last executing test programs:

18.736166924s ago: executing program 0 (id=392):
recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {&(0x7f0000001cc0)=""/105, 0x69}], 0x2}, 0x100}], 0x1, 0x2, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300)

13.294146341s ago: executing program 0 (id=407):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xf4ff)

11.835373357s ago: executing program 1 (id=414):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48)

10.500650403s ago: executing program 5 (id=417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000040ffffffffffff0800452e0038006a0000080190780a010102ac14141705949078ac1414bb457f0501006607f2480100097f0000017f00000100000000000000007d52a2e26387c2eb3cbb34138e044ec3ca566818eaeaf4de6a4ebca1f1032ae347cdf77398606f2a5a"], 0x0)
writev(r0, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x2d, 0xfffff7e4, 0x73f, 0x6]}, &(0x7f0000000000)=0x54)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)

10.006429827s ago: executing program 2 (id=418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002280)=@newtaction={0x14, 0x31, 0x109, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0)

9.945442095s ago: executing program 0 (id=419):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

9.8725083s ago: executing program 3 (id=420):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCGSID(r0, 0x5429, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)

9.640567792s ago: executing program 2 (id=421):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.541228661s ago: executing program 1 (id=422):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x8f7be000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000007427000000000001000000024e2100020a0000001d010000", @ANYRES32=0x0, @ANYBLOB], 0x16c}}, 0x48080)
bind$bt_l2cap(r4, &(0x7f0000000400), 0xe)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r4, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25070000000c000600000000000000000008000100030000000a0004007770616e34000000080003000d22859843af22e6882a0004237802aefabd95078c1024372b3710da1be50c1793d9ddf3b65d11ef01d0ab93a45a2cc590f65bc5c65c8ad93171750c451376621b1441fb4f18fdf7", @ANYRES32=r11, @ANYBLOB="0800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
r12 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r1, 0x3d810686a7d95765, 0x70bd2d, 0x25dfdb75, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300))

9.259062135s ago: executing program 2 (id=423):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
pipe2$watch_queue(&(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x80)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0xa, 0x0, 0x6, 0x0, 0x7, 0x470240})
r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(0x0, 0x103)
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0)
creat(&(0x7f0000002280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r3)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)

6.568323389s ago: executing program 4 (id=424):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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")
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9})
openat(0xffffffffffffff9c, 0x0, 0x0, 0xd296895ede2f911a)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)

4.958346378s ago: executing program 2 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1ce}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9a1bffdda8d29b21)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x14c0a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

4.956201151s ago: executing program 3 (id=426):
r0 = timerfd_create(0x0, 0x0)
syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, 0x0, &(0x7f0000000240)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

4.792535233s ago: executing program 5 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040)

4.723838498s ago: executing program 4 (id=428):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

4.589465192s ago: executing program 0 (id=429):
capset(&(0x7f0000000580)={0x19980330}, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

3.907126731s ago: executing program 5 (id=430):
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x7, 0x100000007e, 0x0, 0x3, 0x1, 0x0, [{0x6, 0x8, 0x8, '\x00', 0x400}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000)

3.787708498s ago: executing program 2 (id=431):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xf4ff)

3.718917811s ago: executing program 3 (id=432):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000525000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4, 0x0, 0x0, 0x1, 0x24, 0x32, 0x10, 0x4})

3.709448569s ago: executing program 4 (id=433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002280)=@newtaction={0x14, 0x31, 0x109, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0)

3.612445317s ago: executing program 5 (id=434):
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r3, &(0x7f0000000000)={0x6, 0x2d, 0x1, 0x3a, 0x6, 0x2c}, 0x48)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303000000083ec4c0d6e84de0249d09f31ef580c3d000000000000000000"], 0x1, 0x191, &(0x7f00000002c0)="$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")
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000640)='./bus\x00', 0x2925009, 0x0, 0x40, 0x0, &(0x7f0000000500))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')
ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus/file0\x00', 0x200000, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0x38c2c5bc}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=")
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000003001980080001000d010000100001800c000280050001000100000000000000000000000000000200000000"], 0x30}, 0x1, 0x0, 0x0, 0x840c0}, 0x4000c0c0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x149)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='3', 0x1, 0x4fed0)
fallocate(r5, 0x10, 0xffff, 0x8001)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038014000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002400000000948000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800010062"], 0xfc}}, 0x0)

3.556766134s ago: executing program 1 (id=435):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.505305749s ago: executing program 4 (id=436):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0)
syz_io_uring_setup(0x52a, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x261, 0x0, r0}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fallocate(0xffffffffffffffff, 0x48, 0xfffffffffffffffe, 0x10002)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4085}, 0x8010)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}})

3.46077874s ago: executing program 3 (id=437):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111da000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

3.380132199s ago: executing program 1 (id=438):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48084)

1.87160075s ago: executing program 0 (id=439):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0)

1.1689395s ago: executing program 1 (id=440):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)

1.166295107s ago: executing program 4 (id=441):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640), 0x0, 0x0)

991.749688ms ago: executing program 3 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38)

981.111632ms ago: executing program 5 (id=443):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0x10ab, 0x0, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}})
io_uring_enter(r1, 0x1c82, 0x0, 0x40, 0x0, 0x0)

930.586107ms ago: executing program 4 (id=444):
r0 = timerfd_create(0x0, 0x0)
syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, 0x0, &(0x7f0000000240)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

871.8947ms ago: executing program 0 (id=445):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$dsp(r1, &(0x7f0000000280)='\x00', 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x3, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0x2, 0x1})
close(r1)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0)

871.710771ms ago: executing program 1 (id=446):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000800)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

254.031923ms ago: executing program 5 (id=447):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x8f7be000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000007427000000000001000000024e2100020a0000001d010000", @ANYRES32=0x0, @ANYBLOB], 0x16c}}, 0x48080)
bind$bt_l2cap(r4, &(0x7f0000000400), 0xe)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r4, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25070000000c000600000000000000000008000100030000000a0004007770616e34000000080003000d22859843af22e6882a0004237802aefabd95078c1024372b3710da1be50c1793d9ddf3b65d11ef01d0ab93a45a2cc590f65bc5c65c8ad93171750c451376621b1441fb4f18fdf7", @ANYRES32=r11, @ANYBLOB="0800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
r12 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r1, 0x3d810686a7d95765, 0x70bd2d, 0x25dfdb75, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300))

74.871413ms ago: executing program 3 (id=448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30"], 0xac}}, 0x0)

0s ago: executing program 2 (id=449):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000400)=ANY=[@ANYBLOB='adinicb,uid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d30303030303030303030303030303030303030322c696f636861727365743d6d6163637972696c6c69632c6769643d666f726765742c6769643d69672c6d6f64653deba5f0d0303030303030303030303030303030303030303030"], 0x1, 0xc59, &(0x7f0000001640)="$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")
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_TID={0xc}]}, 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = dup(r3)
r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x13c}, &(0x7f00000003c0)=<r9=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r8, 0x47f5, 0xf4, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

kernel console output (not intermixed with test programs):

