputer_d5next 0003:0C70:F00E.0004: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0
[  151.526552][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.529946][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.533298][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.536233][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.539129][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.544868][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.547870][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.551172][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.554194][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.557296][ T2299] kye 0003:0458:0087.0005: unknown main item tag 0x0
[  151.568090][ T2299] kye 0003:0458:0087.0005: hidraw1: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0
[  151.673337][  T792] usb 4-1: USB disconnect, device number 9
[  151.732814][ T2299] usb 5-1: USB disconnect, device number 3
[  151.784778][ T8816] sp0: Synchronizing with TNC
[  152.041824][ T8828] netlink: 'syz.0.960': attribute type 49 has an invalid length.
[  152.136252][ T8832] ptrace attach of "/syz-executor exec"[5850] was attempted by ""[8832]
[  152.275488][ T8838] loop3: detected capacity change from 0 to 2048
[  152.290390][ T8838] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  152.317738][ T8838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.327004][ T8838] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.407088][ T6357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.896617][ T8869] loop3: detected capacity change from 0 to 4096
[  152.906139][ T8869] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  152.918620][ T8869] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  152.929437][ T8869] ntfs3(loop3): Failed to load $BadClus (-22).
[  153.038311][ T8871] loop0: detected capacity change from 0 to 32768
[  153.069557][ T8871] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  153.178208][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  153.254063][ T8879] veth1_macvtap: left promiscuous mode
[  153.262195][ T8879] macsec0: entered promiscuous mode
[  153.300984][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'.
[  153.931552][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'.
[  153.967833][ T8924] loop0: detected capacity change from 0 to 512
[  154.016610][ T8924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.025446][ T8924] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.034406][ T8928] loop4: detected capacity change from 0 to 512
[  154.037057][ T8928] EXT4-fs: Ignoring removed oldalloc option
[  154.039632][ T8928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  154.056602][ T8928] EXT4-fs (loop4): 1 truncate cleaned up
[  154.059237][ T8928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.069799][   T33] audit: type=1800 audit(1755507219.638:405): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1004" name="bus" dev="loop4" ino=18 res=0 errno=0
[  154.317138][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.592094][ T8926] loop3: detected capacity change from 0 to 32768
[  154.596467][ T8926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1003 (8926)
[  154.611240][ T8926] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.614839][ T8926] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  154.617958][ T8926] BTRFS info (device loop3): using free-space-tree
[  154.807294][ T6357] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.526911][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.626199][ T8968] netlink: 'syz.3.1014': attribute type 32 has an invalid length.
[  155.806000][ T8980] loop3: detected capacity change from 0 to 64
[  155.900700][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  156.050910][ T5906] usb 5-1: Using ep0 maxpacket: 32
[  156.056927][ T5906] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  156.059708][ T5906] usb 5-1: config 0 has no interface number 0
[  156.062411][ T5906] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  156.066367][ T5906] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  156.071024][ T5906] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  156.075105][ T5906] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  156.078848][ T5906] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  156.083508][ T5906] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  156.090757][ T5906] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  156.097504][ T5906] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  156.101823][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.105083][ T5906] usb 5-1: Product: syz
[  156.106652][ T5906] usb 5-1: Manufacturer: syz
[  156.108554][ T5906] usb 5-1: SerialNumber: syz
[  156.117433][ T5906] usb 5-1: config 0 descriptor??
[  156.120042][ T8972] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  156.329969][ T5906] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  156.430704][ T5891] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  156.529400][ T5906] etas_es58x 5-1:0.219: could not parse product info: '424242424242'
[  156.583144][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.589300][ T5891] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[  156.594781][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.598185][ T5891] usb 4-1: Product: syz
[  156.599818][ T5891] usb 4-1: Manufacturer: syz
[  156.602725][ T5891] usb 4-1: SerialNumber: syz
[  156.606520][ T5891] usb 4-1: config 0 descriptor??
