last executing test programs:

10.017138772s ago: executing program 2 (id=560):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1e", 0x4e}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

9.153981066s ago: executing program 2 (id=563):
set_mempolicy(0x3, 0x0, 0x7)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000001, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x400, 0x1, 0x4, 0x4, 0x3], 0x1, 0x2a80})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000840)="f2435f01000880040000008508009ef2823803a5e4b56856999ab73a514b4000f1c2b32b67e78d815c2e75b4ed2709df3125d100efdb50a63bdeb777db5661a8704fc7e7ffeb2442c2a05d86a86a08def5c3ad448d402b35546104e3520432ae9c79ae761dc68925e8cb29fde3a3b2f90b5d2f1d2be8dc3e63c35266c91fb3c24fb615a7605246f433a004083a3aa57e814b3f89573e2f5beb0b919f4626664fb6eb7a59bed445fe006353e8d9589481d9e7cbbadd4040d63f1a7dc8ac3b3e5ebf52a7e47518af9218911043b8664e5396f879280c9b0cc5d9af268356b7a114447e32f1581e4e3fbdeb73198a47c769ba54b460c1f5ba23b21141afa7077c825805b143b3e8b49fdeda", 0x10a, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x5de8, 0x3, 0x10, 0x2, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x80], 0xd000, 0x200306})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

9.087417998s ago: executing program 3 (id=565):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
gettimeofday(0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodatacow}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})
r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa00)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000001540)={0x2, [0xcb, 0xecde, 0x1], [{0xffffffff, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xffffff14, 0x1, 0x0, 0x0, 0x1}, {0xa, 0x3af0231d, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x0, 0x1}, {0xfffffff7, 0xc, 0x0, 0x1, 0x1, 0x1}, {0xaa64, 0x100, 0x1, 0x1, 0x1}, {0x2000, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7c591eec, 0x80000000, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x8, 0xd, 0x1}, {0xb, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0xa071, 0x0, 0x1, 0x0, 0x1}], 0x1})

8.470660036s ago: executing program 2 (id=566):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

8.419273008s ago: executing program 2 (id=567):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001c00))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

8.159165115s ago: executing program 3 (id=568):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

7.330430609s ago: executing program 3 (id=569):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31)
unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x200)
r4 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})

7.078919956s ago: executing program 2 (id=570):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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")
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080)}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000005a00)={0x11, 0xc, &(0x7f0000005880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000005940)=ANY=[@ANYBLOB="180000233cd3d38ed2ec8b86b15370a4188700030000000000f30b8bcd5bc40ca11bc468917ff03b7a30e977e8aec6f4361158a7ee68d15962ea6484917c00d79d766b5442bef7a92490aff13ab18be86731add208bd8359dca7f534d385bdbd3700b9c7cef16d2f13ebe349e3b1baee38cf0646a8dc3f9e32d17fa4a9689a0460c2df174e153b64372e8f7309f5e920ddf1d8e5830bb3ceea95a60086be"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000005900))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x10012, r5, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
bind$inet(r6, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendfile(r2, r7, 0x0, 0x7ffff004)

6.26618293s ago: executing program 4 (id=571):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

6.095717615s ago: executing program 4 (id=573):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a", 0x75}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

5.974200178s ago: executing program 4 (id=574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80d40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0))

5.060169634s ago: executing program 4 (id=578):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
gettimeofday(0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b6a, &(0x7f0000000040)={0x200b, 0x200d, 0x2000d, 0x7, 0x200e, 0x0})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodatacow}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})
r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa00)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, &(0x7f0000001540)={0x2, [0xcb, 0xecde, 0x1], [{0xffffffff, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xffffff14, 0x1, 0x0, 0x0, 0x1}, {0xa, 0x3af0231d, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x0, 0x1}, {0xfffffff7, 0xc, 0x0, 0x1, 0x1, 0x1}, {0xaa64, 0x100, 0x1, 0x1, 0x1}, {0x2000, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x7c591eec, 0x80000000, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1}, {0x8, 0xd, 0x1}, {0xb, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0xa071, 0x0, 0x1, 0x0, 0x1}], 0x1})

4.803773992s ago: executing program 0 (id=579):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

4.121307061s ago: executing program 0 (id=580):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001c00))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

2.942437085s ago: executing program 0 (id=582):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cts-cbc-aes-ce,blake2b-384)\x00'}, 0x58)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.881226367s ago: executing program 2 (id=583):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="400d12"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_MCE_KILL(0x23, 0x8, 0x7fffffffeffe)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e24, 0x2, 0x4e24, 0x0, 0x0, 0x80, 0x80, 0x2f}, {0x948, 0x0, 0x800, 0xbd4, 0x2a, 0x401, 0x4, 0x7}, {0x7, 0x2, 0x7, 0x6}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x2, 0x8, 0x7, 0x7fffffff, 0x8}}, 0xe8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
syz_usb_ep_write(r0, 0x81, 0xcc, &(0x7f0000000040)="b9425b44651dd20000963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fcea00080000000000004cd9f5d3969890522c7715531d459db3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84fffdec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b44800448a")

2.76046466s ago: executing program 3 (id=584):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

2.700568292s ago: executing program 3 (id=585):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

2.570317316s ago: executing program 3 (id=586):
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8f)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, r2, 0x1, 0xfffffffd, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x800002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000, 0xa00}])

2.470591439s ago: executing program 1 (id=587):
set_mempolicy(0x3, 0x0, 0x7)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000001, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x400, 0x1, 0x4, 0x4, 0x3], 0x1, 0x2a80})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000840)="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", 0x10a, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x5de8, 0x3, 0x10, 0x2, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x80], 0xd000, 0x200306})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

2.437592979s ago: executing program 4 (id=588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80d40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0))

2.376278781s ago: executing program 0 (id=589):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

2.304938433s ago: executing program 1 (id=590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

2.258759894s ago: executing program 0 (id=591):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001c00))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.208260815s ago: executing program 1 (id=592):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001c00))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

