last executing test programs:

9.686781052s ago: executing program 1 (id=152):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

9.267204185s ago: executing program 1 (id=155):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)

8.863654279s ago: executing program 1 (id=157):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)

8.540024137s ago: executing program 4 (id=159):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

8.515506131s ago: executing program 1 (id=160):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})

8.349250674s ago: executing program 4 (id=161):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})

8.032269055s ago: executing program 4 (id=162):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

7.677440451s ago: executing program 4 (id=163):
symlink(0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535eogjjOAC/M7pZIKV0EfIYGCKiNwkL+kUklGtgxy6dgzpEQgZFQWFEx4IgCOoWFQSdAsu/IOognbrVpYIOBhFUjM6k7AgbLvSa8zywvDPM7jtfGHZ33vczvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvHmZ0LnVl7afeWxVdXXwgd+bFNIYSRZGn787620B1C+PZ1+lRYpS10N/T/ZmJmrHzW5M/WgbFHN0aStddffLY4b1dI0sEV+7uSNB0cXHv/G9XdgedTA0kIaexCiGJ+9OnpWgihLXYhRPHr49zF7Pe9PXYhRNH34V5ndv1rsQshim17PvXW8ns8qud8/cLAyv/+ZrfgLdyisw69PXHlfeqiVt7LfPzfnn/HjQer4cu52XcvYhdBNNdmJo/GrgEAAPi3zjbJ/8PWpe0Hl5PQ3VXO/b835P89Df2vnv8vu7/j5uh0SyHE9tLcZLY/tL+VPje+k/1X77yume+pKvl/tcn/q03+X23y/2qT/1eb/J/Mq3z8n8j/K+XJrb0Ls7GLIBr5PwAAVM/h4+OT9aHhbPC/+WdHOa/vzdt6nqc/vD3V/3jFvJH88P925Nj4wUNDw/l1L08ILq//kC4e/ZE/79HYFiYanrtotv5Dz7P5uesd5XfU//L5jaK+4rzWfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN7tzT8MgGIVh9LutiNpoVTRh4SfBBxoYEYAUZjSggwkDMBACChjIOcu9ybO8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzfv8rr4vtLY6TXGpGmssuu/XM8zX7mvh2W99njxq0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA//8lxsws")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f0000000600)="$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")
open(0x0, 0x4827e, 0x20)
getdents(0xffffffffffffffff, 0x0, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x10, 0x0)

7.238555888s ago: executing program 3 (id=165):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
pipe2(&(0x7f0000000200), 0x80800)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x200000000000000)

6.455571084s ago: executing program 0 (id=167):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.271799414s ago: executing program 2 (id=168):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc785", 0xb8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.186582266s ago: executing program 0 (id=169):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$netlink(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)

6.035117445s ago: executing program 2 (id=170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000084)

6.007763893s ago: executing program 5 (id=171):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
close(0x3)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)

5.756399646s ago: executing program 2 (id=172):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10)
write$dsp(r0, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01242abe00d48cc72f5609a070748b29eb2f75f44e93bda8a5efda9fdb8d81de5cbbff7e635ebc47f0b24291f53d43b66ae3dd06c0069e175964893c027fac58c40a24024b0b942528acd3204bbe5753d7ba65845d9eafd7ea834778c2c99b33f9", 0x80)

5.47300471s ago: executing program 4 (id=173):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x17, 0x4, "6cb232ab"}, 0x0, 0x0})

5.426528183s ago: executing program 5 (id=174):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5.168289699s ago: executing program 3 (id=175):
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x2b)
acct(&(0x7f0000000040)='./file0\x00')
unlink(&(0x7f0000000040)='./file0\x00')

4.859254532s ago: executing program 2 (id=176):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
shutdown(r2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410eb)

4.645581982s ago: executing program 3 (id=177):
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000005900)={[{@jqfmt_vfsv1}, {@heap}, {@alloc_mode_def}, {@barrier}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x14}}, {@prjjquota}, {@noinline_dentry}, {@fsync_mode_posix}, {@quota}, {@jqfmt_vfsv0}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
lstat(&(0x7f00000000c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x800, 0x5)
creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)

3.744267808s ago: executing program 5 (id=178):
migrate_pages(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.57328049s ago: executing program 1 (id=179):
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
ioctl$RTC_UIE_ON(r0, 0x7003)

1.47713905s ago: executing program 1 (id=180):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setfsgid(0xee01)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
pread64(r1, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

1.409148312s ago: executing program 4 (id=181):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b80)=ANY=[], 0x41, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=")
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x40)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8a408, 0x0, 0x0, 0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='freezer.parent_freezing\x00', 0x275a, 0x0)

1.259300374s ago: executing program 0 (id=182):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc785", 0xb8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.086558246s ago: executing program 3 (id=183):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.044411423s ago: executing program 2 (id=184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000084)

870.697743ms ago: executing program 3 (id=185):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x40})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

832.561433ms ago: executing program 0 (id=186):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
close(0x3)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)

718.428881ms ago: executing program 2 (id=187):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

581.40644ms ago: executing program 0 (id=188):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff908500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

543.490818ms ago: executing program 3 (id=189):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

483.065518ms ago: executing program 5 (id=190):
r0 = userfaultfd(0x80001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)='l', 0x1}], 0x1}}], 0x1, 0x4001015)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
write$char_usb(r2, &(0x7f0000000b00)="44e9", 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

254.265344ms ago: executing program 5 (id=191):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x8094, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

241.379779ms ago: executing program 0 (id=192):
socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
ioctl$RTC_UIE_ON(r0, 0x7003)

0s ago: executing program 5 (id=193):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x8)

kernel console output (not intermixed with test programs):

