last executing test programs:

1m14.212253126s ago: executing program 3 (id=194):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x111080, 0xee)
fcntl$notify(r0, 0x402, 0x21)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58)
close(r1)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)

1m14.107913339s ago: executing program 3 (id=195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m14.0993306s ago: executing program 3 (id=196):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063070000080014"], 0x68}}, 0x80c0)

1m14.054305337s ago: executing program 3 (id=197):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f00000002c0)={0x7f, 0x1}, 0x0)

1m13.938504061s ago: executing program 3 (id=198):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x6d0e)
pwrite64(r0, &(0x7f0000000480)="a9", 0x1, 0x2600000fff)

1m13.47625086s ago: executing program 3 (id=199):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

1m13.411534679s ago: executing program 32 (id=199):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

51.770690081s ago: executing program 1 (id=367):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

51.680606662s ago: executing program 1 (id=368):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x2c, &(0x7f0000000280)=""/44, 0x41000, 0x5b, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x5, 0x4, 0x2, 0x7}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

51.071561561s ago: executing program 1 (id=371):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=[@wr_drn={0x68, 0x20, {0x7, 0x200000000002000}}], 0x20})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

50.912256561s ago: executing program 1 (id=373):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x96)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x0, 0x2, 0xfffffffc})

50.211970071s ago: executing program 1 (id=383):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abfe0055acc8ef039a5be42200000000000000000100", 0x38}, 0x60)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x307, 0x400, 0x3, 0x1b3}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

49.539103438s ago: executing program 1 (id=388):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x800000009)

49.166173676s ago: executing program 33 (id=388):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x800000009)

45.759420764s ago: executing program 2 (id=415):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000180), 0x0, 0x0, 0x1)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)
write$uinput_user_dev(r1, &(0x7f0000002dc0)={'syz1\x00', {0x0, 0x3, 0x1000, 0x101}, 0x19, [0x10001, 0x7, 0x3, 0xfffffffe, 0xd, 0x8, 0x9b, 0x3ff, 0x8f, 0xff, 0x6, 0x3, 0x5f0, 0x4, 0x8, 0x9, 0x4, 0x3ff, 0x101, 0x400, 0x8, 0x2, 0xe, 0x800, 0x8, 0xfffffffb, 0x7, 0x2, 0x0, 0x9, 0x6, 0x7fffffff, 0x8, 0x0, 0x5, 0x3, 0x9, 0x5, 0x2, 0x9, 0x40, 0x8, 0x0, 0x2f, 0x3ff, 0x0, 0xb, 0x3, 0x6, 0x7, 0x5, 0xb, 0xfffffffe, 0x1, 0x9, 0x9, 0xe5c5, 0xb, 0x4, 0x7, 0x100, 0x24, 0x2, 0x3], [0x3ff, 0xaed4770, 0xa, 0x5, 0x8, 0x0, 0x6, 0xed92, 0x888, 0x0, 0x7f, 0x118758c6, 0xfff, 0x8, 0x4, 0x4, 0x5, 0x0, 0x9, 0x2f, 0x3, 0x10001, 0xf6, 0x0, 0x4b, 0xc, 0x40, 0x1ff, 0x8, 0x9, 0x0, 0xff, 0x0, 0x8, 0x4, 0x4, 0x1000, 0x7ff, 0x6, 0x9, 0x3ff, 0xe, 0x8, 0x10000, 0x6, 0x0, 0x1ff, 0x8, 0x0, 0x7fffffff, 0xfff, 0xe81, 0x6, 0x7e22, 0x7fffffff, 0x1, 0x10000, 0x44, 0x52d, 0x5, 0x3, 0xfffff001, 0x9, 0x24d], [0x8, 0x1, 0x78da, 0x8000, 0xffffff7f, 0x67c, 0x98f5, 0x0, 0x10, 0xc1c, 0x4, 0x4db83704, 0x8, 0x6, 0xc7a, 0x5, 0xf978, 0x80000000, 0x3, 0x5, 0x0, 0x9, 0xb6c, 0x8000, 0x1, 0xa5a5, 0x1000, 0x4, 0x200, 0x5, 0x3, 0x7, 0x8f98, 0x0, 0x8000, 0x80000000, 0x4, 0x0, 0x7, 0x6, 0xa221, 0x7fffffff, 0x2, 0x4, 0x10001, 0x45b, 0x8, 0x3e85daf5, 0x404, 0xffff8000, 0x423, 0xbf3, 0x94, 0x3, 0x4, 0x2, 0x4, 0x1, 0x5, 0x1, 0x1, 0x1, 0x5, 0x6], [0x9, 0x4, 0xffff8001, 0x4, 0x81, 0x1, 0x1, 0x0, 0x8, 0x6, 0xb, 0x1, 0x4, 0x9b4, 0x9, 0x3, 0x4, 0x9, 0x260d, 0xfffffffb, 0xc, 0xff, 0x7, 0x3, 0x2, 0x7fffffff, 0x1, 0x9, 0x3, 0x5, 0xffffffff, 0xa7bd, 0x9, 0x9, 0x1, 0x25562d28, 0x3ff, 0x9, 0x39, 0x8, 0x6, 0xa7d7, 0x6, 0x5, 0x0, 0x40f, 0xff, 0x2, 0x800, 0xffffffff, 0xa9, 0x9, 0x3, 0x6, 0xfc9a, 0x3, 0x10001, 0x9, 0x5, 0x800, 0x7, 0x3859, 0x2, 0x7]}, 0x45c)

44.77959739s ago: executing program 2 (id=421):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc62169", 0x57, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

43.764143811s ago: executing program 2 (id=424):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280))

33.405480833s ago: executing program 2 (id=504):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

32.085139183s ago: executing program 2 (id=512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000001, 0x0, 0x3, 0x867, 0xc01c, 0xfff, 0x9}]})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

31.146349903s ago: executing program 2 (id=520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0xfffffffe}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0)

30.966528847s ago: executing program 34 (id=520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0xfffffffe}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x44}}, 0x0)

9.09621621s ago: executing program 0 (id=666):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b6, 0x0, 0x5}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.794668519s ago: executing program 0 (id=667):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x10001, @local, 0xb}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18)

7.799794117s ago: executing program 6 (id=673):
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4, 0x7, 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
capset(0x0, &(0x7f0000000000)={0x9, 0x0, 0x1, 0x4, 0x1})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0xe, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {0x8080000, 0x0, 0xa, 0x6, 0x4, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xf9}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})

7.496127266s ago: executing program 6 (id=676):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xfc, {"a2e3ada0ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f38336e030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b2f38f0106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f330000000000000003d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9870af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="20080200000002"], 0x0}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)

6.400889007s ago: executing program 4 (id=677):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60935, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001640)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c)

5.006762816s ago: executing program 7 (id=682):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.686676867s ago: executing program 4 (id=683):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

4.43062466s ago: executing program 6 (id=684):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00))
ftruncate(r0, 0x2007ffa)
sendfile(r1, r0, 0x0, 0x80000000a)

4.395739515s ago: executing program 4 (id=685):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0xffffff44, 0x7, 0x5, 0x1ff})

3.988959677s ago: executing program 0 (id=687):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000000c0)='./file1\x00', 0xa08086, &(0x7f0000009780), 0x1, 0x97a8, &(0x7f00000097c0)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
truncate(&(0x7f0000000200)='./file1\x00', 0x21f40000)

3.523379827s ago: executing program 6 (id=688):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000005, 0x9, 0x40, 0x1, 0x5479, 0x1037, 0x6, 0x7, 0x10, 0x7fffffff, 0x100000002, 0x8, 0x200009, 0x9, 0x6a], 0x2000, 0x3c3a82})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.024084351s ago: executing program 6 (id=690):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.758317165s ago: executing program 0 (id=693):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

2.305353564s ago: executing program 5 (id=696):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000180)="4158ef51ca3fe91829ac06797242743cd5f2e50e4fab2f70884e0586cd423e78bda55b5e42b04a9c4d6c66a7269731660fd42d3cab163a879970b4d4305148185c3798a9388908629a5d3ec51ac455417791ff2e3ee1b8308f735aa1ea00491d78ca6b2d40b87c0aacea22ba0a30b3e206d9b60cc89ffb1262", 0x79}], 0x1}}], 0x1, 0x4c84c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4090)
sendmsg$sock(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)="7a42ae0f459476e00b53f5bf92487e23a88c54f59e1c77d6eb0c75864b95e18d2fd527dd", 0x24}], 0x1}, 0x800)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100))

2.161660712s ago: executing program 5 (id=697):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xf886267d8fac22c5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20)

2.059751045s ago: executing program 5 (id=698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'dummy0\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}}]}, 0x54}}, 0x20040054)

2.02350319s ago: executing program 0 (id=699):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x42, 0x60)
pwrite64(r1, &(0x7f00000002c0)="8a", 0x1, 0x8000c61)

1.956678489s ago: executing program 5 (id=700):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113300000000008510000002000000850000000800000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r1 = creat(&(0x7f0000000200)='./file0\x00', 0x17e)
close(r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r3 = dup(r2)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.783793851s ago: executing program 7 (id=701):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x7ffffe}, 0x400, "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"}, 0x418})
socket$unix(0x1, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)

1.6360885s ago: executing program 7 (id=702):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ptrace(0x10, r0)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00')
preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000400)=""/121, 0x79}], 0x1, 0xffffffff, 0x1)

1.597277315s ago: executing program 0 (id=703):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f4401020301090212"], 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x74, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x39}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0)

1.445037284s ago: executing program 7 (id=704):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xd553, 0x80b, 0x5, 0x4, 0x8, "d200"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6)

1.077715522s ago: executing program 4 (id=705):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, {0xa, 0x4e23, 0x2c40, @empty, 0x1}, 0x10, {[0x4, 0x387, 0xfffffffd, 0xbcb, 0x10000, 0x5, 0x3, 0x8001]}}, 0x5c)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040))

1.049323815s ago: executing program 5 (id=706):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
socket$packet(0x11, 0x3, 0x300)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