mand tx timeout
[   87.849505][ T5838] Bluetooth: hci1: command tx timeout
[   87.855753][ T5836] Bluetooth: hci2: command tx timeout
[   87.861162][ T5836] Bluetooth: hci4: command tx timeout
[   87.887560][ T5820] veth1_macvtap: entered promiscuous mode
[   87.932607][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.940453][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.995479][   T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.033221][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.049239][ T5971] loop0: detected capacity change from 0 to 40427
[   88.060717][ T5971] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   88.068654][ T5971] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   88.085604][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.089754][ T5971] F2FS-fs (loop0): invalid crc value
[   88.117055][   T81] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.145034][   T81] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.214869][ T5971] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.216455][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.264821][ T5971] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   88.272041][ T5971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   88.331793][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.361492][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.387207][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.248876][ T5980] mmap: syz.4.5 (5980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.345796][   T30] audit: type=1800 audit(1774783873.696:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=10 res=0 errno=0
[   90.637563][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.663937][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.769954][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.793914][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.862558][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.871005][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.922972][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.946943][ T1001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.185372][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.223920][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.340430][ T5991] loop4: detected capacity change from 0 to 1024
[   91.383175][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.612766][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.637761][ T5991] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   91.665637][ T5993] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.735611][ T5991] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   91.858552][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.908616][ T5991] EXT4-fs (loop4): orphan cleanup on readonly fs
[   91.930412][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.993832][ T5991] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.9: Freeing blocks not in datazone - block = 0, count = 4096
[   92.137009][ T5991] loop4: lost filesystem error report for type 5 error -117
[   92.142505][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   92.156408][    C0] EXT4-fs (loop4): initial error at time 1774783876: ext4_free_blocks:6724
[   92.165033][    C0] EXT4-fs (loop4): last error at time 1774783876: ext4_free_blocks:6724
[   92.219014][ T5991] EXT4-fs (loop4): Remounting filesystem read-only
[   92.302136][ T5991] EXT4-fs (loop4): 1 orphan inode deleted
[   92.346949][ T5991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   92.374066][ T6001] loop2: detected capacity change from 0 to 1024
[   92.441103][ T5991] EXT4-fs (loop4): shut down requested (2)
[   92.497868][ T6001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.659557][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.675742][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.707146][ T6002] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.835459][ T6015] process 'syz.1.15' launched './file0' with NULL argv: empty string added
[   92.852145][ T6009] bond1: (slave geneve2): Enslaving as a backup interface with an up link
[   92.933903][ T3007] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.968262][ T6014] bridge1: entered allmulticast mode
[   93.073029][ T1001] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   94.071459][ T6038] geneve2: entered promiscuous mode
[   94.077117][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.863652][ T5968] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.073785][ T5968] usb 1-1: Using ep0 maxpacket: 16
[   95.101996][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short
[   95.113874][ T6041] loop5: detected capacity change from 0 to 131072
[   95.138185][ T5968] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[   95.163491][ T6041] F2FS-fs (loop5): Test dummy encryption mode enabled
[   95.180251][ T6041] F2FS-fs (loop5): invalid crc value
[   95.246775][ T5968] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   95.261358][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.272317][ T6041] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.280827][ T5968] usb 1-1: Product: syz
[   95.289719][ T6041] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   95.294868][ T5968] usb 1-1: Manufacturer: syz
[   95.298849][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short
[   95.314056][ T6041] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   95.324513][ T5968] usb 1-1: SerialNumber: syz
[   95.368798][ T5902] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[   95.378440][ T5902] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[   95.389200][ T5902] usb 2-1: config 63 has no interface number 0
[   95.399268][ T5902] usb 2-1: config 63 interface 66 has no altsetting 0
[   95.410569][ T6044] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   95.421419][ T5902] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[   95.432641][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.440812][ T5902] usb 2-1: Product: syz
[   95.467570][ T5902] usb 2-1: Manufacturer: syz
[   95.483404][ T5902] usb 2-1: SerialNumber: syz
[   95.700632][ T5968] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   95.729083][ T5968] usb 1-1: MIDIStreaming interface descriptor not found
[   95.775038][ T5902] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22
[   95.801431][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.26'.
[   95.822307][ T6058] netlink: 'syz.5.26': attribute type 7 has an invalid length.
[   95.833957][ T5902] usb 2-1: USB disconnect, device number 2
[   95.851351][ T6058] netlink: 'syz.5.26': attribute type 8 has an invalid length.
[   95.878521][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26'.
[   96.065180][ T5968] usb 1-1: USB disconnect, device number 2
[   96.332728][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.682552][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   96.754544][ T6079] netlink: 56 bytes leftover after parsing attributes in process `syz.1.32'.
[   96.868478][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   97.043248][ T5843] Bluetooth: hci4: command tx timeout
[   97.077073][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   97.194512][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   97.250038][ T5902] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[   97.276237][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.338814][ T5902] usb 6-1: Product: syz
[   97.362058][ T5902] usb 6-1: Manufacturer: syz
[   97.382544][ T5902] usb 6-1: SerialNumber: syz
[   97.435492][ T5902] usb 6-1: config 0 descriptor??
[   97.465243][ T6066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   97.522722][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   97.766406][ T5902] powermate: unknown product id 0240
[   98.392432][ T5902] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[   98.400826][ T6086] kAFS: unable to lookup cell '(,c¾ûL'
[   98.510921][ T5902] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5
[   98.550578][    C1] powermate: config urb returned -71
[   98.556176][    C1] powermate: config urb returned -71
[   98.561635][    C1] powermate: config urb returned -71
[   98.567079][    C1] powermate: config urb returned -71
[   98.673400][ T5902] usb 6-1: USB disconnect, device number 2
[   98.679300][    C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[   98.990052][ T6095] netlink: set zone limit has 8 unknown bytes
[   99.414117][ T5902] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   99.592666][ T5902] usb 6-1: Using ep0 maxpacket: 8
[   99.610191][ T5902] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   99.644818][ T5902] usb 6-1: config 0 has no interface number 0
[   99.667770][ T5902] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   99.708003][ T5902] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   99.739680][ T5902] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   99.768449][ T5902] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   99.781225][ T6102] loop3: detected capacity change from 0 to 64
[   99.792430][ T5902] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   99.820851][ T6091] loop4: detected capacity change from 0 to 32768
[   99.843481][ T6091] =======================================================
[   99.843481][ T6091] WARNING: The mand mount option has been deprecated and
[   99.843481][ T6091]          and is ignored by this kernel. Remove the mand
[   99.843481][ T6091]          option from the mount to silence this warning.
[   99.843481][ T6091] =======================================================
[   99.885046][ T5902] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   99.907978][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.971538][ T5902] usb 6-1: config 0 descriptor??
[  100.023361][ T5902] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  100.092048][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.092048][   T58] loop3: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  100.166675][   T58] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  100.206276][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.206276][   T58] loop3: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  100.244703][ T6097] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  100.262185][ T5968] usb 6-1: USB disconnect, device number 3
[  100.277102][   T58] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  100.292616][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.292616][   T58] loop3: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  100.338755][ T5968] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  100.369020][   T58] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  100.410310][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.410310][   T58] loop3: rw=8388609, sector=68, nr_sectors = 1 limit=64
[  100.498754][   T58] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  100.526508][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.526508][   T58] loop3: rw=8388609, sector=72, nr_sectors = 1 limit=64
[  100.569319][   T58] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  100.596842][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.596842][   T58] loop3: rw=8388609, sector=73, nr_sectors = 1 limit=64
[  100.645335][   T58] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  100.682591][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.682591][   T58] loop3: rw=8388609, sector=76, nr_sectors = 1 limit=64
[  100.729786][   T58] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  100.756828][ T6110] loop0: detected capacity change from 0 to 256
[  100.760093][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.760093][   T58] loop3: rw=8388609, sector=77, nr_sectors = 1 limit=64
[  100.787120][   T58] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  100.847328][   T58] kworker/u8:4: attempt to access beyond end of device
[  100.847328][   T58] loop3: rw=1, sector=78, nr_sectors = 91 limit=64
[  100.898951][ T6110] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72b37889, utbl_chksum : 0xe619d30d)
[  101.096952][ T6117] syzkaller0: entered promiscuous mode
[  101.102543][ T6117] syzkaller0: entered allmulticast mode
[  101.329903][ T6123] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.50'.
[  101.365854][  T791] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  101.892558][  T791] usb 5-1: Using ep0 maxpacket: 16
[  101.933351][  T791] usb 5-1: unable to get BOS descriptor or descriptor too short
[  101.951967][  T791] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  101.985036][  T791] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  102.005738][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.087586][  T791] usb 5-1: Product: syz
[  102.091789][  T791] usb 5-1: Manufacturer: syz
[  102.202399][  T791] usb 5-1: SerialNumber: syz
[  102.240669][ T6118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  102.518727][  T791] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  102.536009][  T791] usb 5-1: MIDIStreaming interface descriptor not found
[  103.396439][  T791] usb 5-1: USB disconnect, device number 2
[  103.457128][ T6150] syz.1.60 (6150) used greatest stack depth: 15400 bytes left
[  103.533864][ T6144] loop5: detected capacity change from 0 to 4096
[  103.573780][ T6155] ieee802154 phy0 wpan0: encryption failed: -22
[  103.622022][ T6156] loop4: detected capacity change from 0 to 256
[  103.678986][ T6156] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72b37889, utbl_chksum : 0xe619d30d)
[  103.771101][ T6056] udevd[6056]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.789582][ T6144] ntfs3(loop5): ino=21, "file1" mmap(write) compressed not supported
[  103.859351][ T6163] capability: warning: `syz.1.66' uses 32-bit capabilities (legacy support in use)
[  104.342764][ T6170] input: syz0 as /devices/virtual/input/input6
[  104.534477][ T6179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.72'.
[  104.663627][  T791] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  105.062476][  T791] usb 4-1: Using ep0 maxpacket: 32
[  105.074876][  T791] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  105.092458][  T791] usb 4-1: config 0 has no interface number 0
[  105.142572][  T791] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  105.154405][  T791] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  105.175257][  T791] usb 4-1: config 0 interface 89 has no altsetting 0
[  105.228670][  T791] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  105.246870][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.282447][  T791] usb 4-1: Product: syz
[  105.286666][  T791] usb 4-1: Manufacturer: syz
[  105.291347][  T791] usb 4-1: SerialNumber: syz
[  105.353887][  T791] usb 4-1: config 0 descriptor??
[  105.380207][  T791] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  105.407999][  T791] em28xx 4-1:0.89: Video interface 89 found: isoc
[  105.555994][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.629191][ T6047] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  105.795727][ T5917] usb 1-1: Using ep0 maxpacket: 32
[  106.030522][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.041750][ T6047] usb 2-1: Using ep0 maxpacket: 16
[  106.052571][ T5917] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  106.062508][ T6047] usb 2-1: unable to get BOS descriptor or descriptor too short
[  106.080602][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.082988][ T6189] Zero length message leads to an empty skb
[  106.105132][ T6047] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  106.108585][  T791] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  106.158824][ T5917] usb 1-1: config 0 descriptor??
[  106.188733][ T5917] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  106.196320][ T6047] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  106.208389][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.231636][  T791] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  106.235094][ T6047] usb 2-1: Product: syz
[  106.262507][ T6047] usb 2-1: Manufacturer: syz
[  106.267612][ T6047] usb 2-1: SerialNumber: syz
[  106.272707][  T791] em28xx 4-1:0.89: board has no eeprom
[  106.296561][ T6187] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  106.352717][  T791] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  106.370335][  T791] em28xx 4-1:0.89: analog set to isoc mode.
[  106.390866][ T5972] em28xx 4-1:0.89: Registering V4L2 extension
[  106.398150][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  106.438031][  T791] usb 4-1: USB disconnect, device number 2
[  106.454506][  T791] em28xx 4-1:0.89: Disconnecting em28xx
[  106.537970][ T6047] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  106.555841][ T6047] usb 2-1: MIDIStreaming interface descriptor not found
[  106.576232][ T5972] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  106.603193][ T5972] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  106.620852][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  106.644131][ T5972] em28xx 4-1:0.89: No AC97 audio processor
[  106.650896][   T24] usb 3-1: unable to read config index 0 descriptor/start: -71
[  106.670701][   T24] usb 3-1: can't read configurations, error -71
[  106.687731][ T5972] usb 4-1: Decoder not found
[  106.705417][ T5972] em28xx 4-1:0.89: failed to create media graph
[  106.731980][ T5972] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  106.770905][ T5972] em28xx 4-1:0.89: Registering snapshot button...
[  106.785948][ T6047] usb 2-1: USB disconnect, device number 3
[  106.807118][ T5972] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7
[  106.889437][ T5972] em28xx 4-1:0.89: Remote control support is not available for this card.