1.116828708s ago: executing program 0 (id=593):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080)}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000005a00)={0x11, 0xc, &(0x7f0000005880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000005940)=ANY=[@ANYBLOB="180000233cd3d38ed2ec8b86b15370a4188700030000000000f30b8bcd5bc40ca11bc468917ff03b7a30e977e8aec6f4361158a7ee68d15962ea6484917c00d79d766b5442bef7a92490aff13ab18be86731add208bd8359dca7f534d385bdbd3700b9c7cef16d2f13ebe349e3b1baee38cf0646a8dc3f9e32d17fa4a9689a0460c2df174e153b64372e8f7309f5e920ddf1d8e5830bb3ceea95a60086be"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
timer_settime(0x0, 0x0, &(0x7f0000000200), &(0x7f0000005900))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x10012, r5, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
bind$inet(r6, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9)
write$cgroup_type(r7, &(0x7f00000001c0), 0x9)
sendfile(r2, r7, 0x0, 0x7ffff004)

449.529066ms ago: executing program 4 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31)
unlinkat(r3, &(0x7f00000000c0)='./file0\x00', 0x200)
r4 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})

150.712705ms ago: executing program 1 (id=595):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f1", 0x64}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

53.725218ms ago: executing program 1 (id=596):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c", 0x62}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/5, 0x5}], 0x8}, 0x0)

0s ago: executing program 1 (id=597):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/49, 0x31)
unlinkat(r4, &(0x7f00000000c0)='./file0\x00', 0x200)
openat$nullb(0xffffffffffffff9c, 0x0, 0x420081, 0x0)

kernel console output (not intermixed with test programs):