935.37306ms ago: executing program 4 (id=707):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0xfd, 0x632a, &(0x7f0000013cc0)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmDxn4eZzxdZ+0knll7Ph/JmfntM+t9Jt+d3VnPzD4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc0VEXPlVuuFExOdiGDGIWKrqlYhYWjmRlx9FxAux2RzPR8R4IaLIjc9GvB4RHx+PuP/gzmp10/k99uP7f/nnH35y7Ef/+PP4zP/+emv4xm7L3b792//+7e7jry8AAAD0UVmWZZE+5p9Mn+8HXXcKAGhFfv8vk3y7eu7q9Tnrj1qtVqsPYV1XTne3XkTEev0+1T6Dw/EAcMisxyddd4EOyb/XRhFxrOtOAHOt6LoDHIj7D+6sFinfov5+sLLVns8F2ZH/erF9fcdu01ma55i09fzaiGE8t0t/llrqwzzJ+Q+a+V/Zap+k5Q46/7bslv9k69Kn3sn5D5v5Nxyd/AdT8++rnP9oX/kP5Q8AAAAAAHMs//3/RMfHfxeefFX25FHHf1da6gMAAAAAAAAAPG1POv7ftsL4fwAAADCvqs/qld8df3hb/Vz/Sey8/XIR8UxjeaBn0sUyy133AwAAAAAAAAAAAAD6ZLR1Du/lImIcEc8sL5dlWf3UNev9etL7H3Z9X3/os65f5AEAYMvHxxvX8hcRixFxOX3X33h5ebksF5eWy+VyaSHvz04WFsul2ufaPK1uW5jsYYd4NCmrX7ZYu1/drM/Ls9qbv696rEk53EPH2tFh4AAQEVvvRve9Ix0xZflsdL2Xw+Fg+z96bP/sRdfPUwAAAODglWVZFunrvE+mY/6DrjsFALQiv/83jwuoj14dNfPQH7VarVa3X9eV092tFxGxXr9Ptc9gOH4AOGTW45Ouu0CH5N9ro4h4oetOAHOt6LoDHIj7D+6sFinfov5+kMZ3z+eC7Mh/vdi8X77/tOkszXNM2np+bcQwntulP8+31Id5kvMfNPO/stU+ScsddP5t2S3/aj1PdNCfruX8h838G45O/oOp+fdVzn+0r/yH8gcAAAAAgDmW//5/Yq6O/04ed3VmetTx35UDe1QAAAAAAAAAOFj3H9xZzde95uP/X5iynOs/j6acfyH/Xsr5Dxr5f7Wx3LA2f+/th/n/58Gd1T/e+vfn83Sv+S/kmSI9s4r0jCjSIxWjNH2StfusjfFwUj3SuBgMR+mcn3L8blyL67EWZ3csO0j/Hw/bz+1or3o63mwvh1vt53e0j7bb8/0v7GgfpzOdyqXcfjpW4+dxPd7ZbK/aFmas/+KM9nJGe85/+NS2/719G6ztfz7k/Ee1nyr/5dReNKaVex8NPrPd16fTHueta1/8zdmDX52ZNmK4vW511fq91EF/Nv9Pjk3ilzfXbpy+ffXWrRvnIk123Ho+0uQpy/mP08/26//LW+35db++vd77aLLv/OfFRox2zf/l2ny1vq+03Lcu5Pwn6Sfn/05qn7797yP/wZ9aW5dZ8q7Gbvm/2naHAAAAAAAAAAAAAAAAYIayLDcvEX0rIi6m63+6ujYTAGhXfv8vk3x7W/Ww5cdTqw95XcxZf1qtPy3nqz9q9WGs68rp3qwXEfH3+n2qfYZfT/tlAMA8+zQi/tV1J+iM/Hssf99fNT3VdWeAVt384MOfXr1+fe3Gza57AgAAAAAAAAA8rjz+50pt/OdTZVk2R3HeMf7r27HypOO/jvLM9gCjuwxUPdz/Oj3KxmAyHNSGG38xdhv/e7w996jxv0czHm88o30yo31hRvvijPapF3rU5PxfrI13fioiTjaGX3/s8V/nzKPGf26Oed8HOf+Xas/nKv+vNJar51/+/jDnP9iR/5lb7//izM0PPnzt2vtX31t7b+1nF86dO3vh4sVLly6deffa9bWzW/922OODlfPPY187D7Rfcv45c/n3S87/S6mWf7/k/L+cavn3S84/7+/Jv19y/vmzj/z7Jef/Sqrl3y85/6+lWv79kvN/NdXy75ec/9dTLf9+yfm/lmr590vO/3Sq5d8vOf8zqd5j/ksH3S/akfPPR7hs//2S889nNsi/X3L+51Mt/37J+V9Itfz7Jef/eqrl3y85/2+kWv79kvO/mGr590vO/5upln+/5PwvpVr+/ZLz/1aq5d8vOf9vp1r+/ZLzfyPV8u+XnP93Ui3/fsn5fzfV8u+XnP/3Ui3/fsn5v5lq+ffLw+//N2PGjJk80/UrEwAAAAAAAAAAAADQ1MbpxF2vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf2S9vnJAYCKmTmrBxTAjJJru2E3/Qppjw2fBVEkKhH9iud22WOrbx2iXQqHYUKJEwKq1oGy7aAkJtbiqiigtaAcoFalWpErQX9AZRoXIRVQEFpEptBdlq5rzvuzOz87HrnV2fOef3k+zHO3PmnPeceefMPrv+zwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGa3vHH+U7Usy2q1Wn7Dtiy7pl6vmtrWuOV1V3Z8AAAAwPr9vPH3C9elGw6t4kFNy/zTzd/+6tLS0lL2/tE/Hf/c0lK6YyrLxrdkWeO+6JkffKDWvEzwRDZZG2n6eqTP5kf73D/W5/7xPvdP9Ll/S5/7J/vcv+IArHBVVksr29X457b8kGbXZ+ON+3Z1eNQTtS0j9WOXHpvVGo9ZGj+eLWQns/lstmX5fNlaY/mv31Lf1tuyuK2Rpm3tqM+Qnzx2LI6hFo7xrpZtLa8z+tEbsqmf/uSxY3997vkbO9W+h6Flffk4b99ZH+cnwi35WGvZlnRM4jhHmsa5o8NzMtoyzlrjcfV/t4/zhVWOc3R5mJuq/TmfzEYa//5O4ziN1bIOx2lHuO1/bs2y7OLysNuXWbGtbCTb2nLLyPLzM5nPyPo66lPpZdlY73m6VGuZp7esYp7W69yu1nna/pqIz/8t4XFjXcbQ/DT96PGJpuf9Z0uXM0+j+l53e620z8FBv1aKMgfjvPhOY6ef7DgHd4X9f+y27nOw49zpMAfTfjfNwZ395uDIxGhjzOlJqDUeszwHd7csP9rYUq1Rn7ut9xycOffImZnFj338roVHjp6YPzF/au/u3bN79+07cODAzPGFk/Oz+d+XebSLb2s2kl4DO8Oxi6+B17Qt2zxVl744seL8e7mvw8ker8NtbcsO+nU41r5ztc15Qa6c0/lr4731gz55aSTr8hprPD93rP91mPa76XU41vQ67Pie0uF1OLaK12F9mTN3rO57lrGmP53G0P29YH1zcFvTHGz/fqR9Dg76+5GizMHJMC++d0f394IdYbxPTq/1+5HRFXMw7W4499RvSd/vTx5olE7z8qb6HVdPZOcX58/e/ejRc+fO7s5C2RQvb5or7fN1a9M+ZSvm68ia5+uhhZufvKnD7dvCsZq8q/7XZNfnqr7MPXf3fq4a726dj2fLrXuyUAYsHM+lLZt0PDu9m9eP50SWff5bjz/4jcc+/8aux7Peb35iZv3fi6e+tOn8O97l/Bv7/hfz7aVVPTE6Ppa/fkfT0RlvOR+3PlVjjXNXrbHtF2ZWdz4eD382+3x8fY/z8fa2ZQd9Ph5v37l4Pq71+2nH+rQ/n5Nhnpyc7X0+ri+zfc9a5+RYz/PxraHWwvF/begUUl/UNHe6zdu0rbGx8bBfY3ELrfN0b8vy46E3q2/r6T2XN09vvzVf12jau2WbNU+n2pYd9DxNP/vqNk9r/X76dnnan8/JMC+u39t7ntaXefae9Z87r4r/bDp3TvSbg+OjE/Uxj6dJ2DjfZ0tXxTl4d3YsO52dzOYa90405lOtsa3pe1c3ByfCn80+V27vMQdvb1t20HMwvY91m3u1sZU7PwDtz+dkmBdP3dt7DtaXedP+wX7venu4JS3T9L1r+8/Xuv3M66a2w7RRc2UsjPNb+3v/bLa+zMkDa+0zex+nO8MtV3c4Tu2v326vqblsc47T9jDO5w90P0718dSX+dzBVc6nQ1mWXfjI/Y2f94bfr/zd+e9+teX3Lp1+p3PhI/f/+CXH/3Et4wdg+L2Yl635e13Tb6ZW8/t/AAAAYCjEvn8k1ET/DwAAAKUR+/74v8IT/T8AAACURuz7x0JNKtL/b3/T8wsvXshSMn8piPenw/BAvlzMuM6Gr6eWltVvv//L8//9DxdWt+2RLMt+9sDvd1x++wNxXLmpMM5n3tx6+wpfvWtV2z7y8IW03eb8+hfC+uP+rHYadIrgzmZZ9vXrPtPYztQHLjXqsw8cadQHLz75RH2ZFw7mX8fHP/fyfPm/COHfQ8ePtjz+uXAcfhjq7Ns7H4/4uK9ceu2O/e9b3l58XG3ntY3dfuqD+Xrj5+R89ol8+Xicu43/G59++iv15R99defxXxjpPP6nw3q/HOr/vjJfvvk5qH8dH/fJMP64vfi4u7/0zY7jf+ZT+fJn3pIvdyTUuP3bw9e73vL8QvPxerR2tGW/srfmy8Xtz373jxr3x/XF9bePf/LwpZbj0T4/nv23fD0zbcvH2+N2or9v2359Pc3zM27/6T880nKc+23/mQefe2V9ve3bv7NtuTMfuaOx/eX1tX5i019+8jMdtxfHc+hvz7Tsz6H3hNdx2P5THwzzMdz/f8/k62v/dIUj72k9/8Tlv7DtQsv+RG/7ab79Z15/olG3TF619eprXnLtxVfVj12WfWdLvr5+2z/xV6dbxv/FG/LjEe+PGf327XcTt3/2o9OnTi+eX5hLR/Wx6xqfnfOOfDxxvNeFc2v714dPn/vQ/Nmp2anZLJsq70foXbYvhfrjvFzsvfTSijPoHQ+H5/OmP//61tv+9dPx9n9/b377pbfn71uvCct9Nty+LTx/a9v+Sk/dckPj9V17NoxwaeXnBa/Hjl3/dWBVC4b9b/++IM73M6/4UOM41O9rvG/E1/U6x//9uXw9XwvHdSl8MvPOG5a317x8/GyESw/lr/d1H79wmovP69+E5/udP8zXH8cV9/f74fuYb25vPd/F+fG1CyPt6298isfFcD7JLub3x6Xi8b70wg0dhxc/hyS7eGPj6z9J67lxTbvZzeLHFmdOLpw6/+jMufnFczOLH/v44UdOnz917nDjszwPf7jf45fPT1sb56e5+X33ZI2z1em8bLArPf4zDx+b2z9729z88aPnj597+Mz82RPHFhePzc8t3nb0+PH5j/Z7/MLcfbv3HNy7f8/0iYW5+w4cPLj34PTCqdP1YeSD6mPf7O9Onzp7uPGQxfvuObj73nvvmZ1+5PTc/H37Z2enz/d7fOO9abr+6N+bPjt/8ui5hUfmpxcXPj5/3+6D+/bt6ftpgI+cOb44NXP2/KmZ84vzZ2fyfZk617i5/t7X7/GU0+J/5N/PtqvlH8SXvfvOfenzWeu+/HjXVeWLtH2A6PPhs2j++aVnDqzm69j3j4eaVKT/BwAAgCqIff9EqIn+HwAAAEoj9v1bQk30/wAAAFAase+fDDWpSP9fuvz/9gvN65vstpj8v/x/8/GS/69Y/v+houX/8/OF/P9grDd/L/8fyP/L/8v/X6H8/9Vrzv8vhTck+X+KqGj5/9j3X5Vllez/AQAAoApi37811ET/DwAAAKUR+/6rQ030/wAAAFAase+/JtSkIv3/avP/Y8OZ/+9K/l/+v/l4yf/L/3favvz/cJL/703+vw/5/5msWvn/i4Mcv+v/y/+zUtHy/7Hvf0moSUX6fwAAAKiC2PdfG2qi/wcAAIDSiH3/daEm+n8AAAAojdj3bws1qUj/X/Lr/3cl/y//33y85P/l/zttX/5/OBUl/59d5vbl/+X/r3T+3/X/5f/l/xmkouX/Y9//0lCTivT/AAAAUAWx739ZqIn+HwAAAIpn7PIeFvv+l4earOj/L3MDAAAAwBUX+/7rs7YgeEV+/1++/P81q9q2/P8w5f+3pPvk/+X/s0Lm/0cz+f/iKEr+3/X/L2/88v/y/8M8fvl/+X9WKlr+v9H3Z5PZK0JNKtL/AwAAQBXEvv+GUBP9PwAAAJRG7Pt/IdRE/w8AAAClEfv+7aEmFen/y5f/d/3/bMjy/+NtY3f9/+XHyf/nip//d/3/IpH/703+vw/5f/l/+X/5fwaqaPn/2PffGGpSkf4fAAAAqiD2/TeFmuj/AQAAoDRi3/+LoSb6fwAAACiN2PfvCDWpSP8v/1/w/H9MjpY4/9//+v/y//L/8v/y/6sn/9+b/H8f8v/y//L/8v8MVNHy/7Hvf2WoSUX6fwAAAKiC2PffHGqi/wcAAIDSiH3/q0JN9P8AAABQGrHvnwo1qUj/L/9f8Px/noOfKPP1/+X/5f/l/+X/B0n+vzf5/z7Cae5HWZbJ/8v/y//L/7N+Rcv/x77/llCTivT/AAAAUAWx798ZaqL/BwAAgNKIff+toSb6fwAAACiN2PfvCjWpSP8v/z8U+f9M/l/+X/6/PPn/P746/3ouy5YuyP8PnPx/b/L/fbj+v/y//L/8PwNVtPx/7PtfHWpSkf4fAAAAqiD2/beFmuj/AQAAoDRi3/+aUBP9PwAAAJRG7PtvDzWpSP8v/y//X7D8/0jz44qT/6/V5P8z+X/X/x8K8v+9yf/3If8v/y//L//PQBUt/x/7/teGmlSk/wcAAIAqiH3/HaEm+n8AAAAojdj33xlqov8HAACA0oh9/3SoSUX6f/l/+f+C5f9d/1/+X/5f/n9d5P97k//vQ/5f/l/+X/6fgSpa/j/2/XeFmlSk/wcAAIAqiH3/3aEm+n8AAAAojdj3z4Sa6P8BAACgNGLfPxtqUpH+X/5f/l/+X/5/Tfn/Vy2vV/4/J/9fLPL/vcn/9yH/L/9/xfP/4/L/lErR8v+x798dapIav4nL2EsAAACgSGLfvyfUpCK//wcAAIAqiH3/3lAT/T8AAACURuz77wk1qUj/L/8v/y//L//v+v+dty//P5zk/3sbfP4/7qL8v/y//L/r/8v/s1LR8v+x77831KQi/T8AAABUQez794Wa6P8BAACgNGLfvz/URP8PAAAApRH7/gOhJhXp/+X/5f/l/+X/5f87b1/+fzjJ//fm+v99FC////rmh29m/r++Lfl/+X/5f9buoT9o/qpo+f/Y9x8MNalI/w8AAABVEPv+14Wa6P8BAACgNGLf/0uhJr37/y0bOyoAAABgkGLf/8uhJhX5/b/8v/y//L/8v/x/5+3L/w8n+f/e5P/7KF7+v4Xr/xd7/PL/8v+sVLT8f+z77ws1qUj/DwAAAEOu/VdIHcW+/1dCTfT/AAAAUBqx7399qIn+HwAAAEoj9v2HQg06xblLSf5f/n848/+T8v/y/6XL/0/E9cr/r4v8f2/y/31sRP5/smX98v8b6EqPX/5f/p+Vipb/j33/G0JN/P4fAAAASiP2/feHmuj/AQAAoDRi3//GUBP9PwAAAJRG7PvfFGpSkf5f/l/+fzjz/67/n8n/ly7/7/r/gyH/35v8fx+u/y//v3H5/77vFPL/lFHR8v+x739zqElF+n8AAACogtj3vyXURP8PAAAApRH7/reGmuj/AQAAoDRi3/+2UJOK9P/y//L/VzL/n7so/y//37Ah+f+L9QMt/18l8v+9yf/3If8v/+/6//L/DFTR8v+x7//VUJOK9P8AAABQBbHvfyDURP8PAAAApRH7/reHmuj/AQAAoDRi3/+OUJOK9P/y//L/rv8v/1/q/L/r/1eO/H9vQ5b///m14Xb5/5z8f7HHv9b8/1jb1xuS//9Bt/z/0pb2x8v/sxGKlv+Pff87Q00q0v8DAABAFcS+/12hJvp/AAAAKI3Y97871KSp/x/of7wDAAAANl3s+38t1KQiv/+X/6+PYzm9LP8v/9+4Qf5f/l/+f2jJ//c2ZPl/1/9vI/9f7PG7/r/8PysVLf8f+/73hJpUpP8HAACAKoh9/4OhJvp/AAAAKI3Y9z8UaqL/BwAAgNKIff97Q00q0v/L/7v+v/y//L/8f+fty/8PJ/n/3uT/+5D/l/8vWv7/P+X/GW5Fy//Hvv/hUJOK9P8AAABQBbHvf1+oif4fAAAASiP2/b8eaqL/BwAAgNKIff/7Q00q0v/L/w9L/n9qSPP/j8v/b2D+/+Zr8+Xk/+X/WSb/35v8fx/y//L/Rcv/u/4/Q65o+f/Y938g1GT1/f/kqpcEAAAANtBY13ti3/8boSYV+f0/AAAAVEHs+38z1ET/DwAAAKUR+/7fCjWpSP8v/z8s+X/X/8/k/13/v21/5P/l/zvZvPx/PPPI/8v/Fyv/v21NO9zqSufn1+tKj7+6+f/8nVH+n06Klv+Pff9vh5pUpP8HAACAKoh9/wdDTfT/AAAAMBQ6/Z/sdrHvPxxqov8HAACA0oh9/5FQk4r0//L/8v9ry//HIyL/v+H5/z/b+S/f+/a7juyW/5f/l/9fk029/n/9xe/6//L/Bcv/r8eVzs9v1vhrXS4NJv/v+v8MXtHy/7HvPxpqUpH+HwAAAKog9v2/E2qi/wcAAIDSiH3/sVAT/T8AAACURuz750JNKtL/y//L/7v+f0Hz/0N8/f94POT/Ww0s/x9PuvL/HW1q/v99yzlx+f+15v8nOt4q/y//P8zjl/+X/2elouX/Y98/H2pSkf4fAAAAqiD0/SPH87p8h/4fAAAASiP2/SdCTfT/AAAAUBqx7/9QqElF+n/5f/l/+X/5f9f/77z9Xvn/2tiq8v8tu+L6/5tD/r+34uT/O5P/l/8f5vHL/8v/s1LR8v+x718INalI/w8AAABVEPv+D4ea6P8BAAD4f/bu5Emycq3jeBZ001WBC3dG6MYIl/4JLGSte1240I0RhgOooDjTOI8oKs6K4izgAIKIivMETijOoKKXO4/cicu9N/oGVc/zdFXlyZNVTWbnOe/7+Sx47JKqTDuapn90fz00I3f/l8Yt9j8AAAA0I3f/l8Utnex//b/+X/+v/9f/D7/+ZJ//r/8fpf8fp/9fQ/+v/9f/6//ZqKn1/7n7vzxu6WT/AwAAQA9y998Wt9j/AAAA0Izc/bfHLfY/AAAANCN3/1fELZ3sf/2//r/Z/v+z9P+rXl//r/9vmf5/nP5/Df2//l//r/9no6bW/+fu/8q4pZP9DwAAAD3I3f9VcYv9DwAAAM3I3X9H3GL/AwAAQDNy998Zt3Sy/0/1/3uLPvv/zHj1/y31/57/v/L19f9voP+/Uf8/dde3/7/n9Z/59P/6f/1/0P+fqf+/tOrz9f+0aGr9f+7+r45bOtn/AAAA0IPc/V8Tt9j/AAAA0Izc/XfFLfY/AAAANCN3/9fGLZ3s/809///g8OMz7f+L/l//f/gB/b/+f1X/f+Hqt/X/0+T5/+N66v/veP7m21554tOePM/r6//1/57/r/9ns6bW/+fu/7q4pZP9DwAAAD3I3f/1cYv9DwAAAM3I3f8NcYv9DwAAAM3I3f+NcUsn+39z/f+sn/9f9P/6/8MP6P/1/6v6/8/1/P+p0/+P66n/v5bX1//r//X/+n82a9f9f37h/Hbu/m+KWzrZ/wAAANCD3P3fHLfY/wAAANCM3P13xy32PwAAADQjd//luKWT/a//337//3H9v/4/rv5f/6//3z79/zj9/xr6f/2//l//z0btuv8//e3c/ffELZ3sfwAAAOhB7v5viVvsfwAAAGhG7v5vjVvsfwAAAGhG7v5vi1s62f/6f8//1//r//X/w6+v/58n/f84/f8a+v8z9fMXV3z+F9x+50X9/wz7//iFlP6fbThn///ayE/b19r/Xzr+7dz93x63dLL/AQAAoAe5+78jbrH/AQAAoBm5+78zbrH/AQAAoBm5+78rbulk/+v/9f/6f/3/Nff/yz/0Dun/h+n/rw/9/7jJ9P97FwY/rP+fR/+/iuf/z7T/D/p/tmFqz//P3f/dcUsn+x8AAAB6kLv/e+KWkf1/7v+YDwAAAOxU7v7vjVv8/j8AAADMXlZnufu/L27pZP/r//X/+n/9v+f/D7/+WP//5LH3p/+fFv3/uMn0/yvo//X/c37/+n/9P8um1v/n7v/+uKWT/Q8AAAA9yN1/b9xi/wMAAEAzcvf/QNxi/wMAAEAzcvf/YNzSyf4f7v+v/u/1/2ej/z/5/vX/wz8+NtX/51fU/4/2/7d6/n+f9P/jrn//f0n/f/Lr6/+3aNfvv/H+/2Dd5+v/GTK1/j93/31xSyf7HwAAAHqQu/+H4hb7HwAAAJqRu/+H4xb7HwAAAJqRu/9H4pZO9v+On/9/z02r3pf+/5D+X//v+f/TfP7/4rr3/xf0/2ek/x/n+f9r6P/1//p/z/9no6bW/+fuvz9u6WT/AwAAQA/uf3VxuPt/dLGw/wEAAGCOjv/ZgdN/oDTk7v+xuMX+BwAAgGbk7v/xuKWT/b/j/n9bz/+/uO619f/6/+PfX/p//f/Q60+r//f8/7PS/4/T/6+h/99GP3+hsf7/gVWfP4X+/279PxNzov9/+urHd9X/5+7/ibilk/0PAAAAPcjd/5Nxi/0PAAAAzcjd/1Nxi/0PAAAAzcjd/9NxSyf7f+v9/8Hq195i/7+W/l//f/z7S/+v/x96ff3/POn/x+n/19D/e/6/5//r/9moE/3/Mbvq/3P3/0zc0sn+BwAAgB7k7v/ZuMX+BwAAgGbk7n8gbrH/AQAAoBm5+38ubulk/zf6/P+19P/6/+PfX/p//f/Q6+v/50n/P07/v/RTzEn6f/2//n99/7/inyL9P0Om1v/n7v/5uKWT/Q8AAAA9yN3/YNxi/wMAAEAzcvf/Qtxi/wMAAEAzcvf/YtzSyf7X/2+3/8+P6//1/4vz9P/xCfr/I/p//f95zK3/P/3PzzX383tD/yZatqL/f/aLL3/OyY+02/+P0/930P8fbO39d9P/r6D/Z8gk+v8rV391mbv/l+KWTvY/AAAA9CB3/y/HLfY/AAAANCN3/6/ELfY/AAAANCN3/6/GLefc/5+80Xd1/ej/Pf9f/z/B/j/o/4/o//X/5zG3/v80z//X/+v/5/v+9f/6f5ZNov8/9u3c/b8Wt/j9fwAAAGhG7v5fj1vsfwAAAGhG7v6H4hb7HwAAAJqRu//huKWT/a//1//r//X/Lff/Bzvo//cXw/T/14f+f5z+fw39v/5f/6//Z6Om1v/n7n8kbulk/wMAAEAPcvf/Rtxi/wMAAEAzcvf/Ztxi/wMAAMCcZDo2KHf/b8Utnex//b/+X/+v/2+5//f8//7MtP+vnwbn2v/fOKf+/9GRNzDU/1+5pP9vuf8/2Nz71//r/1k2tf4/d/9vxy2d7H8AAADoQe7+R+MW+x8AAACakbv/sbjF/gcAAIBm5O7/nbilk/2v/9f/6//1//r/4dfX/8/TTPv/Mtf+3/P/9f+Lufb/G3z/+n/9P8um1v/n7n88bulk/wMAAEAPcvc/EbfY/wAAANCM3P2/G7fY/wAAANCM3P1Pxi2d7H/9v/5f/6//1/8Pv77+f5621/8vdtf/v3zDeb/MSvr/NfT/+n/9v/6fjZpa/5+7//filk72PwAAAPQgd/9TcYv9DwAAAM3I3f/7cYv9DwAAAM3I3f8HcUsn+1//r/+fZ/9/3/7Q+9f/6/8X+v/uef7/OP3/Gvp//b/+X//PRk2t/8/d/4dxSyf7HwAAAHqQu//puMX+BwAAgGbk7v+juMX+BwAAgGbk7v/juKWT/a//1/+f7P8Xi3n0/57/v9D/t9D/7y/0/xun/x93tv7/Vv3/xPv/hw6Ovq3/P+P7v2HRUP9/sPLz9f9M0dT6/9z9fxK3dLL/AQAAoAe5+/80brH/AQAAoAFHf3Ymd/+fxS32PwAAAEzZhfP8zbn7/zxu6WT/z7//v3TqE/X/i8Xihbuaf/6//n+h/2+h/6/vVf3/5uyy///UY19n3v2/5/9Pvf/3/P9pvn/P/9f/s2xq/X/u/r+IWzrZ/wAAANCD3P1/GbfY/wAAANCM3P1/FbfY/wAAANCM3P1/Hbd0sv/n3/+f/kT9/+INPf9f/3/4Af2//l//P1ue/z9O/7+G/n9tP7+34tc9C/2//l//z4Cp9f+5+/8mbulk/wMAAEAPcvc/E7fY/wAAANCM3P3Pxi32PwAAADQjd//fxi2d7H/9v/5f/z/P/n9f/6//1/8Pmkr/f8stn/2c/l//32L/P0b/r//X/3Pa1Pr/3P1/F7d0sv8BAACgB7n7/z5usf8BAACgGbn7/yFusf8BAACgGbn7/zFu6WT/L/f/FxdHheqRof4/GjX9/zH6/5PvX/8//OPD8//1//r/7ZtK/+/5/9f2/vX/+v85v/9z9f+fvvz5+n9aNLX+P3f/c3FLJ/sfAAAAepC7/5/iFvsfAAAAmpG7/5/jFvsfAAAAmpG7//m4pZP97/n/+n/9v/5f/z/8+vr/edL/jxvr/0+U6vp//b/+v9/n/9+o/2dzptb/5+7/l7jlcPh9xidd4/+ZAAAAwITk7v/XuKWT3/8HAACAHuTu/7e4xf4HAACAZuTu//e4pZP9r//X/+v/9f/6/+HX1//Pk/5/nOf/r9FP/78/9MFd9/Nv1K7ffzP9v+f/s0FT6/9z9/9H3NLJ/gcAAIAe5O7/z7jF/gcAAIBm5O7/r7jF/gcAAIBm5O5/IW7pZP/r//X/7ff/X6j/P/X6+n/9f8v0//lv9GH6/zX66f8H7bqfn/v71//r/1k2tf4/d/+LcUsn+x8AAAB6kLv/v+MW+x8AAACakbv/f+IW+x8AAACakbv/f+OWTva//r+v/n9v0WP/7/n/+n/9f0/m0/8/eGHoo57/r//X/8/3/ev/9f8sm1r/n7v/pb0LXe5/AAAAmKvP+8wveXHpgzcN/70vHf51f/F/cYv9DwAAAM3I3f//cYv9DwAAAM3I3f+muKWT/a//76v/7/P5//p//b/+vyfz6f+H6f/1//r/+b5//b/+n2VT6/9z978ctxwbfoP/D3oAAACA2cjd/+a4pZPf/wcAAIAe5O5/S9yytP+vnPFPtQMAAABTk7v/rXFLJ7//r/+feP+/2FL/H3+f/v+I/l//P/T6+v95aq3/v7SYVP9/ZU//r/8fof/X/+v/OW1q/X/u/qceX3S5/wEAAKBRJ/6LwtsO/7q/eHvcYv8DAABAM3L3vyNusf8BAACgGbn73xm3dLL/9f8T7/+v6fn/B/U/ef7/6f7/6Md5N/3/vfuDr6//1/+3rLX+3/P/jz6u/z+i/5/2+9f/6/9Zdo7+//AX6tvu/3P3vytu6WT/AwAAQA9y9787brH/AQAAoBm5+98Tt9j/AAAA0Izc/e+NWzrZ//r/HfT/911aLLba/5/h+f/d9v+e/99W//8pN19+5vO/6LFH9P9cdT37//yxoP/X/++g/384fvzp/yf0/vX/+n+WTe35/7n73xe3dLL/AQAAoAe5+1+JW+x/AAAAaEbu/vfHLfY/AAAANCN3/wfilk72v/6/xef/z7P/z+/rHfT/l+fX/2dT3Hv/7/n/+v9lnv8/Tv+/xnz6/8Nve/7/tN6//l//z7Kp9f+5+z8Yt3Sy/wEAAKAHufs/FLfk/t8793+6BwAAACYmd/+H4xa//w8AAADNyN3/atzSyf7X/+v/p9L/J8//v/p5nv9/RP+v/z+PFvv/G877RUbo/9fQ/+v/9f/6fzZqav1/7v6PxC2d7H8AAADoQe7+1+IW+x8AAACakbv/o3GL/Q8AAADNyN3/sbilk/2v/9f/6//1//r/4dfX/89Ti/3/eb/GGP3/625a/Qb0//p//b/+n42aWv+fu/8TAQAA//+WI0uy")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