[  106.915005][  T791] em28xx 4-1:0.89: Closing input extension
[  106.935388][  T791] em28xx 4-1:0.89: Deregistering snapshot button
[  107.080788][  T791] em28xx 4-1:0.89: Freeing device
[  107.853503][ T6215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.87'.
[  108.025679][ T6218] loop2: detected capacity change from 0 to 8
[  108.103381][ T6218] SQUASHFS error: zlib decompression failed, data probably corrupt
[  108.112103][ T6218] SQUASHFS error: Failed to read block 0x9b: -5
[  108.118464][ T6218] SQUASHFS error: Unable to read metadata cache entry [99]
[  108.125754][ T6218] SQUASHFS error: Unable to read inode 0x127
[  108.680719][   T24] usb 1-1: USB disconnect, device number 3
[  108.876271][ T6223] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.89'.
[  108.906573][ T6200] loop3: detected capacity change from 0 to 32768
[  109.132498][ T6200] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  109.184522][ T6200] JBD2: Ignoring recovery information on journal
[  109.326778][ T6202] loop4: detected capacity change from 0 to 32768
[  109.435981][ T6200] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.521138][ T6202] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.792911][ T6202] XFS (loop4): Ending clean mount
[  109.886756][ T6202] XFS (loop4): Quotacheck needed: Please wait.
[  110.023608][ T5820] ocfs2: Unmounting device (7,3) on (node local)
[  110.059637][ T6202] XFS (loop4): Quotacheck: Done.
[  110.077619][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.114311][ T6248] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  110.156473][ T6249] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  110.262946][ T5825] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.129763][ T6264] loop0: detected capacity change from 0 to 4096
[  111.129984][ T6265] loop3: detected capacity change from 0 to 32768
[  111.282681][ T6265] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.357504][ T6265] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  111.382444][ T6265] XFS (loop3): Starting recovery (logdev: internal)
[  111.407718][ T6265] XFS (loop3): Ending recovery (logdev: internal)
[  111.478025][ T6280] netlink: 56 bytes leftover after parsing attributes in process `syz.1.104'.
[  111.504672][ T6274] loop5: detected capacity change from 0 to 40427
[  111.512091][ T6281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.533067][ T6274] F2FS-fs (loop5): invalid crc value
[  111.561472][   T30] audit: type=1800 audit(1774783895.436:3): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  111.633415][ T6274] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  111.648001][ T6274] F2FS-fs (loop5): Start checkpoint disabled!
[  111.670411][ T6274] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  111.678818][ T6274] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  112.260038][ T5820] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.347523][ T6289] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.105'.
[  112.445178][   T81] kworker/u8:5: attempt to access beyond end of device
[  112.445178][   T81] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  112.543222][   T81] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  112.543251][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.543266][   T81] Workqueue: writeback wb_workfn (flush-7:5)
[  112.543301][   T81] Call Trace:
[  112.543309][   T81]  <TASK>
[  112.543318][   T81]  dump_stack_lvl+0xe8/0x150
[  112.543353][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  112.543394][   T81]  f2fs_write_end_io+0xcdb/0xff0
[  112.543438][   T81]  __submit_merged_bio+0x256/0x700
[  112.543480][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  112.543523][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  112.543573][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.543612][   T81]  f2fs_write_data_pages+0x2975/0x35e0
[  112.543650][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.543719][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.543755][   T81]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  112.543808][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.543836][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  112.543900][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.543936][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.543972][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.544025][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.544063][   T81]  ? ret_from_fork_asm+0x1a/0x30
[  112.544106][   T81]  ? ret_from_fork_asm+0x1a/0x30
[  112.544165][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.544194][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.544234][   T81]  do_writepages+0x32e/0x550
[  112.544272][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.544306][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.544334][   T81]  ? reacquire_held_locks+0x104/0x190
[  112.544371][   T81]  ? writeback_sb_inodes+0x477/0x1a20
[  112.544413][   T81]  __writeback_single_inode+0x133/0x11a0
[  112.544450][   T81]  ? do_raw_spin_unlock+0xf5/0x210
[  112.544482][   T81]  writeback_sb_inodes+0x992/0x1a20
[  112.544539][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.544584][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  112.544617][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.544687][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.544715][   T81]  ? rcu_is_watching+0x15/0xb0
[  112.544751][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.544790][   T81]  wb_writeback+0x456/0xb70
[  112.544828][   T81]  ? queue_io+0x1e1/0x4a0
[  112.544871][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  112.544902][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.544947][   T81]  wb_workfn+0x414/0xf50
[  112.544978][   T81]  ? look_up_lock_class+0x57/0x110
[  112.545024][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  112.545056][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545084][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.545118][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.545144][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545180][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545212][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545242][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545274][   T81]  ? process_scheduled_works+0xa8d/0x18c0
[  112.545307][   T81]  ? process_scheduled_works+0xa8d/0x18c0
[  112.545342][   T81]  process_scheduled_works+0xb6e/0x18c0
[  112.545410][   T81]  ? __pfx_process_scheduled_works+0x10/0x10
[  112.545450][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545479][   T81]  ? assign_work+0x3d5/0x5e0
[  112.545518][   T81]  worker_thread+0xa53/0xfc0
[  112.545571][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545611][   T81]  kthread+0x388/0x470
[  112.545636][   T81]  ? __pfx_worker_thread+0x10/0x10
[  112.545668][   T81]  ? __pfx_kthread+0x10/0x10
[  112.545694][   T81]  ret_from_fork+0x51e/0xb90
[  112.545731][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  112.545762][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.545790][   T81]  ? __switch_to+0xc7d/0x1450
[  112.545823][   T81]  ? __pfx_kthread+0x10/0x10
[  112.545849][   T81]  ret_from_fork_asm+0x1a/0x30
[  112.545906][   T81]  </TASK>
[  112.545916][   T81] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  112.976578][   T81] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  112.976610][   T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.976625][   T81] Workqueue: writeback wb_workfn (flush-7:5)
[  112.976665][   T81] Call Trace:
[  112.976675][   T81]  <TASK>
[  112.976685][   T81]  dump_stack_lvl+0xe8/0x150
[  112.976723][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  112.976768][   T81]  f2fs_write_end_io+0xcdb/0xff0
[  112.976818][   T81]  __submit_merged_bio+0x256/0x700
[  112.976864][   T81]  __submit_merged_write_cond+0x3c9/0x4e0
[  112.976912][   T81]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  112.976967][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977010][   T81]  f2fs_write_data_pages+0x2975/0x35e0
[  112.977049][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977129][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.977167][   T81]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  112.977223][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977252][   T81]  ? __lock_acquire+0x6b5/0x2cf0
[  112.977324][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.977368][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977406][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.977463][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.977502][   T81]  ? ret_from_fork_asm+0x1a/0x30
[  112.977540][   T81]  ? ret_from_fork_asm+0x1a/0x30
[  112.977605][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977635][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.977676][   T81]  do_writepages+0x32e/0x550
[  112.977716][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977753][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.977783][   T81]  ? reacquire_held_locks+0x104/0x190
[  112.977821][   T81]  ? writeback_sb_inodes+0x477/0x1a20
[  112.977867][   T81]  __writeback_single_inode+0x133/0x11a0
[  112.977906][   T81]  ? do_raw_spin_unlock+0xf5/0x210
[  112.977941][   T81]  writeback_sb_inodes+0x992/0x1a20
[  112.978006][   T81]  ? unwind_next_frame+0xa5/0x23c0
[  112.978053][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  112.978086][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.978167][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978196][   T81]  ? rcu_is_watching+0x15/0xb0
[  112.978233][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978274][   T81]  wb_writeback+0x456/0xb70
[  112.978315][   T81]  ? queue_io+0x1e1/0x4a0
[  112.978368][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  112.978400][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.978450][   T81]  wb_workfn+0x414/0xf50
[  112.978483][   T81]  ? look_up_lock_class+0x57/0x110
[  112.978535][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  112.978569][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978597][   T81]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.978628][   T81]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.978654][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978692][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978726][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978757][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.978791][   T81]  ? process_scheduled_works+0xa8d/0x18c0
[  112.978824][   T81]  ? process_scheduled_works+0xa8d/0x18c0
[  112.978861][   T81]  process_scheduled_works+0xb6e/0x18c0
[  112.978941][   T81]  ? __pfx_process_scheduled_works+0x10/0x10
[  112.978985][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.979014][   T81]  ? assign_work+0x3d5/0x5e0
[  112.979056][   T81]  worker_thread+0xa53/0xfc0
[  112.979115][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.979158][   T81]  kthread+0x388/0x470
[  112.979184][   T81]  ? __pfx_worker_thread+0x10/0x10
[  112.979216][   T81]  ? __pfx_kthread+0x10/0x10
[  112.979244][   T81]  ret_from_fork+0x51e/0xb90
[  112.979283][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  112.979314][   T81]  ? srso_alias_return_thunk+0x5/0xfbef5
[  112.979349][   T81]  ? __switch_to+0xc7d/0x1450
[  112.979385][   T81]  ? __pfx_kthread+0x10/0x10
[  112.979411][   T81]  ret_from_fork_asm+0x1a/0x30
[  112.979473][   T81]  </TASK>
[  112.979482][   T81] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  114.173862][ T6304] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  114.219714][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'.
[  114.477459][   T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.533278][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.572608][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.793416][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.225400][ T6316] loop1: detected capacity change from 0 to 4096
[  115.257713][ T6316] ntfs3(loop1): Failed to load $MFT (-22).
[  115.759961][ T6295] loop2: detected capacity change from 0 to 32768
[  115.838143][ T6295] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.898409][ T6325] syzkaller0: entered promiscuous mode
[  115.934633][ T6295] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR
[  115.935081][ T6295] XFS (loop2): log mount failed
[  115.994060][ T6325] syzkaller0: entered allmulticast mode
[  116.235754][ T6336] loop5: detected capacity change from 0 to 4096
[  116.248404][ T6335] loop0: detected capacity change from 0 to 40427
[  116.279999][ T6335] F2FS-fs (loop0): invalid crc value
[  116.400430][ T6335] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  116.414471][ T6335] F2FS-fs (loop0): Start checkpoint disabled!
[  116.425854][ T6335] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  116.440212][ T6335] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  116.594203][ T6336] ntfs3(loop5): ino=21, "file1" mmap(write) compressed not supported
[  116.972751][ T6343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.120'.
[  117.017414][   T36] kworker/u8:2: attempt to access beyond end of device
[  117.017414][   T36] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  117.073111][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  117.073143][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  117.073158][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  117.073197][   T36] Call Trace:
[  117.073206][   T36]  <TASK>
[  117.073216][   T36]  dump_stack_lvl+0xe8/0x150
[  117.073253][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  117.073295][   T36]  f2fs_write_end_io+0xcdb/0xff0
[  117.073340][   T36]  __submit_merged_bio+0x256/0x700
[  117.073382][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  117.073426][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  117.073475][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.073514][   T36]  f2fs_write_data_pages+0x2975/0x35e0
[  117.073592][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.073685][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  117.073746][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.073774][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  117.073822][   T36]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  117.073857][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.073896][   T36]  do_writepages+0x32e/0x550
[  117.073944][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.073973][   T36]  ? reacquire_held_locks+0x104/0x190
[  117.074009][   T36]  ? writeback_sb_inodes+0x477/0x1a20
[  117.074051][   T36]  __writeback_single_inode+0x133/0x11a0
[  117.074088][   T36]  ? do_raw_spin_unlock+0xf5/0x210
[  117.074124][   T36]  writeback_sb_inodes+0x992/0x1a20
[  117.074182][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  117.074221][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  117.074253][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.074323][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074351][   T36]  ? rcu_is_watching+0x15/0xb0
[  117.074387][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074426][   T36]  wb_writeback+0x456/0xb70
[  117.074464][   T36]  ? queue_io+0x1e1/0x4a0
[  117.074507][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  117.074538][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.074583][   T36]  wb_workfn+0x414/0xf50
[  117.074614][   T36]  ? look_up_lock_class+0x57/0x110
[  117.074662][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  117.074693][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074721][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.074750][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  117.074775][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074812][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074843][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074873][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.074923][   T36]  ? process_scheduled_works+0xa8d/0x18c0
[  117.074955][   T36]  ? process_scheduled_works+0xa8d/0x18c0
[  117.074990][   T36]  process_scheduled_works+0xb6e/0x18c0
[  117.075057][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.075095][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.075127][   T36]  ? assign_work+0x3d5/0x5e0
[  117.075170][   T36]  worker_thread+0xa53/0xfc0
[  117.075222][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.075261][   T36]  kthread+0x388/0x470
[  117.075285][   T36]  ? __pfx_worker_thread+0x10/0x10
[  117.075316][   T36]  ? __pfx_kthread+0x10/0x10
[  117.075341][   T36]  ret_from_fork+0x51e/0xb90
[  117.075376][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  117.075406][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.075434][   T36]  ? __switch_to+0xc7d/0x1450
[  117.075466][   T36]  ? __pfx_kthread+0x10/0x10
[  117.075491][   T36]  ret_from_fork_asm+0x1a/0x30
[  117.075547][   T36]  </TASK>
[  117.075585][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  117.455674][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  117.455705][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  117.455721][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  117.455760][   T36] Call Trace:
[  117.455769][   T36]  <TASK>
[  117.455779][   T36]  dump_stack_lvl+0xe8/0x150
[  117.455816][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  117.455861][   T36]  f2fs_write_end_io+0xcdb/0xff0
[  117.455909][   T36]  __submit_merged_bio+0x256/0x700
[  117.455954][   T36]  __submit_merged_write_cond+0x3c9/0x4e0