[  156.716265][    C1] etas_es58x 5-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.720886][    C0] etas_es58x 5-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.724744][    C0] etas_es58x 5-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.728541][    C0] etas_es58x 5-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.732435][    C0] etas_es58x 5-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  156.737532][ T5591] etas_es58x 5-1:0.219 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE
[  156.741049][  T792] usb 5-1: USB disconnect, device number 4
[  156.744664][ T5591] etas_es58x 5-1:0.219 can0: es58x_open: Could not open the network device: -EMSGSIZE
[  156.745729][  T792] etas_es58x 5-1:0.219: Disconnecting syz syz
[  156.823707][ T5891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  156.839404][ T5891] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  156.865704][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.395913][ T9010] evm: overlay not supported
[  158.351974][ T5906] usb 4-1: USB disconnect, device number 10
[  158.459282][ T9029] loop4: detected capacity change from 0 to 164
[  158.472547][ T9022] loop0: detected capacity change from 0 to 32768
[  158.578212][ T9022] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.643189][ T9022] XFS (loop0): Ending clean mount
[  158.655753][   T33] audit: type=1800 audit(1755507224.228:406): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1035" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  158.722386][ T5850] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.155610][ T9045] binder: 9044:9045 ioctl c0306201 200000000640 returned -22
[  159.297646][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'.
[  159.566062][ T9067] loop4: detected capacity change from 0 to 1024
[  159.581689][ T9067] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  159.586298][ T9067] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  159.602007][ T9067] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  159.620825][ T9067] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1052: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  159.640172][ T9067] EXT4-fs (loop4): no journal found
[  159.645295][ T9067] EXT4-fs (loop4): can't get journal size
[  159.653791][ T9067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  159.697624][ T7719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.123933][ T9086] loop3: detected capacity change from 0 to 65536
[  160.171071][ T9086] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  160.210203][ T9086] XFS (loop3): Ending clean mount
[  160.310781][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  160.631592][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  160.639046][ T5907] usb 5-1: config 0 has an invalid interface number: 9 but max is 0
[  160.642247][ T5907] usb 5-1: config 0 has no interface number 0
[  160.644401][ T5907] usb 5-1: config 0 interface 9 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  160.648491][ T5907] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=23.ea
[  160.653405][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.658831][ T5907] usb 5-1: config 0 descriptor??
[  160.666146][ T5907] usb 5-1: bad CDC descriptors
[  160.668367][ T5907] cdc_acm 5-1:0.9: Zero length descriptor references
[  160.672475][ T5907] cdc_acm 5-1:0.9: probe with driver cdc_acm failed with error -22
[  160.730050][ T6357] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  160.870776][ T5907] usb 5-1: USB disconnect, device number 5
[  161.107181][ T9124] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1073'.
[  161.357957][ T9126] loop3: detected capacity change from 0 to 32768
[  161.366515][ T9126] XFS: ikeep mount option is deprecated.
[  161.368352][ T9126] XFS: ikeep mount option is deprecated.
[  161.370279][ T9126] XFS: noikeep mount option is deprecated.
[  161.389446][ T9128] loop0: detected capacity change from 0 to 512
[  161.402357][ T9128] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  161.406829][ T9128] EXT4-fs (loop0): orphan cleanup on readonly fs
[  161.409459][ T9128] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  161.421399][ T9128] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  161.429088][ T9128] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  161.443256][ T9128] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1075: bg 0: block 40: padding at end of block bitmap is not set
[  161.450186][ T9128] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  161.455203][ T9128] EXT4-fs (loop0): 1 truncate cleaned up
[  161.467585][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.472311][ T9126] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.476896][ T9128] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1075: bad symlink.
[  161.494595][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.526774][ T9126] XFS (loop3): Ending clean mount
[  161.662321][ T6357] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.768679][ T9135] loop4: detected capacity change from 0 to 32768
[  161.787836][ T9135] jfs_strtoUCS: char2uni returned -22.