680.354753ms ago: executing program 5 (id=708):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000080), 0x10)
listen(r2, 0x0)
accept4$llc(r2, 0x0, 0x0, 0x0)

575.713736ms ago: executing program 6 (id=709):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0x5, 0x6, 0xc7, 0x4, 0x0, 0x9d})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x5b0)

531.622992ms ago: executing program 7 (id=710):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0xa}}]}, {0xfffffffffffffd4d}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

194.999585ms ago: executing program 4 (id=711):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x10000, 0x6, 0x6, 0x1], 0xd5d5c004, 0x8340})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 7 (id=712):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x1})

kernel console output (not intermixed with test programs):

ci6: command 0x1003 tx timeout
[   90.842291][ T4187] Bluetooth: hci6: sending frame failed (-49)
[   91.270976][ T4823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'.
[   91.519549][ T4834] loop4: detected capacity change from 0 to 512
[   91.612473][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,acl,,errors=continue. Quota mode: none.
[   91.655639][ T4840] loop2: detected capacity change from 0 to 1024
[   91.694208][ T4820] loop3: detected capacity change from 0 to 32768
[   91.713602][   T26] audit: type=1800 audit(1768673420.347:2): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.166" name="file1" dev="loop4" ino=15 res=0 errno=0
[   91.766722][ T4840] EXT4-fs (loop2): Ignoring removed orlov option
[   91.787036][ T4842] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.166: bg 0: bad block bitmap checksum
[   91.807672][ T1324] Bluetooth: hci5: command 0x1001 tx timeout
[   91.813903][ T4187] Bluetooth: hci5: sending frame failed (-49)
[   91.830261][ T4820] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   91.849686][ T4840] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[   91.892712][ T4820] JBD2: Ignoring recovery information on journal
[   92.035455][ T4820] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   92.112753][ T4193] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   92.200438][   T26] audit: type=1800 audit(1768673420.837:3): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=17058 res=0 errno=0
[   92.261469][ T4820] syz.3.161 (4820) used greatest stack depth: 19344 bytes left
[   92.309392][ T4192] ocfs2: Unmounting device (7,3) on (node local)
[   92.537334][ T4852] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.924484][ T4239] Bluetooth: hci6: command 0x1001 tx timeout
[   92.939166][ T4187] Bluetooth: hci6: sending frame failed (-49)
[   92.948311][ T4855] loop3: detected capacity change from 0 to 32768
[   92.997289][ T4867] process 'syz.4.177' launched './file2' with NULL argv: empty string added
[   93.098555][ T4869] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   93.098555][ T4869] 
[   93.111271][ T4869] ERROR: (device loop3): remounting filesystem as read-only
[   93.139805][ T4869] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   93.139805][ T4869] 
[   93.511249][ T4872] loop4: detected capacity change from 0 to 32768
[   93.621635][ T4872] JBD2: Ignoring recovery information on journal
[   93.792554][ T4872] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   93.857299][ T4872] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[   93.857412][ T4872] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   93.884353][ T1324] Bluetooth: hci5: command 0x1009 tx timeout
[   93.906076][ T4891] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[   93.906107][ T4891] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   93.971707][ T4891] OCFS2: Returning error to the calling process.
[   93.979316][ T4872] OCFS2: Returning error to the calling process.
[   94.013719][ T4184] ocfs2: Unmounting device (7,4) on (node local)
[   94.182325][ T4887] loop2: detected capacity change from 0 to 32768
[   94.255056][ T4887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.182 (4887)
[   94.291989][ T4887] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   94.303242][ T4887] BTRFS info (device loop2): using free space tree
[   94.310524][ T4887] BTRFS info (device loop2): has skinny extents
[   94.411361][ T4887] BTRFS info (device loop2): enabling ssd optimizations
[   94.644276][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   95.004260][ T2288] Bluetooth: hci6: command 0x1009 tx timeout
[   95.004978][ T4234] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   95.212597][ T4943] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.192'.
[   95.234480][ T4234] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[   95.243671][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.254654][ T4234] usb 5-1: Product: syz
[   95.258863][ T4234] usb 5-1: Manufacturer: syz
[   95.263486][ T4234] usb 5-1: SerialNumber: syz
[   95.328171][ T4234] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[   95.429336][ T4952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.196'.
[   95.469859][ T4954] loop3: detected capacity change from 0 to 128
[   95.768454][ T4234] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   95.794707][ T4234] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[   95.804020][ T4234] usb 5-1: media controller created
[   95.828903][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.963593][ T4317] usb 5-1: USB disconnect, device number 5
[   96.324890][ T4965] loop2: detected capacity change from 0 to 256
[   96.384952][ T4965] exfat: Deprecated parameter 'namecase'
[   96.404121][ T4961] chnl_net:caif_netlink_parms(): no params data found
[   96.451084][ T4965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   96.550292][ T4961] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.558477][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.566724][ T4961] device bridge_slave_0 entered promiscuous mode
[   96.575869][ T4961] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.583134][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.592565][ T4961] device bridge_slave_1 entered promiscuous mode
[   96.599480][ T4972] ALSA: seq fatal error: cannot create timer (-16)
[   96.625492][ T4961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.639356][ T4961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.668583][ T4961] team0: Port device team_slave_0 added
[   96.678458][ T4961] team0: Port device team_slave_1 added
[   96.701832][ T4961] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.708994][ T4961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.748755][ T4961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.762844][ T4961] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.770794][ T4961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.804349][ T4961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.868387][ T4976] loop2: detected capacity change from 0 to 1024
[   96.938133][ T4961] device hsr_slave_0 entered promiscuous mode
[   96.961317][ T4961] device hsr_slave_1 entered promiscuous mode
[   96.985680][ T4961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   97.026989][ T4961] Cannot create hsr debugfs directory
[   97.098204][ T4226] hfsplus: b-tree write err: -5, ino 4
[   97.272114][ T4961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   97.298127][ T4961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   97.312788][ T4961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.326538][ T4961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.461454][ T4961] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.501934][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.512119][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.514911][ T2288] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.529322][ T4961] 8021q: adding VLAN 0 to HW filter on device team0
[   97.543146][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.573277][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.601161][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.609195][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.626579][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.649350][ T5001] netlink: 'syz.4.212': attribute type 12 has an invalid length.
[   97.659022][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.675823][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.694586][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.701893][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.718331][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.754852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.797962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.808359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.817387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.827770][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.839158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.855014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.867339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.876422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.891814][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   97.934616][ T2288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.954220][ T2288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.965405][ T2288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.991562][ T2288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.016306][ T2288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.035601][ T2288] usb 3-1: config 0 descriptor??
[   98.121221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.129907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.155326][ T4961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.216466][ T5017] loop4: detected capacity change from 0 to 4096
[   98.275083][    T7] Bluetooth: hci3: command 0x0409 tx timeout
[   98.309821][ T5017] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   98.383324][ T5017] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[   98.403573][ T5017] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[   98.465320][ T5017] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   98.477701][ T5017] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   98.519655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   98.535317][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   98.547223][ T2288] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   98.562271][ T5017] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   98.584512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   98.593010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   98.605731][ T2288] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   98.619263][ T5017] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[   98.640991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   98.662648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   98.671937][ T5017] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   98.682786][ T5017] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   98.707651][ T5017] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   98.722369][ T4961] device veth0_vlan entered promiscuous mode
[   98.752548][ T5017] ntfs: volume version 3.1.
[   98.761591][ T4961] device veth1_vlan entered promiscuous mode
[   98.844915][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.888997][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.908056][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.938486][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.957588][ T4961] device veth0_macvtap entered promiscuous mode
[   98.969254][ T4961] device veth1_macvtap entered promiscuous mode
[   98.977098][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.999686][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   99.023365][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.033945][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.044660][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.084511][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.109826][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.122939][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.133199][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.147845][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.160740][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.172526][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.186272][ T4961] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.202210][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   99.220364][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   99.258033][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.269182][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.279540][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.290169][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.300073][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.310631][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.321943][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.339559][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.350139][ T4961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.361100][ T4961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.379384][ T4961] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.393253][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.403602][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.436957][ T4961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.460227][ T4961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.480243][ T4961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.501250][ T4961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.711969][ T5047] loop1: detected capacity change from 0 to 512
[   99.733615][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.776237][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.792350][ T5047] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   99.820321][    T7] usb 3-1: USB disconnect, device number 5
[   99.853938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.865264][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.886953][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.914064][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[   99.963943][ T5047] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   99.996966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.234435][ T5067] loop5: detected capacity change from 0 to 64
[  100.354365][ T4234] Bluetooth: hci3: command 0x041b tx timeout
[  100.508627][ T5077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.232'.
[  101.924178][    C0] sched: RT throttling activated
[  102.337759][ T5090] loop1: detected capacity change from 0 to 40427
[  102.416266][ T5090] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  102.472104][ T5099] loop5: detected capacity change from 0 to 32768
[  102.502079][ T5090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  102.589285][ T5099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.239 (5099)
[  102.633817][ T5090] F2FS-fs (loop1): invalid crc value
[  102.725039][ T5090] F2FS-fs (loop1): Found nat_bits in checkpoint
[  102.738348][ T5096] loop0: detected capacity change from 0 to 262144
[  102.750344][ T4920] Bluetooth: hci3: command 0x040f tx timeout
[  102.775876][ T5099] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  102.823264][ T5096] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.240 (5096)
[  102.840951][ T5099] BTRFS warning (device loop5): excessive commit interval 2147
[  102.850855][ T5096] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  102.860437][ T5096] BTRFS info (device loop0): setting nodatasum
[  102.866744][ T5096] BTRFS info (device loop0): using free space tree
[  102.873303][ T5096] BTRFS info (device loop0): has skinny extents
[  102.879656][ T5096] BTRFS info (device loop0): flagging fs with big metadata feature
[  102.884654][ T5099] BTRFS info (device loop5): force zlib compression, level 3
[  102.895950][ T5104] loop4: detected capacity change from 0 to 32768
[  102.924626][ T5099] BTRFS info (device loop5): turning on async discard
[  102.931514][ T5099] BTRFS info (device loop5): max_inline at 0
[  102.980805][ T5104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.242 (5104)
[  103.015903][ T5099] BTRFS info (device loop5): using free space tree
[  103.046328][ T5099] BTRFS info (device loop5): has skinny extents
[  103.118746][ T5104] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  103.134748][ T5090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  103.138729][ T5104] BTRFS info (device loop4): force clearing of disk cache
[  103.150106][ T5104] BTRFS info (device loop4): enabling ssd optimizations
[  103.181688][ T5090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.195078][ T5104] BTRFS info (device loop4): enabling auto defrag
[  103.201626][ T5104] BTRFS info (device loop4): max_inline at 0
[  103.238291][ T5096] BTRFS info (device loop0): enabling ssd optimizations
[  103.246710][ T5096] BTRFS info (device loop0): checking UUID tree
[  103.331161][ T5104] BTRFS info (device loop4): enabling disk space caching
[  103.381753][ T5104] BTRFS info (device loop4): allowing degraded mounts
[  103.402044][ T5104] BTRFS info (device loop4): disk space caching is enabled
[  103.476637][ T5104] BTRFS info (device loop4): has skinny extents
[  103.665091][ T5099] BTRFS info (device loop5): enabling ssd optimizations
[  103.835587][ T5104] BTRFS info (device loop4): clearing free space tree
[  103.836213][ T5104] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  103.836329][ T5104] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.570508][ T5192] netlink: 51 bytes leftover after parsing attributes in process `syz.0.248'.
[  104.641167][ T4178] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop0 scanned by udevd (4178)
[  104.741568][  T155] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  104.834600][ T5185] Bluetooth: hci3: command 0x0419 tx timeout
[  104.849005][ T5090] overlayfs: conflicting lowerdir path
[  104.885608][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.254'.
[  105.041540][ T5197] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.308441][ T5197] usb 3-1: Using ep0 maxpacket: 16
[  105.434809][ T5197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.454431][ T5197] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  105.475427][ T5197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.527773][ T5197] usb 3-1: config 0 descriptor??
[  106.019355][ T5197] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  106.218734][ T5187] i2c i2c-1: unsupported multi-msg i2c transaction
[  106.221029][ T5235] capability: warning: `syz.4.262' uses 32-bit capabilities (legacy support in use)
[  106.347361][ T2288] usb 3-1: USB disconnect, device number 6
[  106.765929][ T5197] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  106.815366][ T5197] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.053637][ T5263] loop0: detected capacity change from 0 to 1024
[  107.083334][ T5253] fido_id[5253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  107.210758][ T5268] loop4: detected capacity change from 0 to 1024
[  107.355869][  T144] hfsplus: b-tree write err: -5, ino 4
[  107.394727][ T5268] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  107.436241][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  107.436257][   T26] audit: type=1326 audit(1768673436.077:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.2.272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdff516cb9 code=0x0
[  107.854458][ T2288] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  107.944132][ T5288] netlink: 'syz.4.278': attribute type 4 has an invalid length.
[  107.969531][ T5288] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.278'.
[  108.244631][ T2288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.286332][ T2288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.327868][ T2288] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  108.573779][ T5305] loop4: detected capacity change from 0 to 32768
[  108.581587][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.598102][ T2288] usb 1-1: config 0 descriptor??
[  108.698107][ T5305] XFS (loop4): Mounting V5 Filesystem
[  108.810362][ T5330] loop2: detected capacity change from 0 to 1024
[  108.868520][ T5330] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.929052][ T5305] XFS (loop4): Ending clean mount
[  108.987746][ T5330] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,nolazytime,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  109.066471][ T2288] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  109.090775][ T2288] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input11
[  109.112168][ T4184] XFS (loop4): Unmounting Filesystem