devsim1
[   83.811869][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.822397][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.860927][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.871450][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.968331][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   83.978535][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.986721][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   83.999142][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.007192][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   84.017137][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.026278][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   84.036410][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.140326][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.154613][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.167211][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.177178][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.185983][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.195916][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.204286][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.215152][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.306317][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.340166][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.354424][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.369980][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.380417][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.406461][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.416366][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.424807][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.435576][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.463661][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   84.522937][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.530339][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.555010][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   84.566984][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.579844][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.587087][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.605433][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   84.615694][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.646259][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   84.656386][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.666304][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   84.676070][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.701988][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.796574][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.808301][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.816569][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.827029][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.847748][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.857860][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.874837][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.886204][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.900584][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   84.928065][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.958044][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.965198][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.975239][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.982585][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.058300][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   85.097838][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.105063][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.161063][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.168275][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.194877][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.271963][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.317523][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   85.364014][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.371208][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.405206][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   85.428256][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.466556][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.473763][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.485441][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.492602][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.529064][ T5832] Bluetooth: hci1: command tx timeout
[   85.529078][   T51] Bluetooth: hci0: command tx timeout
[   85.579479][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.586692][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.603082][ T5832] Bluetooth: hci2: command tx timeout
[   85.608840][ T5832] Bluetooth: hci3: command tx timeout
[   85.652269][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.683495][ T5832] Bluetooth: hci5: command tx timeout
[   85.686270][   T51] Bluetooth: hci4: command tx timeout
[   85.796954][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   85.827912][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.835120][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.897229][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.909735][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.916956][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.030314][   T10] cfg80211: failed to load regulatory.db
[   86.136295][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.254456][ T5822] veth0_vlan: entered promiscuous mode
[   86.329347][ T5822] veth1_vlan: entered promiscuous mode
[   86.481903][ T5823] veth0_vlan: entered promiscuous mode
[   86.515947][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.557250][ T5823] veth1_vlan: entered promiscuous mode
[   86.589293][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.606195][ T5822] veth0_macvtap: entered promiscuous mode
[   86.637891][ T5822] veth1_macvtap: entered promiscuous mode
[   86.710518][ T5823] veth0_macvtap: entered promiscuous mode
[   86.738618][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.748675][ T5823] veth1_macvtap: entered promiscuous mode
[   86.766700][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.777786][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.829176][ T3562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.838851][ T3562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.855629][ T5837] veth0_vlan: entered promiscuous mode
[   86.867707][ T3562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.876884][ T3562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.905107][ T5838] veth0_vlan: entered promiscuous mode
[   86.915809][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.925203][ T5831] veth0_vlan: entered promiscuous mode
[   86.946901][ T5838] veth1_vlan: entered promiscuous mode
[   86.964827][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.974978][ T5837] veth1_vlan: entered promiscuous mode
[   87.008173][ T5831] veth1_vlan: entered promiscuous mode
[   87.018001][ T3562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.050640][ T3562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.059552][ T3562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.107702][ T3562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.120495][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.137503][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.180624][ T5840] veth0_vlan: entered promiscuous mode
[   87.223326][ T5838] veth0_macvtap: entered promiscuous mode
[   87.239072][ T5837] veth0_macvtap: entered promiscuous mode
[   87.248865][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.251513][ T5837] veth1_macvtap: entered promiscuous mode
[   87.263156][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.271266][ T5840] veth1_vlan: entered promiscuous mode
[   87.280023][ T5838] veth1_macvtap: entered promiscuous mode
[   87.388036][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   87.388989][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.421471][ T5831] veth0_macvtap: entered promiscuous mode
[   87.450471][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.464748][ T5831] veth1_macvtap: entered promiscuous mode
[   87.476477][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.490020][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.516569][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.529213][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.574379][ T3581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.583678][ T3581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.603440][   T51] Bluetooth: hci0: command tx timeout
[   87.603459][ T5832] Bluetooth: hci1: command tx timeout
[   87.629787][ T3581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.646129][ T3581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.682960][ T5832] Bluetooth: hci3: command tx timeout
[   87.683181][   T51] Bluetooth: hci2: command tx timeout
[   87.702880][ T3581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.711753][ T3581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.725248][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.736431][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.751007][ T5840] veth0_macvtap: entered promiscuous mode
[   87.763120][   T51] Bluetooth: hci5: command tx timeout
[   87.768754][ T5832] Bluetooth: hci4: command tx timeout
[   87.770820][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.785591][ T3581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.814197][ T5840] veth1_macvtap: entered promiscuous mode
[   87.842321][ T3581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.871950][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.960332][ T3529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.972604][ T3529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.991795][ T3529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.013036][ T3529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.049125][ T5968] loop4: detected capacity change from 0 to 40427
[   88.106743][ T5968] F2FS-fs (loop4): invalid crc value
[   88.138428][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.146876][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.181905][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.290810][ T5968] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.302207][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.320419][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.338734][ T5968] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   88.348280][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.352836][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   88.421012][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.434583][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.444934][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.461059][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.487083][ T3529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.492082][ T5968] syz.4.5: attempt to access beyond end of device
[   88.492082][ T5968] loop4: rw=1, sector=45096, nr_sectors = 32 limit=40427
[   88.527785][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.528025][ T3529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.545019][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.553683][ T5933] usb 4-1: Using ep0 maxpacket: 16
[   88.566427][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short
[   88.591395][ T5933] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[   88.611221][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.631245][ T5933] usb 4-1: Product: syz
[   88.633701][ T5822] syz-executor: attempt to access beyond end of device
[   88.633701][ T5822] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[   88.639069][ T5933] usb 4-1: Manufacturer: syz
[   88.660550][ T5933] usb 4-1: SerialNumber: syz
[   88.661447][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   88.661475][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   88.661489][ T5822] Call Trace:
[   88.661499][ T5822]  <TASK>
[   88.661509][ T5822]  dump_stack_lvl+0xe8/0x150
[   88.661552][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[   88.661603][ T5822]  f2fs_write_end_io+0x1273/0x1740
[   88.661662][ T5822]  __submit_merged_bio+0x256/0x6a0
[   88.661713][ T5822]  __submit_merged_write_cond+0x3c9/0x4e0
[   88.661765][ T5822]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   88.661832][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.661874][ T5822]  f2fs_write_data_pages+0x287e/0x34f0
[   88.661956][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.662004][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662033][ T5822]  ? css_rstat_updated+0x23a/0x530
[   88.662098][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662127][ T5822]  ? rcu_is_watching+0x15/0xb0
[   88.662162][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662191][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662220][ T5822]  ? __bfs+0x153/0x290
[   88.662251][ T5822]  ? __pfx_hlock_conflict+0x10/0x10
[   88.662296][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662342][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662370][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662399][ T5822]  ? __lock_acquire+0x146e/0x2cf0
[   88.662469][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.662502][ T5822]  do_writepages+0x32e/0x550
[   88.662535][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662567][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662601][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662630][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[   88.662664][ T5822]  filemap_fdatawrite+0x1e9/0x2f0
[   88.662701][ T5822]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   88.662789][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662821][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.662857][ T5822]  ? do_raw_spin_unlock+0xf5/0x210
[   88.662890][ T5822]  f2fs_sync_dirty_inodes+0x30e/0x830
[   88.662947][ T5822]  f2fs_write_checkpoint+0x9df/0x26a0
[   88.662977][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[   88.663054][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   88.663083][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.663188][ T5822]  kill_f2fs_super+0x314/0x720
[   88.663227][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[   88.663275][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.663303][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[   88.663341][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[   88.663389][ T5822]  deactivate_locked_super+0xbc/0x130
[   88.663427][ T5822]  cleanup_mnt+0x437/0x4d0
[   88.663463][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[   88.663504][ T5822]  task_work_run+0x1d9/0x270
[   88.663537][ T5822]  ? __pfx_task_work_run+0x10/0x10
[   88.663576][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.663604][ T5822]  exit_to_user_mode_loop+0xed/0x480
[   88.663634][ T5822]  ? rcu_is_watching+0x15/0xb0
[   88.663672][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.663700][ T5822]  do_syscall_64+0x33e/0xf80
[   88.663736][ T5822]  ? trace_irq_disable+0x3b/0x140
[   88.663782][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.663808][ T5822] RIP: 0033:0x7f8498b9da57
[   88.663832][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   88.663851][ T5822] RSP: 002b:00007ffccbfa2638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.663875][ T5822] RAX: 0000000000000000 RBX: 00007f8498c32048 RCX: 00007f8498b9da57
[   88.663892][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccbfa26f0
[   88.663907][ T5822] RBP: 00007ffccbfa26f0 R08: 00007ffccbfa36f0 R09: 00000000ffffffff
[   88.663924][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccbfa3780
[   88.663939][ T5822] R13: 00007f8498c32048 R14: 00000000000159eb R15: 00007ffccbfa37c0
[   88.663982][ T5822]  </TASK>