 bcdDevice=b5.55
[  124.888507][ T1110] usb 5-1: config 0 descriptor??
[  124.893594][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.937719][ T1325] usb 2-1: Product: syz
[  124.941927][ T1325] usb 2-1: Manufacturer: syz
[  125.029033][ T1325] usb 2-1: SerialNumber: syz
[  125.067339][ T1325] usb 2-1: config 0 descriptor??
[  125.106094][ T1325] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  125.139197][ T5142] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  125.505168][ T1110] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  125.529980][ T1110] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input8
[  125.679040][ T5127] loop1: detected capacity change from 0 to 512
[  125.859210][ T1110] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  125.893983][ T1325] sonixb 2-1:0.0: Error writing register 01: -110
[  125.910743][ T1325] sonixb: probe of 2-1:0.0 failed with error -110
[  125.972964][ T5127] EXT4-fs (loop1): 1 truncate cleaned up
[  126.007804][ T5127] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  126.094039][ T1110] usb 5-1: USB disconnect, device number 5
[  126.265782][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  126.275823][ T5155] fido_id[5155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  126.439081][ T4396] usb 2-1: USB disconnect, device number 4
[  127.494799][ T5152] loop0: detected capacity change from 0 to 40427
[  127.624642][ T5152] F2FS-fs (loop0): invalid crc value
[  128.355402][ T5152] F2FS-fs (loop0): Found nat_bits in checkpoint
[  128.655712][ T5152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  128.903983][ T4571] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  129.324131][ T4571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.353958][ T4571] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  129.416280][ T4571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.435055][ T5178] FAULT_INJECTION: forcing a failure.
[  129.435055][ T5178] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  129.448216][ T5178] CPU: 1 PID: 5178 Comm: syz.1.219 Not tainted syzkaller #0
[  129.455507][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  129.465577][ T5178] Call Trace:
[  129.468858][ T5178]  <TASK>
[  129.471786][ T5178]  dump_stack_lvl+0x188/0x250
[  129.476490][ T5178]  ? show_regs_print_info+0x20/0x20
[  129.481692][ T5178]  ? load_image+0x410/0x410
[  129.486201][ T5178]  ? __lock_acquire+0x7b50/0x7b50
[  129.491236][ T5178]  should_fail+0x383/0x4b0
[  129.495661][ T5178]  _copy_from_user+0x2e/0x170
[  129.500372][ T5178]  __copy_msghdr_from_user+0xc9/0x630
[  129.505763][ T5178]  ? mark_lock+0x94/0x320
[  129.510099][ T5178]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  129.515402][ T5178]  ___sys_sendmsg+0x19a/0x2e0
[  129.520101][ T5178]  ? __sys_sendmsg+0x290/0x290
[  129.524866][ T5178]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  129.530858][ T5178]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  129.536507][ T5178]  ? __fdget+0x183/0x210
[  129.540757][ T5178]  __se_sys_sendmsg+0x1b7/0x2a0
[  129.545611][ T5178]  ? __x64_sys_sendmsg+0x80/0x80
[  129.550547][ T5178]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  129.556543][ T5178]  ? lockdep_hardirqs_on+0x94/0x140
[  129.561754][ T5178]  do_syscall_64+0x4c/0xa0
[  129.566179][ T5178]  ? clear_bhb_loop+0x30/0x80
[  129.570858][ T5178]  ? clear_bhb_loop+0x30/0x80
[  129.575558][ T5178]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.581462][ T5178] RIP: 0033:0x7f07ddef1e99
[  129.585963][ T5178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.606005][ T5178] RSP: 002b:00007f07dc108028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.614430][ T5178] RAX: ffffffffffffffda RBX: 00007f07de17a180 RCX: 00007f07ddef1e99
[  129.622400][ T5178] RDX: 0000000020004000 RSI: 00002000000000c0 RDI: 0000000000000005
[  129.630377][ T5178] RBP: 00007f07dc108090 R08: 0000000000000000 R09: 0000000000000000
[  129.638356][ T5178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.646508][ T5178] R13: 00007f07de17a218 R14: 00007f07de17a180 R15: 00007ffd12cefdd8
[  129.654498][ T5178]  </TASK>
[  129.751671][ T4571] usb 5-1: config 0 descriptor??
[  130.755109][ T4571] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  130.777478][ T4571] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input9
[  130.908509][ T4571] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  131.125267][ T4571] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  131.343919][    C1] keytouch 0003:0926:3333.0005: Event data for report 0 was too short (8 vs 4)
[  131.514369][ T4571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.637736][ T4571] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  131.799979][ T4571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.029598][ T4571] usb 1-1: config 0 descriptor??
[  132.091672][ T4176] usb 5-1: USB disconnect, device number 6
[  132.370405][ T5215] batman_adv: batadv0: Adding interface: dummy0
[  132.438197][ T5215] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.616616][ T5215] batman_adv: batadv0: Interface activated: dummy0
[  132.685411][ T5215] batadv0: mtu less than device minimum
[  132.825173][ T4571] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  132.851871][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.864347][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.876707][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.889059][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.901412][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.913766][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.926159][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.934481][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  132.938355][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.942844][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  132.954975][ T5215] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  133.008104][ T4571] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input10
[  133.220326][ T4571] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  133.265084][ T4571] usb 1-1: USB disconnect, device number 5
[  133.411903][ T5228] fido_id[5228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  134.065080][ T4228] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.654372][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.665859][ T4228] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  134.675758][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.692055][ T4228] usb 4-1: config 0 descriptor??