[  109.147835][ T5330] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  109.184409][ T4257] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  109.320541][ T2288] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  109.418260][ T2288] usb 1-1: USB disconnect, device number 3
[  109.505736][ T5350] fido_id[5350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  109.587396][ T4257] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  109.606855][ T4257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  109.618841][ T4257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  109.630666][ T4257] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.645491][ T4257] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.655192][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.674951][ T4257] usb 6-1: config 0 descriptor??
[  109.694605][ T5334] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  110.156316][ T4257] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[  110.176280][ T4257] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  110.204289][ T2288] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  110.214497][ T4257] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  110.397269][ T5375] loop0: detected capacity change from 0 to 256
[  110.436628][ T5185] usb 6-1: USB disconnect, device number 2
[  110.572843][   T26] audit: type=1800 audit(1768673439.207:8): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=1048603 res=0 errno=0
[  110.606407][ T5375] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  110.615862][ T5375] FAT-fs (loop0): Filesystem has been set read-only
[  110.622646][ T5375] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  110.634682][ T2288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.670313][ T2288] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  110.702557][ T2288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.720207][ T2288] usb 5-1: config 0 descriptor??
[  110.767848][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  110.826189][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[  110.852662][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[  110.875160][ T5385] loop2: detected capacity change from 0 to 4096
[  110.922305][ T5385] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.953380][ T5385] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  111.101312][   T26] audit: type=1326 audit(1768673439.737:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.133884][ T5394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.176976][   T26] audit: type=1326 audit(1768673439.767:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.207075][ T2288] hid-rmi 0003:0461:4E72.000A: item fetching failed at offset 5/7
[  111.207519][ T2288] hid-rmi 0003:0461:4E72.000A: parse failed
[  111.207553][ T2288] hid-rmi: probe of 0003:0461:4E72.000A failed with error -22
[  111.214426][ T4257] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  111.214454][ T4257] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  111.214480][ T4257] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  111.214502][ T4257] usb 2-1: config 220 has no interface number 2
[  111.214541][ T4257] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  111.214570][ T4257] usb 2-1: config 220 interface 0 has no altsetting 0
[  111.214590][ T4257] usb 2-1: config 220 interface 76 has no altsetting 0
[  111.214610][ T4257] usb 2-1: config 220 interface 1 has no altsetting 0
[  111.304659][   T26] audit: type=1326 audit(1768673439.767:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.304707][   T26] audit: type=1326 audit(1768673439.767:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.304745][   T26] audit: type=1326 audit(1768673439.767:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.304783][   T26] audit: type=1326 audit(1768673439.767:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.304821][   T26] audit: type=1326 audit(1768673439.767:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6fec5cb9 code=0x7ffc0000
[  111.326901][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.339316][ T5385] Remounting filesystem read-only
[  111.339570][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.388873][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.389002][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.389112][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.389226][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.389350][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.389452][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.398857][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.398964][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399061][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399141][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399259][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399345][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399511][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.399660][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.413643][ T4257] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  111.413679][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.413721][ T4257] usb 2-1: Product: syz
[  111.413737][ T4257] usb 2-1: Manufacturer: syz
[  111.413754][ T4257] usb 2-1: SerialNumber: syz
[  111.417965][ T2288] usb 5-1: USB disconnect, device number 6
[  111.424444][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.424578][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.424671][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.424761][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.424850][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.424937][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.425025][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.425111][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.425200][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.425296][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.425383][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.427669][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.460554][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.460682][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.460770][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.460855][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.460938][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461049][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461131][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461221][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461303][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461386][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461463][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461546][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461627][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461712][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461793][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461877][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.461959][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462051][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462132][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462219][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462298][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462380][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462487][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462569][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462653][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462734][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462817][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462897][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.462981][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463061][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463144][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463235][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463319][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463399][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.463479][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.493984][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.494128][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.501778][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.501878][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.501989][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502073][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502157][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502246][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502332][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502413][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502496][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502583][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502666][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502750][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502836][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.502921][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503008][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503094][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503176][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503270][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503351][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503462][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503543][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503652][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503747][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.503944][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504117][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504266][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504352][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504433][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504515][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.504598][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505090][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505333][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505422][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505505][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505587][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505669][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505809][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505891][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.505976][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506060][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506145][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506237][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506320][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506406][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506493][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506578][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506664][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506747][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506832][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506910][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.506991][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507076][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507160][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507280][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507362][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507445][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507532][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507616][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507698][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507780][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507860][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.507944][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508031][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508115][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508195][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508286][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508368][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508454][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508539][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508624][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508733][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508817][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508904][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.508988][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509072][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509174][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509270][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509354][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509442][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509527][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509612][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509695][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509782][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509873][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.509958][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510042][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510127][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510246][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510330][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510417][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510501][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510587][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510671][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510756][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510840][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.510924][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511009][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511094][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511178][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511271][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511358][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511443][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511529][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511613][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511764][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511850][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.511937][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512023][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512108][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512193][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512287][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512371][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512456][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512548][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512634][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512718][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512805][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512889][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.512972][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513056][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513142][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513261][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513346][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513431][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513516][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513600][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513684][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513770][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.513854][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.537531][ T5385] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  113.617748][ T5420] loop0: detected capacity change from 0 to 2048
[  113.657747][ T4257] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  113.668796][ T4257] usb 2-1: No valid video chain found.
[  113.680298][ T4257] usb 2-1: selecting invalid altsetting 0
[  113.713294][ T5420] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.715406][ T4193] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  113.768592][ T5420] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  113.791193][ T5420] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  113.815806][ T4257] usb 2-1: selecting invalid altsetting 0
[  113.821696][ T4257] usbtest: probe of 2-1:220.1 failed with error -22
[  113.833822][ T5420] UDF-fs: Scanning with blocksize 512 failed
[  113.855361][ T4257] usb 2-1: USB disconnect, device number 2
[  113.871749][ T5420] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.923460][   T26] audit: type=1800 audit(1768673442.557:16): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.324" name="file1" dev="loop0" ino=838 res=0 errno=0
[  114.315215][ T5441] loop0: detected capacity change from 0 to 1024
[  114.397056][ T5441] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  114.431123][ T5185] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  114.544553][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.704317][ T5185] usb 6-1: Using ep0 maxpacket: 8
[  114.851120][ T5185] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  114.862481][ T5185] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  114.907435][ T5185] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.922782][ T5185] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.936244][ T5185] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  114.954823][ T5185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.981475][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.993212][ T4317] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  115.010843][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.024447][ T4317] usb 2-1: config 0 descriptor??
[  115.229891][ T5185] usb 6-1: GET_CAPABILITIES returned 0
[  115.237361][ T5185] usbtmc 6-1:16.0: can't read capabilities
[  115.403636][ T5465] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  115.460382][ T2288] usb 6-1: USB disconnect, device number 3
[  115.506956][ T4317] hid-rmi 0003:0461:4E72.000B: item fetching failed at offset 5/7
[  115.521846][ T4317] hid-rmi 0003:0461:4E72.000B: parse failed
[  115.530740][ T4317] hid-rmi: probe of 0003:0461:4E72.000B failed with error -22
[  115.708956][ T4317] usb 2-1: USB disconnect, device number 3
[  116.313931][ T5494] loop5: detected capacity change from 0 to 2048
[  116.352504][ T5498] bridge0: port 3(syz_tun) entered blocking state
[  116.423649][ T5494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.444301][ T5498] bridge0: port 3(syz_tun) entered disabled state
[  116.528268][ T5498] device syz_tun entered promiscuous mode
[  116.596405][ T5498] bridge0: port 3(syz_tun) entered blocking state
[  116.603710][ T5498] bridge0: port 3(syz_tun) entered forwarding state
[  116.717920][ T5485] loop4: detected capacity change from 0 to 32768
[  116.897736][ T5485] XFS (loop4): Mounting V5 Filesystem
[  116.920857][ T5510] loop5: detected capacity change from 0 to 1024
[  116.989089][ T5510] EXT4-fs (loop5): inline encryption not supported
[  116.996222][ T5510] EXT4-fs (loop5): Ignoring removed nobh option
[  117.002637][ T5510] EXT4-fs (loop5): Ignoring removed bh option
[  117.010993][ T5510] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  117.060320][ T5485] XFS (loop4): Ending clean mount
[  117.085262][ T5510] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  117.283929][ T4184] XFS (loop4): Unmounting Filesystem
[  117.521672][ T5526] loop0: detected capacity change from 0 to 2048
[  117.604508][ T5526] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  117.628297][ T5526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.044282][ T4234] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  118.398583][ T5541] loop4: detected capacity change from 0 to 4096
[  118.634694][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.660662][ T5550] loop1: detected capacity change from 0 to 512
[  118.667292][ T4234] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  118.699788][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.712920][ T4234] usb 6-1: config 0 descriptor??
[  118.729249][ T4184] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  118.742751][ T4184] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  118.802250][ T5550] EXT4-fs (loop1): Ignoring removed nobh option
[  118.874265][ T5550] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.373: iget: bad i_size value: 38620345925642
[  118.940394][ T5556] loop4: detected capacity change from 0 to 256