[  117.456001][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  117.456055][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.456105][   T36]  f2fs_write_data_pages+0x2975/0x35e0
[  117.456195][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.456301][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  117.456367][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.456394][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  117.456446][   T36]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  117.456482][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  117.456523][   T36]  do_writepages+0x32e/0x550
[  117.456569][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.456597][   T36]  ? reacquire_held_locks+0x104/0x190
[  117.456634][   T36]  ? writeback_sb_inodes+0x477/0x1a20
[  117.456677][   T36]  __writeback_single_inode+0x133/0x11a0
[  117.456714][   T36]  ? do_raw_spin_unlock+0xf5/0x210
[  117.456747][   T36]  writeback_sb_inodes+0x992/0x1a20
[  117.456812][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  117.456854][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  117.456885][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.456970][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.456999][   T36]  ? rcu_is_watching+0x15/0xb0
[  117.457035][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457076][   T36]  wb_writeback+0x456/0xb70
[  117.457149][   T36]  ? queue_io+0x1e1/0x4a0
[  117.457195][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  117.457232][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.457282][   T36]  wb_workfn+0x414/0xf50
[  117.457315][   T36]  ? look_up_lock_class+0x57/0x110
[  117.457361][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  117.457390][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457416][   T36]  ? do_raw_spin_lock+0x12b/0x2f0
[  117.457447][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  117.457473][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457511][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457544][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457576][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457607][   T36]  ? process_scheduled_works+0xa8d/0x18c0
[  117.457640][   T36]  ? process_scheduled_works+0xa8d/0x18c0
[  117.457677][   T36]  process_scheduled_works+0xb6e/0x18c0
[  117.457753][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.457796][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457824][   T36]  ? assign_work+0x3d5/0x5e0
[  117.457863][   T36]  worker_thread+0xa53/0xfc0
[  117.457918][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.457961][   T36]  kthread+0x388/0x470
[  117.457987][   T36]  ? __pfx_worker_thread+0x10/0x10
[  117.458018][   T36]  ? __pfx_kthread+0x10/0x10
[  117.458044][   T36]  ret_from_fork+0x51e/0xb90
[  117.458080][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  117.458115][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  117.458142][   T36]  ? __switch_to+0xc7d/0x1450
[  117.458176][   T36]  ? __pfx_kthread+0x10/0x10
[  117.458202][   T36]  ret_from_fork_asm+0x1a/0x30
[  117.458261][   T36]  </TASK>
[  117.458331][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  118.192577][  T791] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  118.563358][ T6047] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.566027][  T791] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[  118.584129][  T791] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.590847][  T791] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  118.601434][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.661070][  T791] usb 4-1: config 0 descriptor??
[  118.704812][ T6351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  118.765840][ T6047] usb 3-1: Using ep0 maxpacket: 16
[  118.857692][ T6047] usb 3-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config
[  118.875594][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.902961][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  118.935618][ T6047] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  118.969369][ T6047] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.006321][ T6047] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  119.056619][ T6047] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  119.067363][ T6047] usb 3-1: Manufacturer: syz
[  119.190924][ T6047] usb 3-1: config 0 descriptor??
[  119.502593][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.517517][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.526673][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.534806][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.545632][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.554842][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.563451][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.571260][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.580813][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.588633][  T791] creative-sb0540 0003:041E:3100.0001: unknown main item tag 0x0
[  119.597871][  T791] creative-sb0540 0003:041E:3100.0001: collection stack underflow
[  119.606255][  T791] creative-sb0540 0003:041E:3100.0001: item 0 0 0 12 parsing failed
[  119.615087][  T791] creative-sb0540 0003:041E:3100.0001: parse failed
[  119.622949][  T791] creative-sb0540 0003:041E:3100.0001: probe with driver creative-sb0540 failed with error -22
[  119.644066][  T791] usb 4-1: USB disconnect, device number 3
[  119.746674][ T6047] rc_core: IR keymap rc-hauppauge not found
[  119.752779][ T6047] Registered IR keymap rc-empty
[  119.765344][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.773660][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.793592][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.814592][ T6047] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  119.833663][ T6047] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  119.858264][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.883282][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.904323][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.929548][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  119.935069][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.945313][ T5917] usb 5-1: config 9 has an invalid interface number: 3 but max is 1
[  119.958017][ T5917] usb 5-1: config 9 has an invalid interface number: 3 but max is 1
[  119.967659][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  119.982559][ T5917] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2
[  119.991575][ T5917] usb 5-1: config 9 has no interface number 0
[  120.000646][ T5917] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0316, bcdDevice=50.1a
[  120.012552][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.029881][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.052532][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.074755][ T5917] usb 5-1: Product: syz
[  120.095080][ T5917] usb 5-1: Manufacturer: syz
[  120.099844][ T5917] usb 5-1: SerialNumber: syz
[  120.104649][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.123089][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.144156][ T6047] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  120.180153][ T6047] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  120.201536][ T6047] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  120.224454][ T6047] usb 3-1: USB disconnect, device number 4
[  120.376530][ T5917] usb 5-1: USB disconnect, device number 3
[  121.112444][ T6378] loop0: detected capacity change from 0 to 40427
[  121.142056][ T6378] F2FS-fs (loop0): invalid crc value
[  121.212469][  T791] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  121.238200][ T6378] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.249002][ T6378] F2FS-fs (loop0): Start checkpoint disabled!
[  121.256836][ T6378] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  121.273706][ T6378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  121.279128][ T6376] loop3: detected capacity change from 0 to 32768
[  121.506438][  T791] usb 6-1: Using ep0 maxpacket: 8
[  121.824324][  T791] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  121.991731][  T791] usb 6-1: config 0 has no interface number 0
[  122.155157][  T791] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  122.157889][ T1137] kworker/u8:8: attempt to access beyond end of device
[  122.157889][ T1137] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  122.188051][  T791] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  122.207603][  T791] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  122.218738][  T791] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  122.218782][ T6376] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.232016][  T791] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  122.264006][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.293115][  T791] usb 6-1: config 0 descriptor??
[  122.327509][  T791] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  122.334399][ T6400] Illegal XDP return value 4294967294 on prog  (id 13) dev syz_tun, expect packet loss!
[  122.349716][ T1137] CPU: 0 UID: 0 PID: 1137 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  122.349739][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.349751][ T1137] Workqueue: writeback wb_workfn (flush-7:0)
[  122.349781][ T1137] Call Trace:
[  122.349788][ T1137]  <TASK>
[  122.349795][ T1137]  dump_stack_lvl+0xe8/0x150
[  122.349824][ T1137]  f2fs_handle_critical_error+0x37c/0x540
[  122.349855][ T1137]  f2fs_write_end_io+0xcdb/0xff0
[  122.349889][ T1137]  __submit_merged_bio+0x256/0x700
[  122.349920][ T1137]  __submit_merged_write_cond+0x3c9/0x4e0
[  122.349954][ T1137]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  122.349991][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350020][ T1137]  f2fs_write_data_pages+0x2975/0x35e0
[  122.350048][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350101][ T1137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.350128][ T1137]  ? check_path+0x21/0x40
[  122.350193][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350215][ T1137]  ? __lock_acquire+0x6b5/0x2cf0
[  122.350261][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350282][ T1137]  ? psi_group_change+0xab8/0x1050
[  122.350323][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350354][ T1137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.350384][ T1137]  do_writepages+0x32e/0x550
[  122.350413][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350439][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350460][ T1137]  ? reacquire_held_locks+0x104/0x190
[  122.350487][ T1137]  ? writeback_sb_inodes+0x477/0x1a20
[  122.350518][ T1137]  __writeback_single_inode+0x133/0x11a0
[  122.350547][ T1137]  ? do_raw_spin_unlock+0xf5/0x210
[  122.350570][ T1137]  writeback_sb_inodes+0x992/0x1a20
[  122.350621][ T1137]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  122.350645][ T1137]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.350699][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350720][ T1137]  ? rcu_is_watching+0x15/0xb0
[  122.350746][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350775][ T1137]  wb_writeback+0x456/0xb70
[  122.350804][ T1137]  ? queue_io+0x1e1/0x4a0
[  122.350836][ T1137]  ? __pfx_wb_writeback+0x10/0x10
[  122.350860][ T1137]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.350893][ T1137]  wb_workfn+0x414/0xf50
[  122.350917][ T1137]  ? look_up_lock_class+0x57/0x110
[  122.350953][ T1137]  ? __pfx_wb_workfn+0x10/0x10
[  122.350972][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.350995][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351020][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351041][ T1137]  ? do_raw_spin_unlock+0xf5/0x210
[  122.351062][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351083][ T1137]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  122.351109][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351133][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351155][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351179][ T1137]  ? process_scheduled_works+0xa8d/0x18c0
[  122.351203][ T1137]  ? process_scheduled_works+0xa8d/0x18c0
[  122.351229][ T1137]  process_scheduled_works+0xb6e/0x18c0
[  122.351282][ T1137]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.351312][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351333][ T1137]  ? assign_work+0x3d5/0x5e0
[  122.351367][ T1137]  worker_thread+0xa53/0xfc0
[  122.351408][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351437][ T1137]  kthread+0x388/0x470
[  122.351456][ T1137]  ? __pfx_worker_thread+0x10/0x10
[  122.351480][ T1137]  ? __pfx_kthread+0x10/0x10
[  122.351499][ T1137]  ret_from_fork+0x51e/0xb90
[  122.351527][ T1137]  ? __pfx_ret_from_fork+0x10/0x10
[  122.351550][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.351571][ T1137]  ? __switch_to+0xc7d/0x1450
[  122.351596][ T1137]  ? __pfx_kthread+0x10/0x10
[  122.351615][ T1137]  ret_from_fork_asm+0x1a/0x30
[  122.351658][ T1137]  </TASK>
[  122.351666][ T1137] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  122.748649][ T1137] CPU: 0 UID: 0 PID: 1137 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  122.748681][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.748696][ T1137] Workqueue: writeback wb_workfn (flush-7:0)
[  122.748735][ T1137] Call Trace:
[  122.748744][ T1137]  <TASK>
[  122.748753][ T1137]  dump_stack_lvl+0xe8/0x150
[  122.748790][ T1137]  f2fs_handle_critical_error+0x37c/0x540
[  122.748834][ T1137]  f2fs_write_end_io+0xcdb/0xff0
[  122.748884][ T1137]  __submit_merged_bio+0x256/0x700
[  122.748929][ T1137]  __submit_merged_write_cond+0x3c9/0x4e0
[  122.748976][ T1137]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  122.749028][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749071][ T1137]  f2fs_write_data_pages+0x2975/0x35e0
[  122.749120][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749200][ T1137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.749237][ T1137]  ? check_path+0x21/0x40
[  122.749337][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749365][ T1137]  ? __lock_acquire+0x6b5/0x2cf0
[  122.749434][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749462][ T1137]  ? psi_group_change+0xab8/0x1050
[  122.749521][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749553][ T1137]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.749594][ T1137]  do_writepages+0x32e/0x550
[  122.749633][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749668][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.749696][ T1137]  ? reacquire_held_locks+0x104/0x190
[  122.749732][ T1137]  ? writeback_sb_inodes+0x477/0x1a20
[  122.749776][ T1137]  __writeback_single_inode+0x133/0x11a0
[  122.749814][ T1137]  ? do_raw_spin_unlock+0xf5/0x210
[  122.749848][ T1137]  writeback_sb_inodes+0x992/0x1a20
[  122.749925][ T1137]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  122.749958][ T1137]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.750041][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750070][ T1137]  ? rcu_is_watching+0x15/0xb0
[  122.750112][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750154][ T1137]  wb_writeback+0x456/0xb70
[  122.750194][ T1137]  ? queue_io+0x1e1/0x4a0
[  122.750241][ T1137]  ? __pfx_wb_writeback+0x10/0x10
[  122.750272][ T1137]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.750323][ T1137]  wb_workfn+0x414/0xf50
[  122.750355][ T1137]  ? look_up_lock_class+0x57/0x110
[  122.750408][ T1137]  ? __pfx_wb_workfn+0x10/0x10
[  122.750435][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750467][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750502][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750529][ T1137]  ? do_raw_spin_unlock+0xf5/0x210
[  122.750559][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750587][ T1137]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  122.750623][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750656][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750687][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750720][ T1137]  ? process_scheduled_works+0xa8d/0x18c0
[  122.750753][ T1137]  ? process_scheduled_works+0xa8d/0x18c0
[  122.750790][ T1137]  process_scheduled_works+0xb6e/0x18c0
[  122.750869][ T1137]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.750913][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.750941][ T1137]  ? assign_work+0x3d5/0x5e0
[  122.750983][ T1137]  worker_thread+0xa53/0xfc0
[  122.751043][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.751086][ T1137]  kthread+0x388/0x470
[  122.751118][ T1137]  ? __pfx_worker_thread+0x10/0x10
[  122.751150][ T1137]  ? __pfx_kthread+0x10/0x10
[  122.751177][ T1137]  ret_from_fork+0x51e/0xb90
[  122.751216][ T1137]  ? __pfx_ret_from_fork+0x10/0x10
[  122.751247][ T1137]  ? srso_alias_return_thunk+0x5/0xfbef5
[  122.751276][ T1137]  ? __switch_to+0xc7d/0x1450
[  122.751312][ T1137]  ? __pfx_kthread+0x10/0x10
[  122.751339][ T1137]  ret_from_fork_asm+0x1a/0x30
[  122.751402][ T1137]  </TASK>
[  122.751412][ T1137] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  122.834624][ T6376] XFS (loop3): Ending clean mount
[  123.058386][ T5917] usb 6-1: USB disconnect, device number 4
[  123.184805][ T6376] XFS (loop3): Quotacheck needed: Please wait.
[  123.214686][ T6408] loop4: detected capacity change from 0 to 64
[  123.282984][ T5917] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  123.310457][ T6376] XFS (loop3): Quotacheck: Done.
[  123.965579][ T5820] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.184217][ T6414] ip6gretap0: entered promiscuous mode