[  135.500383][ T5251] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  136.319171][ T4228] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  136.330300][ T4228] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input11
[  136.521939][ T4228] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  136.592802][ T5243] loop0: detected capacity change from 0 to 40427
[  136.670405][ T5243] F2FS-fs (loop0): invalid crc value
[  136.733713][ T5243] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.791991][ T5282] batman_adv: batadv0: Adding interface: dummy0
[  136.830735][ T5282] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.893906][    C1] keytouch 0003:0926:3333.0007: Event data for report 0 was too short (8 vs 4)
[  136.968831][ T5282] batman_adv: batadv0: Interface activated: dummy0
[  137.118785][ T4228] usb 4-1: USB disconnect, device number 4
[  137.204935][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  138.225351][ T4567] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  138.885093][ T4567] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  139.004267][ T4567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.015187][ T4567] usb 3-1: config 0 descriptor??
[  139.071131][ T4567] gspca_main: cpia1-2.14.0 probing 0813:0001
[  139.078603][ T5324] pim6reg0: tun_chr_ioctl cmd 2147767520
[  139.695647][ T4392] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  139.697620][ T4567] gspca_cpia1: usb_control_msg 03, error -71
[  139.754008][ T4567] gspca_cpia1: usb_control_msg 01, error -71
[  139.760123][ T4567] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  139.832887][ T5339] process 'syz.1.257' launched '/dev/fd/7' with NULL argv: empty string added
[  139.860322][ T4567] usb 3-1: USB disconnect, device number 2
[  140.513175][ T4392] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  140.526513][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.544094][ T4392] usb 1-1: Product: syz
[  140.554733][ T4392] usb 1-1: Manufacturer: syz
[  140.561959][ T4392] usb 1-1: SerialNumber: syz
[  140.665528][ T4392] usb 1-1: config 0 descriptor??
[  140.937471][ T5353] loop3: detected capacity change from 0 to 4096
[  140.997371][ T4392] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  141.016149][ T5353] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  141.109088][ T5353] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  141.150458][ T5353] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  141.347137][ T5370] FAULT_INJECTION: forcing a failure.
[  141.347137][ T5370] name failslab, interval 1, probability 0, space 0, times 1
[  141.448583][ T5345] loop2: detected capacity change from 0 to 40427
[  141.484683][ T5318] loop0: detected capacity change from 0 to 512
[  141.528391][ T5353] ntfs: volume version 3.1.
[  141.647658][ T5353] ntfs: (device loop3): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  141.744681][ T5370] CPU: 1 PID: 5370 Comm: syz.4.263 Not tainted syzkaller #0
[  141.752011][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  141.762073][ T5370] Call Trace:
[  141.762437][ T5353] ntfs: (device loop3): map_mft_record(): Failed with error code 5.
[  141.765355][ T5370]  <TASK>
[  141.765374][ T5370]  dump_stack_lvl+0x188/0x250
[  141.765418][ T5370]  ? show_regs_print_info+0x20/0x20
[  141.773646][ T5353] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  141.776572][ T5370]  ? load_image+0x410/0x410
[  141.776600][ T5370]  ? __might_sleep+0xf0/0xf0
[  141.776618][ T5370]  ? __lock_acquire+0x7b50/0x7b50
[  141.781331][ T5353] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  141.786463][ T5370]  ? preempt_schedule_irq+0xe6/0x160
[  141.786495][ T5370]  should_fail+0x383/0x4b0
[  141.799728][ T4392] sonixb 1-1:0.0: Error writing register 01: -110
[  141.804001][ T5370]  should_failslab+0x5/0x20
[  141.804024][ T5370]  slab_pre_alloc_hook+0x51/0xc0
[  141.804042][ T5370]  __kmalloc+0x6b/0x340
[  141.856786][ T5370]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  141.862505][ T5370]  tomoyo_realpath_from_path+0xed/0x5e0
[  141.868049][ T5370]  tomoyo_path_number_perm+0x251/0x6b0
[  141.873499][ T5370]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  141.878949][ T5370]  ? verify_lock_unused+0x140/0x140
[  141.884146][ T5370]  ? finish_task_switch+0x12f/0x650
[  141.889360][ T5370]  security_file_ioctl+0x6c/0xa0
[  141.894290][ T5370]  __se_sys_ioctl+0x48/0x170
[  141.898873][ T5370]  do_syscall_64+0x4c/0xa0
[  141.903276][ T5370]  ? clear_bhb_loop+0x30/0x80
[  141.907939][ T5370]  ? clear_bhb_loop+0x30/0x80
[  141.912611][ T5370]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.918492][ T5370] RIP: 0033:0x7f308d68fe99
[  141.922912][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.942518][ T5370] RSP: 002b:00007f308b8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.950932][ T5370] RAX: ffffffffffffffda RBX: 00007f308d918090 RCX: 00007f308d68fe99
[  141.958895][ T5370] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  141.966860][ T5370] RBP: 00007f308b8c7090 R08: 0000000000000000 R09: 0000000000000000
[  141.974833][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.982802][ T5370] R13: 00007f308d918128 R14: 00007f308d918090 R15: 00007fffd239f2e8
[  141.990781][ T5370]  </TASK>
[  142.074202][ T5318] EXT4-fs (loop0): 1 truncate cleaned up
[  142.084459][ T5318] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  142.099877][ T5345] F2FS-fs (loop2): invalid crc value
[  142.109250][ T5370] ERROR: Out of memory at tomoyo_realpath_from_path.
[  142.136854][ T4392] sonixb: probe of 1-1:0.0 failed with error -110
[  142.184203][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'.
[  142.209202][ T5345] F2FS-fs (loop2): Found nat_bits in checkpoint
[  142.314198][ T4392] usb 1-1: USB disconnect, device number 6
[  142.621277][ T5345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.189217][ T5407] loop0: detected capacity change from 0 to 512
[  144.474181][ T5407] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  144.564038][ T5407] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.728286][ T5417] netlink: 14 bytes leftover after parsing attributes in process `syz.2.268'.
[  145.168300][ T5428] netlink: 92 bytes leftover after parsing attributes in process `syz.0.273'.
[  145.714445][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[  146.289506][ T4407] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  146.754267][ T4407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.773199][ T4407] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  146.790431][ T4407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.816001][ T4407] usb 3-1: config 0 descriptor??