[  161.802006][ T9135] charset = euc-jp, char = 0xd4
[  162.493258][ T9170] loop3: detected capacity change from 0 to 164
[  162.501782][ T9170] Unsupported NM flag settings (8)
[  162.545118][ T9172] team0: entered promiscuous mode
[  162.547110][ T9172] team_slave_0: entered promiscuous mode
[  162.549508][ T9172] team_slave_1: entered promiscuous mode
[  162.554573][ T9171] team0: left promiscuous mode
[  162.556651][ T9171] team_slave_0: left promiscuous mode
[  162.559203][ T9171] team_slave_1: left promiscuous mode
[  162.673700][ T9180] loop3: detected capacity change from 0 to 764
[  163.416840][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.430241][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.733413][ T9199] loop3: detected capacity change from 0 to 128
[  163.739118][ T9199] EXT4-fs: Ignoring removed nobh option
[  163.753579][ T9199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c118, mo2=0002]
[  163.757242][ T9199] System zones: 1-3, 19-19, 35-36
[  163.762206][ T9199] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.769471][ T9199] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  164.807420][ T9204] loop4: detected capacity change from 0 to 64
[  165.094427][ T6357] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.134855][ T9211] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1105'.
[  165.151445][ T9211] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  165.156437][ T9211] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  165.160974][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.3.1105 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  165.166228][ T9211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.170480][ T9211] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  165.172819][ T9211] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 99 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 9a 01 f8 4d 89 3e
[  165.180790][ T9211] RSP: 0018:ffffc90004d670e0 EFLAGS: 00010246
[  165.183385][ T9211] RAX: 0000000000000000 RBX: 1ffff1100793e006 RCX: dffffc0000000000
[  165.186703][ T9211] RDX: ffffc90028e01000 RSI: 00000000000006eb RDI: 00000000000006ec
[  165.189981][ T9211] RBP: ffffc90004d67230 R08: ffff88801fc63980 R09: 0000000000000002
[  165.193350][ T9211] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff1100793e006
[  165.196771][ T9211] R13: ffff88803c9f0030 R14: 0000000000000000 R15: ffff88803c9f0028
[  165.200093][ T9211] FS:  00007f71b19306c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  165.203759][ T9211] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.206532][ T9211] CR2: 0000200000001680 CR3: 0000000109c26000 CR4: 00000000000006f0
[  165.209960][ T9211] Call Trace:
[  165.211433][ T9211]  <TASK>
[  165.212729][ T9211]  ? xfrm_alloc_spi+0x2a0/0xf30
[  165.214796][ T9211]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  165.217050][ T9211]  ? xfrm_find_acq+0x87/0xa0
[  165.219032][ T9211]  xfrm_alloc_userspi+0x70b/0xc90
[  165.221164][ T9211]  ? apparmor_capable+0x137/0x1b0
[  165.223333][ T9211]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  165.225725][ T9211]  ? __nla_parse+0x40/0x60
[  165.227629][ T9211]  xfrm_user_rcv_msg+0x7a3/0xab0
[  165.229676][ T9211]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.231938][ T9211]  ? __pfx___mutex_trylock_common+0x10/0x10
[  165.234387][ T9211]  ? rcu_is_watching+0x15/0xb0
[  165.236403][ T9211]  ? trace_contention_end+0x39/0x120
[  165.238644][ T9211]  ? __mutex_lock+0x335/0x1360
[  165.240692][ T9211]  netlink_rcv_skb+0x208/0x470
[  165.242698][ T9211]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.244944][ T9211]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.247136][ T9211]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.249348][ T9211]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.251556][ T9211]  xfrm_netlink_rcv+0x79/0x90
[  165.253524][ T9211]  netlink_unicast+0x82f/0x9e0
[  165.255518][ T9211]  ? __pfx_netlink_unicast+0x10/0x10
[  165.257760][ T9211]  ? netlink_sendmsg+0x642/0xb30
[  165.259856][ T9211]  ? skb_put+0x11b/0x210
[  165.261671][ T9211]  netlink_sendmsg+0x805/0xb30
[  165.263695][ T9211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.265943][ T9211]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.268078][ T9211]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.270252][ T9211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.272463][ T9211]  __sock_sendmsg+0x21c/0x270