[   88.666425][ T5822] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   88.954374][ T5933] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[   89.095414][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.105286][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.167568][ T5933] gspca_vc032x: reg_w err -71
[   89.192369][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.215610][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.228788][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.243944][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.261641][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.272115][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.308287][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.323236][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.329218][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.335897][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.349742][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.361790][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.408235][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.428871][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.466215][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.493048][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.509869][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.519672][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.547963][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.553472][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.560214][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.577194][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.583088][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[   89.588528][ T5933] gspca_vc032x: Unknown sensor...
[   89.598150][ T5933] vc032x 4-1:12.0: probe with driver vc032x failed with error -22
[   89.660732][ T5933] usb 4-1: USB disconnect, device number 2
[   89.921822][ T1310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.969212][ T1310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.229744][ T5987] syzkaller0: entered promiscuous mode
[   91.217555][ T5995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.817055][ T5984] loop2: detected capacity change from 0 to 32768
[   91.916379][ T5984] (syz.2.3,5984,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.013650][ T5984] (syz.2.3,5984,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.127482][ T6006] loop1: detected capacity change from 0 to 128
[   92.239384][ T5984] JBD2: Ignoring recovery information on journal
[   92.414496][ T5991] loop0: detected capacity change from 0 to 40427
[   92.438437][ T5984] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.458736][ T5991] F2FS-fs: heap/no_heap options were deprecated
[   92.524459][ T5991] F2FS-fs (loop0): build fault injection rate: 16
[   92.555876][ T5997] ocfs2: Finishing quota recovery on device (7,2) for slot 0
[   92.556422][ T5991] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   92.599609][ T5991] F2FS-fs (loop0): invalid crc value
[   92.656704][ T5991] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[   92.751274][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   93.036878][ T6003] loop3: detected capacity change from 0 to 32768
[   93.086185][ T5991] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   93.110264][ T6003] (syz.3.11,6003,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.187889][ T6003] (syz.3.11,6003,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.251158][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[   93.324392][ T6003] JBD2: Ignoring recovery information on journal
[   93.544291][ T6003] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   93.579779][ T6024] loop1: detected capacity change from 0 to 4096
[   93.593782][ T3581] ocfs2: Finishing quota recovery on device (7,3) for slot 0
[   93.642293][ T6024] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   93.669951][ T6007] loop4: detected capacity change from 0 to 32768
[   93.701714][ T6007] (syz.4.13,6007,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.766515][ T6007] (syz.4.13,6007,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.867946][ T6007] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2'
[   93.904431][ T6007] JBD2: Ignoring recovery information on journal
[   93.926528][   T31] audit: type=1800 audit(1776333567.756:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file2" dev="loop1" ino=31 res=0 errno=0
[   93.976041][ T6021] loop5: detected capacity change from 0 to 32768
[   93.988431][ T6021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16 (6021)
[   94.118194][ T6007] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   94.136022][ T6021] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.154137][ T6021] BTRFS info (device loop5): using sha256 checksum algorithm
[   94.164892][ T5823] ocfs2: Unmounting device (7,3) on (node local)
[   94.188509][   T37] ocfs2: Finishing quota recovery on device (7,4) for slot 0
[   94.299645][ T6045] netlink: 'syz.2.18': attribute type 13 has an invalid length.
[   94.380088][ T6045] netlink: 'syz.2.18': attribute type 17 has an invalid length.
[   94.433922][ T6021] BTRFS info (device loop5): rebuilding free space tree
[   94.557061][ T5822] ocfs2: Unmounting device (7,4) on (node local)
[   94.574270][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.582784][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.619023][ T6021] BTRFS info (device loop5): enabling ssd optimizations
[   94.642921][ T6021] BTRFS info (device loop5): using spread ssd allocation scheme
[   94.660416][ T6021] BTRFS info (device loop5): turning on async discard
[   94.688302][ T6021] BTRFS info (device loop5): enabling free space tree
[   94.719118][ T6021] BTRFS info (device loop5): force clearing of disk cache
[   94.989943][ T5838] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.492630][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.663176][ T6051] loop1: detected capacity change from 0 to 32768
[   95.697685][ T5893] usb 5-1: Using ep0 maxpacket: 8
[   95.704635][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.725432][ T5893] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   95.757340][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   95.814683][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   95.832157][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.868489][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.938646][ T5893] usbtmc 5-1:16.0: bulk endpoints not found
[   96.077265][ T6055] loop0: detected capacity change from 0 to 32768
[   96.182253][ T6055] ERROR: (device loop0): diRead: i_ino != di_number
[   96.182253][ T6055] 
[   96.189495][ T5893] usb 5-1: USB disconnect, device number 2
[   96.252431][ T6055] ERROR: (device loop0): remounting filesystem as read-only
[   96.333757][ T6058] loop3: detected capacity change from 0 to 32768
[   96.461296][ T6058] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.645490][ T6058] XFS (loop3): Ending clean mount
[   96.678702][ T6058] XFS (loop3): Quotacheck needed: Please wait.
[   96.927321][ T6058] XFS (loop3): Quotacheck: Done.
[   97.029621][ T6062] loop5: detected capacity change from 0 to 40427
[   97.070830][ T6062] F2FS-fs: heap/no_heap options were deprecated
[   97.105457][ T6062] F2FS-fs (loop5): build fault injection rate: 16
[   97.152682][ T6062] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[   97.169223][ T6062] F2FS-fs (loop5): invalid crc value
[   97.219087][ T6062] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[   97.267128][ T5823] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.285254][ T5893] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   97.301148][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   97.486012][ T5893] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   97.508180][ T5893] usb 5-1: config 0 has no interface number 0
[   97.546481][ T5893] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   97.610915][ T5893] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   97.651849][ T5893] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   97.663969][ T6062] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.680558][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.728802][ T5893] usb 5-1: Product: syz
[   97.735835][ T6062] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   97.747369][ T5893] usb 5-1: Manufacturer: syz
[   97.772386][ T5893] usb 5-1: SerialNumber: syz
[   97.826843][ T5893] usb 5-1: config 0 descriptor??
[   97.861197][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   97.879328][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   97.915508][ T6062] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x181/0x600
[   97.969696][ T6089] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[   97.998418][ T6062] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[   98.021602][ T6062] F2FS-fs (loop5): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[   98.143177][   T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.273425][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   98.342854][ T6078] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   98.358447][   T30] usb 2-1: Using ep0 maxpacket: 32
[   98.424118][   T30] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   98.540511][   T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.561145][ T6062] F2FS-fs (loop5): inject page get in f2fs_filemap_get_folio of __f2fs_find_entry+0x7ba/0xf10
[   98.638097][   T30] usb 2-1: Product: syz
[   98.680891][   T30] usb 2-1: Manufacturer: syz
[   98.737346][   T30] usb 2-1: SerialNumber: syz
[   98.838918][ T6089] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[   98.880211][   T30] usb 2-1: config 0 descriptor??
[   98.891833][   T30] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   98.911781][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.924549][ T6062] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[   98.928246][ T5893] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   98.937284][ T6062] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[   98.999952][ T6045] 8021q: adding VLAN 0 to HW filter on device team0
[   99.043358][ T5893] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   99.049773][ T5838] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x120/0x3f0
[   99.078410][ T6045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.141570][    C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[   99.152303][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[   99.152334][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   99.152349][    C1] Call Trace:
[   99.152358][    C1]  <TASK>
[   99.152367][    C1]  dump_stack_lvl+0xe8/0x150
[   99.152408][    C1]  f2fs_handle_critical_error+0x37c/0x540
[   99.152457][    C1]  f2fs_write_end_io+0x1273/0x1740
[   99.152510][    C1]  blk_update_request+0x57e/0xe60
[   99.152556][    C1]  blk_mq_end_request+0x3e/0x70
[   99.152588][    C1]  blk_flush_complete_seq+0x678/0xcc0
[   99.152630][    C1]  flush_end_io+0xbaa/0xe60
[   99.152675][    C1]  __blk_mq_end_request+0x4f8/0x630
[   99.152711][    C1]  blk_done_softirq+0x10a/0x160
[   99.152738][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[   99.152774][    C1]  handle_softirqs+0x22a/0x840
[   99.152810][    C1]  ? schedule+0x90/0x360
[   99.152843][    C1]  ? run_ksoftirqd+0x36/0x60
[   99.152888][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[   99.152923][    C1]  run_ksoftirqd+0x36/0x60
[   99.152958][    C1]  smpboot_thread_fn+0x541/0xa50
[   99.152998][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[   99.153055][    C1]  kthread+0x388/0x470
[   99.153081][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   99.153118][    C1]  ? __pfx_kthread+0x10/0x10
[   99.153144][    C1]  ret_from_fork+0x514/0xb70
[   99.153186][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   99.153222][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[   99.153252][    C1]  ? __switch_to+0xc79/0x1410
[   99.153287][    C1]  ? __pfx_kthread+0x10/0x10
[   99.153314][    C1]  ret_from_fork_asm+0x1a/0x30
[   99.153357][    C1]  </TASK>
[   99.153366][    C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[   99.316281][ T5838] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint
[   99.359210][ T6083] loop0: detected capacity change from 0 to 32768
[   99.440940][ T6083] (syz.0.27,6083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.458491][ T3581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.500115][ T3581] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.527359][ T6083] (syz.0.27,6083,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.549622][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.560111][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.663414][ T6083] JBD2: Ignoring recovery information on journal
[   99.898806][ T6083] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.939899][   T13] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[  100.384748][ T5837] ocfs2: Unmounting device (7,0) on (node local)
[  100.760569][   T30] gspca_ov534_9: reg_w failed -71
[  100.874807][ T6104] loop3: detected capacity change from 0 to 32768
[  100.907973][ T6104] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.33 (6104)
[  100.991825][ T6104] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.016155][ T6104] BTRFS info (device loop3): using crc32c checksum algorithm
[  101.023752][   T30] gspca_ov534_9: Unknown sensor 0000
[  101.023846][   T30] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  101.042078][ T5893] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[  101.055890][ T5893] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  101.060853][   T30] usb 2-1: USB disconnect, device number 2
[  101.141973][ T5893] usb 5-1: USB disconnect, device number 3
[  101.213540][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.222017][ T6104] BTRFS info (device loop3): rebuilding free space tree
[  101.258140][ T6108] loop5: detected capacity change from 0 to 32768
[  101.344086][ T6104] BTRFS info (device loop3): setting nodatasum
[  101.359088][ T6104] BTRFS info (device loop3): enabling ssd optimizations
[  101.381909][ T6108] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.397074][ T5901] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  101.399645][ T6104] BTRFS info (device loop3): turning on flush-on-commit
[  101.425696][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.433817][ T5901] usb 1-1: Product: syz
[  101.437982][ T5901] usb 1-1: Manufacturer: syz
[  101.442848][ T5901] usb 1-1: SerialNumber: syz
[  101.450181][ T6104] BTRFS info (device loop3): enabling free space tree
[  101.459551][ T6104] BTRFS info (device loop3): force clearing of disk cache
[  101.602350][ T6108] XFS (loop5): Ending clean mount
[  101.691499][ T5823] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.758055][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'.
[  101.812091][ T5838] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.941349][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  101.988473][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  102.043579][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  102.272550][   T10] usb 5-1: Using ep0 maxpacket: 8
[  102.293564][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  102.305027][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  102.367312][   T10] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  102.392638][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.422568][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  102.442566][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.526342][   T10] usbtmc 5-1:16.0: bulk endpoints not found
[  102.752628][   T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  102.904984][ T6141] loop3: detected capacity change from 0 to 40427
[  102.913213][   T29] usb 6-1: Using ep0 maxpacket: 8
[  102.919895][ T6141] F2FS-fs: heap/no_heap options were deprecated
[  102.928094][   T29] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  102.998049][ T6141] F2FS-fs (loop3): build fault injection rate: 16
[  103.001628][   T29] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  103.005008][ T6141] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  103.006394][ T6141] F2FS-fs (loop3): invalid crc value