[  146.819115][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  147.074260][ T4228] usb 2-1: Using ep0 maxpacket: 16
[  147.194332][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  147.383959][ T4228] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  147.399273][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.405154][ T4407] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  147.426078][ T4228] usb 2-1: Product: syz
[  147.430690][ T4407] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input12
[  147.444409][ T4228] usb 2-1: Manufacturer: syz
[  147.451905][ T4228] usb 2-1: SerialNumber: syz
[  147.474493][ T4228] usb 2-1: config 0 descriptor??
[  147.532783][ T4407] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  147.565225][ T4228] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  147.650897][ T5468] loop0: detected capacity change from 0 to 32768
[  147.756255][ T4228] usb 2-1: USB disconnect, device number 5
[  147.774168][ T4424] usb 2-1: Failed to submit usb control message: -71
[  147.781146][ T4424] usb 2-1: unable to send the bmi data to the device: -71
[  147.813930][ T4424] usb 2-1: unable to get target info from device
[  147.837757][ T5483] FAULT_INJECTION: forcing a failure.
[  147.837757][ T5483] name failslab, interval 1, probability 0, space 0, times 0
[  147.853929][ T4424] usb 2-1: could not get target info (-71)
[  147.870309][ T4424] usb 2-1: could not probe fw (-71)
[  147.877321][ T5483] CPU: 1 PID: 5483 Comm: syz.4.289 Not tainted syzkaller #0
[  147.885886][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  147.885903][ T5483] Call Trace:
[  147.885910][ T5483]  <TASK>
[  147.885918][ T5483]  dump_stack_lvl+0x188/0x250
[  147.907054][ T5483]  ? show_regs_print_info+0x20/0x20
[  147.912279][ T5483]  ? load_image+0x410/0x410
[  147.916803][ T5483]  ? __might_sleep+0xf0/0xf0
[  147.921409][ T5483]  ? __lock_acquire+0x7b50/0x7b50
[  147.926476][ T5483]  should_fail+0x383/0x4b0
[  147.930915][ T5483]  should_failslab+0x5/0x20
[  147.935447][ T5483]  slab_pre_alloc_hook+0x51/0xc0
[  147.935477][ T5483]  __kmalloc+0x6b/0x340
[  147.935490][ T5483]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  147.935514][ T5483]  tomoyo_realpath_from_path+0xed/0x5e0
[  147.947520][ T5468] ialloc: diAlloc returned -5!
[  147.950310][ T5483]  tomoyo_path_number_perm+0x251/0x6b0
[  147.966203][ T5483]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  147.971689][ T5483]  ? ksys_write+0x1d4/0x260
[  147.976269][ T5483]  security_file_ioctl+0x6c/0xa0
[  147.981238][ T5483]  __se_sys_ioctl+0x48/0x170
[  147.985866][ T5483]  do_syscall_64+0x4c/0xa0
[  147.985891][ T5483]  ? clear_bhb_loop+0x30/0x80
[  147.991742][ T5468] ialloc: diAlloc returned -5!
[  147.994982][ T5483]  ? clear_bhb_loop+0x30/0x80
[  147.995010][ T5483]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  147.995026][ T5483] RIP: 0033:0x7f308d68fe99
[  148.014857][ T5483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.034484][ T5483] RSP: 002b:00007f308b8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  148.034508][ T5483] RAX: ffffffffffffffda RBX: 00007f308d917fa0 RCX: 00007f308d68fe99
[  148.034519][ T5483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  148.034528][ T5483] RBP: 00007f308b8e8090 R08: 0000000000000000 R09: 0000000000000000
[  148.034537][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.034546][ T5483] R13: 00007f308d918038 R14: 00007f308d917fa0 R15: 00007fffd239f2e8
[  148.034570][ T5483]  </TASK>
[  148.096386][ T5483] ERROR: Out of memory at tomoyo_realpath_from_path.
[  148.314189][    C0] keytouch 0003:0926:3333.0008: Event data for report 0 was too short (8 vs 4)
[  148.583209][ T4228] usb 3-1: USB disconnect, device number 3
[  149.365834][ T5494] loop0: detected capacity change from 0 to 32768
[  149.474335][ T5494] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.290 (5494)
[  149.520686][ T5494] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  149.529475][ T5494] BTRFS info (device loop0): setting nodatacow, compression disabled
[  149.538043][ T5494] BTRFS info (device loop0): setting datasum, datacow enabled
[  149.545579][ T5494] BTRFS info (device loop0): force clearing of disk cache
[  149.552786][ T5494] BTRFS info (device loop0): enabling ssd optimizations
[  149.559980][ T5494] BTRFS info (device loop0): using spread ssd allocation scheme
[  149.567853][ T5494] BTRFS info (device loop0): turning on sync discard
[  149.574607][ T5494] BTRFS info (device loop0): turning off barriers
[  149.581081][ T5494] BTRFS info (device loop0): setting nodatacow, compression disabled
[  149.589264][ T5494] BTRFS info (device loop0): not using ssd optimizations
[  149.596435][ T5494] BTRFS info (device loop0): not using spread ssd allocation scheme
[  149.605059][ T5494] BTRFS info (device loop0): using free space tree
[  149.611740][ T5494] BTRFS info (device loop0): has skinny extents
[  149.834786][ T5510] pim6reg0: tun_chr_ioctl cmd 2147767520
[  150.544650][ T5494] BTRFS info (device loop0): clearing free space tree
[  150.551561][ T5494] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.561323][ T5494] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.904967][ T5494] BTRFS info (device loop0): creating free space tree
[  150.925918][ T5494] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.936120][ T5494] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.020525][ T5492] BTRFS info (device loop0): scrub: started on devid 1
[  151.065840][ T5492] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0
[  151.411951][ T5546] nft_compat: unsupported protocol 5
[  151.567873][ T5501] loop3: detected capacity change from 0 to 32768
[  152.018961][ T5501] XFS (loop3): Mounting V5 Filesystem
[  152.674310][ T5501] XFS (loop3): Ending clean mount
[  152.821134][ T5568] FAULT_INJECTION: forcing a failure.
[  152.821134][ T5568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.834410][ T5568] CPU: 0 PID: 5568 Comm: syz.4.301 Not tainted syzkaller #0
[  152.841797][ T5568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  152.851856][ T5568] Call Trace:
[  152.855150][ T5568]  <TASK>
[  152.858090][ T5568]  dump_stack_lvl+0x188/0x250
[  152.862779][ T5568]  ? show_regs_print_info+0x20/0x20
[  152.867991][ T5568]  ? load_image+0x410/0x410
[  152.872509][ T5568]  ? __lock_acquire+0x7b50/0x7b50
[  152.877549][ T5568]  should_fail+0x383/0x4b0
[  152.881960][ T5568]  _copy_from_user+0x2e/0x170
[  152.886627][ T5568]  core_sys_select+0x525/0x8f0
[  152.891384][ T5568]  ? poll_select_set_timeout+0x150/0x150
[  152.897006][ T5568]  ? sigprocmask+0x190/0x190
[  152.901581][ T5568]  ? __context_tracking_exit+0x4c/0x80
[  152.907030][ T5568]  __se_sys_pselect6+0x2f4/0x3c0