[  124.729301][ T6412] ip6gretap0: left promiscuous mode
[  125.618539][ T6416] x_tables: ip_tables: icmp match: only valid for protocol 1
[  125.898473][ T6425] loop0: detected capacity change from 0 to 40427
[  125.949290][ T6425] F2FS-fs (loop0): invalid crc value
[  126.126387][ T6425] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  126.262791][ T6425] F2FS-fs (loop0): Start checkpoint disabled!
[  126.329328][ T6436] fuse: Bad value for 'fd'
[  127.021410][ T6425] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  127.042774][ T6425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  127.235833][ T6434] loop5: detected capacity change from 0 to 4096
[  127.414717][   T13] kworker/u8:1: attempt to access beyond end of device
[  127.414717][   T13] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.504865][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  127.504898][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.504915][   T13] Workqueue: writeback wb_workfn (flush-7:0)
[  127.504954][   T13] Call Trace:
[  127.504963][   T13]  <TASK>
[  127.504974][   T13]  dump_stack_lvl+0xe8/0x150
[  127.505013][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  127.505056][   T13]  f2fs_write_end_io+0xcdb/0xff0
[  127.505123][   T13]  __submit_merged_bio+0x256/0x700
[  127.505165][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  127.505209][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  127.505258][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505298][   T13]  f2fs_write_data_pages+0x2975/0x35e0
[  127.505335][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505403][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.505440][   T13]  ? cfg80211_inform_single_bss_data+0x13c6/0x1b70
[  127.505527][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505555][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  127.505591][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505614][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  127.505650][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505671][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505692][   T13]  ? sched_clock+0x3f/0x60
[  127.505713][   T13]  ? sched_clock_cpu+0x74/0x440
[  127.505757][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505779][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.505809][   T13]  do_writepages+0x32e/0x550
[  127.505843][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.505864][   T13]  ? reacquire_held_locks+0x104/0x190
[  127.505891][   T13]  ? writeback_sb_inodes+0x477/0x1a20
[  127.505923][   T13]  __writeback_single_inode+0x133/0x11a0
[  127.505951][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[  127.505974][   T13]  writeback_sb_inodes+0x992/0x1a20
[  127.506017][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506046][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  127.506075][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.506129][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506150][   T13]  ? rcu_is_watching+0x15/0xb0
[  127.506177][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506211][   T13]  wb_writeback+0x456/0xb70
[  127.506249][   T13]  ? queue_io+0x1e1/0x4a0
[  127.506283][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  127.506306][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.506340][   T13]  wb_workfn+0x414/0xf50
[  127.506363][   T13]  ? look_up_lock_class+0x57/0x110
[  127.506399][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  127.506422][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506444][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.506465][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  127.506484][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506511][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506535][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506558][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506581][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  127.506606][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  127.506632][   T13]  process_scheduled_works+0xb6e/0x18c0
[  127.506684][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  127.506714][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506735][   T13]  ? assign_work+0x3d5/0x5e0
[  127.506764][   T13]  worker_thread+0xa53/0xfc0
[  127.506805][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506835][   T13]  kthread+0x388/0x470
[  127.506853][   T13]  ? __pfx_worker_thread+0x10/0x10
[  127.506877][   T13]  ? __pfx_kthread+0x10/0x10
[  127.506896][   T13]  ret_from_fork+0x51e/0xb90
[  127.506924][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  127.506947][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  127.506968][   T13]  ? __switch_to+0xc7d/0x1450
[  127.506993][   T13]  ? __pfx_kthread+0x10/0x10
[  127.507012][   T13]  ret_from_fork_asm+0x1a/0x30
[  127.507055][   T13]  </TASK>
[  127.507063][   T13] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  127.612567][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  127.620238][ T6434] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  127.828479][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  127.829256][ T6434] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  128.301837][ T5917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  129.198584][ T1151] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  129.253549][ T5823] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  129.269457][ T5917] usb 5-1: config 0 has no interface number 0
[  129.275834][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.287019][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  129.291461][ T5823] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  129.298859][ T5917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  129.298894][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.298944][ T5917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  129.298970][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.310198][ T5917] usb 5-1: config 0 descriptor??
[  129.388857][ T5823] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  129.417491][ T1151] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  129.527720][ T5917] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  129.687323][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.428562][ T5917] usb 5-1: USB disconnect, device number 4
[  131.442603][ T6473] loop5: detected capacity change from 0 to 32768
[  131.473289][ T5917] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  131.504102][ T6473] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.572158][ T6473] XFS (loop5): Ending clean mount
[  131.580721][ T6473] XFS (loop5): Quotacheck needed: Please wait.
[  131.610231][ T6473] XFS (loop5): Quotacheck: Done.
[  132.003051][ T6491] netlink: 168 bytes leftover after parsing attributes in process `syz.5.163'.
[  132.236093][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.254412][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.566694][ T5823] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.636675][ T6504] loop2: detected capacity change from 0 to 64
[  132.791447][ T6504] Trying to free block not in datazone
[  132.906573][ T6511] loop4: detected capacity change from 0 to 1024
[  132.927847][ T6511] hfsplus: Bad value for 'umask'
[  133.267027][ T6513] fuse: Unknown parameter 'ÿÿÿÿøÿÿÿ'
[  134.712504][ T5917] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  134.782496][   T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.913168][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  135.690610][ T6538] loop3: detected capacity change from 0 to 131072
[  135.698162][ T6538] xfs: Deprecated parameter 'ikeep'
[  135.703446][ T6538] XFS: ikeep mount option is deprecated.
[  135.734379][   T29] usb 5-1: Using ep0 maxpacket: 8
[  135.745061][ T5917] usb 6-1: config 9 has an invalid interface number: 3 but max is 2
[  135.747118][ T6538] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  135.789393][   T29] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  135.802012][ T5917] usb 6-1: config 9 has an invalid interface number: 3 but max is 2
[  135.810722][ T5917] usb 6-1: config 9 has an invalid interface number: 177 but max is 2
[  135.824923][ T5917] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 3
[  135.835957][ T5917] usb 6-1: config 9 has no interface number 0
[  135.842213][ T5917] usb 6-1: config 9 has no interface number 1
[  135.849430][ T5917] usb 6-1: config 9 interface 177 has no altsetting 0
[  135.856259][   T29] usb 5-1: config 0 has no interface number 0
[  135.856328][   T29] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  135.856355][   T29] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  135.865730][ T5917] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0316, bcdDevice=50.1a
[  135.897414][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.906032][ T5917] usb 6-1: Product: syz
[  135.912668][ T5917] usb 6-1: Manufacturer: syz
[  135.917315][ T5917] usb 6-1: SerialNumber: syz
[  135.984812][ T6538] XFS (loop3): Starting recovery (logdev: internal)
[  136.003367][   T29] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  136.024975][ T6538] XFS (loop3): Ending recovery (logdev: internal)
[  136.060176][   T29] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  136.309304][   T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  136.321707][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.337028][   T29] usb 5-1: config 0 descriptor??
[  137.006775][   T29] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  137.049013][ T5917] usb 6-1: USB disconnect, device number 5
[  137.079126][   T29] usb 5-1: USB disconnect, device number 5
[  137.173338][   T29] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  137.249751][ T5820] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  137.699985][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[  137.873519][ T6571] loop4: detected capacity change from 0 to 1024
[  137.947784][ T6571] hfsplus: Bad value for 'umask'
[  138.452032][ T6580] fuse: Unknown parameter 'ÿÿÿÿøÿÿÿ'
[  139.417395][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'.
[  139.442696][ T5972] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  139.615312][ T6588] loop2: detected capacity change from 0 to 32768
[  139.623966][ T5972] usb 6-1: Using ep0 maxpacket: 8
[  139.641414][ T5972] usb 6-1: config 9 has an invalid interface number: 3 but max is 1
[  139.662949][ T5972] usb 6-1: config 9 has an invalid interface number: 177 but max is 1
[  139.674136][ T6588] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.193 (6588)
[  139.682442][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  139.692575][ T5972] usb 6-1: config 9 has no interface number 0
[  139.902850][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  139.934510][ T5917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  139.978142][ T6611] loop0: detected capacity change from 0 to 32768
[  139.992671][ T5917] usb 5-1: config 0 has no interface number 0
[  139.998854][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.002418][ T5972] usb 6-1: config 9 has no interface number 1
[  140.019385][ T5972] usb 6-1: config 9 interface 3 has no altsetting 0
[  140.026084][ T5972] usb 6-1: config 9 interface 177 has no altsetting 0
[  140.038650][ T5972] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0316, bcdDevice=50.1a
[  140.049934][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  140.076871][ T5917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.085046][ T6611] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.096650][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  140.096707][ T5917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  140.121372][ T6588] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.147780][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.172394][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.193363][ T6588] BTRFS info (device loop2): using sha256 checksum algorithm
[  140.206004][ T6611] XFS (loop0): Ending clean mount
[  140.207219][ T5917] usb 5-1: config 0 descriptor??
[  140.211713][ T5972] usb 6-1: Product: syz
[  140.232094][ T6611] XFS (loop0): Quotacheck needed: Please wait.
[  140.263078][ T5972] usb 6-1: Manufacturer: syz
[  140.267802][ T5972] usb 6-1: SerialNumber: syz
[  140.296506][ T6611] XFS (loop0): Quotacheck: Done.
[  140.342785][ T5917] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  140.890079][ T5972] usb 6-1: USB disconnect, device number 6
[  141.067928][ T6588] BTRFS info (device loop2): checking UUID tree
[  141.119176][ T6588] BTRFS info (device loop2): setting nodatasum
[  141.121630][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  141.183358][ T6588] BTRFS info (device loop2): allowing degraded mounts
[  141.192226][ T6588] BTRFS info (device loop2): turning on sync discard
[  141.289861][ T6588] BTRFS info (device loop2): enabling free space tree
[  141.305375][ T6607] loop1: detected capacity change from 0 to 32768
[  141.325223][ T6588] BTRFS info (device loop2): enabling auto defrag
[  141.331680][ T6588] BTRFS info (device loop2): force zstd compression, level 3
[  141.469021][ T6607] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  141.674605][ T6607] JBD2: Ignoring recovery information on journal
[  141.839628][ T6607] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  142.562715][ T5972] usb 5-1: USB disconnect, device number 6
[  142.566168][ T6609] loop3: detected capacity change from 0 to 32768
[  142.659770][ T5972] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  142.906522][ T5821] ocfs2: Unmounting device (7,1) on (node local)
[  143.006440][ T5824] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  144.522121][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'.
[  144.550716][ T6679] gretap0: entered promiscuous mode
[  144.898658][   T30] audit: type=1800 audit(1774783928.776:4): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.219" name="bus" dev="tmpfs" ino=222 res=0 errno=0
[  144.982451][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.165206][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.185584][ T5917] usb 3-1: config 0 has no interfaces?
[  145.201697][ T5917] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  145.232385][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.274013][ T5917] usb 3-1: config 0 descriptor??
[  145.593318][   T30] audit: type=1326 audit(1774783929.376:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  145.810125][   T30] audit: type=1326 audit(1774783929.376:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  146.123624][   T30] audit: type=1326 audit(1774783929.376:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  146.444266][   T30] audit: type=1326 audit(1774783929.376:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  146.690996][   T30] audit: type=1326 audit(1774783929.376:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  146.978504][   T30] audit: type=1326 audit(1774783929.376:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  147.270096][   T30] audit: type=1326 audit(1774783929.376:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  147.555062][   T30] audit: type=1326 audit(1774783929.376:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  147.773621][   T30] audit: type=1326 audit(1774783929.376:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.0.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67cb99c799 code=0x7ffc0000
[  149.323252][    T9] usb 3-1: USB disconnect, device number 5
[  149.546134][ T6706] loop1: detected capacity change from 0 to 32768
[  149.624627][ T6706] JBD2: Ignoring recovery information on journal
[  149.681958][ T6706] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  149.888561][ T6704] loop5: detected capacity change from 0 to 4096
[  149.938964][ T5821] ocfs2: Unmounting device (7,1) on (node local)
[  150.018009][ T6704] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  150.168199][ T6716] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.231'.
[  150.185279][ T6704] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  150.244015][ T6704] ntfs3(loop5): ino=19, mi_enum_attr
[  150.303496][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  150.303516][   T30] audit: type=1326 audit(1774783934.196:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  150.377946][ T6722] loop2: detected capacity change from 0 to 7
[  150.415522][ T6722] Dev loop2: unable to read RDB block 7
[  150.417050][ T6704] ntfs3(loop5): failed to convert "c46c" to iso8859-14
[  150.421335][ T6722]  loop2: unable to read partition table
[  150.421580][ T6722] loop2: partition table beyond EOD, 
[  150.440135][   T30] audit: type=1326 audit(1774783934.256:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  150.502519][ T6704] ntfs3(loop5): ino=20, mi_enum_attr
[  150.506533][ T6722] truncated
[  150.515838][ T6722] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  150.540559][   T30] audit: type=1326 audit(1774783934.256:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  150.594009][ T5189] Dev loop2: unable to read RDB block 7
[  150.612446][ T5189]  loop2: unable to read partition table
[  150.633957][ T5189] loop2: partition table beyond EOD, truncated
[  150.696305][   T30] audit: type=1326 audit(1774783934.266:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  150.822169][   T30] audit: type=1326 audit(1774783934.266:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  150.941221][   T30] audit: type=1326 audit(1774783934.266:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  151.211015][ T6741] loop2: detected capacity change from 0 to 32768