[  118.994509][ T5550] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.373: couldn't read orphan inode 15 (err -117)
[  119.007458][ T5550] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  119.068565][ T5556] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d)
[  119.095771][ T5550] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.373: bg 0: block 5: invalid block bitmap
[  119.226836][ T4234] hid-rmi 0003:0461:4E72.000C: item fetching failed at offset 5/7
[  119.261689][ T4234] hid-rmi 0003:0461:4E72.000C: parse failed
[  119.284251][ T4234] hid-rmi: probe of 0003:0461:4E72.000C failed with error -22
[  119.427837][ T4317] usb 6-1: USB disconnect, device number 4
[  119.541783][ T5575] loop0: detected capacity change from 0 to 1024
[  119.633101][ T5575] EXT4-fs (loop0): Ignoring removed bh option
[  119.654650][ T5575] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  119.710860][ T5575] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  119.893094][   T26] audit: type=1804 audit(1768673448.527:17): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.384" name="/newroot/83/bus/bus" dev="loop0" ino=18 res=1 errno=0
[  120.117468][ T5582] loop2: detected capacity change from 0 to 32768
[  120.132083][ T4433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.165757][ T5582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.387 (5582)
[  120.197368][ T4433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.232266][ T5582] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  120.253858][ T5582] BTRFS info (device loop2): using free space tree
[  120.265299][ T5582] BTRFS info (device loop2): has skinny extents
[  120.340328][ T4433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.358133][ T4433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.461991][ T4433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.540656][ T5582] BTRFS info (device loop2): enabling ssd optimizations
[  120.562241][ T4433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.642705][ T5618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  120.680196][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'.
[  120.689574][ T5197] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  121.104538][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.132612][ T5621] loop5: detected capacity change from 0 to 40427
[  121.133474][ T5197] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  121.191032][ T5197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.232056][ T5197] usb 1-1: config 0 descriptor??
[  121.304009][ T4433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.319143][ T5621] F2FS-fs (loop5): invalid crc value
[  121.344555][ T5621] F2FS-fs (loop5): Found nat_bits in checkpoint
[  121.387162][ T4433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.397975][ T5621] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  121.461109][ T5638] netlink: 92 bytes leftover after parsing attributes in process `syz.2.398'.
[  121.570195][ T4961] attempt to access beyond end of device
[  121.570195][ T4961] loop5: rw=2049, want=45112, limit=40427
[  121.776408][ T5197] hid-rmi 0003:0461:4E72.000D: item fetching failed at offset 5/7
[  121.814377][ T5197] hid-rmi 0003:0461:4E72.000D: parse failed
[  121.814666][ T4931] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.844325][ T5197] hid-rmi: probe of 0003:0461:4E72.000D failed with error -22
[  121.968746][ T5623] chnl_net:caif_netlink_parms(): no params data found
[  121.979888][ T5221] usb 1-1: USB disconnect, device number 4
[  122.244716][ T4931] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  122.264449][ T4931] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  122.295111][ T4931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  122.330279][ T4931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  122.375324][ T4931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  122.533469][ T4931] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  122.569650][ T4931] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  122.593182][ T4931] usb 5-1: Product: syz
[  122.604900][ T4931] usb 5-1: Manufacturer: syz
[  122.620594][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.644546][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.657005][ T4931] cdc_wdm 5-1:1.0: skipping garbage
[  122.662142][ T5623] device bridge_slave_0 entered promiscuous mode
[  122.671941][ T4931] cdc_wdm 5-1:1.0: skipping garbage
[  122.697589][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[  122.710570][ T4931] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  122.736923][ T4931] cdc_wdm 5-1:1.0: Unknown control protocol
[  122.831469][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.847767][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.865828][ T5623] device bridge_slave_1 entered promiscuous mode
[  122.959634][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.972484][ T4929] usb 5-1: USB disconnect, device number 7
[  122.977077][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  122.985239][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  122.991374][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  123.002019][ T5641] cdc_wdm 5-1:1.0: Tx URB error: -19
[  123.029672][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.074545][ T5221] Bluetooth: hci0: command 0x0409 tx timeout
[  123.140087][ T5623] team0: Port device team_slave_0 added
[  123.161586][ T5623] team0: Port device team_slave_1 added
[  123.216988][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.232795][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.267332][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.295600][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.310112][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.347417][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.499655][ T5623] device hsr_slave_0 entered promiscuous mode
[  123.525694][ T5623] device hsr_slave_1 entered promiscuous mode
[  123.555029][ T5697] input: syz0 as /devices/virtual/input/input13
[  123.604771][ T5623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  123.612702][ T5623] Cannot create hsr debugfs directory
[  123.984851][ T5716] loop2: detected capacity change from 0 to 8192
[  124.033510][ T5719] device syzkaller1 entered promiscuous mode
[  124.105602][ T5716] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  124.137769][ T5716] REISERFS (device loop2): using ordered data mode
[  124.144996][ T5716] reiserfs: using flush barriers
[  124.153196][ T5716] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  124.207680][ T5716] REISERFS (device loop2): checking transaction log (loop2)
[  124.223987][ T5728] loop5: detected capacity change from 0 to 128
[  124.241674][ T5728] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿ" or missing value
[  124.381896][ T5716] REISERFS (device loop2): Using tea hash to sort names
[  124.395312][ T5716] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  124.508660][ T4433] device hsr_slave_0 left promiscuous mode
[  124.525174][ T4433] device hsr_slave_1 left promiscuous mode
[  124.565187][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.580339][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.593803][   T26] audit: type=1800 audit(1768673453.227:18): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.415" name="file1" dev="loop2" ino=8 res=0 errno=0
[  124.616913][ T5197] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  124.654993][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.667119][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.697883][ T4433] batman_adv: batadv0: Interface deactivated: vxlan0
[  124.708518][ T4433] batman_adv: batadv0: Removing interface: vxlan0
[  124.718745][ T4433] device bridge_slave_1 left promiscuous mode
[  124.728813][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.791377][ T4433] device bridge_slave_0 left promiscuous mode
[  124.797855][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.870489][ T4433] device veth1_macvtap left promiscuous mode
[  124.879928][ T4433] device veth0_macvtap left promiscuous mode
[  124.889565][ T4433] device veth1_vlan left promiscuous mode
[  124.896256][ T4433] device veth0_vlan left promiscuous mode
[  124.984681][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.006468][ T5197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.039724][ T5197] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  125.054048][ T5197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.085847][ T5197] usb 1-1: config 0 descriptor??
[  125.155114][ T5221] Bluetooth: hci0: command 0x041b tx timeout
[  125.301812][ T4433] team0 (unregistering): Port device team_slave_1 removed
[  125.331212][ T4433] team0 (unregistering): Port device team_slave_0 removed
[  125.347305][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.365346][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.457432][ T4433] bond0 (unregistering): Released all slaves
[  125.572881][ T5730] loop0: detected capacity change from 0 to 2048
[  125.678475][ T5730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.806507][ T5197] sony 0003:054C:024B.000E: unexpected long global item
[  125.826887][ T5197] sony 0003:054C:024B.000E: parse failed
[  125.855270][ T5623] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  125.862244][ T5197] sony: probe of 0003:054C:024B.000E failed with error -22
[  125.930457][  T154] Bluetooth: Short BCSP packet
[  125.951737][ T5623] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  126.010854][ T5623] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  126.032486][ T5197] usb 1-1: USB disconnect, device number 5
[  126.064596][ T5623] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  126.260948][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.299242][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  126.320070][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  126.342423][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[  126.380224][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  126.400098][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.422322][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.429533][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.451474][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.515020][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.535008][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.577876][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.585138][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.643974][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.701884][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.745309][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.797440][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.840795][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.860403][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.887962][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.943206][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.966102][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.992278][ T5623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.040943][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.059457][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  127.085822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.236574][ T5197] Bluetooth: hci0: command 0x040f tx timeout
[  127.444622][ T5797] user requested TSC rate below hardware speed
[  127.561528][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  127.594448][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.662307][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.758350][ T5805] loop4: detected capacity change from 0 to 4096
[  127.773451][ T5812] device ipip1 entered promiscuous mode
[  127.955019][ T5197] Bluetooth: hci5: command 0x1003 tx timeout
[  127.961245][ T4187] Bluetooth: hci5: sending frame failed (-49)
[  128.312072][ T5829] kvm: apic: phys broadcast and lowest prio
[  128.318718][ T5829] Disabled LAPIC found during irq injection
[  128.534142][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  128.543366][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.582517][ T5623] device veth0_vlan entered promiscuous mode
[  128.589830][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  128.602707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.622552][ T5623] device veth1_vlan entered promiscuous mode
[  128.629779][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  128.646357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  128.666740][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  128.745921][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  128.796637][ T5623] device veth0_macvtap entered promiscuous mode
[  128.834903][ T1107] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  128.847751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  128.859334][ T5853] tls_set_device_offload: netdev not found
[  128.870486][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  128.907890][ T5623] device veth1_macvtap entered promiscuous mode
[  128.925816][ T5854] syzkaller0: mtu greater than device maximum
[  128.938343][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  128.964700][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.024453][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.064445][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.084324][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.100876][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.124660][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.155995][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.186492][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.214480][ T1107] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  129.226056][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.236736][ T1107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.247617][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.269096][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.282416][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.296551][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.307253][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.323675][ T4234] Bluetooth: hci0: command 0x0419 tx timeout
[  129.336067][ T1107] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  129.365813][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.378893][ T1107] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  129.387749][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.398472][ T1107] usb 6-1: Manufacturer: syz
[  129.413313][ T1107] usb 6-1: config 0 descriptor??
[  129.418677][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.439906][ T5861] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000000
[  129.458951][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.490088][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.521696][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.539971][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.577846][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.604293][ T1107] rc_core: IR keymap rc-hauppauge not found
[  129.610750][ T1107] Registered IR keymap rc-empty
[  129.622230][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.641337][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.642351][ T1107] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  129.680444][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.720043][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.740614][ T1107] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14
[  129.760513][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.791582][ T5869] loop4: detected capacity change from 0 to 512
[  129.827063][ T5623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.834544][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  129.847827][ T5623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.868230][ T5623] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.888973][ T5623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.914838][ T1107] usb 6-1: USB disconnect, device number 5
[  130.040380][ T5221] Bluetooth: hci5: command 0x1001 tx timeout
[  130.046693][ T4187] Bluetooth: hci5: sending frame failed (-49)
[  130.050852][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  130.155134][ T5869] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.179758][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.261027][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.285803][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.310569][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.337102][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.388776][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.829634][ T5899] input: syz1 as /devices/virtual/input/input15
[  131.023750][ T5905] loop5: detected capacity change from 0 to 256
[  131.292738][ T5905] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.349127][ T5905] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  131.390196][ T5905] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  131.934452][   T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  132.068441][ T5950] loop0: detected capacity change from 0 to 16
[  132.114708][ T1107] Bluetooth: hci5: command 0x1009 tx timeout
[  132.193448][ T5950] erofs: (device loop0): mounted with root inode @ nid 36.
[  132.284638][ T4295] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  132.334773][   T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.364847][   T13] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  132.387902][ T5961] loop4: detected capacity change from 0 to 512
[  132.414895][   T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.435355][   T13] usb 7-1: config 0 descriptor??
[  132.598466][ T5969] loop4: detected capacity change from 0 to 1024
[  132.661207][ T5969] EXT4-fs (loop4): Ignoring removed orlov option
[  132.724736][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.754380][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.779203][ T5969] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none.
[  132.784586][ T4295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.816672][ T4295] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.825832][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.838199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.844639][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.855447][ T4295] usb 6-1: config 0 descriptor??
[  132.937167][   T13] hid-rmi 0003:0461:4E72.000F: item fetching failed at offset 5/7
[  132.962490][   T13] hid-rmi 0003:0461:4E72.000F: parse failed
[  132.974708][   T13] hid-rmi: probe of 0003:0461:4E72.000F failed with error -22
[  133.030703][ T5987] loop0: detected capacity change from 0 to 512
[  133.137889][   T13] usb 7-1: USB disconnect, device number 2
[  133.313956][ T5987] EXT4-fs (loop0): Test dummy encryption mode enabled
[  133.331891][ T5987] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  133.348511][ T4295] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  133.364346][ T5987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.388219][ T5987] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.479: bad orphan inode 131083
[  133.406663][ T4295] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  133.426525][ T5987] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  133.471394][ T5987] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  133.621485][ T4295] usb 6-1: USB disconnect, device number 6
[  133.639286][ T5987] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  134.410848][ T6017] loop6: detected capacity change from 0 to 32768
[  134.494598][ T6017] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  134.527604][ T6017] JBD2: Ignoring recovery information on journal
[  134.588724][ T6017] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  135.066262][   T26] audit: type=1800 audit(1768673463.707:19): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.483" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  135.181715][ T5623] ocfs2: Unmounting device (7,6) on (node local)
[  135.400095][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  135.633697][ T6055] loop5: detected capacity change from 0 to 40427
[  135.645859][ T6075] loop6: detected capacity change from 0 to 2048
[  135.680334][ T6055] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  135.725007][ T6055] F2FS-fs (loop5): invalid crc value
[  135.756369][ T6055] F2FS-fs (loop5): Found nat_bits in checkpoint
[  135.772789][ T6081] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.784508][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.809151][ T1107] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  135.864293][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.878641][ T1107] usb 5-1: config 0 descriptor??
[  135.953293][ T6055] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  136.111371][ T6055] attempt to access beyond end of device