[  103.039396][   T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.062328][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.127070][ T6141] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  103.149382][   T29] usbtmc 6-1:16.0: bulk endpoints not found
[  103.169745][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  103.261052][ T6141] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  103.279475][ T6141] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.318979][ T6141] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cf/0x6a0
[  103.332374][ T5893] usb 6-1: USB disconnect, device number 2
[  103.335057][ T6141] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  103.373866][ T6141] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80
[  103.398063][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  103.399598][ T6141] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  103.411870][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  103.441690][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  103.476620][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  103.487033][ T5823] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  103.488686][ T5901] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  103.514395][ T5823] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:13, node_footer[nid:13,ino:3,ofs:391227,cpver:0,blkaddr:0]
[  103.518449][ T5901] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  103.546863][ T5901] usb 1-1: USB disconnect, device number 2
[  103.552821][ T5823] syz-executor: attempt to access beyond end of device
[  103.552821][ T5823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.552896][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.552923][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  103.552938][ T5823] Call Trace:
[  103.552947][ T5823]  <TASK>
[  103.552957][ T5823]  dump_stack_lvl+0xe8/0x150
[  103.553006][ T5823]  f2fs_handle_critical_error+0x37c/0x540
[  103.553059][ T5823]  f2fs_write_end_io+0x1273/0x1740
[  103.553120][ T5823]  __submit_merged_bio+0x256/0x6a0
[  103.553170][ T5823]  __submit_merged_write_cond+0x3c9/0x4e0
[  103.553223][ T5823]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  103.553283][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553325][ T5823]  f2fs_write_data_pages+0x287e/0x34f0
[  103.553353][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553381][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  103.553463][ T5823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.553511][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553540][ T5823]  ? css_rstat_updated+0x23a/0x530
[  103.553610][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553639][ T5823]  ? rcu_is_watching+0x15/0xb0
[  103.553680][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553709][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  103.553761][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553790][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  103.553836][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553864][ T5823]  ? do_raw_spin_lock+0x12b/0x2f0
[  103.553899][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553934][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.553962][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  103.553990][ T5823]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.554026][ T5823]  do_writepages+0x32e/0x550
[  103.554060][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554092][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554127][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554156][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  103.554189][ T5823]  filemap_fdatawrite+0x1e9/0x2f0
[  103.554226][ T5823]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.554313][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554346][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554381][ T5823]  ? do_raw_spin_unlock+0xf5/0x210
[  103.554414][ T5823]  f2fs_sync_dirty_inodes+0x30e/0x830
[  103.554467][ T5823]  f2fs_write_checkpoint+0x9df/0x26a0
[  103.554497][ T5823]  ? __lock_acquire+0x6b5/0x2cf0
[  103.554574][ T5823]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.554603][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554711][ T5823]  kill_f2fs_super+0x314/0x720
[  103.554750][ T5823]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.554797][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554826][ T5823]  ? lockdep_hardirqs_on+0x7a/0x110
[  103.554864][ T5823]  ? srso_alias_return_thunk+0x5/0xfbef5
[  103.554913][ T5823]  deactivate_locked_super+0xbc/0x130
[  103.554951][ T5823]  cleanup_mnt+0x437/0x4d0
[  103.554987][ T5823]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.555033][ T5823]  task_work_run+0x1d9/0x270
[  103.555066][ T5823]  ? __pfx_task_work_run+0x10/0x10
[  103.555105][ T5823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.555133][ T5823]  exit_to_user_mode_loop+0xed/0x480
[  103.555163][ T5823]  ? rcu_is_watching+0x15/0xb0
[  103.555201][ T5823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.555229][ T5823]  do_syscall_64+0x33e/0xf80
[  103.555266][ T5823]  ? trace_irq_disable+0x3b/0x140
[  103.555301][ T5823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.555326][ T5823] RIP: 0033:0x7f43d0d9da57
[  103.555349][ T5823] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  103.555368][ T5823] RSP: 002b:00007fffff87bd68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.555393][ T5823] RAX: 0000000000000000 RBX: 00007f43d0e32048 RCX: 00007f43d0d9da57
[  103.555410][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffff87be20
[  103.555425][ T5823] RBP: 00007fffff87be20 R08: 00007fffff87ce20 R09: 00000000ffffffff
[  103.555442][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffff87ceb0
[  103.555457][ T5823] R13: 00007f43d0e32048 R14: 0000000000019403 R15: 00007fffff87cef0
[  103.555500][ T5823]  </TASK>
[  103.560455][ T5823] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  104.089001][ T6052] Set syz1 is full, maxelem 65536 reached
[  104.451594][   T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  104.954053][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.162825][ T6159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.292695][ T5893] usb 5-1: USB disconnect, device number 4
[  105.348394][   T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  105.358157][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.423426][   T29] usb 6-1: config 0 descriptor??
[  105.448659][   T29] pwc: Askey VC010 type 2 USB webcam detected.
[  105.653793][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  105.793473][   T24] usb 4-1: device descriptor read/64, error -71
[  105.870056][   T29] pwc: recv_control_msg error -32 req 02 val 2b00
[  105.880068][   T29] pwc: recv_control_msg error -32 req 02 val 2700
[  105.888528][   T29] pwc: recv_control_msg error -32 req 02 val 2c00
[  105.896656][   T29] pwc: recv_control_msg error -32 req 04 val 1000
[  105.904206][   T29] pwc: recv_control_msg error -32 req 04 val 1300
[  105.911728][   T29] pwc: recv_control_msg error -32 req 04 val 1400
[  105.922031][   T29] pwc: recv_control_msg error -32 req 02 val 2000
[  105.930630][   T29] pwc: recv_control_msg error -32 req 02 val 2100
[  105.938187][   T29] pwc: recv_control_msg error -32 req 04 val 1500
[  105.955423][   T29] pwc: recv_control_msg error -32 req 02 val 2500
[  105.972863][   T29] pwc: recv_control_msg error -71 req 02 val 2400
[  105.987620][   T29] pwc: recv_control_msg error -71 req 02 val 2600
[  105.995639][   T29] pwc: recv_control_msg error -71 req 02 val 2900
[  106.002777][   T29] pwc: recv_control_msg error -71 req 02 val 2800
[  106.018453][   T29] pwc: recv_control_msg error -71 req 04 val 1100
[  106.034409][   T29] pwc: recv_control_msg error -71 req 04 val 1200
[  106.042683][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.072016][   T29] pwc: Registered as video103.
[  106.110520][   T29] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5
[  106.182591][   T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  106.190261][   T24] usb 4-1: device descriptor read/64, error -71
[  106.209064][   T29] usb 6-1: USB disconnect, device number 3
[  106.248853][ T6161] loop1: detected capacity change from 0 to 32768
[  106.287596][ T6161] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.45 (6161)
[  106.325565][   T24] usb usb4-port1: attempt power cycle
[  106.362555][   T30] usb 5-1: Using ep0 maxpacket: 32
[  106.377620][   T30] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  106.391349][ T6161] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  106.411850][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.437921][   T30] usb 5-1: Product: syz
[  106.439089][ T6169] loop0: detected capacity change from 0 to 32768
[  106.450857][   T30] usb 5-1: Manufacturer: syz
[  106.455735][   T30] usb 5-1: SerialNumber: syz
[  106.463382][ T6161] BTRFS info (device loop1): using blake2b checksum algorithm
[  106.477383][   T30] usb 5-1: config 0 descriptor??
[  106.488934][ T6169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.48 (6169)
[  106.516257][   T30] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  106.568540][ T6169] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.608106][ T6161] BTRFS info (device loop1): enabling ssd optimizations
[  106.612695][ T6169] BTRFS info (device loop0): using crc32c checksum algorithm
[  106.635197][ T6161] BTRFS info (device loop1): turning on async discard
[  106.652634][ T6161] BTRFS info (device loop1): enabling free space tree
[  106.702629][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.719813][ T6161] BTRFS info (device loop1): use zstd compression, level 3
[  106.733635][   T24] usb 4-1: device descriptor read/8, error -71
[  106.818766][   T31] audit: type=1800 audit(1776333580.656:3): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.45" name="file1" dev="loop1" ino=260 res=0 errno=0
[  106.823272][ T6169] BTRFS info (device loop0): enabling ssd optimizations
[  106.957490][ T6169] BTRFS info (device loop0): turning on flush-on-commit
[  106.997881][ T6169] BTRFS info (device loop0): enabling free space tree
[  107.028573][ T6169] BTRFS info (device loop0): enabling auto defrag
[  107.042687][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  107.051803][ T6169] BTRFS info (device loop0): force zlib compression, level 3
[  107.080788][ T6169] BTRFS info (device loop0): max_inline set to 4096
[  107.083169][   T24] usb 4-1: device descriptor read/8, error -71
[  107.224666][   T24] usb usb4-port1: unable to enumerate USB device
[  107.263940][ T5840] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.625745][ T5837] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.667174][ T6213] loop5: detected capacity change from 0 to 40427
[  107.676380][ T6213] F2FS-fs: heap/no_heap options were deprecated
[  107.720609][ T6213] F2FS-fs (loop5): build fault injection rate: 16
[  107.746161][ T6213] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  107.769834][ T6213] F2FS-fs (loop5): invalid crc value
[  107.809942][ T6213] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  107.868782][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  108.073359][ T6213] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.092764][ T6213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  108.112833][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.133839][ T6213] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x181/0x600
[  108.169543][ T6213] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  108.187258][ T6213] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  108.199522][ T6213] F2FS-fs (loop5): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  108.218082][ T6213] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cf/0x6a0
[  108.231197][ T6213] F2FS-fs (loop5): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  108.246869][ T6213] F2FS-fs (loop5): inject evict_inode fail in f2fs_evict_inode of evict+0x61e/0xb10
[  108.293192][   T24] usb 2-1: Using ep0 maxpacket: 8
[  108.299441][ T5838] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __write_node_folio+0x5ba/0x1a20
[  108.312614][ T5838] F2FS-fs (loop5): inconsistent node block, node_type:0, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  108.331656][   T24] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  108.344238][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  108.359852][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  108.359882][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  108.359897][ T5838] Call Trace:
[  108.359906][ T5838]  <TASK>
[  108.359916][ T5838]  dump_stack_lvl+0xe8/0x150
[  108.359958][ T5838]  f2fs_handle_critical_error+0x37c/0x540
[  108.360010][ T5838]  __write_node_folio+0x5dd/0x1a20
[  108.360067][ T5838]  ? __pfx___write_node_folio+0x10/0x10
[  108.360117][ T5838]  ? f2fs_inode_chksum_set+0x13e/0x640
[  108.360152][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360191][ T5838]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  108.360222][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360251][ T5838]  ? folio_clear_dirty_for_io+0x570/0x710
[  108.360282][ T5838]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  108.360317][ T5838]  f2fs_sync_node_pages+0xeb4/0x1680
[  108.360380][ T5838]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  108.360457][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360497][ T5838]  f2fs_write_checkpoint+0xeb8/0x26a0
[  108.360528][ T5838]  ? __lock_acquire+0x6b5/0x2cf0
[  108.360597][ T5838]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  108.360626][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360717][ T5838]  kill_f2fs_super+0x314/0x720
[  108.360755][ T5838]  ? __pfx_kill_f2fs_super+0x10/0x10
[  108.360805][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360834][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  108.360872][ T5838]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.360917][ T5838]  deactivate_locked_super+0xbc/0x130
[  108.360954][ T5838]  cleanup_mnt+0x437/0x4d0
[  108.360990][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.361029][ T5838]  task_work_run+0x1d9/0x270
[  108.361062][ T5838]  ? __pfx_task_work_run+0x10/0x10
[  108.361098][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.361125][ T5838]  exit_to_user_mode_loop+0xed/0x480
[  108.361154][ T5838]  ? rcu_is_watching+0x15/0xb0
[  108.361192][ T5838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.361220][ T5838]  do_syscall_64+0x33e/0xf80
[  108.361257][ T5838]  ? trace_irq_disable+0x3b/0x140
[  108.361290][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.361315][ T5838] RIP: 0033:0x7f8fdaf9da57
[  108.361338][ T5838] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  108.361357][ T5838] RSP: 002b:00007ffde1099378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  108.361382][ T5838] RAX: 0000000000000000 RBX: 00007f8fdb032048 RCX: 00007f8fdaf9da57
[  108.361399][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde1099430
[  108.361414][ T5838] RBP: 00007ffde1099430 R08: 00007ffde109a430 R09: 00000000ffffffff
[  108.361431][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde109a4c0
[  108.361447][ T5838] R13: 00007f8fdb032048 R14: 000000000001a6d4 R15: 00007ffde109a500
[  108.361485][ T5838]  </TASK>
[  108.370634][   T30] gspca_ov534_9: reg_w failed -71
[  108.378847][ T5838] F2FS-fs (loop5): Stopped filesystem due to reason: 9
[  108.392525][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  108.643332][ T6224] loop2: detected capacity change from 0 to 32768
[  108.652537][ T6181] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  108.690679][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.704728][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  108.714939][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.722348][ T6224] (syz.2.57,6224,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.741028][   T24] usbtmc 2-1:16.0: bulk endpoints not found