[  151.229359][   T30] audit: type=1326 audit(1774783934.456:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  151.252874][   T30] audit: type=1326 audit(1774783934.456:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b379c799 code=0x7ffc0000
[  151.432521][  T791] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  151.460480][ T6741] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.530450][ T6741] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  151.562531][   T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  151.594761][  T791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.597960][ T6741] XFS (loop2): Starting recovery (logdev: internal)
[  151.625218][ T6741] XFS (loop2): Ending recovery (logdev: internal)
[  151.642681][  T791] usb 6-1: config 0 has no interfaces?
[  151.686457][  T791] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  151.722647][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.730986][ T5824] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.761990][   T29] usb 1-1: Using ep0 maxpacket: 32
[  151.779406][  T791] usb 6-1: config 0 descriptor??
[  151.812737][   T29] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  151.821009][   T29] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  151.883016][   T29] usb 1-1: config 4 has no interface number 0
[  151.907846][   T29] usb 1-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  151.941613][   T29] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  151.980963][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.023184][   T29] hub 1-1:4.128: bad descriptor, ignoring hub
[  152.036626][   T29] hub 1-1:4.128: probe with driver hub failed with error -5
[  152.056820][   T29] usbhid 1-1:4.128: couldn't find an input interrupt endpoint
[  156.062489][ T6047] usb 6-1: USB disconnect, device number 7
[  156.067667][ T5972] usb 1-1: USB disconnect, device number 4
[  156.101969][ T6766] loop2: detected capacity change from 0 to 256
[  156.342013][ T6773] netlink: 68 bytes leftover after parsing attributes in process `syz.1.248'.
[  156.369259][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system
[  156.399484][ T6766] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  156.488737][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.5.251'.
[  156.498669][ T6766] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[  156.582957][   T30] audit: type=1800 audit(1774783940.446:37): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=1048617 res=0 errno=0
[  156.647191][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/143.tmp-b7:2' failed: Read-only file system
[  156.743606][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system
[  156.948656][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/143.tmp-b7:2' failed: Read-only file system
[  156.959553][ T6788] loop5: detected capacity change from 0 to 32768
[  157.014850][ T6788] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.022287][ T6792] input: syz1 as /devices/virtual/input/input9
[  157.055877][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system
[  157.177860][ T6788] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  157.199713][ T6788] XFS (loop5): Starting recovery (logdev: internal)
[  157.225252][ T6788] XFS (loop5): Ending recovery (logdev: internal)
[  157.262519][   T30] audit: type=1800 audit(1774783941.126:38): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.254" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  157.296459][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/143.tmp-b7:2' failed: Read-only file system
[  157.309220][ T5823] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.361466][ T6803] loop0: detected capacity change from 0 to 1024
[  157.517590][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-diskseq/144.tmp-b7:5' failed: Read-only file system
[  157.545181][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/143.tmp-b7:2' failed: Read-only file system
[  157.725715][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  157.787944][ T6168] udevd[6168]: symlink '../../loop0' '/dev/disk/by-diskseq/146.tmp-b7:0' failed: Read-only file system
[  157.812126][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  157.885015][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  157.948801][ T6811] loop2: detected capacity change from 0 to 256
[  158.062412][ T6818] hfsplus: found bad thread record in catalog
[  159.062824][ T6811] FAT-fs (loop2): Directory bread(block 64) failed
[  159.102710][ T6811] FAT-fs (loop2): Directory bread(block 65) failed
[  159.137412][ T3007] hfsplus: b-tree write err: -5, ino 25
[  159.172521][ T6811] FAT-fs (loop2): Directory bread(block 66) failed
[  159.175754][ T3007] hfsplus: b-tree write err: -5, ino 4
[  159.179075][ T6811] FAT-fs (loop2): Directory bread(block 67) failed
[  159.233829][ T6823] devtmpfs: Too few inodes for current use
[  159.253822][ T3007] hfsplus: b-tree write err: -5, ino 2
[  159.262683][ T6811] FAT-fs (loop2): Directory bread(block 68) failed
[  159.271103][ T6811] FAT-fs (loop2): Directory bread(block 69) failed
[  159.288027][ T3007] hfsplus: b-tree write err: -5, ino 22
[  159.352722][ T6811] FAT-fs (loop2): Directory bread(block 70) failed
[  159.359280][ T6811] FAT-fs (loop2): Directory bread(block 71) failed
[  159.414542][ T6811] FAT-fs (loop2): Directory bread(block 72) failed
[  159.462469][ T6811] FAT-fs (loop2): Directory bread(block 73) failed
[  159.496954][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.266'.
[  159.574329][ T6831] netlink: 68 bytes leftover after parsing attributes in process `syz.5.267'.
[  159.631070][   T30] audit: type=1800 audit(1774783943.516:39): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.258" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  160.293130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  161.974786][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/150.tmp-b7:2' failed: Read-only file system
[  162.011937][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-diskseq/148.tmp-b7:5' failed: Read-only file system
[  162.039784][ T6853] input: syz1 as /devices/virtual/input/input10
[  162.105329][ T6063] udevd[6063]: symlink '../../loop0' '/dev/disk/by-diskseq/149.tmp-b7:0' failed: Read-only file system
[  162.122777][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/150.tmp-b7:2' failed: Read-only file system
[  162.257701][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/150.tmp-b7:2' failed: Read-only file system
[  162.357756][ T6860] loop2: detected capacity change from 0 to 1024
[  162.949009][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/149.tmp-b7:0' failed: Read-only file system
[  163.025709][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/151.tmp-b7:2' failed: Read-only file system
[  163.096448][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  163.163785][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-diskseq/148.tmp-b7:5' failed: Read-only file system
[  163.184281][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  163.198636][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'.
[  163.268501][   T81] hfsplus: b-tree write err: -5, ino 25
[  163.287013][   T81] hfsplus: b-tree write err: -5, ino 4
[  163.304425][ T6869] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  163.322748][   T81] hfsplus: b-tree write err: -5, ino 2
[  163.331328][ T6867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.281'.
[  163.365593][   T81] hfsplus: b-tree write err: -5, ino 22
[  164.027008][ T6047] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  164.212722][ T6047] usb 3-1: Using ep0 maxpacket: 32
[  164.271040][ T6047] usb 3-1: config 15 has an invalid interface number: 78 but max is 1
[  164.318273][ T6047] usb 3-1: config 15 has an invalid interface number: 2 but max is 1
[  164.384213][ T6047] usb 3-1: config 15 has no interface number 0
[  164.460259][ T6047] usb 3-1: config 15 has no interface number 1
[  165.200685][ T6047] usb 3-1: config 15 interface 78 has no altsetting 0
[  165.211081][ T6047] usb 3-1: config 15 interface 2 has no altsetting 0
[  165.220994][ T6047] usb 3-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09
[  165.230935][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.252508][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  165.263024][ T6047] usb 3-1: Product: syz
[  165.267203][ T6047] usb 3-1: Manufacturer: syz
[  165.271795][ T6047] usb 3-1: SerialNumber: syz
[  165.434873][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.446613][    T9] usb 2-1: config 0 has no interfaces?
[  165.452142][    T9] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  165.465376][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.486376][    T9] usb 2-1: config 0 descriptor??
[  165.499678][ T6900] input: syz1 as /devices/virtual/input/input11
[  165.549236][ T6047] usb 3-1: selecting invalid altsetting 0
[  165.556355][ T6047] usb 3-1: Could not set interface, error -22
[  165.576088][ T6047] usb 3-1: USB disconnect, device number 6
[  165.845771][   T30] audit: type=1326 audit(1774783949.736:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6afc79c799 code=0x0
[  168.009657][ T6168] udevd[6168]: symlink '../../loop5' '/dev/disk/by-diskseq/148.tmp-b7:5' failed: Read-only file system
[  168.359457][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/149.tmp-b7:0' failed: Read-only file system
[  168.920506][ T5888] udevd[5888]: symlink '../../loop2' '/dev/disk/by-diskseq/152.tmp-b7:2' failed: Read-only file system
[  169.000817][ T6910] loop4: detected capacity change from 0 to 1024
[  169.213327][ T6047] usb 2-1: USB disconnect, device number 4
[  169.732308][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system
[  169.745002][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'.
[  169.770465][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  169.796954][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system
[  169.812726][ T6921] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  170.062068][ T6919] loop0: detected capacity change from 0 to 32768
[  170.077580][ T6919] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.127423][ T1001] hfsplus: b-tree write err: -5, ino 25
[  170.177495][ T6919] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  170.190551][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/153.tmp-b7:4' failed: Read-only file system
[  170.197037][ T6919] XFS (loop0): Starting recovery (logdev: internal)
[  170.208249][ T6063] udevd[6063]: symlink '../../loop2' '/dev/disk/by-diskseq/152.tmp-b7:2' failed: Read-only file system
[  170.231199][ T1001] hfsplus: b-tree write err: -5, ino 4
[  170.263284][ T6919] XFS (loop0): Ending recovery (logdev: internal)
[  170.265375][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  170.311843][ T1001] hfsplus: b-tree write err: -5, ino 2
[  170.338290][   T30] audit: type=1800 audit(1774783954.226:41): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.299" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  170.364325][ T1001] hfsplus: b-tree write err: -5, ino 22
[  170.391977][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/152.tmp-b7:2' failed: Read-only file system
[  170.397642][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.692717][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.886639][ T5917] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  170.909477][ T5917] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  170.928473][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  170.950998][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  170.951278][ T6914] loop5: detected capacity change from 0 to 32768
[  170.963793][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  170.998540][ T5917] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  171.008445][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  171.016802][ T5917] usb 3-1: Product: syz
[  171.022245][ T5917] usb 3-1: Manufacturer: syz
[  171.036520][ T5917] cdc_wdm 3-1:1.0: skipping garbage
[  171.041985][ T5917] cdc_wdm 3-1:1.0: skipping garbage
[  171.052312][ T5917] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  171.058574][ T5917] cdc_wdm 3-1:1.0: Unknown control protocol
[  171.106258][ T6914] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  171.237344][ T6914] XFS (loop5): Ending clean mount
[  171.252138][ T5972] usb 3-1: USB disconnect, device number 7
[  171.265717][ T6914] XFS (loop5): Quotacheck needed: Please wait.
[  171.341031][ T6914] XFS (loop5): Quotacheck: Done.
[  171.912714][ T5972] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  171.977920][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'.
[  172.070804][ T5823] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  172.115477][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.313001][ T6971] loop4: detected capacity change from 0 to 32768
[  172.352177][ T6972] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  172.377380][ T5972] usb 1-1: config 0 has no interfaces?
[  172.381346][ T6971] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  172.383177][ T5972] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  172.391193][ T6971] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  172.431854][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.444707][ T5972] usb 1-1: config 0 descriptor??
[  172.450085][ T6971] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  172.461228][ T6047] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  172.472751][ T6047] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  172.588673][ T6047] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 115ms
[  172.662218][ T6047] gfs2: fsid=syz:syz.0: jid=0: Done
[  172.674989][ T6971] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  172.854452][ T6971] gfs2: fsid=syz:syz.0: found 1 quota changes
[  172.861031][ T6979] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  173.562287][ T6979] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  173.798601][   T30] audit: type=1326 audit(1774783957.686:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.0.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67cb99c799 code=0x0
[  174.079758][ T6979] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:6979 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470
[  174.231638][ T6979] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  174.355510][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) 
[  174.355544][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.355559][ T6979] Call Trace:
[  174.355569][ T6979]  <TASK>
[  174.355579][ T6979]  dump_stack_lvl+0xe8/0x150
[  174.355621][ T6979]  gfs2_withdraw+0xc3/0x1b0
[  174.355654][ T6979]  inode_go_instantiate+0xdd8/0x1220
[  174.355686][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.355717][ T6979]  ? preempt_schedule_common+0x82/0xd0
[  174.355755][ T6979]  ? __pfx_inode_go_instantiate+0x10/0x10
[  174.355787][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.355827][ T6979]  gfs2_instantiate+0x168/0x220
[  174.355863][ T6979]  gfs2_glock_wait+0x1d4/0x2a0
[  174.355899][ T6979]  do_sync+0x49a/0xcb0
[  174.355935][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.355965][ T6979]  ? _raw_spin_unlock+0x28/0x50
[  174.355991][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356020][ T6979]  ? gfs2_quota_sync+0x370/0x470
[  174.356071][ T6979]  ? __pfx_do_sync+0x10/0x10
[  174.356121][ T6979]  ? gfs2_quota_sync+0x370/0x470
[  174.356158][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356192][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356221][ T6979]  ? do_raw_spin_unlock+0xf5/0x210
[  174.356254][ T6979]  gfs2_quota_sync+0x370/0x470
[  174.356310][ T6979]  gfs2_quotad+0x2b9/0x6e0
[  174.356349][ T6979]  ? __pfx_gfs2_quotad+0x10/0x10
[  174.356382][ T6979]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  174.356410][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356442][ T6979]  ? __kthread_parkme+0x7a/0x1f0
[  174.356479][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356520][ T6979]  kthread+0x388/0x470
[  174.356545][ T6979]  ? __pfx_gfs2_quotad+0x10/0x10
[  174.356567][ T6979]  ? __pfx_kthread+0x10/0x10
[  174.356594][ T6979]  ret_from_fork+0x51e/0xb90
[  174.356629][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356661][ T6979]  ? __pfx_ret_from_fork+0x10/0x10
[  174.356692][ T6979]  ? srso_alias_return_thunk+0x5/0xfbef5
[  174.356721][ T6979]  ? __switch_to+0xc7d/0x1450
[  174.356756][ T6979]  ? __pfx_kthread+0x10/0x10
[  174.356783][ T6979]  ret_from_fork_asm+0x1a/0x30
[  174.356842][ T6979]  </TASK>
[  174.599395][ T6979] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  174.603573][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/152.tmp-b7:2' failed: Read-only file system
[  174.776595][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/158.tmp-b7:4' failed: Read-only file system
[  175.314022][ T6990] loop2: detected capacity change from 0 to 8
[  175.363975][   T29] usb 1-1: USB disconnect, device number 5
[  175.409876][ T6990] SQUASHFS error: xz decompression failed, data probably corrupt
[  175.442683][ T6990] SQUASHFS error: Failed to read block 0x108: -5
[  175.450760][ T6990] SQUASHFS error: Unable to read metadata cache entry [106]
[  175.473255][ T6990] SQUASHFS error: Unable to read inode 0x11f
[  175.534002][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system
[  175.558548][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system
[  175.568138][ T6063] udevd[6063]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system
[  175.615929][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system
[  175.680395][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system
[  175.715346][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system