[  165.274512][ T9211]  ____sys_sendmsg+0x505/0x830
[  165.276551][ T9211]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.278775][ T9211]  ? import_iovec+0x74/0xa0
[  165.280683][ T9211]  ___sys_sendmsg+0x21f/0x2a0
[  165.282708][ T9211]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.284924][ T9211]  ? __fget_files+0x2a/0x420
[  165.286901][ T9211]  ? __fget_files+0x3a0/0x420
[  165.288898][ T9211]  __x64_sys_sendmsg+0x19b/0x260
[  165.290988][ T9211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.293283][ T9211]  ? rcu_is_watching+0x15/0xb0
[  165.295252][ T9211]  ? do_syscall_64+0xbe/0x3b0
[  165.297263][ T9211]  do_syscall_64+0xfa/0x3b0
[  165.299206][ T9211]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.301391][ T9211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.303984][ T9211]  ? exc_page_fault+0x9f/0xf0
[  165.306042][ T9211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.308479][ T9211] RIP: 0033:0x7f71b0b8ebe9
[  165.310401][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.318548][ T9211] RSP: 002b:00007f71b1930038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.322079][ T9211] RAX: ffffffffffffffda RBX: 00007f71b0db5fa0 RCX: 00007f71b0b8ebe9
[  165.325377][ T9211] RDX: 0000000000004000 RSI: 0000200000001680 RDI: 0000000000000003
[  165.328700][ T9211] RBP: 00007f71b0c11e19 R08: 0000000000000000 R09: 0000000000000000
[  165.331994][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.335234][ T9211] R13: 00007f71b0db6038 R14: 00007f71b0db5fa0 R15: 00007fff344191e8
[  165.338578][ T9211]  </TASK>
[  165.339869][ T9211] Modules linked in:
[  165.341659][    C0] vkms_vblank_simulate: vblank timer overrun
[  165.344290][ T9211] ---[ end trace 0000000000000000 ]---
[  165.346608][ T9211] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  165.348899][ T9211] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 f6 99 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 bf 9a 01 f8 4d 89 3e
[  165.356832][ T9211] RSP: 0018:ffffc90004d670e0 EFLAGS: 00010246
[  165.359385][ T9211] RAX: 0000000000000000 RBX: 1ffff1100793e006 RCX: dffffc0000000000
[  165.362834][ T9211] RDX: ffffc90028e01000 RSI: 00000000000006eb RDI: 00000000000006ec
[  165.366146][ T9211] RBP: ffffc90004d67230 R08: ffff88801fc63980 R09: 0000000000000002
[  165.369474][ T9211] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff1100793e006
[  165.372965][ T9211] R13: ffff88803c9f0030 R14: 0000000000000000 R15: ffff88803c9f0028
[  165.376291][ T9211] FS:  00007f71b19306c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  165.379981][ T9211] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.382840][ T9211] CR2: 0000200000001680 CR3: 0000000109c26000 CR4: 00000000000006f0
[  165.386157][ T9211] Kernel panic - not syncing: Fatal exception in interrupt
[  165.390003][ T9211] Kernel Offset: disabled
[  165.391843][ T9211] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:53:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012cc RDI=00000000000012cd RBP=00000000000003f8 RSP=ffffc90004d66910
R8 =ffff888107248237 R9 =1ffff11020e49046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f71b19306c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001680 CR3=0000000109c26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0070bd2b00000007 0000007f00000000
XMM02=0000000000000000 3f01000200000000 XMM03=000001200013002c 0000000600000001
XMM04=0000000001000000 0000000000000000 XMM05=fe0000214e204e00 030004001c000000
XMM06=0200000000000000 0000000001000000 XMM07=0000000000000000 000001200013002c
XMM08=0000000600000001 0000000000000000 XMM09=0000000000000000 00007f71b0c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=87121a86ea07f900 RBX=ffffffff81968308 RCX=87121a86ea07f900 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055683aade000 CR3=000000001ef22000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=0806021000010000 020806080104de00 XMM03=0208000300040280 0303800401000000
XMM04=0000000000000000 0000000000000000 XMM05=0000555591fb4cbf 0000555591fb4930
XMM06=0000555591f8c184 0000555591f8c180 XMM07=0402800303800401 0000000806021000
XMM08=0100000208060801 04de001000038803 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