[  152.911976][ T5568]  ? __x64_sys_pselect6+0xf0/0xf0
[  152.917184][ T5568]  ? __x64_sys_pselect6+0x1d/0xf0
[  152.922209][ T5568]  do_syscall_64+0x4c/0xa0
[  152.926640][ T5568]  ? clear_bhb_loop+0x30/0x80
[  152.931623][ T5568]  ? clear_bhb_loop+0x30/0x80
[  152.936324][ T5568]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  152.942228][ T5568] RIP: 0033:0x7f308d68fe99
[  152.946684][ T5568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.966466][ T5568] RSP: 002b:00007f308b8c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  152.974927][ T5568] RAX: ffffffffffffffda RBX: 00007f308d918090 RCX: 00007f308d68fe99
[  152.982892][ T5568] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040
[  152.990855][ T5568] RBP: 00007f308b8c7090 R08: 0000000000000000 R09: 0000000000000000
[  152.998815][ T5568] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  153.006774][ T5568] R13: 00007f308d918128 R14: 00007f308d918090 R15: 00007fffd239f2e8
[  153.014764][ T5568]  </TASK>
[  153.363493][ T4187] XFS (loop3): Unmounting Filesystem
[  153.546769][ T5574] FAULT_INJECTION: forcing a failure.
[  153.546769][ T5574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.615338][ T5574] CPU: 1 PID: 5574 Comm: syz.2.303 Not tainted syzkaller #0
[  153.622672][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  153.632724][ T5574] Call Trace:
[  153.635991][ T5574]  <TASK>
[  153.638908][ T5574]  dump_stack_lvl+0x188/0x250
[  153.643581][ T5574]  ? show_regs_print_info+0x20/0x20
[  153.648770][ T5574]  ? load_image+0x410/0x410
[  153.653350][ T5574]  ? __lock_acquire+0x7b50/0x7b50
[  153.658371][ T5574]  should_fail+0x383/0x4b0
[  153.662776][ T5574]  _copy_from_user+0x2e/0x170
[  153.667444][ T5574]  __copy_msghdr_from_user+0xc9/0x630
[  153.672807][ T5574]  ? verify_lock_unused+0x140/0x140
[  153.678001][ T5574]  ? mark_lock+0x94/0x320
[  153.682414][ T5574]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  153.687685][ T5574]  ? __lock_acquire+0x13dc/0x7b50
[  153.692707][ T5574]  ___sys_sendmsg+0x19a/0x2e0
[  153.697377][ T5574]  ? __sys_sendmsg+0x290/0x290
[  153.702153][ T5574]  __se_sys_sendmsg+0x1b7/0x2a0
[  153.707087][ T5574]  ? __x64_sys_sendmsg+0x80/0x80
[  153.712018][ T5574]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  153.718031][ T5574]  ? lockdep_hardirqs_on+0x94/0x140
[  153.723477][ T5574]  do_syscall_64+0x4c/0xa0
[  153.727904][ T5574]  ? clear_bhb_loop+0x30/0x80
[  153.732571][ T5574]  ? clear_bhb_loop+0x30/0x80
[  153.737238][ T5574]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.743129][ T5574] RIP: 0033:0x7f7528cb5e99
[  153.747709][ T5574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.767568][ T5574] RSP: 002b:00007f7526f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.775972][ T5574] RAX: ffffffffffffffda RBX: 00007f7528f3dfa0 RCX: 00007f7528cb5e99
[  153.783931][ T5574] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  153.791895][ T5574] RBP: 00007f7526f0e090 R08: 0000000000000000 R09: 0000000000000000
[  153.799853][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.807813][ T5574] R13: 00007f7528f3e038 R14: 00007f7528f3dfa0 R15: 00007ffeb13816e8
[  153.815788][ T5574]  </TASK>
[  154.283987][ T4403] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  154.970329][ T5566] loop0: detected capacity change from 0 to 40427
[  154.998806][ T5566] F2FS-fs (loop0): invalid crc value
[  155.080399][ T5566] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.107304][ T4403] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  155.123361][ T4403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.149181][ T4403] usb 3-1: Product: syz
[  155.163660][ T5566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.167584][ T4403] usb 3-1: Manufacturer: syz
[  155.195374][ T4404] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  155.215088][ T4403] usb 3-1: SerialNumber: syz
[  155.260507][ T4403] usb 3-1: config 0 descriptor??
[  155.968366][ T5592] loop1: detected capacity change from 0 to 32768
[  156.017728][ T5592] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.308 (5592)
[  156.032137][ T4403] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  156.181087][ T5592] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  156.189869][ T5592] BTRFS info (device loop1): setting nodatacow, compression disabled
[  156.198027][ T5592] BTRFS info (device loop1): setting datasum, datacow enabled
[  156.205530][ T5592] BTRFS info (device loop1): force clearing of disk cache
[  156.212724][ T5592] BTRFS info (device loop1): enabling ssd optimizations
[  156.220042][ T5592] BTRFS info (device loop1): using spread ssd allocation scheme
[  156.228009][ T5592] BTRFS info (device loop1): turning on sync discard
[  156.234844][ T5592] BTRFS info (device loop1): turning off barriers
[  156.241618][ T5592] BTRFS info (device loop1): setting nodatacow, compression disabled
[  156.249831][ T5592] BTRFS info (device loop1): not using ssd optimizations
[  156.257474][ T5592] BTRFS info (device loop1): not using spread ssd allocation scheme
[  156.272382][ T5592] BTRFS info (device loop1): using free space tree
[  156.279068][ T5592] BTRFS info (device loop1): has skinny extents
[  156.384537][ T4404] usb 4-1: not running at top speed; connect to a high speed hub
[  156.524963][ T4404] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  156.616910][ T4404] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64
[  156.714757][ T5578] loop2: detected capacity change from 0 to 512
[  156.785279][ T5578] EXT4-fs (loop2): 1 truncate cleaned up
[  156.794010][ T5578] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  156.839141][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  156.854815][ T5592] BTRFS info (device loop1): clearing free space tree
[  156.861740][ T5592] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.872293][ T5592] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.916947][ T5592] BTRFS info (device loop1): creating free space tree
[  156.924900][ T5592] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  156.934598][ T5592] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  156.964173][ T4403] sonixb 3-1:0.0: Error writing register 01: -110
[  156.964850][ T5590] BTRFS info (device loop1): scrub: started on devid 1
[  156.970679][ T4403] sonixb: probe of 3-1:0.0 failed with error -110
[  157.004484][ T4404] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  157.028272][ T5590] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  157.028589][ T4404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.101572][ T4404] usb 4-1: Product: 栆