[  175.765856][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/160.tmp-b7:2' failed: Read-only file system
[  175.941409][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/161.tmp-b7:2' failed: Read-only file system
[  176.023487][ T7010] overlayfs: upper fs does not support file handles, falling back to index=off.
[  176.092870][   T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  176.149952][ T7012] loop2: detected capacity change from 0 to 2048
[  176.199140][ T7012] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  176.286000][   T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  176.346865][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  176.385746][ T7012] syz.2.329: attempt to access beyond end of device
[  176.385746][ T7012] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  176.405026][ T7015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.434651][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  176.478852][   T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  176.510273][ T7012] syz.2.329: attempt to access beyond end of device
[  176.510273][ T7012] loop2: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  176.547295][   T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  176.603586][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.612555][ T7012] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3)
[  176.653623][   T29] usb 2-1: config 0 descriptor??
[  176.672472][ T7012] NILFS (loop2): error -5 reading inode: ino=15
[  176.752230][ T5843] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  177.281141][ T7026] loop3: detected capacity change from 0 to 32768
[  177.302672][ T5968] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  177.357507][ T7026] JBD2: Ignoring recovery information on journal
[  177.380170][   T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  177.410669][ T7026] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  177.484129][ T5968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.496359][ T5968] usb 3-1: config 0 has no interfaces?
[  177.501853][ T5968] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  177.511145][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.527935][ T5968] usb 3-1: config 0 descriptor??
[  177.558277][ T5820] ocfs2: Unmounting device (7,3) on (node local)
[  177.860505][   T30] audit: type=1326 audit(1774783961.746:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65b379c799 code=0x0
[  179.929490][ T7046] loop0: detected capacity change from 0 to 512
[  180.254305][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system
[  180.441262][ T5972] gfs2: fsid=syz:syz.0: file system withdrawn
[  180.933425][   T29] usb 2-1: USB disconnect, device number 5
[  181.207609][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system
[  181.921707][ T5968] usb 3-1: USB disconnect, device number 8
[  182.063194][ T7046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.338: missing EA_INODE flag
[  182.076510][ T7046] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  182.081867][ T7046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.338: error while reading EA inode 12 err=-117
[  182.091067][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  182.091103][    C0] EXT4-fs (loop0): initial error at time 1774783965: ext4_xattr_inode_iget:441: inode 12
[  182.091145][    C0] EXT4-fs (loop0): last error at time 1774783965: ext4_xattr_inode_iget:441: inode 12
[  182.172303][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/164.tmp-b7:3' failed: Read-only file system
[  182.199661][ T7046] loop0: lost filesystem error report for type 5 error -117
[  182.200085][ T7046] EXT4-fs (loop0): 1 orphan inode deleted
[  182.244720][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system
[  182.294652][ T7046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.313354][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  182.428668][ T6063] udevd[6063]: symlink '../../loop4' '/dev/disk/by-diskseq/158.tmp-b7:4' failed: Read-only file system
[  182.612581][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  182.735280][ T7046] syz.0.338 (pid 7046) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  182.838494][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  183.157820][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  183.183191][ T6063] udevd[6063]: symlink '../../loop4' '/dev/disk/by-diskseq/158.tmp-b7:4' failed: Read-only file system
[  183.203678][ T7058] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.356605][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.490918][ T7076] loop4: detected capacity change from 0 to 256
[  183.802562][ T6047] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  184.172490][ T6047] usb 2-1: Using ep0 maxpacket: 32
[  184.202699][ T6047] usb 2-1: config 15 has an invalid interface number: 78 but max is 1
[  184.243458][ T7091] hfsplus: unable to find HFS+ superblock
[  184.405276][ T6047] usb 2-1: config 15 has an invalid interface number: 2 but max is 1
[  184.782433][ T6047] usb 2-1: config 15 has no interface number 0
[  184.788734][ T6047] usb 2-1: config 15 has no interface number 1
[  184.914277][ T6047] usb 2-1: config 15 interface 78 has no altsetting 0
[  184.923731][ T6047] usb 2-1: config 15 interface 2 has no altsetting 0
[  184.932953][ T6047] usb 2-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09
[  184.942080][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.950359][ T6047] usb 2-1: Product: syz
[  184.954568][ T6047] usb 2-1: Manufacturer: syz
[  184.959164][ T6047] usb 2-1: SerialNumber: syz
[  185.262383][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  186.342589][   T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  186.383778][ T6047] usb 2-1: selecting invalid altsetting 0
[  186.394649][ T6047] usb 2-1: Could not set interface, error -22
[  186.444577][ T6047] usb 2-1: USB disconnect, device number 6
[  186.535121][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/170.tmp-b7:4' failed: Read-only file system
[  186.555863][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.605240][   T29] usb 3-1: config 0 has no interfaces?
[  186.611972][   T29] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  186.642576][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.682806][   T29] usb 3-1: config 0 descriptor??
[  186.698378][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/170.tmp-b7:4' failed: Read-only file system
[  187.072545][   T30] audit: type=1326 audit(1774783970.936:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65b379c799 code=0x0
[  188.301800][ T7118] loop1: detected capacity change from 0 to 128
[  188.399351][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system
[  188.415950][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.547814][ T7118] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  188.570949][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  188.579644][ T5888] udevd[5888]: symlink '../../loop1' '/dev/disk/by-diskseq/171.tmp-b7:1' failed: Read-only file system
[  188.613392][ T7118] hpfs: filesystem error: improperly stopped
[  188.628560][ T7118] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  188.649402][ T5902] usb 3-1: USB disconnect, device number 9
[  188.652550][ T7118] hpfs: You really don't want any checks? You are crazy...
[  188.692200][ T7118] hpfs: Code page index out of array
[  189.358739][ T7118] hpfs: code page support is disabled
[  189.430243][ T7118] hpfs: hpfs_map_4sectors(): unaligned read
[  189.431892][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system
[  189.478358][ T6063] udevd[6063]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  189.544507][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/171.tmp-b7:1' failed: Read-only file system
[  189.546368][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  189.556283][ T7118] hpfs: hpfs_map_4sectors(): unaligned read
[  189.587261][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/168.tmp-b7:0' failed: Read-only file system
[  189.658452][ T7118] hpfs: filesystem error: unable to find root dir
[  190.015759][ T6047] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  190.023735][ T5917] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  190.202617][ T6047] usb 3-1: Using ep0 maxpacket: 8
[  190.219166][ T6047] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  190.230662][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  190.240307][ T5917] usb 6-1: too many configurations: 102, using maximum allowed: 8
[  190.252660][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  190.271689][ T6047] usb 3-1: Product: syz
[  190.281762][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61
[  190.299983][ T5917] usb 6-1: can't read configurations, error -61
[  190.306519][ T6047] usb 3-1: Manufacturer: syz
[  190.318401][ T6047] usb 3-1: SerialNumber: syz
[  190.335697][ T6047] usb 3-1: config 0 descriptor??
[  190.356398][ T6047] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  190.455968][ T5917] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  190.637582][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  190.664747][ T5917] usb 6-1: too many configurations: 102, using maximum allowed: 8
[  190.688241][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61
[  190.724761][ T5917] usb 6-1: can't read configurations, error -61
[  190.727051][ T7148] loop0: detected capacity change from 0 to 256
[  190.737918][ T5917] usb usb6-port1: attempt power cycle
[  190.771971][ T6047] gspca_sn9c2028: read1 error -71
[  190.785382][ T6047] gspca_sn9c2028: read1 error -71
[  190.787363][ T7148] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  190.800865][ T6047] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71
[  190.845007][ T6047] usb 3-1: USB disconnect, device number 10
[  190.852806][ T7148] exFAT-fs (loop0): valid_size(150994954) is greater than size(10)
[  190.883741][   T30] audit: type=1800 audit(1774783974.776:45): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.373" name="file1" dev="loop0" ino=1048624 res=0 errno=0
[  191.093772][ T5917] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  191.182122][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  191.311645][ T5917] usb 6-1: too many configurations: 102, using maximum allowed: 8
[  191.634327][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61
[  191.665194][ T5917] usb 6-1: can't read configurations, error -61
[  191.669948][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  191.802492][ T5917] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  191.864714][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  191.867041][ T6019] udevd[6019]: symlink '../../loop1' '/dev/disk/by-diskseq/172.tmp-b7:1' failed: Read-only file system
[  191.870590][ T5917] usb 6-1: too many configurations: 102, using maximum allowed: 8
[  191.983867][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system
[  192.207030][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61
[  192.216040][ T5917] usb 6-1: can't read configurations, error -61
[  192.225145][ T5917] usb usb6-port1: unable to enumerate USB device
[  192.380442][ T7150] loop4: detected capacity change from 0 to 32768
[  192.401277][ T7150] jfs_mount: Mount Failure: File System Dirty.
[  192.425631][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  192.462431][ T7150] Mount JFS Failure: -22
[  192.466710][ T7150] jfs_mount failed w/return code = -22
[  192.555906][ T7174] syz.2.377 uses obsolete (PF_INET,SOCK_PACKET)
[  192.600657][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system
[  192.728173][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/165.tmp-b7:3' failed: Read-only file system
[  193.982774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  194.392425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  194.459409][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.471607][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.506074][ T7176] loop0: detected capacity change from 0 to 32768
[  194.555047][ T7176] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  194.561201][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/175.tmp-b7:4' failed: Read-only file system
[  194.563908][ T7176] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  194.576418][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-uuid/3550edcd-4d53-4e80-911f-c2d0fbc49ebf.tmp-b7:4' failed: Read-only file system
[  194.588648][ T6168] udevd[6168]: symlink '../../loop5' '/dev/disk/by-diskseq/159.tmp-b7:5' failed: Read-only file system
[  194.653103][ T7176] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  194.662793][   T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  194.669562][   T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  194.885078][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  194.906542][   T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 236ms
[  194.942806][   T29] gfs2: fsid=syz:syz.0: jid=0: Done
[  194.965891][ T7176] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  195.137616][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'.
[  195.194198][ T7198] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  195.665500][ T7201] loop5: detected capacity change from 0 to 32768
[  196.175690][ T7176] gfs2: fsid=syz:syz.0: found 2 quota changes
[  197.212210][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  197.449192][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  197.476979][ T6019] udevd[6019]: symlink '../../loop4' '/dev/disk/by-diskseq/177.tmp-b7:4' failed: Read-only file system
[  197.699097][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  198.128996][ T6168] udevd[6168]: symlink '../../loop0' '/dev/disk/by-diskseq/176.tmp-b7:0' failed: Read-only file system
[  198.539107][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.558745][   T24] usb 6-1: config 0 descriptor??
[  198.567054][   T24] cp210x 6-1:0.0: cp210x converter detected
[  198.573147][ T7220] kAFS: unable to lookup cell '(,c¾ûL'
[  198.575848][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/176.tmp-b7:0' failed: Read-only file system
[  198.750207][ T7224] loop1: detected capacity change from 0 to 256
[  198.786326][ T6063] udevd[6063]: symlink '../../loop4' '/dev/disk/by-diskseq/177.tmp-b7:4' failed: Read-only file system
[  198.860546][ T6019] udevd[6019]: symlink '../../loop0' '/dev/disk/by-diskseq/180.tmp-b7:0' failed: Read-only file system
[  198.890399][ T5888] udevd[5888]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  198.950759][ T6168] udevd[6168]: symlink '../../loop1' '/dev/disk/by-diskseq/172.tmp-b7:1' failed: Read-only file system
[  198.969604][   T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  199.066442][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[  199.111716][ T6168] udevd[6168]: symlink '../../loop4' '/dev/disk/by-diskseq/177.tmp-b7:4' failed: Read-only file system
[  199.155289][ T5888] udevd[5888]: symlink '../../loop1' '/dev/disk/by-diskseq/181.tmp-b7:1' failed: Read-only file system
[  199.186171][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'.
[  199.209022][   T24] usb 6-1: USB disconnect, device number 12
[  199.223554][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  199.261736][ T7235] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  199.274786][   T24] cp210x 6-1:0.0: device disconnected
[  199.432544][ T6047] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  200.016052][ T6047] usb 2-1: Using ep0 maxpacket: 32
[  200.614820][ T7242] loop3: detected capacity change from 0 to 256
[  200.846418][ T7242] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  201.352554][ T7245] loop4: detected capacity change from 0 to 32768
[  201.364987][ T6047] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  201.378307][ T6047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.402059][ T6047] usb 2-1: config 0 has no interface number 0
[  201.695927][ T7242] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  201.706322][ T7245] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  201.714589][ T7245] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  201.724171][   T30] audit: type=1800 audit(1774783985.596:46): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file1" dev="loop3" ino=1048625 res=0 errno=0
[  201.746253][ T6047] usb 2-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  201.779749][ T6047] usb 2-1: config 0 interface 8 has no altsetting 0
[  201.796639][ T6047] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  201.806492][ T6047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.817136][ T6047] usb 2-1: Product: syz
[  201.821431][ T6047] usb 2-1: Manufacturer: syz
[  201.826194][ T6047] usb 2-1: SerialNumber: syz
[  201.834984][ T6047] usb 2-1: config 0 descriptor??
[  201.945811][ T7245] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  201.955396][ T5917] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  201.962186][ T5917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  202.094477][ T6047] ath6kl: Failed to submit usb control message: -71
[  202.117924][ T6047] ath6kl: unable to send the bmi data to the device: -71
[  202.132478][ T6047] ath6kl: Unable to send get target info: -71
[  202.149873][ T6047] ath6kl: Failed to init ath6kl core: -71
[  202.215530][ T6047] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71
[  202.222690][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/183.tmp-b7:3' failed: Read-only file system
[  202.280058][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system
[  202.304141][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system
[  202.349437][ T6063] udevd[6063]: symlink '../../loop5' '/dev/disk/by-diskseq/179.tmp-b7:5' failed: Read-only file system