[  108.769211][ T6224] (syz.2.57,6224,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.825999][ T6224] JBD2: Ignoring recovery information on journal
[  108.880042][ T6181] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  108.889344][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.897624][ T6181] usb 1-1: Product: syz
[  108.903623][ T6181] usb 1-1: Manufacturer: syz
[  108.906937][ T6224] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  108.908245][ T6181] usb 1-1: SerialNumber: syz
[  108.922666][   T30] gspca_ov534_9: Unknown sensor 0000
[  108.922757][   T30] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  108.927085][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.954974][   T30] usb 5-1: USB disconnect, device number 5
[  108.994933][   T10] usb 2-1: USB disconnect, device number 3
[  109.025854][   T37] ocfs2: Finishing quota recovery on device (7,2) for slot 0
[  109.104215][ T5893] usb 4-1: Using ep0 maxpacket: 8
[  109.114873][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  109.139984][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  109.169837][ T6233] loop4: detected capacity change from 0 to 128
[  109.180615][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  109.201614][ T6233] =======================================================
[  109.201614][ T6233] WARNING: The mand mount option has been deprecated and
[  109.201614][ T6233]          and is ignored by this kernel. Remove the mand
[  109.201614][ T6233]          option from the mount to silence this warning.
[  109.201614][ T6233] =======================================================
[  109.242371][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  109.257534][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.266226][ T6233] EXT4-fs (loop4): Test dummy encryption mode enabled
[  109.275789][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  109.289297][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.325028][ T5893] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  109.335056][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  109.371936][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  109.407606][ T6233] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.424454][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  109.484068][ T6233] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.630006][ T6233] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  109.632605][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  109.677553][ T6243] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  109.795051][ T5893] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  109.811670][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.828778][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  109.840403][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.867316][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  109.876224][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  109.897303][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  109.933534][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  109.973695][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  109.995495][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.018582][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.038045][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.047779][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.060200][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.068360][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.078547][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.090401][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.098665][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.108859][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.120367][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.135242][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.144566][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.156626][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.168896][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  110.201888][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  110.214000][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  110.224057][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  110.235384][ T5893] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  110.245504][ T5893] usb 6-1: Product: syz
[  110.249835][ T5893] usb 6-1: Manufacturer: syz
[  110.263266][ T5893] usb 6-1: SerialNumber: syz
[  110.273193][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  110.298373][ T5893] usb 6-1: config 0 descriptor??
[  110.354964][ T5893] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  110.425924][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.454645][ T5901] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  110.478757][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.515205][ T5901] usb 3-1: config 0 descriptor??
[  110.548242][ T5901] pwc: Askey VC010 type 2 USB webcam detected.
[  110.576372][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.589233][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.666390][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  110.684884][    C0] usb 6-1: yurex_control_callback - control failed: -71
[  110.685270][   T30] usb 6-1: USB disconnect, device number 4
[  110.714378][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  110.743480][   T30] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  110.757600][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  110.792587][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  110.817667][ T6181] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  110.847146][ T6181] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  110.887646][ T6181] usb 1-1: USB disconnect, device number 3
[  110.957344][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00
[  110.976662][ T5901] pwc: recv_control_msg error -32 req 02 val 2700
[  110.990559][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00
[  111.003934][ T5901] pwc: recv_control_msg error -32 req 04 val 1000
[  111.017027][ T5901] pwc: recv_control_msg error -32 req 04 val 1300
[  111.027527][ T5901] pwc: recv_control_msg error -32 req 04 val 1400
[  111.038253][ T5901] pwc: recv_control_msg error -32 req 02 val 2000
[  111.053514][ T5901] pwc: recv_control_msg error -32 req 02 val 2100
[  111.064172][ T5901] pwc: recv_control_msg error -32 req 04 val 1500
[  111.071715][ T5901] pwc: recv_control_msg error -32 req 02 val 2500
[  111.079133][ T5901] pwc: recv_control_msg error -32 req 02 val 2400
[  111.088567][ T5901] pwc: recv_control_msg error -32 req 02 val 2600
[  111.102158][ T5901] pwc: recv_control_msg error -71 req 02 val 2900
[  111.112576][ T5901] pwc: recv_control_msg error -71 req 02 val 2800
[  111.119897][ T5901] pwc: recv_control_msg error -71 req 04 val 1100
[  111.127123][ T5901] pwc: recv_control_msg error -71 req 04 val 1200
[  111.166509][ T5901] pwc: Registered as video103.
[  111.196029][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  111.258411][ T5901] usb 3-1: USB disconnect, device number 2
[  112.206504][ T5901] usb 4-1: USB disconnect, device number 7
[  112.668771][ T6181] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.986625][ T6283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.183826][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  113.386072][ T6181] usb 5-1: device descriptor read/64, error -71
[  113.432577][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  113.450804][ T5901] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  113.478341][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  113.523912][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  113.551751][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.766137][ T6181] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  114.064196][ T6181] usb 5-1: device descriptor read/64, error -71
[  114.279476][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  114.288648][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.306365][ T5901] usbtmc 4-1:16.0: bulk endpoints not found
[  114.373433][ T6181] usb usb5-port1: attempt power cycle
[  114.492082][ T6280] loop1: detected capacity change from 0 to 32768
[  114.506129][ T6280] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.75 (6280)
[  114.522280][ T5893] usb 4-1: USB disconnect, device number 8
[  114.574551][ T6269] loop0: detected capacity change from 0 to 32768
[  114.588622][ T6280] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  114.607767][ T6280] BTRFS info (device loop1): using blake2b checksum algorithm
[  114.634059][ T6269] syz.0.70: attempt to access beyond end of device
[  114.634059][ T6269] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  114.648702][   T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  114.683116][ T6269] metapage_write_end_io: I/O error
[  114.696709][ T6269] ERROR: (device loop0): release_metapage: metapage_write_one() failed
[  114.696709][ T6269] 
[  114.713446][ T5901] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  114.726912][ T6269] ERROR: (device loop0): remounting filesystem as read-only
[  114.737351][ T6280] BTRFS info (device loop1): enabling ssd optimizations
[  114.744447][ T6280] BTRFS info (device loop1): turning on async discard
[  114.753052][ T6269] blkno = 8ed2c, nblocks = 1
[  114.757987][ T6280] BTRFS info (device loop1): enabling free space tree
[  114.764519][ T6181] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  114.766156][ T6280] BTRFS info (device loop1): use zstd compression, level 3
[  114.772597][ T6269] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  114.772597][ T6269] 
[  114.812756][   T31] audit: type=1800 audit(1776333588.646:4): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="file1" dev="loop1" ino=260 res=0 errno=0
[  114.844842][ T6181] usb 5-1: device descriptor read/8, error -71
[  114.853136][   T30] usb 6-1: Using ep0 maxpacket: 16
[  114.869392][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.876953][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  114.895637][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.897815][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.906088][ T5901] usb 3-1: Product: syz
[  114.917534][ T5901] usb 3-1: Manufacturer: syz
[  114.923333][  T108] blkno = 8ed2c, nblocks = 4
[  114.928510][  T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  114.928510][  T108] 
[  114.942032][ T5901] usb 3-1: SerialNumber: syz
[  114.947468][ T5837] syz-executor: attempt to access beyond end of device
[  114.947468][ T5837] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  114.948548][   T30] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.962262][ T5837] metapage_write_end_io: I/O error
[  114.980713][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.994287][   T30] usb 6-1: Product: syz
[  114.999130][   T30] usb 6-1: Manufacturer: syz
[  115.001155][ T5837] JFS: metapage_get_blocks failed
[  115.013611][ T5901] usb 3-1: config 0 descriptor??
[  115.020399][ T5837] JFS: metapage_get_blocks failed
[  115.030375][   T30] usb 6-1: SerialNumber: syz
[  115.047064][ T5837] JFS: metapage_get_blocks failed
[  115.069960][ T5837] JFS: metapage_get_blocks failed
[  115.077349][ T5840] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  115.079628][   T30] usb 6-1: 0:2 : does not exist
[  115.124249][ T6181] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  115.154672][ T6181] usb 5-1: device descriptor read/8, error -71
[  115.236401][ T5901] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  115.282841][ T6181] usb usb5-port1: unable to enumerate USB device
[  115.291466][   T30] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  115.379423][ T6316] netlink: 'syz.3.82': attribute type 13 has an invalid length.
[  115.419715][ T6316] netlink: 'syz.3.82': attribute type 17 has an invalid length.
[  115.717644][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.725648][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.730228][   T30] usb 6-1: USB disconnect, device number 5
[  115.911325][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.422534][ T6181] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  116.487256][ T5901] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  116.512634][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  116.542019][ T5901] usb 3-1: USB disconnect, device number 3
[  116.581809][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.594752][ T6181] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.618078][ T6181] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  116.641437][ T6318] loop1: detected capacity change from 0 to 40427
[  116.649306][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.650676][ T6181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.669528][ T6318] F2FS-fs: heap/no_heap options were deprecated
[  116.688523][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.702360][ T6181] usb 1-1: config 0 descriptor??
[  116.717383][    T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  116.719097][ T6318] F2FS-fs (loop1): build fault injection rate: 16
[  116.749493][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.755285][ T6181] pwc: Askey VC010 type 2 USB webcam detected.
[  116.772097][ T6318] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  116.787574][ T6318] F2FS-fs (loop1): invalid crc value
[  116.793243][    T9] usb 6-1: config 0 descriptor??
[  116.800333][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  116.833655][ T6318] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  116.889949][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  117.096562][ T6327] loop4: detected capacity change from 0 to 40427
[  117.149422][ T6327] F2FS-fs: heap/no_heap options were deprecated
[  117.158522][ T6327] F2FS-fs (loop4): build fault injection rate: 16
[  117.161312][ T6181] pwc: recv_control_msg error -32 req 02 val 2b00
[  117.168086][ T6327] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  117.187805][ T6327] F2FS-fs (loop4): invalid crc value
[  117.205009][ T6327] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  117.222253][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  117.229982][ T6181] pwc: recv_control_msg error -32 req 02 val 2700
[  117.231958][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  117.254300][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  117.268910][ T6181] pwc: recv_control_msg error -32 req 02 val 2c00
[  117.274021][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  117.297586][ T6318] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.299752][ T6181] pwc: recv_control_msg error -32 req 04 val 1000
[  117.317982][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  117.333655][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  117.341707][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  117.353073][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  117.361480][ T6181] pwc: recv_control_msg error -32 req 04 val 1300
[  117.361768][ T6318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.375632][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[  117.387734][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  117.389547][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[  117.403054][ T6181] pwc: recv_control_msg error -32 req 04 val 1400
[  117.421380][ T6181] pwc: recv_control_msg error -32 req 02 val 2000
[  117.423356][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[  117.431041][ T6181] pwc: recv_control_msg error -32 req 02 val 2100
[  117.445760][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[  117.465901][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[  117.478203][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  117.487303][ T6181] pwc: recv_control_msg error -32 req 04 val 1500
[  117.490537][ T6181] pwc: recv_control_msg error -32 req 02 val 2500
[  117.492568][ T6181] pwc: recv_control_msg error -71 req 02 val 2400
[  117.539463][ T6318] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x181/0x600
[  117.544036][ T6181] pwc: recv_control_msg error -71 req 02 val 2600
[  117.558821][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  117.570973][ T6181] pwc: recv_control_msg error -71 req 02 val 2900