[  157.113268][ T4404] usb 4-1: Manufacturer: 樓붠๾솬¥篻䀢鮘轏靬鏵퐦衴窍턮ቼ輦㲸魈秇₫佡䔬豋飞ށ흧䅳ﮔ甚⦡蘘．툷䮓쀓ꘆ歔︅ṫ쁎ꖼ孑컁殁商ᗮ읂⣶䩧휼
[  157.200949][ T4403] usb 3-1: USB disconnect, device number 4
[  157.207143][ T5584] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.270168][ T5584] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.308447][ T5623] FAULT_INJECTION: forcing a failure.
[  157.308447][ T5623] name failslab, interval 1, probability 0, space 0, times 0
[  157.394060][ T5623] CPU: 0 PID: 5623 Comm: syz.4.310 Not tainted syzkaller #0
[  157.401397][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  157.411463][ T5623] Call Trace:
[  157.414761][ T5623]  <TASK>
[  157.417707][ T5623]  dump_stack_lvl+0x188/0x250
[  157.422420][ T5623]  ? show_regs_print_info+0x20/0x20
[  157.427642][ T5623]  ? load_image+0x410/0x410
[  157.432169][ T5623]  ? __might_sleep+0xf0/0xf0
[  157.436803][ T5623]  ? __lock_acquire+0x7b50/0x7b50
[  157.441863][ T5623]  should_fail+0x383/0x4b0
[  157.446307][ T5623]  should_failslab+0x5/0x20
[  157.450841][ T5623]  slab_pre_alloc_hook+0x51/0xc0
[  157.456068][ T5623]  __kmalloc+0x6b/0x340
[  157.460248][ T5623]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  157.466109][ T5623]  tomoyo_realpath_from_path+0xed/0x5e0
[  157.471697][ T5623]  tomoyo_path_number_perm+0x251/0x6b0
[  157.477194][ T5623]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  157.482683][ T5623]  ? ksys_write+0x1d4/0x260
[  157.487246][ T5623]  security_file_ioctl+0x6c/0xa0
[  157.492217][ T5623]  __se_sys_ioctl+0x48/0x170
[  157.496836][ T5623]  do_syscall_64+0x4c/0xa0
[  157.501272][ T5623]  ? clear_bhb_loop+0x30/0x80
[  157.505969][ T5623]  ? clear_bhb_loop+0x30/0x80
[  157.510674][ T5623]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.516593][ T5623] RIP: 0033:0x7f308d68fe99
[  157.521031][ T5623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.540738][ T5623] RSP: 002b:00007f308b8c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  157.549173][ T5623] RAX: ffffffffffffffda RBX: 00007f308d918090 RCX: 00007f308d68fe99
[  157.557165][ T5623] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  157.565230][ T5623] RBP: 00007f308b8c7090 R08: 0000000000000000 R09: 0000000000000000
[  157.573215][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.581193][ T5623] R13: 00007f308d918128 R14: 00007f308d918090 R15: 00007fffd239f2e8
[  157.589168][ T5623]  </TASK>
[  157.602028][ T5623] ERROR: Out of memory at tomoyo_realpath_from_path.
[  157.704180][ T4193] attempt to access beyond end of device
[  157.704180][ T4193] loop0: rw=2049, want=45104, limit=40427
[  157.781628][ T5626] loop1: detected capacity change from 0 to 4096
[  157.859887][ T5628] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by ""[5628]
[  158.083011][ T5626] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  158.435602][ T5626] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  158.456317][ T5626] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  158.541851][ T5626] ntfs: volume version 3.1.
[  158.560559][ T5626] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  158.601713][ T5626] ntfs: (device loop1): map_mft_record(): Failed with error code 5.
[  158.617789][ T5626] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  158.647446][ T5626] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  158.839620][ T5638] FAULT_INJECTION: forcing a failure.
[  158.839620][ T5638] name failslab, interval 1, probability 0, space 0, times 0
[  158.849093][ T5634] loop2: detected capacity change from 0 to 4096
[  158.889840][ T5638] CPU: 1 PID: 5638 Comm: syz.1.315 Not tainted syzkaller #0
[  158.897173][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  158.907235][ T5638] Call Trace:
[  158.910526][ T5638]  <TASK>
[  158.913463][ T5638]  dump_stack_lvl+0x188/0x250
[  158.918162][ T5638]  ? show_regs_print_info+0x20/0x20
[  158.923374][ T5638]  ? load_image+0x410/0x410
[  158.927896][ T5638]  ? __might_sleep+0xf0/0xf0
[  158.932494][ T5638]  ? __lock_acquire+0x7b50/0x7b50
[  158.937531][ T5638]  should_fail+0x383/0x4b0
[  158.941961][ T5638]  should_failslab+0x5/0x20
[  158.946610][ T5638]  slab_pre_alloc_hook+0x51/0xc0
[  158.951571][ T5638]  __kmalloc+0x6b/0x340
[  158.955737][ T5638]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  158.961481][ T5638]  tomoyo_realpath_from_path+0xed/0x5e0
[  158.967150][ T5638]  tomoyo_path_number_perm+0x251/0x6b0
[  158.972626][ T5638]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  158.978099][ T5638]  ? ksys_write+0x1d4/0x260
[  158.982661][ T5638]  security_file_ioctl+0x6c/0xa0
[  158.987622][ T5638]  __se_sys_ioctl+0x48/0x170
[  158.992224][ T5638]  do_syscall_64+0x4c/0xa0
[  158.996644][ T5638]  ? clear_bhb_loop+0x30/0x80
[  159.001323][ T5638]  ? clear_bhb_loop+0x30/0x80
[  159.006007][ T5638]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  159.011912][ T5638] RIP: 0033:0x7f07ddef1e99
[  159.016337][ T5638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.035948][ T5638] RSP: 002b:00007f07dc14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.044352][ T5638] RAX: ffffffffffffffda RBX: 00007f07de179fa0 RCX: 00007f07ddef1e99
[  159.052427][ T5638] RDX: 0000000000000000 RSI: 00000000c0603d06 RDI: 0000000000000003
[  159.060425][ T5638] RBP: 00007f07dc14a090 R08: 0000000000000000 R09: 0000000000000000
[  159.068389][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.076492][ T5638] R13: 00007f07de17a038 R14: 00007f07de179fa0 R15: 00007ffd12cefdd8
[  159.084477][ T5638]  </TASK>
[  159.099219][ T5638] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.198454][ T5642] pim6reg0: tun_chr_ioctl cmd 2147767520
[  159.690616][ T5643] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.707738][ T5634] syz.2.314 uses old SIOCAX25GETINFO
[  159.786076][ T4404] usb 4-1: USB disconnect, device number 5
[  159.904568][ T5650] FAULT_INJECTION: forcing a failure.
[  159.904568][ T5650] name failslab, interval 1, probability 0, space 0, times 0
[  159.918617][ T5650] CPU: 0 PID: 5650 Comm: syz.1.317 Not tainted syzkaller #0
[  159.925923][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  159.935982][ T5650] Call Trace:
[  159.939262][ T5650]  <TASK>
[  159.942194][ T5650]  dump_stack_lvl+0x188/0x250
[  159.946884][ T5650]  ? show_regs_print_info+0x20/0x20
[  159.952100][ T5650]  ? load_image+0x410/0x410
[  159.956607][ T5650]  ? __might_sleep+0xf0/0xf0
[  159.961197][ T5650]  ? __lock_acquire+0x7b50/0x7b50
[  159.966232][ T5650]  should_fail+0x383/0x4b0
[  159.970663][ T5650]  should_failslab+0x5/0x20
[  159.975178][ T5650]  slab_pre_alloc_hook+0x51/0xc0
[  159.980131][ T5650]  __kmalloc+0x6b/0x340