[  202.404535][ T6047] usb 2-1: USB disconnect, device number 7
[  202.434649][ T5917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 472ms
[  202.460333][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/183.tmp-b7:3' failed: Read-only file system
[  202.562205][ T5917] gfs2: fsid=syz:syz.0: jid=0: Done
[  202.602431][ T7245] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  202.655139][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/183.tmp-b7:3' failed: Read-only file system
[  202.665121][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/184.tmp-b7:4' failed: Read-only file system
[  202.813870][ T6019] udevd[6019]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system
[  202.847395][ T6168] udevd[6168]: symlink '../../loop2' '/dev/disk/by-diskseq/163.tmp-b7:2' failed: Read-only file system
[  202.941865][ T7245] gfs2: fsid=syz:syz.0: found 2 quota changes
[  202.966082][ T6168] udevd[6168]: symlink '../../loop1' '/dev/disk/by-diskseq/182.tmp-b7:1' failed: Read-only file system
[  203.097327][ T7270] input: syz1 as /devices/virtual/input/input13
[  203.223462][   T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  203.434512][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  203.456374][   T29] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  203.479543][ T7253] loop0: detected capacity change from 0 to 32768
[  203.656880][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.672038][   T29] usb 4-1: config 0 descriptor??
[  203.684877][ T7266] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.686189][ T7253] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  204.464564][   T29] usbhid 4-1:0.0: can't add hid device: -71
[  204.506344][   T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  204.545750][ T7253] XFS (loop0): Ending clean mount
[  204.616428][   T29] usb 4-1: USB disconnect, device number 4
[  204.635545][ T7253] XFS (loop0): Quotacheck needed: Please wait.
[  204.954521][ T7253] XFS (loop0): Quotacheck: Done.
[  205.675419][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.085341][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  206.091380][ T5844] Bluetooth: hci3: command 0x0406 tx timeout
[  206.099210][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  206.105311][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  206.313798][ T7306] netlink: 124 bytes leftover after parsing attributes in process `syz.1.422'.
[  207.001119][ T7311] loop2: detected capacity change from 0 to 1024
[  209.473635][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system
[  209.709029][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  209.762037][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system
[  209.977732][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  210.024272][ T7313] loop4: detected capacity change from 0 to 512
[  210.138476][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-diskseq/190.tmp-b7:4' failed: Read-only file system
[  210.162621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  210.166887][ T7313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.178356][ T5888] udevd[5888]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  210.225410][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system
[  210.238795][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  210.275349][ T6168] udevd[6168]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system
[  210.291708][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  210.448675][ T7319] input: syz1 as /devices/virtual/input/input14
[  210.558928][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.427'.
[  210.643591][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.804707][ T7345] kernel profiling enabled (shift: 6)
[  211.883626][ T7346] loop5: detected capacity change from 0 to 256
[  213.613995][   T30] audit: type=1800 audit(1774783997.506:47): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.434" name="file1" dev="loop5" ino=1048628 res=0 errno=0
[  213.647411][ T7346] netlink: 'syz.5.434': attribute type 1 has an invalid length.
[  214.854435][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/193.tmp-b7:5' failed: Read-only file system
[  214.904073][ T5888] udevd[5888]: symlink '../../loop0' '/dev/disk/by-diskseq/188.tmp-b7:0' failed: Read-only file system
[  214.923278][ T7371] input: syz1 as /devices/virtual/input/input15
[  214.939409][ T6063] udevd[6063]: symlink '../../loop1' '/dev/disk/by-diskseq/182.tmp-b7:1' failed: Read-only file system
[  214.965213][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/193.tmp-b7:5' failed: Read-only file system
[  215.018253][ T6019] udevd[6019]: symlink '../../loop5' '/dev/disk/by-diskseq/194.tmp-b7:5' failed: Read-only file system
[  215.105467][ T5917] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  215.154658][ T7376] netlink: 124 bytes leftover after parsing attributes in process `syz.5.447'.
[  215.186682][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/191.tmp-b7:2' failed: Read-only file system
[  215.217094][ T5888] udevd[5888]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system
[  215.226837][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'.
[  215.286586][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  215.308015][ T5917] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  215.357538][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.469700][ T5917] usb 2-1: config 0 descriptor??
[  215.510165][ T5917] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  215.702617][ T7384] loop2: detected capacity change from 0 to 2048
[  215.787172][ T7384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.449'.
[  215.797199][ T7384] ------------[ cut here ]------------
[  215.803167][ T7384] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16)
[  215.815565][ T7384] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#0: syz.2.449/7384
[  215.825175][ T7384] Modules linked in:
[  215.829301][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) 
[  215.838567][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.849858][ T7384] RIP: 0010:u32_change+0x1daf/0x2720
[  215.855243][ T7384] Code: 3d a2 2b 43 06 01 75 33 e8 be 31 0d f8 eb 50 e8 b7 31 0d f8 48 8d 3d 00 60 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 9e e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 92 31 0d f8 eb 24 e8 8b 31 0d f8
[  215.874904][ T7384] RSP: 0018:ffffc90004126fc0 EFLAGS: 00010287
[  215.880993][ T7384] RAX: ffffffff89b87d19 RBX: ffff8880263d4000 RCX: 0000000000000010
[  215.889019][ T7384] RDX: ffffffff8ce19ec0 RSI: 0000000000000020 RDI: ffffffff9020dd20
[  215.898165][ T7384] RBP: ffffc90004127178 R08: 0000000000000dc0 R09: 00000000ffffffff
[  215.906709][ T7384] R10: dffffc0000000000 R11: fffffbfff20238f7 R12: ffff8880263d44e8
[  215.914900][ T7384] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001
[  215.922923][ T7384] FS:  00007f65b45e66c0(0000) GS:ffff888125459000(0000) knlGS:0000000000000000
[  215.931858][ T7384] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  215.938644][ T7384] CR2: 000000110c3f1d2c CR3: 000000004992a000 CR4: 0000000000350ef0
[  215.946658][ T7384] Call Trace:
[  215.949940][ T7384]  <TASK>
[  215.952919][ T7384]  ? __pfx_u32_change+0x10/0x10
[  215.957783][ T7384]  ? lockdep_hardirqs_on+0x7a/0x110
[  215.963037][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  215.968699][ T7384]  ? __pfx_u32_get+0x10/0x10
[  215.973337][ T7384]  tc_new_tfilter+0xff8/0x1780
[  215.978146][ T7384]  ? __pfx_tc_new_tfilter+0x10/0x10
[  215.983404][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  215.989060][ T7384]  ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0
[  215.995750][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.002872][ T7384]  ? __pfx_tc_new_tfilter+0x10/0x10
[  216.008096][ T7384]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  216.013112][ T7384]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  216.018252][ T7384]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.023760][ T7384]  ? ref_tracker_free+0x693/0x840
[  216.028796][ T7384]  ? __copy_skb_header+0xa3/0x4a0
[  216.033881][ T7384]  ? __pfx_ref_tracker_free+0x10/0x10
[  216.039260][ T7384]  ? __skb_clone+0x63/0x7a0
[  216.043828][ T7384]  netlink_rcv_skb+0x232/0x4b0
[  216.048605][ T7384]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.054140][ T7384]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  216.055551][ T5888] udevd[5888]: symlink '../../loop2' '/dev/disk/by-diskseq/195.tmp-b7:2' failed: Read-only file system
[  216.059425][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.059480][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.081771][ T7384]  netlink_unicast+0x80f/0x9b0
[  216.086652][ T7384]  ? __pfx_netlink_unicast+0x10/0x10
[  216.091962][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.097676][ T7384]  ? skb_put+0x11b/0x210
[  216.102946][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.108693][ T7384]  netlink_sendmsg+0x813/0xb40
[  216.114430][ T7384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.119735][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.125439][ T7384]  ? aa_sock_msg_perm+0xf1/0x1b0
[  216.130411][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.136146][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.141799][ T7384]  ____sys_sendmsg+0x972/0x9f0
[  216.146810][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.152501][ T7384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.157814][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.163593][ T7384]  ? import_iovec+0x73/0xa0
[  216.168126][ T7384]  ___sys_sendmsg+0x2a5/0x360
[  216.172875][ T7384]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.178098][ T7384]  ? preempt_schedule_common+0x82/0xd0
[  216.183613][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.189260][ T7384]  ? preempt_schedule_thunk+0x16/0x30
[  216.192982][ T6019] udevd[6019]: symlink '../../loop2' '/dev/disk/by-diskseq/195.tmp-b7:2' failed: Read-only file system
[  216.194715][ T7384]  ? __fget_files+0x2a/0x420
[  216.208720][ T6168] udevd[6168]: symlink '../../loop0' '/dev/disk/by-diskseq/188.tmp-b7:0' failed: Read-only file system
[  216.211094][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.211130][ T7384]  ? __fget_files+0x3a0/0x420
[  216.233111][ T7384]  __sys_sendmmsg+0x27c/0x4e0
[  216.237815][ T7384]  ? __pfx___sys_sendmmsg+0x10/0x10
[  216.243116][ T7384]  ? do_futex+0x395/0x420
[  216.247498][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.253218][ T7384]  ? rcu_is_watching+0x15/0xb0
[  216.258025][ T7384]  __x64_sys_sendmmsg+0xa0/0xc0
[  216.262934][ T7384]  do_syscall_64+0x14d/0xf80
[  216.267547][ T7384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.273677][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.279333][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.285377][ T7384] RIP: 0033:0x7f65b379c799
[  216.289795][ T7384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.310208][ T7384] RSP: 002b:00007f65b45e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  216.319265][ T7384] RAX: ffffffffffffffda RBX: 00007f65b3a16180 RCX: 00007f65b379c799
[  216.327316][ T7384] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007
[  216.335347][ T7384] RBP: 00007f65b3832c99 R08: 0000000000000000 R09: 0000000000000000
[  216.343393][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.351369][ T7384] R13: 00007f65b3a16218 R14: 00007f65b3a16180 R15: 00007ffe50694658
[  216.359401][ T7384]  </TASK>
[  216.362475][ T7384] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  216.369772][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) 
[  216.378953][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  216.388998][ T7384] Call Trace:
[  216.392270][ T7384]  <TASK>
[  216.395189][ T7384]  vpanic+0x56c/0xa60
[  216.399176][ T7384]  ? __pfx__printk+0x10/0x10
[  216.403759][ T7384]  ? __pfx_vpanic+0x10/0x10
[  216.408265][ T7384]  ? is_bpf_text_address+0x292/0x2b0
[  216.413556][ T7384]  ? is_bpf_text_address+0x26/0x2b0
[  216.418760][ T7384]  panic+0xc5/0xd0
[  216.422485][ T7384]  ? __pfx_panic+0x10/0x10
[  216.426921][ T7384]  __warn+0x315/0x4f0
[  216.430900][ T7384]  ? u32_change+0x1da0/0x2720
[  216.435579][ T7384]  ? u32_change+0x1da0/0x2720
[  216.440261][ T7384]  __report_bug+0x29a/0x540
[  216.444770][ T7384]  ? u32_change+0x1da0/0x2720
[  216.449531][ T7384]  ? __pfx___report_bug+0x10/0x10
[  216.454550][ T7384]  ? lockdep_hardirqs_on+0x7a/0x110
[  216.459755][ T7384]  ? u32_change+0x1db4/0x2720
[  216.464435][ T7384]  report_bug_entry+0x19a/0x290
[  216.469284][ T7384]  ? u32_change+0x1daf/0x2720
[  216.473957][ T7384]  ? u32_change+0x1db4/0x2720
[  216.478632][ T7384]  handle_bug+0xce/0x200
[  216.483313][ T7384]  exc_invalid_op+0x1a/0x50
[  216.487820][ T7384]  asm_exc_invalid_op+0x1a/0x20
[  216.492663][ T7384] RIP: 0010:u32_change+0x1daf/0x2720
[  216.497947][ T7384] Code: 3d a2 2b 43 06 01 75 33 e8 be 31 0d f8 eb 50 e8 b7 31 0d f8 48 8d 3d 00 60 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 c0 9e e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 92 31 0d f8 eb 24 e8 8b 31 0d f8
[  216.517633][ T7384] RSP: 0018:ffffc90004126fc0 EFLAGS: 00010287
[  216.523693][ T7384] RAX: ffffffff89b87d19 RBX: ffff8880263d4000 RCX: 0000000000000010
[  216.531652][ T7384] RDX: ffffffff8ce19ec0 RSI: 0000000000000020 RDI: ffffffff9020dd20
[  216.539612][ T7384] RBP: ffffc90004127178 R08: 0000000000000dc0 R09: 00000000ffffffff
[  216.547572][ T7384] R10: dffffc0000000000 R11: fffffbfff20238f7 R12: ffff8880263d44e8
[  216.555536][ T7384] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001
[  216.563509][ T7384]  ? u32_change+0x1d99/0x2720
[  216.568212][ T7384]  ? __pfx_u32_change+0x10/0x10
[  216.573055][ T7384]  ? lockdep_hardirqs_on+0x7a/0x110
[  216.578253][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.583892][ T7384]  ? __pfx_u32_get+0x10/0x10
[  216.588481][ T7384]  tc_new_tfilter+0xff8/0x1780
[  216.593291][ T7384]  ? __pfx_tc_new_tfilter+0x10/0x10
[  216.598522][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.604172][ T7384]  ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0
[  216.610778][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.616415][ T7384]  ? __pfx_tc_new_tfilter+0x10/0x10
[  216.621615][ T7384]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  216.626556][ T7384]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  216.631665][ T7384]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.637123][ T7384]  ? ref_tracker_free+0x693/0x840
[  216.642143][ T7384]  ? __copy_skb_header+0xa3/0x4a0
[  216.647170][ T7384]  ? __pfx_ref_tracker_free+0x10/0x10
[  216.652534][ T7384]  ? __skb_clone+0x63/0x7a0
[  216.657045][ T7384]  netlink_rcv_skb+0x232/0x4b0
[  216.661806][ T7384]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  216.667257][ T7384]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  216.672529][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.678172][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.683800][ T7384]  netlink_unicast+0x80f/0x9b0
[  216.688576][ T7384]  ? __pfx_netlink_unicast+0x10/0x10
[  216.693864][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.699493][ T7384]  ? skb_put+0x11b/0x210
[  216.703732][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.709362][ T7384]  netlink_sendmsg+0x813/0xb40
[  216.714135][ T7384]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.719417][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.725048][ T7384]  ? aa_sock_msg_perm+0xf1/0x1b0
[  216.729993][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.735630][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.741262][ T7384]  ____sys_sendmsg+0x972/0x9f0
[  216.746024][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.751749][ T7384]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.757132][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.762761][ T7384]  ? import_iovec+0x73/0xa0
[  216.767263][ T7384]  ___sys_sendmsg+0x2a5/0x360
[  216.771943][ T7384]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.777139][ T7384]  ? preempt_schedule_common+0x82/0xd0
[  216.782598][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.788229][ T7384]  ? preempt_schedule_thunk+0x16/0x30
[  216.793620][ T7384]  ? __fget_files+0x2a/0x420
[  216.798218][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.803846][ T7384]  ? __fget_files+0x3a0/0x420
[  216.808537][ T7384]  __sys_sendmmsg+0x27c/0x4e0
[  216.813221][ T7384]  ? __pfx___sys_sendmmsg+0x10/0x10
[  216.818416][ T7384]  ? do_futex+0x395/0x420
[  216.822783][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.828412][ T7384]  ? rcu_is_watching+0x15/0xb0
[  216.833184][ T7384]  __x64_sys_sendmmsg+0xa0/0xc0
[  216.838040][ T7384]  do_syscall_64+0x14d/0xf80
[  216.842632][ T7384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.848690][ T7384]  ? srso_alias_return_thunk+0x5/0xfbef5
[  216.854321][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.860204][ T7384] RIP: 0033:0x7f65b379c799
[  216.864609][ T7384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.884218][ T7384] RSP: 002b:00007f65b45e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  216.892642][ T7384] RAX: ffffffffffffffda RBX: 00007f65b3a16180 RCX: 00007f65b379c799
[  216.900606][ T7384] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007
[  216.908567][ T7384] RBP: 00007f65b3832c99 R08: 0000000000000000 R09: 0000000000000000
[  216.916526][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.924487][ T7384] R13: 00007f65b3a16218 R14: 00007f65b3a16180 R15: 00007ffe50694658
[  216.932468][ T7384]  </TASK>
[  216.935803][ T7384] Kernel Offset: disabled
[  216.940116][ T7384] Rebooting in 86400 seconds..