[  136.111371][ T6055] loop5: rw=2049, want=77960, limit=40427
[  136.302757][ T4961] attempt to access beyond end of device
[  136.302757][ T4961] loop5: rw=2049, want=45104, limit=40427
[  136.376447][ T1107] hid-rmi 0003:0461:4E72.0011: item fetching failed at offset 5/7
[  136.404743][ T1107] hid-rmi 0003:0461:4E72.0011: parse failed
[  136.410728][ T1107] hid-rmi: probe of 0003:0461:4E72.0011 failed with error -22
[  136.632409][ T4931] usb 5-1: USB disconnect, device number 8
[  136.807495][ T6093] loop2: detected capacity change from 0 to 40427
[  136.850803][ T6093] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  136.871057][ T6093] F2FS-fs (loop2): invalid crc value
[  136.913255][ T6093] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.953409][ T6099] loop6: detected capacity change from 0 to 32768
[  137.003403][ T6099] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.505 (6099)
[  137.041098][ T6109] loop5: detected capacity change from 0 to 16
[  137.088179][ T6099] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  137.146293][ T6109] erofs: (device loop5): mounted with root inode @ nid 36.
[  137.157799][ T6099] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  137.170322][ T6093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.201811][ T6111] loop0: detected capacity change from 0 to 256
[  137.229959][ T6099] BTRFS info (device loop6): use zstd compression, level 3
[  137.250655][ T6099] BTRFS info (device loop6): using free space tree
[  137.264099][ T6099] BTRFS info (device loop6): has skinny extents
[  137.297983][ T6093] F2FS-fs (loop2) : inject slab alloc in f2fs_kmem_cache_alloc of new_inode_pseudo+0x5f/0x210
[  137.366183][ T6093] overlayfs: failed to create directory ./file0/work (errno: 12); mounting read-only
[  137.409772][ T4193] attempt to access beyond end of device
[  137.409772][ T4193] loop2: rw=524288, want=45072, limit=40427
[  137.426873][ T4193] attempt to access beyond end of device
[  137.426873][ T4193] loop2: rw=0, want=45072, limit=40427
[  137.664697][ T5275] attempt to access beyond end of device
[  137.664697][ T5275] loop2: rw=2049, want=45128, limit=40427
[  137.701708][ T6099] BTRFS info (device loop6): enabling ssd optimizations
[  137.831459][   T26] audit: type=1800 audit(1768673466.467:20): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.505" name="bus" dev="loop6" ino=263 res=0 errno=0
[  137.887025][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.902935][ T6147] loop5: detected capacity change from 0 to 64
[  137.955419][ T6147] hfs: unable to parse mount options
[  138.063159][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.583768][ T5056] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop6 scanned by udevd (5056)
[  138.608807][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.766822][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.202120][ T6174] loop4: detected capacity change from 0 to 128
[  139.656602][ T6173] chnl_net:caif_netlink_parms(): no params data found
[  139.857291][ T6167] loop5: detected capacity change from 0 to 32768
[  139.901346][ T6197] loop6: detected capacity change from 0 to 512
[  139.991321][ T6197] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  140.029986][ T6167] XFS (loop5): Mounting V5 Filesystem
[  140.250448][ T6202] loop4: detected capacity change from 0 to 4096
[  140.337407][ T6197] EXT4-fs (loop6): 1 orphan inode deleted
[  140.343203][ T6197] EXT4-fs (loop6): 1 truncate cleaned up
[  140.351999][ T6197] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback.
[  140.472920][ T6167] XFS (loop5): Ending clean mount
[  140.579018][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.594356][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.642391][ T6173] device bridge_slave_0 entered promiscuous mode
[  140.668482][ T6167] XFS (loop5): Quotacheck needed: Please wait.
[  140.769977][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.782893][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.845101][ T6173] device bridge_slave_1 entered promiscuous mode
[  141.052194][ T6167] XFS (loop5): Quotacheck: Done.
[  141.059084][ T6240] loop6: detected capacity change from 0 to 512
[  141.093114][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.180955][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.205598][ T6240] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,acl,,errors=continue. Quota mode: none.
[  141.277819][   T26] audit: type=1800 audit(1768673469.917:21): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.537" name="file1" dev="loop6" ino=15 res=0 errno=0
[  141.302597][ T4961] XFS (loop5): Unmounting Filesystem
[  141.315939][ T1107] Bluetooth: hci4: command 0x0409 tx timeout
[  141.409182][ T6173] team0: Port device team_slave_0 added
[  141.425061][ T6173] team0: Port device team_slave_1 added
[  141.441951][ T6255] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.537: bg 0: bad block bitmap checksum
[  141.594894][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.602012][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.736441][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.817177][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.864425][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.899692][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.119664][ T6173] device hsr_slave_0 entered promiscuous mode
[  142.140401][ T6173] device hsr_slave_1 entered promiscuous mode
[  142.158736][ T6173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.185066][ T6173] Cannot create hsr debugfs directory
[  142.465119][ T6283] loop6: detected capacity change from 0 to 1024
[  142.525277][ T6283] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc,minixdf,,errors=continue. Quota mode: none.
[  142.672005][  T154] device hsr_slave_0 left promiscuous mode
[  142.703737][  T154] device hsr_slave_1 left promiscuous mode
[  142.724844][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.768782][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.797697][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.819783][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.872301][  T154] device bridge_slave_1 left promiscuous mode
[  142.914348][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.954413][  T154] device bridge_slave_0 left promiscuous mode
[  142.960686][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.055489][  T154] device veth1_macvtap left promiscuous mode
[  143.092830][  T154] device veth0_macvtap left promiscuous mode
[  143.119245][  T154] device veth1_vlan left promiscuous mode
[  143.140914][  T154] device veth0_vlan left promiscuous mode
[  143.397005][ T4929] Bluetooth: hci4: command 0x041b tx timeout
[  143.780850][  T154] team0 (unregistering): Port device team_slave_1 removed
[  143.822834][  T154] team0 (unregistering): Port device team_slave_0 removed
[  143.850772][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.895391][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.032655][  T154] bond0 (unregistering): Released all slaves
[  144.293162][ T6340] netlink: 'syz.6.562': attribute type 12 has an invalid length.
[  144.324256][ T6340] netlink: 'syz.6.562': attribute type 29 has an invalid length.
[  144.367953][ T6340] netlink: 148 bytes leftover after parsing attributes in process `syz.6.562'.
[  144.393651][ T6340] netlink: 'syz.6.562': attribute type 2 has an invalid length.
[  144.409428][ T6340] netlink: 23 bytes leftover after parsing attributes in process `syz.6.562'.
[  144.451765][ T6342] netlink: 'syz.0.564': attribute type 12 has an invalid length.
[  144.471256][ T6342] netlink: 'syz.0.564': attribute type 29 has an invalid length.
[  144.501579][ T6342] netlink: 148 bytes leftover after parsing attributes in process `syz.0.564'.
[  144.571124][ T6342] netlink: 'syz.0.564': attribute type 2 has an invalid length.
[  144.773922][ T6363] bridge_slave_1: default FDB implementation only supports local addresses
[  144.833484][ T6173] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  144.894893][ T6173] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  144.912952][ T6173] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  144.973746][ T6173] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  145.241049][ T6384] device bridge_slave_0 left promiscuous mode
[  145.260494][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.476867][ T4929] Bluetooth: hci4: command 0x040f tx timeout
[  145.491666][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.566854][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.602263][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.695869][ T6173] 8021q: adding VLAN 0 to HW filter on device team0
[  145.757490][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.792516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.854664][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.861833][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.951461][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  145.986962][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.021812][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.068109][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.075267][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.161943][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.176874][ T6410] loop0: detected capacity change from 0 to 4096
[  146.228944][ T6404] loop5: detected capacity change from 0 to 4096
[  146.243532][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.283435][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.296791][ T6404] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  146.353953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.449508][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.493525][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.540376][ T6404] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  146.564845][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.603316][ T6404] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  146.610397][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  146.685028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.704614][ T6404] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  146.718090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  146.768304][ T6429] loop0: detected capacity change from 0 to 64
[  146.786845][ T6404] ntfs: volume version 3.1.
[  146.795982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.878834][ T6173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  146.955487][ T6404] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  147.045528][ T6404] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  147.317233][ T4226] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  147.374117][ T4226] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  147.423763][ T6441] loop4: detected capacity change from 0 to 4096
[  147.433318][ T4961] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  147.474006][ T6441] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  147.565791][ T6450] loop0: detected capacity change from 0 to 512
[  147.582709][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[  147.620886][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.639342][ T6450] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  147.670093][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.682106][ T6441] ntfs: volume version 3.1.
[  147.716261][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.771313][ T6450] EXT4-fs (loop0): 1 truncate cleaned up
[  147.804679][ T6450] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  148.078692][ T6450] EXT4-fs (loop0): shut down requested (2)
[  148.613107][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.634866][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.679453][ T6173] device veth0_vlan entered promiscuous mode
[  148.700657][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.720854][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.742673][ T6173] device veth1_vlan entered promiscuous mode
[  148.766190][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.775052][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.849268][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.875455][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.944428][ T5221] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  148.953375][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.974944][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.014466][ T6173] device veth0_macvtap entered promiscuous mode
[  149.076692][ T6173] device veth1_macvtap entered promiscuous mode
[  149.171546][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.184272][ T5221] usb 6-1: Using ep0 maxpacket: 32
[  149.236686][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.270210][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.304418][ T5221] usb 6-1: config 0 has no interfaces?
[  149.352621][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.434631][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.474810][ T5221] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  149.504346][ T5221] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  149.512949][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.524832][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  149.567416][ T5221] usb 6-1: Product: syz
[  149.571652][ T5221] usb 6-1: Manufacturer: syz
[  149.588578][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.604907][ T5221] usb 6-1: SerialNumber: syz
[  149.636988][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.647901][ T5221] usb 6-1: config 0 descriptor??
[  149.668903][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.729231][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.768105][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.798361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.825047][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.852276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.879007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.885702][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.920334][ T4929] usb 6-1: USB disconnect, device number 7
[  149.924618][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.950535][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.982130][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.994261][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.998238][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.031617][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.034734][ T4234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  150.052730][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.069771][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.081475][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.100118][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.102462][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.141569][ T4234] usb 5-1: config 0 descriptor??
[  150.150201][ T6173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.161313][ T6173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.174467][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.264696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  150.274989][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.298134][ T6173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.325420][ T6173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.344351][ T6173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.367740][ T6173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.595054][ T6520] loop5: detected capacity change from 0 to 8
[  150.627179][ T4234] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  150.640699][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.708654][ T4234] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  150.728201][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.816971][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.868060][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.875437][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.928315][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.351497][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.569388][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.720430][ T6541] loop7: detected capacity change from 0 to 32768
[  151.767418][ T6541] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  151.776133][ T6541] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  151.827945][ T6541] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  151.862609][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.879123][ T6541] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  151.972721][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.514831][ T6559] smc: net device bond0 applied user defined pnetid SYZ0
[  152.559953][ T6561] smc: net device bond0 erased user defined pnetid SYZ0
[  152.828112][   T13] usb 5-1: USB disconnect, device number 9
[  153.326426][ T6590] loop0: detected capacity change from 0 to 2048
[  153.520969][ T6595] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.573853][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  153.573878][   T26] audit: type=1800 audit(1768673482.207:22): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.619" name="file1" dev="loop0" ino=15 res=0 errno=0
[  153.613677][   T26] audit: type=1800 audit(1768673482.207:23): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.619" name="file1" dev="loop0" ino=15 res=0 errno=0
[  153.699445][ T6590] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  153.715749][ T5215] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  153.759177][ T6590] Remounting filesystem read-only
[  153.800689][ T4186] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  153.962139][ T6605] loop2: detected capacity change from 0 to 7
[  153.965184][ T5215] usb 8-1: Using ep0 maxpacket: 16
[  154.004585][ T6605] Dev loop2: unable to read RDB block 7
[  154.012475][ T6605]  loop2: unable to read partition table
[  154.080417][ T6605] loop2: partition table beyond EOD, truncated
[  154.094562][ T5215] usb 8-1: config index 0 descriptor too short (expected 65, got 36)
[  154.108385][ T5215] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.127057][ T6605] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  154.141902][ T5215] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.157228][ T5215] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  154.170052][ T5215] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.213625][ T5215] usb 8-1: config 0 descriptor??
[  154.277640][ T4257] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  154.277644][ T5215] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input17
[  154.541833][  T154] device hsr_slave_0 left promiscuous mode
[  154.555380][ T4257] usb 6-1: Using ep0 maxpacket: 32
[  154.566289][ T4929] usb 8-1: USB disconnect, device number 2
[  154.572377][  T154] device hsr_slave_1 left promiscuous mode
[  154.591760][ T4177] udevd[4177]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  154.617197][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.625227][ T4177] udevd[4177]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  154.659080][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.695732][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.704625][ T4257] usb 6-1: config 2 has an invalid interface number: 88 but max is 0
[  154.712748][ T4257] usb 6-1: config 2 has no interface number 0
[  154.732593][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.741144][ T4257] usb 6-1: config 2 interface 88 has no altsetting 0
[  154.757628][  T154] device bridge_slave_1 left promiscuous mode
[  154.770754][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.790784][  T154] device bridge_slave_0 left promiscuous mode
[  154.804043][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.841445][  T154] device veth1_macvtap left promiscuous mode
[  154.854766][  T154] device veth0_macvtap left promiscuous mode
[  154.874657][  T154] device veth1_vlan left promiscuous mode
[  154.890306][  T154] device veth0_vlan left promiscuous mode
[  154.906148][ T6607] loop4: detected capacity change from 0 to 32768
[  154.934595][ T4257] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  154.954664][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.974204][ T4257] usb 6-1: Product: syz
[  155.004752][ T4257] usb 6-1: Manufacturer: syz
[  155.021479][ T4257] usb 6-1: SerialNumber: syz
[  155.045704][ T6607] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  155.348805][ T4184] ocfs2: Unmounting device (7,4) on (node local)
[  155.955624][ T4296] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  156.036119][ T4296] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.368426][  T154] team0 (unregistering): Port device team_slave_1 removed
[  156.429880][  T154] team0 (unregistering): Port device team_slave_0 removed