[  117.582859][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  117.591775][ T6181] pwc: recv_control_msg error -71 req 02 val 2800
[  117.607461][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  117.625548][ T6327] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.631544][ T6181] pwc: recv_control_msg error -71 req 04 val 1100
[  117.644524][    T9] pwc: Registered as video103.
[  117.646868][ T6344] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  117.669161][ T6327] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  117.677202][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  117.678575][ T6181] pwc: recv_control_msg error -71 req 04 val 1200
[  117.716293][ T6181] videodev: could not get a free minor
[  117.716458][ T6318] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80
[  117.721885][ T6181] pwc: Failed to register as video device (-23).
[  117.738701][ T6181] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -23
[  117.761662][    T9] usb 6-1: USB disconnect, device number 6
[  117.808517][ T6327] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cf/0x6a0
[  117.840708][ T6181] usb 1-1: USB disconnect, device number 4
[  117.861327][ T6344] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060
[  117.882080][ T6347] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  118.183754][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  118.183790][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  118.183805][ T5840] Call Trace:
[  118.183814][ T5840]  <TASK>
[  118.183824][ T5840]  dump_stack_lvl+0xe8/0x150
[  118.183867][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[  118.183915][ T5840]  f2fs_write_inode+0x3ba/0x5f0
[  118.183955][ T5840]  __writeback_single_inode+0x75a/0x10e0
[  118.183996][ T5840]  writeback_single_inode+0x4ac/0xdc0
[  118.184051][ T5840]  sync_inode_metadata+0x122/0x1d0
[  118.184079][ T5840]  ? __pfx_sync_inode_metadata+0x10/0x10
[  118.184148][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184181][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184214][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184245][ T5840]  ? do_raw_spin_unlock+0xf5/0x210
[  118.184277][ T5840]  f2fs_write_checkpoint+0xb93/0x26a0
[  118.184308][ T5840]  ? __lock_acquire+0x6b5/0x2cf0
[  118.184375][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  118.184405][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184494][ T5840]  kill_f2fs_super+0x314/0x720
[  118.184530][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[  118.184574][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184603][ T5840]  ? lockdep_hardirqs_on+0x7a/0x110
[  118.184641][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.184685][ T5840]  deactivate_locked_super+0xbc/0x130
[  118.184721][ T5840]  cleanup_mnt+0x437/0x4d0
[  118.184756][ T5840]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.184796][ T5840]  task_work_run+0x1d9/0x270
[  118.184827][ T5840]  ? __pfx_task_work_run+0x10/0x10
[  118.184863][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.184890][ T5840]  exit_to_user_mode_loop+0xed/0x480
[  118.184920][ T5840]  ? rcu_is_watching+0x15/0xb0
[  118.184957][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.184984][ T5840]  do_syscall_64+0x33e/0xf80
[  118.185027][ T5840]  ? trace_irq_disable+0x3b/0x140
[  118.185060][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.185085][ T5840] RIP: 0033:0x7fc7b859da57
[  118.185107][ T5840] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.185127][ T5840] RSP: 002b:00007ffd587cd698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.185152][ T5840] RAX: 0000000000000000 RBX: 00007fc7b8632048 RCX: 00007fc7b859da57
[  118.185169][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd587cd750
[  118.185184][ T5840] RBP: 00007ffd587cd750 R08: 00007ffd587ce750 R09: 00000000ffffffff
[  118.185201][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd587ce7e0
[  118.185217][ T5840] R13: 00007fc7b8632048 R14: 000000000001ccb3 R15: 00007ffd587ce820
[  118.185255][ T5840]  </TASK>
[  118.185323][ T5840] F2FS-fs (loop1): Stopped filesystem due to reason: 5
[  118.472910][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  118.472944][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  118.472959][ T5822] Call Trace:
[  118.472968][ T5822]  <TASK>
[  118.472978][ T5822]  dump_stack_lvl+0xe8/0x150
[  118.473019][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.473025][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  118.473072][ T5822]  __write_node_folio+0x5dd/0x1a20
[  118.473128][ T5822]  ? __pfx___write_node_folio+0x10/0x10
[  118.473178][ T5822]  ? f2fs_inode_chksum_set+0x13e/0x640
[  118.473213][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473252][ T5822]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  118.473282][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473310][ T5822]  ? folio_clear_dirty_for_io+0x570/0x710
[  118.473342][ T5822]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  118.473377][ T5822]  f2fs_sync_node_pages+0xeb4/0x1680
[  118.473438][ T5822]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  118.473515][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473554][ T5822]  f2fs_write_checkpoint+0xeb8/0x26a0
[  118.473584][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  118.473652][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  118.473681][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473778][ T5822]  kill_f2fs_super+0x314/0x720
[  118.473814][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  118.473857][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473886][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[  118.473923][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.473967][ T5822]  deactivate_locked_super+0xbc/0x130
[  118.474004][ T5822]  cleanup_mnt+0x437/0x4d0
[  118.474039][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.474078][ T5822]  task_work_run+0x1d9/0x270
[  118.474109][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  118.474145][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.474173][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  118.474202][ T5822]  ? rcu_is_watching+0x15/0xb0
[  118.474239][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.474266][ T5822]  do_syscall_64+0x33e/0xf80
[  118.474303][ T5822]  ? trace_irq_disable+0x3b/0x140
[  118.474336][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.474361][ T5822] RIP: 0033:0x7f8498b9da57
[  118.474383][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.474402][ T5822] RSP: 002b:00007ffccbfa2638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.474426][ T5822] RAX: 0000000000000000 RBX: 00007f8498c32048 RCX: 00007f8498b9da57
[  118.474443][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccbfa26f0
[  118.474458][ T5822] RBP: 00007ffccbfa26f0 R08: 00007ffccbfa36f0 R09: 00000000ffffffff
[  118.474474][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccbfa3780
[  118.474490][ T5822] R13: 00007f8498c32048 R14: 000000000001cd5a R15: 00007ffccbfa37c0
[  118.474528][ T5822]  </TASK>
[  118.475722][ T5822] F2FS-fs (loop4): Stopped filesystem due to reason: 9
[  118.485748][ T6316] 8021q: adding VLAN 0 to HW filter on device team0
[  118.626304][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  118.883320][ T6316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.017371][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.061700][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.080526][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.109830][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.212633][    T9] usb 1-1: Using ep0 maxpacket: 16
[  119.238027][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  119.265158][    T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  119.286106][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.314300][    T9] usb 1-1: Product: syz
[  119.322533][    T9] usb 1-1: Manufacturer: syz
[  119.333093][    T9] usb 1-1: SerialNumber: syz
[  119.586441][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  119.985980][ T6353] loop5: detected capacity change from 0 to 32768
[  119.992283][    T9] gspca_vc032x: reg_w err -71
[  119.997314][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.004123][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.020284][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.035842][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.048572][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.075013][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.087509][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.100064][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.111988][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.144654][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.170154][ T6359] loop4: detected capacity change from 0 to 32768
[  120.173238][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.212379][ T6359] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.93 (6359)
[  120.234206][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.259826][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.302391][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.319824][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.336024][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.349666][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.361528][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.364694][ T6359] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.378570][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  120.384039][ T6359] BTRFS info (device loop4): using blake2b checksum algorithm
[  120.399207][    T9] gspca_vc032x: Unknown sensor...
[  120.440124][    T9] vc032x 1-1:12.0: probe with driver vc032x failed with error -22
[  120.462098][    T9] usb 1-1: USB disconnect, device number 5
[  120.648926][ T6359] BTRFS info (device loop4): enabling ssd optimizations
[  120.712165][ T6359] BTRFS info (device loop4): turning on async discard
[  120.769088][ T6359] BTRFS info (device loop4): enabling free space tree
[  120.808404][ T6359] BTRFS info (device loop4): use zstd compression, level 3
[  120.942353][   T31] audit: type=1800 audit(1776333594.776:5): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.93" name="file1" dev="loop4" ino=260 res=0 errno=0
[  120.980518][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  121.155640][    T9] usb 2-1: Using ep0 maxpacket: 16
[  121.175820][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  121.210221][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.278796][    T9] usb 2-1: config 0 descriptor??
[  121.310864][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  121.892773][ T5822] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  122.222977][ T5893] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  122.372727][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  122.386313][ T5893] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  122.402347][ T5893] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  122.438291][ T5893] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  122.466072][ T5893] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  122.503878][ T5893] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  122.524543][ T6382] loop0: detected capacity change from 0 to 32768
[  122.536400][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.600617][ T5893] usbtmc 6-1:16.0: bulk endpoints not found
[  122.614188][ T6382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.96 (6382)
[  122.697618][ T6382] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.732650][ T6382] BTRFS info (device loop0): using sha256 checksum algorithm
[  122.808432][ T5893] usb 6-1: USB disconnect, device number 7
[  122.925379][ T6382] BTRFS info (device loop0): rebuilding free space tree
[  123.114604][ T6382] BTRFS info (device loop0): enabling ssd optimizations
[  123.151459][ T6382] BTRFS info (device loop0): using spread ssd allocation scheme
[  123.185163][ T6382] BTRFS info (device loop0): turning on async discard
[  123.228336][ T6382] BTRFS info (device loop0): enabling free space tree
[  123.242580][ T6382] BTRFS info (device loop0): force clearing of disk cache
[  123.377575][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.862568][   T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  123.869762][ T6324] Set syz1 is full, maxelem 65536 reached
[  123.964893][ T6388] loop4: detected capacity change from 0 to 40427
[  123.981810][ T6388] F2FS-fs: heap/no_heap options were deprecated
[  124.036536][   T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.036542][ T6388] F2FS-fs (loop4): build fault injection rate: 16
[  124.036592][   T30] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  124.080244][ T6388] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  124.116665][ T6388] F2FS-fs (loop4): invalid crc value
[  124.143882][    T9] gspca_sonixj: reg_w err -71
[  124.153804][    T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  124.173439][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.176862][ T6388] f2fs_printk: 18 callbacks suppressed
[  124.176878][ T6388] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  124.205714][    T9] usb 2-1: USB disconnect, device number 4
[  124.257689][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  124.284272][   T30] usb 6-1: config 0 descriptor??
[  124.293316][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  124.320335][   T30] pwc: Askey VC010 type 2 USB webcam detected.
[  124.433962][ T6388] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.468481][ T5893] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  124.482629][ T6388] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  124.491773][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.511881][ T5893] usb 1-1: Product: syz
[  124.521219][ T6388] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x181/0x600
[  124.532855][ T5893] usb 1-1: Manufacturer: syz
[  124.544172][ T5893] usb 1-1: SerialNumber: syz
[  124.571172][ T6388] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  124.607509][ T6388] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  124.657471][ T6388] F2FS-fs (loop4): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  124.767710][   T30] pwc: recv_control_msg error -32 req 02 val 2b00
[  124.958865][   T30] pwc: recv_control_msg error -32 req 02 val 2700
[  124.968435][ T6418] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xe0/0xb70
[  125.194972][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  125.243963][   T30] pwc: recv_control_msg error -32 req 02 val 2c00
[  125.272325][   T30] pwc: recv_control_msg error -32 req 04 val 1000
[  125.283089][   T30] pwc: recv_control_msg error -32 req 04 val 1300
[  125.296083][   T30] pwc: recv_control_msg error -32 req 04 val 1400
[  125.306208][ T5822] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __write_node_folio+0x5ba/0x1a20
[  125.325018][ T5822] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:245583,cpver:0,blkaddr:0]
[  125.339640][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  125.339668][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  125.339682][ T5822] Call Trace:
[  125.339691][ T5822]  <TASK>
[  125.339700][ T5822]  dump_stack_lvl+0xe8/0x150
[  125.339746][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  125.339802][ T5822]  __write_node_folio+0x5dd/0x1a20
[  125.339863][ T5822]  ? __pfx___write_node_folio+0x10/0x10
[  125.339916][ T5822]  ? f2fs_inode_chksum_set+0x13e/0x640
[  125.339951][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.339993][ T5822]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  125.340023][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.340052][ T5822]  ? folio_clear_dirty_for_io+0x570/0x710
[  125.340085][ T5822]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  125.340121][ T5822]  f2fs_sync_node_pages+0xeb4/0x1680
[  125.340188][ T5822]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  125.340276][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.340308][ T5822]  f2fs_write_checkpoint+0xeb8/0x26a0