[  156.473838][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.498853][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.631232][ T4257] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  156.660345][ T4257] asix 6-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  156.681960][ T4257] asix: probe of 6-1:2.88 failed with error -71
[  156.709369][ T6505] Set syz1 is full, maxelem 65536 reached
[  156.738982][ T4257] usb 6-1: USB disconnect, device number 8
[  156.783008][  T154] bond0 (unregistering): Released all slaves
[  156.881533][ T6654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.889562][ T6654] IPv6: NLM_F_CREATE should be set when creating new route
[  157.228377][ T6668] only policy match revision 0 supported
[  157.228398][ T6668] unable to load match
[  157.279868][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.639'.
[  158.254427][ T4296] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  158.507821][ T4296] usb 8-1: Using ep0 maxpacket: 8
[  158.624499][ T4296] usb 8-1: config 162 has an invalid interface number: 166 but max is 0
[  158.653425][ T4296] usb 8-1: config 162 has no interface number 0
[  158.661910][ T4296] usb 8-1: config 162 interface 166 has no altsetting 0
[  158.703471][ T6711] loop4: detected capacity change from 0 to 32768
[  158.747450][ T6711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.651 (6711)
[  158.815250][ T6711] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  158.844565][ T4296] usb 8-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea
[  158.860327][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.871466][ T6711] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  158.894314][ T4296] usb 8-1: Product: syz
[  158.904652][ T4296] usb 8-1: Manufacturer: syz
[  158.914616][ T6711] BTRFS info (device loop4): trying to use backup root at mount time
[  158.923697][ T4296] usb 8-1: SerialNumber: syz
[  158.946581][ T6711] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  158.975142][ T6711] BTRFS info (device loop4): use zstd compression, level 3
[  158.995190][ T6711] BTRFS error (device loop4): unrecognized mount option 'fsuuid=7'
[  159.049919][ T6711] BTRFS error (device loop4): open_ctree failed: -22
[  159.218459][ T6724] loop0: detected capacity change from 0 to 32768
[  159.318303][ T4296] appledisplay 8-1:162.166: Could not find int-in endpoint
[  159.335975][ T4296] usbhid 8-1:162.166: couldn't find an input interrupt endpoint
[  159.377198][ T4296] usb 8-1: USB disconnect, device number 3
[  159.849685][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.660'.
[  160.169710][ T6713] loop5: detected capacity change from 0 to 65536
[  160.237691][ T6767] loop7: detected capacity change from 0 to 256
[  160.309170][   T26] audit: type=1800 audit(1768673488.947:24): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.664" name="file1" dev="loop7" ino=1048615 res=0 errno=0
[  160.462806][   T26] audit: type=1800 audit(1768673488.977:25): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.664" name="file1" dev="loop7" ino=1048615 res=0 errno=0
[  160.487372][ T6713] XFS (loop5): Mounting V5 Filesystem
[  160.652126][ T6713] XFS (loop5): Ending clean mount
[  160.671792][ T6713] XFS (loop5): Quotacheck needed: Please wait.
[  160.679124][ T6776] FAT-fs (loop7): error, clusters badly computed (0 != 128)
[  160.764699][ T6776] FAT-fs (loop7): Filesystem has been set read-only
[  160.826479][ T6776] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  160.863972][ T6713] XFS (loop5): Quotacheck: Done.
[  160.924471][ T6785] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  161.079565][ T6713] loop_set_status: loop5 () has still dirty pages (nrpages=4)
[  161.133189][ T6798] XFS (loop5): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  161.330165][ T6804] Failed to get privilege flags for destination (handle=0x0:0x0)
[  161.576910][ T4961] XFS (loop5): Unmounting Filesystem
[  161.811566][ T6781] loop4: detected capacity change from 0 to 32768
[  161.839773][ T6781] XFS: noikeep mount option is deprecated.
[  161.867883][ T6781] XFS: attr2 mount option is deprecated.
[  162.093510][ T6781] XFS (loop4): Mounting V5 Filesystem
[  162.130069][ T6793] infiniband syz1: set active
[  162.184263][ T6793] infiniband syz1: added syz_tun
[  162.282576][ T6781] XFS (loop4): Ending clean mount
[  162.340246][ T6781] XFS (loop4): Quotacheck needed: Please wait.
[  162.425889][   T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  162.468648][ T6825] loop7: detected capacity change from 0 to 65536
[  162.617459][ T6793] RDS/IB: syz1: added
[  162.623116][ T6793] smc: adding ib device syz1 with port count 1
[  162.640643][ T6781] XFS (loop4): Quotacheck: Done.
[  162.650514][ T6793] smc:    ib device syz1 port 1 has pnetid 
[  162.656769][ T6825] XFS (loop7): Mounting V5 Filesystem
[  162.697026][   T13] usb 7-1: Using ep0 maxpacket: 8
[  162.786891][ T6825] XFS (loop7): Ending clean mount
[  162.854520][   T13] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  162.869538][   T13] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  162.903517][   T13] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  162.930313][   T13] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024
[  163.002332][   T13] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  163.035850][   T13] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.090463][   T13] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  163.113214][   T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.137373][   T26] audit: type=1800 audit(1768673491.777:26): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.675" name="file2" dev="loop7" ino=71 res=0 errno=0
[  163.193693][ T6173] XFS (loop7): Unmounting Filesystem
[  163.204594][ T4184] XFS (loop4): Unmounting Filesystem
[  163.483097][   T13] usb 7-1: usb_control_msg returned -32
[  163.489550][   T13] usbtmc 7-1:16.0: can't read capabilities
[  164.280558][ T6883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  164.305412][ T6880] usbtmc 7-1:16.0: usb_control_msg returned -71
[  164.384258][ T6883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.481886][ T4296] usb 7-1: USB disconnect, device number 3
[  164.743130][ T6875] loop5: detected capacity change from 0 to 32768
[  164.872365][ T6875] XFS (loop5): Mounting V5 Filesystem
[  164.931798][ T6902] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  164.956575][ T6875] XFS (loop5): Ending clean mount
[  164.980402][ T6875] XFS (loop5): Quotacheck needed: Please wait.
[  165.136753][ T6910] loop6: detected capacity change from 0 to 512
[  165.159536][ T6875] XFS (loop5): Quotacheck: Done.
[  165.232752][ T6910] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  165.293066][ T6910] EXT4-fs (loop6): 1 truncate cleaned up
[  165.302753][ T6910] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[  165.383917][ T4961] XFS (loop5): Unmounting Filesystem
[  165.407405][   T26] audit: type=1800 audit(1768673494.047:27): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.684" name="file1" dev="loop6" ino=15 res=0 errno=0
[  165.474245][ T5215] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  165.864649][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.894367][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.924239][ T5215] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.944613][ T5215] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.977798][ T5215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.989482][ T5215] usb 5-1: config 0 descriptor??
[  166.383230][ T6921] loop0: detected capacity change from 0 to 32768
[  166.467459][ T6921] XFS (loop0): Mounting V5 Filesystem
[  166.495605][ T5215] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  166.509139][ T5215] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  166.581381][ T6921] XFS (loop0): Ending clean mount
[  166.770972][ T4186] XFS (loop0): Unmounting Filesystem
[  166.814271][ T5215] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  167.104492][ T5215] usb 7-1: Using ep0 maxpacket: 32
[  167.230172][ T5215] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  167.249579][ T5215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.290772][ T5215] usb 7-1: config 0 descriptor??
[  167.547326][ T6991] loop0: detected capacity change from 0 to 47
[  167.560801][ T5215] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  167.588455][ T5215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.641668][ T5215] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  167.672121][ T5215] usb 7-1: media controller created
[  167.746373][ T5215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.843334][ T1346] kernel write not supported for file bpf-prog (pid: 1346 comm: kworker/1:3)
[  167.877183][    C1] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1
[  167.950474][ T5215] DVB: Unable to find symbol dib7000p_attach()
[  167.958089][ T5215] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  168.104355][ T5215] rc_core: IR keymap rc-dib0700-rc5 not found
[  168.111069][ T5215] Registered IR keymap rc-empty
[  168.123381][ T5215] dvb-usb: could not initialize remote control.
[  168.132505][ T5215] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  168.263298][ T5215] usb 7-1: USB disconnect, device number 4
[  168.304268][ T1107] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  168.323043][ T5215] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  168.680244][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.702289][ T1107] usb 1-1: config 0 has no interfaces?
[  168.834015][ T7034] loop4: detected capacity change from 0 to 32768
[  168.846581][   T13] usb 5-1: USB disconnect, device number 10
[  168.874649][ T1107] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  168.892814][ T7034] 
[  168.892814][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.892814][ T7034] 
[  168.934278][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.978410][ T7034] 
[  168.978410][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.978410][ T7034] 
[  168.989767][ T7034] 
[  168.989767][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  168.989767][ T7034] 
[  169.000692][ T7034] 
[  169.000692][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.000692][ T7034] 
[  169.011304][ T7034] 
[  169.011304][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.011304][ T7034] 
[  169.021997][ T7034] 
[  169.021997][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.021997][ T7034] 
[  169.023938][ T1107] usb 1-1: Product: syz
[  169.032566][ T7034] 
[  169.032566][ T7034]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.032566][ T7034] 
[  169.056829][ T7042] non-latin1 character 0x3ff found in JFS file name
[  169.067275][  T276] 
[  169.067275][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.067275][  T276] 
[  169.094360][ T7042] mount with iocharset=utf8 to access
[  169.115170][ T7043] loop6: detected capacity change from 0 to 1024
[  169.131989][ T1107] usb 1-1: Manufacturer: syz
[  169.152010][ T1107] usb 1-1: SerialNumber: syz
[  169.159844][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.7.710'.
[  169.185667][ T1107] usb 1-1: config 0 descriptor??
[  169.213135][ T7043] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  169.235958][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.7.710'.
[  169.253527][ T7043] EXT4-fs (loop6): Ignoring removed oldalloc option
[  169.316685][ T7043] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  169.342399][  T155] 
[  169.342399][  T155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.342399][  T155] 
[  169.381418][ T7043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  169.393636][  T155] 
[  169.393636][  T155]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.393636][  T155] 
[  169.413739][ T7043] System zones: 0-1, 3-36
[  169.421347][ T4184] 
[  169.421347][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.421347][ T4184] 
[  169.436934][  T277] 
[  169.436934][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.436934][  T277] 
[  169.461514][ T7043] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: writeback.
[  169.482226][ T4184] 
[  169.482226][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.482226][ T4184] 
[  169.504430][  T277] ==================================================================
[  169.513581][  T277] BUG: KASAN: use-after-free in txEnd+0x329/0x520
[  169.520176][  T277] Write of size 8 at addr ffff888075293040 by task jfsCommit/277
[  169.527941][  T277] 
[  169.530325][  T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0
[  169.537612][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  169.548136][  T277] Call Trace:
[  169.551456][  T277]  <TASK>
[  169.554435][  T277]  dump_stack_lvl+0x188/0x250
[  169.559327][  T277]  ? show_regs_print_info+0x20/0x20
[  169.564636][  T277]  ? _printk+0xda/0x130
[  169.568827][  T277]  ? txEnd+0x329/0x520
[  169.573028][  T277]  ? load_image+0x400/0x400
[  169.577570][  T277]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  169.583242][  T277]  print_address_description+0x60/0x2d0
[  169.588819][  T277]  ? txEnd+0x329/0x520
[  169.592936][  T277]  kasan_report+0xdf/0x130
[  169.597399][  T277]  ? txEnd+0x329/0x520
[  169.601491][  T277]  kasan_check_range+0x235/0x290
[  169.606458][  T277]  txEnd+0x329/0x520
[  169.610442][  T277]  jfs_lazycommit+0x5b8/0xb40
[  169.615157][  T277]  ? txFreelock+0x5a0/0x5a0
[  169.619675][  T277]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  169.625629][  T277]  ? sched_dynamic_update+0x210/0x210
[  169.631192][  T277]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  169.637156][  T277]  ? __kthread_parkme+0x157/0x1b0
[  169.642215][  T277]  kthread+0x436/0x520
[  169.646294][  T277]  ? txFreelock+0x5a0/0x5a0
[  169.650808][  T277]  ? kthread_blkcg+0xd0/0xd0
[  169.655410][  T277]  ret_from_fork+0x1f/0x30
[  169.659871][  T277]  </TASK>
[  169.662915][  T277] 
[  169.665260][  T277] Allocated by task 7034:
[  169.669607][  T277]  __kasan_kmalloc+0xb5/0xf0
[  169.674231][  T277]  lmLogOpen+0x2c0/0xf90
[  169.678505][  T277]  jfs_mount_rw+0xf8/0x5c0
[  169.682966][  T277]  jfs_fill_super+0x5c1/0xb00
[  169.687760][  T277]  mount_bdev+0x287/0x3c0
[  169.692129][  T277]  legacy_get_tree+0xe6/0x180
[  169.696841][  T277]  vfs_get_tree+0x88/0x270
[  169.701296][  T277]  do_new_mount+0x24a/0xa40
[  169.705833][  T277]  __se_sys_mount+0x2e3/0x3d0
[  169.710544][  T277]  do_syscall_64+0x4c/0xa0
[  169.714994][  T277]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.720924][  T277] 
[  169.723269][  T277] Freed by task 4184:
[  169.727269][  T277]  kasan_set_track+0x4b/0x70
[  169.731899][  T277]  kasan_set_free_info+0x1f/0x40
[  169.736906][  T277]  ____kasan_slab_free+0xd5/0x110
[  169.741970][  T277]  slab_free_freelist_hook+0xea/0x170
[  169.747379][  T277]  kfree+0xef/0x2a0
[  169.751229][  T277]  lmLogClose+0x293/0x520
[  169.755606][  T277]  jfs_umount+0x28f/0x360
[  169.759970][  T277]  jfs_put_super+0x88/0x190
[  169.764513][  T277]  generic_shutdown_super+0x130/0x300
[  169.769925][  T277]  kill_block_super+0x7c/0xe0
[  169.774633][  T277]  deactivate_locked_super+0x93/0xf0
[  169.780071][  T277]  cleanup_mnt+0x42d/0x4e0
[  169.784531][  T277]  task_work_run+0x125/0x1a0
[  169.789176][  T277]  exit_to_user_mode_loop+0x10f/0x130
[  169.794625][  T277]  exit_to_user_mode_prepare+0xee/0x180
[  169.800224][  T277]  syscall_exit_to_user_mode+0x16/0x40
[  169.805820][  T277]  do_syscall_64+0x58/0xa0
[  169.810516][  T277]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.816463][  T277] 
[  169.818865][  T277] The buggy address belongs to the object at ffff888075293000
[  169.818865][  T277]  which belongs to the cache kmalloc-1k of size 1024
[  169.833046][  T277] The buggy address is located 64 bytes inside of
[  169.833046][  T277]  1024-byte region [ffff888075293000, ffff888075293400)
[  169.846367][  T277] The buggy address belongs to the page:
[  169.852180][  T277] page:ffffea0001d4a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75290
[  169.862374][  T277] head:ffffea0001d4a400 order:3 compound_mapcount:0 compound_pincount:0
[  169.870738][  T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  169.878872][  T277] raw: 00fff00000010200 ffffea0000928400 0000000300000003 ffff888016c41dc0
[  169.887494][  T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  169.896153][  T277] page dumped because: kasan: bad access detected
[  169.902598][  T277] page_owner tracks the page as allocated
[  169.908343][  T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 155, ts 74209496315, free_ts 71645091057
[  169.928306][  T277]  get_page_from_freelist+0x1bbd/0x1ca0
[  169.933900][  T277]  __alloc_pages+0x1ee/0x480
[  169.938549][  T277]  new_slab+0xc0/0x4b0
[  169.942780][  T277]  ___slab_alloc+0x80a/0xdd0
[  169.947523][  T277]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  169.953490][  T277]  __alloc_skb+0x22c/0x750
[  169.957974][  T277]  inet6_rt_notify+0xdd/0x290
[  169.962726][  T277]  fib6_add+0x1d4d/0x3d40
[  169.967100][  T277]  ip6_route_add+0x86/0x130
[  169.971799][  T277]  addrconf_add_dev+0x295/0x3c0
[  169.976701][  T277]  addrconf_init_auto_addrs+0x6a0/0xb00
[  169.982299][  T277]  addrconf_notify+0xa6b/0xf00
[  169.987119][  T277]  raw_notifier_call_chain+0xcb/0x160
[  169.992616][  T277]  netdev_state_change+0xe0/0x160
[  169.997796][  T277]  linkwatch_do_dev+0x10d/0x160
[  170.002691][  T277]  __linkwatch_run_queue+0x4b1/0x7c0
[  170.008064][  T277] page last free stack trace:
[  170.012767][  T277]  free_unref_page_prepare+0x637/0x6c0
[  170.018265][  T277]  free_unref_page+0x8f/0x2a0
[  170.023059][  T277]  __unfreeze_partials+0x1a5/0x200
[  170.028219][  T277]  put_cpu_partial+0x12d/0x190
[  170.033014][  T277]  qlist_free_all+0x35/0x90
[  170.037578][  T277]  kasan_quarantine_reduce+0x150/0x160
[  170.043111][  T277]  __kasan_slab_alloc+0x2f/0xd0
[  170.048002][  T277]  slab_post_alloc_hook+0x4c/0x380
[  170.053157][  T277]  __kmalloc+0x127/0x330
[  170.057537][  T277]  tomoyo_realpath_from_path+0x118/0x610
[  170.063211][  T277]  tomoyo_path_perm+0x23f/0x5d0
[  170.068107][  T277]  security_inode_getattr+0xcf/0x120
[  170.073434][  T277]  vfs_getattr+0x26/0x3a0
[  170.077912][  T277]  __x64_sys_newfstat+0x137/0x210
[  170.082978][  T277]  do_syscall_64+0x4c/0xa0
[  170.087437][  T277]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  170.093376][  T277] 
[  170.095729][  T277] Memory state around the buggy address:
[  170.101511][  T277]  ffff888075292f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  170.109613][  T277]  ffff888075292f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  170.118413][  T277] >ffff888075293000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.126618][  T277]                                            ^
[  170.132825][  T277]  ffff888075293080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.140929][  T277]  ffff888075293100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.149021][  T277] ==================================================================
[  170.157197][  T277] Disabling lock debugging due to kernel taint
[  170.212991][ T1107] usb 1-1: USB disconnect, device number 6
[  170.295205][  T277] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  170.302470][  T277] CPU: 0 PID: 277 Comm: jfsCommit Tainted: G    B             syzkaller #0
[  170.311086][  T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  170.321189][  T277] Call Trace:
[  170.324762][  T277]  <TASK>
[  170.327714][  T277]  dump_stack_lvl+0x188/0x250
[  170.332426][  T277]  ? show_regs_print_info+0x20/0x20
[  170.337660][  T277]  ? load_image+0x400/0x400
[  170.342212][  T277]  panic+0x2e5/0x810
[  170.346138][  T277]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  170.352341][  T277]  ? bpf_jit_dump+0xd0/0xd0
[  170.356875][  T277]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  170.362885][  T277]  ? _raw_spin_unlock+0x40/0x40
[  170.367773][  T277]  ? txEnd+0x329/0x520
[  170.371877][  T277]  check_panic_on_warn+0x80/0xa0
[  170.376849][  T277]  ? txEnd+0x329/0x520
[  170.380962][  T277]  end_report+0x6d/0xf0
[  170.385149][  T277]  kasan_report+0x102/0x130
[  170.389686][  T277]  ? txEnd+0x329/0x520
[  170.393787][  T277]  kasan_check_range+0x235/0x290
[  170.398769][  T277]  txEnd+0x329/0x520
[  170.402698][  T277]  jfs_lazycommit+0x5b8/0xb40
[  170.407412][  T277]  ? txFreelock+0x5a0/0x5a0
[  170.411957][  T277]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  170.417891][  T277]  ? sched_dynamic_update+0x210/0x210
[  170.423304][  T277]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  170.429253][  T277]  ? __kthread_parkme+0x157/0x1b0
[  170.434320][  T277]  kthread+0x436/0x520
[  170.438514][  T277]  ? txFreelock+0x5a0/0x5a0
[  170.443148][  T277]  ? kthread_blkcg+0xd0/0xd0
[  170.447987][  T277]  ret_from_fork+0x1f/0x30
[  170.452449][  T277]  </TASK>
[  170.455738][  T277] Kernel Offset: disabled
[  170.460095][  T277] Rebooting in 86400 seconds..