[  125.340331][ T5822]  ? __lock_acquire+0x6b5/0x2cf0
[  125.340391][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  125.340413][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.340502][ T5822]  kill_f2fs_super+0x314/0x720
[  125.340537][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  125.340573][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.340595][ T5822]  ? lockdep_hardirqs_on+0x7a/0x110
[  125.340623][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[  125.340660][ T5822]  deactivate_locked_super+0xbc/0x130
[  125.340689][ T5822]  cleanup_mnt+0x437/0x4d0
[  125.340716][ T5822]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.340747][ T5822]  task_work_run+0x1d9/0x270
[  125.340777][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  125.340807][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.340828][ T5822]  exit_to_user_mode_loop+0xed/0x480
[  125.340850][ T5822]  ? rcu_is_watching+0x15/0xb0
[  125.340879][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.340900][ T5822]  do_syscall_64+0x33e/0xf80
[  125.340928][ T5822]  ? trace_irq_disable+0x3b/0x140
[  125.340955][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.340974][ T5822] RIP: 0033:0x7f8498b9da57
[  125.340991][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  125.341006][ T5822] RSP: 002b:00007ffccbfa2638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  125.341026][ T5822] RAX: 0000000000000000 RBX: 00007f8498c32048 RCX: 00007f8498b9da57
[  125.341038][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccbfa26f0
[  125.341050][ T5822] RBP: 00007ffccbfa26f0 R08: 00007ffccbfa36f0 R09: 00000000ffffffff
[  125.341062][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccbfa3780
[  125.341074][ T5822] R13: 00007f8498c32048 R14: 000000000001e92f R15: 00007ffccbfa37c0
[  125.341107][ T5822]  </TASK>
[  125.342022][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  125.343443][   T30] pwc: recv_control_msg error -32 req 02 val 2000
[  125.358143][ T5822] F2FS-fs (loop4): Stopped filesystem due to reason: 9
[  125.379769][   T30] pwc: recv_control_msg error -32 req 02 val 2100
[  125.383907][    T9] usb 3-1: Using ep0 maxpacket: 32
[  125.391480][   T30] pwc: recv_control_msg error -32 req 04 val 1500
[  125.757139][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  125.811799][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  125.842335][    T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  125.853978][    T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  125.862264][    T9] usb 3-1: Product: syz
[  125.869666][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'.
[  125.880583][    T9] usb 3-1: Manufacturer: syz
[  125.899183][    T9] usb 3-1: SerialNumber: syz
[  125.917287][    T9] usb 3-1: config 0 descriptor??
[  125.932222][ T6417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  125.948293][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[  125.955805][   T30] pwc: recv_control_msg error -71 req 02 val 2400
[  125.965857][   T30] pwc: recv_control_msg error -71 req 02 val 2600
[  125.977014][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[  125.985454][   T30] pwc: recv_control_msg error -71 req 02 val 2900
[  126.016064][   T30] pwc: recv_control_msg error -71 req 02 val 2800
[  126.047708][   T30] pwc: recv_control_msg error -71 req 04 val 1100
[  126.081658][   T30] pwc: recv_control_msg error -71 req 04 val 1200
[  126.112318][   T30] pwc: Registered as video103.
[  126.153676][   T30] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8
[  126.183611][   T30] usb 6-1: USB disconnect, device number 8
[  126.352954][    T9] usb 3-1: USB disconnect, device number 4
[  127.103584][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  127.172555][   T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  127.267072][ T6443] loop1: detected capacity change from 0 to 32768
[  127.273509][    T9] usb 6-1: Using ep0 maxpacket: 8
[  127.290538][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  127.311722][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  127.322945][ T5901] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  127.342838][   T30] usb 4-1: Using ep0 maxpacket: 16
[  127.351862][    T9] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  127.357146][   T30] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  127.379305][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.397078][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.413827][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.429376][   T30] usb 4-1: config 0 descriptor??
[  127.438570][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.456558][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  127.468978][   T30] gspca_main: sonixj-2.14.0 probing 0471:0327
[  127.480798][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  127.504488][    T9] usbtmc 6-1:16.0: bulk endpoints not found
[  127.514922][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.540058][ T5901] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  127.552782][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.562993][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  127.585324][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  127.609047][ T5901] usb 3-1: config 0 descriptor??
[  127.623894][ T5893] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  127.649520][ T5901] pwc: Askey VC010 type 2 USB webcam detected.
[  127.659452][ T5893] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  127.710605][ T5893] usb 1-1: USB disconnect, device number 6
[  127.744939][   T10] usb 6-1: USB disconnect, device number 9
[  128.002761][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  128.041783][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00
[  128.060342][ T5901] pwc: recv_control_msg error -32 req 02 val 2700
[  128.070583][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00
[  128.089335][ T5901] pwc: recv_control_msg error -32 req 04 val 1000
[  128.110492][ T5901] pwc: recv_control_msg error -32 req 04 val 1300
[  128.136161][ T5901] pwc: recv_control_msg error -32 req 04 val 1400
[  128.160571][ T5901] pwc: recv_control_msg error -32 req 02 val 2000
[  128.169703][ T5901] pwc: recv_control_msg error -32 req 02 val 2100
[  128.178012][ T5901] pwc: recv_control_msg error -32 req 04 val 1500
[  128.195021][ T5901] pwc: recv_control_msg error -71 req 02 val 2500
[  128.195071][ T5927] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  128.202023][ T5901] pwc: recv_control_msg error -71 req 02 val 2400
[  128.218905][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.229104][ T5927] usb 2-1: Product: syz
[  128.238476][ T5927] usb 2-1: Manufacturer: syz
[  128.242309][ T5901] pwc: recv_control_msg error -71 req 02 val 2600
[  128.243947][ T5927] usb 2-1: SerialNumber: syz
[  128.289945][ T5901] pwc: recv_control_msg error -71 req 02 val 2900
[  128.310711][ T5901] pwc: recv_control_msg error -71 req 02 val 2800
[  128.326183][ T5901] pwc: recv_control_msg error -71 req 04 val 1100
[  128.363965][ T5901] pwc: recv_control_msg error -71 req 04 val 1200
[  128.406039][ T5901] pwc: Registered as video103.
[  128.432881][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  128.505669][ T5901] usb 3-1: USB disconnect, device number 5
[  128.557897][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.118'.
[  128.724609][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  128.776139][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  129.264120][ T6458] loop0: detected capacity change from 0 to 32768
[  129.321195][ T6458] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  129.418842][ T6458] XFS (loop0): Ending clean mount
[  129.684773][ T5837] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  129.712495][   T30] gspca_sonixj: i2c_w8 err -71
[  129.734385][   T30] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  129.811682][   T30] usb 4-1: USB disconnect, device number 9
[  129.932341][ T6466] loop2: detected capacity change from 0 to 40427
[  129.970375][ T6466] F2FS-fs: heap/no_heap options were deprecated
[  130.018721][ T6466] F2FS-fs (loop2): build fault injection rate: 16
[  130.051640][ T6466] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  130.095873][ T6466] F2FS-fs (loop2): invalid crc value
[  130.135732][ T6466] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  130.200003][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  130.282853][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  130.463360][    T9] usb 1-1: Using ep0 maxpacket: 16
[  130.496977][    T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  130.515452][ T6466] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.542544][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.561729][ T6466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  130.584850][    T9] usb 1-1: config 0 descriptor??
[  130.612313][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  130.633621][ T6466] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cf/0x6a0
[  130.640445][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  130.657036][ T6466] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  130.671977][ T6466] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  130.688962][ T6466] F2FS-fs (loop2): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  130.730882][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  130.735969][ T6487] F2FS-fs (loop2): inject page get in f2fs_filemap_get_folio of __f2fs_find_entry+0x7ba/0xf10
[  130.785334][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  130.822886][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  130.854833][ T5927] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  130.889240][ T6466] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[  130.918358][ T5927] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  130.974352][ T6466] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_update_inode_page+0x83/0x2e0
[  131.022731][ T5927] usb 2-1: USB disconnect, device number 5
[  131.055805][ T6476] loop5: detected capacity change from 0 to 32768
[  131.089414][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'.
[  131.119667][ T6476] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.121 (6476)
[  131.140072][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'.
[  131.181609][    C0] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_io+0x8ec/0x1740
[  131.200529][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'.
[  131.285859][ T6476] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  131.321293][ T6476] BTRFS info (device loop5): using blake2b checksum algorithm
[  131.488977][ T6476] BTRFS info (device loop5): enabling ssd optimizations
[  131.531450][ T6476] BTRFS info (device loop5): turning on async discard
[  131.577412][ T6476] BTRFS info (device loop5): enabling free space tree
[  131.626717][ T6476] BTRFS info (device loop5): use zstd compression, level 3
[  131.698944][   T31] audit: type=1800 audit(1776333605.536:6): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.121" name="file1" dev="loop5" ino=260 res=0 errno=0
[  131.872993][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  132.061708][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  132.073012][ T5838] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  132.088969][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  132.097409][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  132.107403][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.147582][   T10] usb 4-1: Product: syz
[  132.185917][   T10] usb 4-1: Manufacturer: syz
[  132.220261][   T10] usb 4-1: SerialNumber: syz
[  132.689872][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'.
[  132.709797][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  132.747582][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  132.828401][ T6514] loop4: detected capacity change from 0 to 32768
[  132.937502][ T6511] loop1: detected capacity change from 0 to 32768
[  133.401951][ T6531] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.136'.
[  133.442743][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  133.528943][    T9] gspca_sonixj: reg_w err -71
[  133.549308][    T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  133.554915][ T6525] loop2: detected capacity change from 0 to 32768
[  133.600648][    T9] usb 1-1: USB disconnect, device number 7
[  133.624609][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.659316][ T5893] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  133.700030][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.753916][ T5893] usb 5-1: config 0 descriptor??
[  133.790505][ T5893] pwc: Askey VC010 type 2 USB webcam detected.
[  133.906215][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[  133.923217][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[  134.184424][ T5927] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  134.190412][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00
[  134.204237][ T5893] pwc: recv_control_msg error -32 req 02 val 2700
[  134.221194][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00
[  134.230571][ T5893] pwc: recv_control_msg error -32 req 04 val 1000
[  134.245677][ T5893] pwc: recv_control_msg error -32 req 04 val 1300
[  134.255099][ T5893] pwc: recv_control_msg error -32 req 04 val 1400
[  134.262776][ T5893] pwc: recv_control_msg error -32 req 02 val 2000
[  134.270995][ T5893] pwc: recv_control_msg error -32 req 02 val 2100
[  134.281293][ T5893] pwc: recv_control_msg error -32 req 04 val 1500
[  134.290180][ T5893] pwc: recv_control_msg error -32 req 02 val 2500
[  134.299145][ T5893] pwc: recv_control_msg error -32 req 02 val 2400
[  134.307986][ T5893] pwc: recv_control_msg error -32 req 02 val 2600
[  134.367223][ T5927] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  134.376743][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.387718][ T5927] usb 6-1: Product: syz
[  134.391985][ T5927] usb 6-1: Manufacturer: syz
[  134.398876][ T5927] usb 6-1: SerialNumber: syz
[  134.401261][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO
[  134.417893][ T5927] usb 6-1: config 0 descriptor??
[  134.426113][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  134.439203][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.448894][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  134.463076][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  134.474555][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  134.488554][   T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  134.505966][   T10] usb 4-1: USB disconnect, device number 10
[  134.517514][ T5893] pwc: recv_control_msg error -71 req 02 val 2800
[  134.539038][ T6542] loop2: detected capacity change from 0 to 32768
[  134.555310][ T5893] pwc: recv_control_msg error -71 req 04 val 1100
[  134.575373][ T5893] pwc: recv_control_msg error -71 req 04 val 1200
[  134.605363][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  134.616811][ T5893] pwc: Registered as video103.
[  134.621643][ T6542] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.636241][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.645268][ T5927] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  134.647168][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  134.663952][    T9] usb 1-1: Product: syz
[  134.668167][    T9] usb 1-1: Manufacturer: syz
[  134.673007][    T9] usb 1-1: SerialNumber: syz
[  134.728700][ T5893] usb 5-1: USB disconnect, device number 10
[  134.736201][ T6542] XFS (loop2): Ending clean mount
[  134.859371][ T5831] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  135.140335][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  135.174177][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  135.202770][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'.
[  135.462369][ T6562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.833499][ T6557] loop2: detected capacity change from 0 to 32768
[  135.844861][ T6557] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.142 (6557)
[  135.882079][ T5927] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  135.917324][ T6557] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  135.934173][ T5927] usb 6-1: USB disconnect, device number 10
[  135.959225][ T6557] BTRFS info (device loop2): using blake2b checksum algorithm
[  135.963934][ T6558] loop1: detected capacity change from 0 to 32768
[  136.107120][ T6567] loop4: detected capacity change from 0 to 32768
[  136.149024][ T6557] BTRFS info (device loop2): enabling ssd optimizations
[  136.156702][ T6567] (syz.4.147,6567,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  136.157005][ T6557] BTRFS info (device loop2): turning on async discard
[  136.177387][ T6557] BTRFS info (device loop2): enabling free space tree
[  136.184850][ T6557] BTRFS info (device loop2): use zstd compression, level 3
[  136.199802][ T6567] (syz.4.147,6567,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  136.283694][   T31] audit: type=1800 audit(1776333610.126:7): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.142" name="file1" dev="loop2" ino=260 res=0 errno=0
[  136.377711][ T6567] JBD2: Ignoring recovery information on journal
[  136.629872][ T6567] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  136.665433][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  136.719152][  T748] ocfs2: Finishing quota recovery on device (7,4) for slot 0
[  136.735534][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  136.796314][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  136.837211][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  136.867400][ T5831] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.870522][    T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  136.898283][ T5927] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  136.938899][    T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  137.033899][    T9] usb 1-1: USB disconnect, device number 8
[  137.096052][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short
[  137.154701][ T5927] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  137.212131][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  137.253019][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.271408][ T5927] usb 4-1: Product: syz
[  137.279916][ T5822] ocfs2: Unmounting device (7,4) on (node local)
[  137.290782][ T5927] usb 4-1: Manufacturer: syz
[  137.303429][ T5927] usb 4-1: SerialNumber: syz
[  137.433769][ T6181] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  137.441597][   T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  137.556678][ T5927] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  137.624990][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.654383][ T6181] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  137.673100][   T29] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  137.682355][ T6181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.712580][ T6181] usb 6-1: Product: syz
[  137.716908][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.730119][ T6181] usb 6-1: Manufacturer: syz
[  137.747499][ T6181] usb 6-1: SerialNumber: syz
[  137.756516][ T5927] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  137.766315][   T29] usb 3-1: config 0 descriptor??
[  137.792696][ T5927] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  137.810500][   T29] pwc: Askey VC010 type 2 USB webcam detected.
[  137.877927][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'.
[  138.158224][ T5927] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  138.204833][   T29] pwc: recv_control_msg error -32 req 02 val 2b00
[  138.230611][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  138.246338][   T29] pwc: recv_control_msg error -32 req 02 val 2700
[  138.265120][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  138.340525][ T5927] usb 4-1: USB disconnect, device number 11
[  138.350053][   T29] pwc: recv_control_msg error -32 req 02 val 2c00
[  138.398763][   T29] pwc: recv_control_msg error -32 req 04 val 1000
[  138.441368][   T29] pwc: recv_control_msg error -32 req 04 val 1300
[  138.477898][   T29] pwc: recv_control_msg error -32 req 04 val 1400
[  138.518757][   T29] pwc: recv_control_msg error -32 req 02 val 2000
[  138.556750][   T29] pwc: recv_control_msg error -32 req 02 val 2100
[  138.617597][   T29] pwc: recv_control_msg error -32 req 04 val 1500
[  138.644732][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.882571][   T29] pwc: recv_control_msg error -71 req 02 val 2400
[  138.914964][   T29] pwc: recv_control_msg error -71 req 02 val 2600
[  138.959930][   T29] pwc: recv_control_msg error -71 req 02 val 2900
[  139.006230][   T29] pwc: recv_control_msg error -71 req 02 val 2800
[  139.032384][   T29] pwc: recv_control_msg error -71 req 04 val 1100
[  139.061963][   T29] pwc: recv_control_msg error -71 req 04 val 1200
[  139.093171][   T29] pwc: Registered as video103.
[  139.135292][   T29] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11
[  139.255540][   T29] usb 3-1: USB disconnect, device number 6
[  139.264088][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  139.422680][    T9] usb 2-1: Using ep0 maxpacket: 32
[  139.429637][    T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  139.438126][    T9] usb 2-1: config 0 has no interface number 0
[  139.444333][    T9] usb 2-1: config 0 interface 184 has no altsetting 0
[  139.459230][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  139.517622][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  139.564805][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  139.830072][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  139.907333][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  139.959021][ T6181] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  140.009909][ T6181] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  140.023791][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.032616][    T9] usb 2-1: Product: syz
[  140.036804][    T9] usb 2-1: Manufacturer: syz
[  140.041764][    T9] usb 2-1: SerialNumber: syz
[  140.071011][    T9] usb 2-1: config 0 descriptor??
[  140.117926][ T6181] usb 6-1: USB disconnect, device number 11
[  140.331830][ T6626] loop4: detected capacity change from 0 to 32768
[  140.372283][ T6626] (syz.4.163,6626,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.431850][ T6626] (syz.4.163,6626,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.561281][ T6626] JBD2: Ignoring recovery information on journal
[  140.655246][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.171'.
[  140.700784][ T6626] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  140.725675][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  140.751933][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  140.771948][ T3562] ocfs2: Finishing quota recovery on device (7,4) for slot 0
[  141.142690][ T5822] ocfs2: Unmounting device (7,4) on (node local)
[  141.432893][ T6181] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  141.594915][ T6181] usb 6-1: Using ep0 maxpacket: 16
[  141.613875][ T6181] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.650678][ T6181] usb 6-1: config 0 interface 0 has no altsetting 0
[  141.685758][ T6181] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  141.713529][ T6181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.735563][ T6181] usb 6-1: Product: syz
[  141.741411][ T6181] usb 6-1: Manufacturer: syz
[  141.750177][ T6181] usb 6-1: SerialNumber: syz
[  141.774150][ T6181] usb 6-1: config 0 descriptor??
[  141.826858][ T6659] Process accounting resumed
[  141.883031][ T5901] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  142.022239][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  142.047107][ T6181] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12
[  142.076948][ T5901] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  142.084135][ T6181] imon:send_packet: packet tx failed (-71)
[  142.085575][ T5901] usb 5-1: config 0 has no interface number 0
[  142.102617][ T6181] imon 6-1:0.0: panel buttons/knobs setup failed
[  142.142566][ T5901] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  142.255351][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[  142.366660][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[  142.510826][ T5901] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  142.679533][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  142.700041][    T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  142.716945][ T5901] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  142.743393][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.763610][    T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  142.778717][ T5901] usb 5-1: Product: syz
[  142.800160][ T5901] usb 5-1: Manufacturer: syz
[  142.809162][    T9] usb 2-1: USB disconnect, device number 6
[  142.844162][ T5901] usb 5-1: SerialNumber: syz
[  142.899009][ T5901] usb 5-1: config 0 descriptor??
[  142.923914][ T6661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  142.950809][ T6661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  142.963135][ T6181] rc_core: IR keymap rc-imon-pad not found
[  143.011809][ T6181] Registered IR keymap rc-empty
[  143.045811][ T6181] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  143.241925][ T6661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  143.311581][ T6661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  143.922792][ T6181] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  143.943844][ T6181] imon:send_packet: packet tx failed (-71)
[  144.795263][ T6181] imon 6-1:0.0: remote input dev register failed
[  145.044229][ T6181] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  145.056979][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  145.078511][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  145.093987][ T5901] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  145.161498][ T5901] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  145.231486][ T5901] usb 5-1: USB disconnect, device number 11
[  145.425977][ T6181] imon 6-1:0.0: unable to initialize intf0, err 0
[  145.455792][ T6181] imon:imon_probe: failed to initialize context!
[  145.495054][ T6181] imon 6-1:0.0: unable to register, err -19
[  145.546553][ T6181] usb 6-1: USB disconnect, device number 12
[  145.634913][ T6684] Zero length message leads to an empty skb
[  145.751553][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'.
[  145.902544][ T6181] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  146.422790][ T5927] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  146.483917][ T6678] loop4: detected capacity change from 0 to 32768
[  146.613968][ T5927] usb 4-1: Using ep0 maxpacket: 16
[  146.648534][ T5927] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  147.314763][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.333976][ T5927] usb 4-1: config 0 descriptor??
[  147.343095][ T6678] ------------[ cut here ]------------
[  147.374400][ T5927] gspca_main: sonixj-2.14.0 probing 0471:0327
[  147.385751][ T6678] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1601:11
[  147.429581][ T6678] index 26 is out of range for type 'struct lv[20]'
[  147.473241][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) 
[  147.473277][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  147.473295][ T6678] Call Trace:
[  147.473305][ T6678]  <TASK>
[  147.473316][ T6678]  dump_stack_lvl+0xe8/0x150
[  147.473360][ T6678]  ubsan_epilogue+0xa/0x30
[  147.473387][ T6678]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  147.473435][ T6678]  dtSplitPage+0x359c/0x37c0
[  147.473539][ T6678]  dtInsert+0x10a4/0x5f10
[  147.473595][ T6678]  ? kasan_quarantine_put+0xbb/0x1f0
[  147.473630][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.473661][ T6678]  ? lockdep_hardirqs_on+0x7a/0x110
[  147.473700][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.473745][ T6678]  ? __pfx_dtInsert+0x10/0x10
[  147.473775][ T6678]  ? dtSearch+0x1d29/0x21b0
[  147.473847][ T6678]  jfs_mknod+0x6bd/0x9d0
[  147.473892][ T6678]  ? __pfx_jfs_mknod+0x10/0x10
[  147.473972][ T6678]  ? __sanitizer_cov_trace_pc+0x49/0x70
[  147.474015][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.474051][ T6678]  ? security_inode_mknod+0xc2/0x330
[  147.474090][ T6678]  vfs_mknod+0x447/0x610
[  147.474138][ T6678]  filename_mknodat+0x3cb/0x660
[  147.474184][ T6678]  ? __pfx_filename_mknodat+0x10/0x10
[  147.474225][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.474254][ T6678]  ? do_getname+0x151/0x250
[  147.474281][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.474308][ T6678]  __se_sys_mknod+0x3a/0x150
[  147.474347][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.474375][ T6678]  do_syscall_64+0x15f/0xf80
[  147.474413][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.474448][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.474474][ T6678] RIP: 0033:0x7f8498b9c819
[  147.474496][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.474517][ T6678] RSP: 002b:00007f8499af4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  147.474544][ T6678] RAX: ffffffffffffffda RBX: 00007f8498e15fa0 RCX: 00007f8498b9c819
[  147.474562][ T6678] RDX: 0000000000000709 RSI: 0000000000001000 RDI: 0000200000000080
[  147.474579][ T6678] RBP: 00007f8498c32c91 R08: 0000000000000000 R09: 0000000000000000
[  147.474595][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.474610][ T6678] R13: 00007f8498e16038 R14: 00007f8498e15fa0 R15: 00007ffccbfa33c8
[  147.474649][ T6678]  </TASK>
[  147.481303][ T6678] ---[ end trace ]---
[  148.358491][ T6678] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  148.365760][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) 
[  148.374989][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  148.385064][ T6678] Call Trace:
[  148.388350][ T6678]  <TASK>
[  148.391285][ T6678]  vpanic+0x56c/0xa60
[  148.395298][ T6678]  ? __pfx_vpanic+0x10/0x10
[  148.399823][ T6678]  ? irqentry_exit+0x218/0x730
[  148.404709][ T6678]  panic+0xc5/0xd0
[  148.408473][ T6678]  ? __pfx_panic+0x10/0x10
[  148.412915][ T6678]  ? __pfx__printk+0x10/0x10
[  148.417526][ T6678]  check_panic_on_warn+0x89/0xb0
[  148.422480][ T6678]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[  148.428266][ T6678]  dtSplitPage+0x359c/0x37c0
[  148.432946][ T6678]  dtInsert+0x10a4/0x5f10
[  148.437328][ T6678]  ? kasan_quarantine_put+0xbb/0x1f0
[  148.442643][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  148.448298][ T6678]  ? lockdep_hardirqs_on+0x7a/0x110
[  148.453528][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  148.459239][ T6678]  ? __pfx_dtInsert+0x10/0x10
[  148.463969][ T6678]  ? dtSearch+0x1d29/0x21b0
[  148.468535][ T6678]  jfs_mknod+0x6bd/0x9d0
[  148.472819][ T6678]  ? __pfx_jfs_mknod+0x10/0x10
[  148.477664][ T6678]  ? __sanitizer_cov_trace_pc+0x49/0x70
[  148.483241][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  148.488889][ T6678]  ? security_inode_mknod+0xc2/0x330
[  148.494218][ T6678]  vfs_mknod+0x447/0x610
[  148.498673][ T6678]  filename_mknodat+0x3cb/0x660
[  148.503568][ T6678]  ? __pfx_filename_mknodat+0x10/0x10
[  148.508977][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  148.514631][ T6678]  ? do_getname+0x151/0x250
[  148.519150][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.525234][ T6678]  __se_sys_mknod+0x3a/0x150
[  148.529851][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.536020][ T6678]  do_syscall_64+0x15f/0xf80
[  148.540642][ T6678]  ? srso_alias_return_thunk+0x5/0xfbef5
[  148.546295][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.552208][ T6678] RIP: 0033:0x7f8498b9c819
[  148.556636][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.576345][ T6678] RSP: 002b:00007f8499af4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  148.584795][ T6678] RAX: ffffffffffffffda RBX: 00007f8498e15fa0 RCX: 00007f8498b9c819
[  148.592797][ T6678] RDX: 0000000000000709 RSI: 0000000000001000 RDI: 0000200000000080
[  148.600787][ T6678] RBP: 00007f8498c32c91 R08: 0000000000000000 R09: 0000000000000000
[  148.608784][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.616776][ T6678] R13: 00007f8498e16038 R14: 00007f8498e15fa0 R15: 00007ffccbfa33c8
[  148.624790][ T6678]  </TASK>
[  148.628279][ T6678] Kernel Offset: disabled
[  148.632648][ T6678] Rebooting in 86400 seconds..