[  159.984287][ T5650]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  159.990023][ T5650]  tomoyo_realpath_from_path+0xed/0x5e0
[  159.995597][ T5650]  tomoyo_path_number_perm+0x251/0x6b0
[  160.001073][ T5650]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  160.006554][ T5650]  ? ksys_write+0x1d4/0x260
[  160.011115][ T5650]  security_file_ioctl+0x6c/0xa0
[  160.016072][ T5650]  __se_sys_ioctl+0x48/0x170
[  160.020671][ T5650]  do_syscall_64+0x4c/0xa0
[  160.025083][ T5650]  ? clear_bhb_loop+0x30/0x80
[  160.029769][ T5650]  ? clear_bhb_loop+0x30/0x80
[  160.034832][ T5650]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  160.040740][ T5650] RIP: 0033:0x7f07ddef1e99
[  160.045174][ T5650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.064792][ T5650] RSP: 002b:00007f07dc14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  160.073223][ T5650] RAX: ffffffffffffffda RBX: 00007f07de179fa0 RCX: 00007f07ddef1e99
[  160.081209][ T5650] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000003
[  160.089192][ T5650] RBP: 00007f07dc14a090 R08: 0000000000000000 R09: 0000000000000000
[  160.097182][ T5650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.105254][ T5650] R13: 00007f07de17a038 R14: 00007f07de179fa0 R15: 00007ffd12cefdd8
[  160.113258][ T5650]  </TASK>
[  160.179215][ T5650] ERROR: Out of memory at tomoyo_realpath_from_path.
[  160.857817][ T5659] loop4: detected capacity change from 0 to 512
[  161.028750][ T5659] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  161.048102][ T5659] EXT4-fs (loop4): orphan cleanup on readonly fs
[  161.755132][ T5670] loop2: detected capacity change from 0 to 32768
[  161.769931][ T5659] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  161.809951][ T5670] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.321 (5670)
[  161.822403][ T5659] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  161.862417][ T5659] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.319: corrupted xattr block 31
[  161.895310][ T5659] EXT4-fs (loop4): Remounting filesystem read-only
[  161.897207][ T5669] loop1: detected capacity change from 0 to 4096
[  161.901868][ T5659] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117)
[  161.926023][ T5670] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  161.930548][ T5659] EXT4-fs (loop4): 1 orphan inode deleted
[  161.934863][ T5670] BTRFS info (device loop2): setting nodatacow, compression disabled
[  161.941411][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  161.948628][ T5670] BTRFS info (device loop2): setting datasum, datacow enabled
[  161.948649][ T5670] BTRFS info (device loop2): force clearing of disk cache
[  161.948666][ T5670] BTRFS info (device loop2): enabling ssd optimizations
[  161.948677][ T5670] BTRFS info (device loop2): using spread ssd allocation scheme
[  161.948693][ T5670] BTRFS info (device loop2): turning on sync discard
[  161.948708][ T5670] BTRFS info (device loop2): turning off barriers
[  161.948751][ T5670] BTRFS info (device loop2): setting nodatacow, compression disabled
[  162.012306][ T5670] BTRFS info (device loop2): not using ssd optimizations
[  162.019408][ T5670] BTRFS info (device loop2): not using spread ssd allocation scheme
[  162.027444][ T5670] BTRFS info (device loop2): using free space tree
[  162.033993][ T5670] BTRFS info (device loop2): has skinny extents
[  162.172357][ T5665] loop3: detected capacity change from 0 to 40427
[  162.285482][ T5665] F2FS-fs (loop3): invalid crc value
[  162.353344][ T5665] F2FS-fs (loop3): Found nat_bits in checkpoint
[  162.502088][ T5670] BTRFS info (device loop2): clearing free space tree
[  162.509673][ T5670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.519511][ T5670] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.537559][ T5670] BTRFS info (device loop2): creating free space tree
[  162.545201][ T5670] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.555056][ T5670] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.573599][ T5707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  162.595021][ T5665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  162.621717][ T4574] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  162.630657][ T5667] BTRFS info (device loop2): scrub: started on devid 1
[  162.645711][ T5667] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0
[  162.963072][ T5713] FAULT_INJECTION: forcing a failure.
[  162.963072][ T5713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.013986][ T4574] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  163.029124][ T4574] usb 2-1: config 0 has no interface number 0
[  163.039990][ T5713] CPU: 1 PID: 5713 Comm: syz.0.331 Not tainted syzkaller #0
[  163.047320][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  163.057391][ T5713] Call Trace:
[  163.060695][ T5713]  <TASK>
[  163.063722][ T5713]  dump_stack_lvl+0x188/0x250
[  163.068430][ T5713]  ? show_regs_print_info+0x20/0x20
[  163.073657][ T5713]  ? load_image+0x410/0x410
[  163.078196][ T5713]  ? __lock_acquire+0x7b50/0x7b50
[  163.083253][ T5713]  should_fail+0x383/0x4b0
[  163.087726][ T5713]  _copy_from_user+0x2e/0x170
[  163.092531][ T5713]  __sys_bpf+0x26d/0x6f0
[  163.096802][ T5713]  ? bpf_link_show_fdinfo+0x380/0x380
[  163.102211][ T5713]  __x64_sys_bpf+0x78/0x90
[  163.106648][ T5713]  do_syscall_64+0x4c/0xa0
[  163.111099][ T5713]  ? clear_bhb_loop+0x30/0x80
[  163.115794][ T5713]  ? clear_bhb_loop+0x30/0x80
[  163.120496][ T5713]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  163.126422][ T5713] RIP: 0033:0x7f7cef686e99
[  163.130857][ T5713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.150483][ T5713] RSP: 002b:00007f7ced8df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  163.159003][ T5713] RAX: ffffffffffffffda RBX: 00007f7cef90efa0 RCX: 00007f7cef686e99
[  163.166995][ T5713] RDX: 0000000000000020 RSI: 0000200000001300 RDI: 0000000000000012
[  163.175055][ T5713] RBP: 00007f7ced8df090 R08: 0000000000000000 R09: 0000000000000000
[  163.183032][ T5713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.191014][ T5713] R13: 00007f7cef90f038 R14: 00007f7cef90efa0 R15: 00007ffce79c0c48
[  163.199012][ T5713]  </TASK>
[  163.220676][ T4574] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  163.241319][ T4574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.284789][ T4574] usb 2-1: config 0 descriptor??
[  163.331122][ T4574] usb 2-1: selecting invalid altsetting 1
[  163.355448][ T4574] dvb_ttusb_budget: ttusb_init_controller: error
[  163.375290][ T4574] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  163.468869][ T4574] DVB: Unable to find symbol cx22700_attach()
[  163.511332][ T5722] loop0: detected capacity change from 0 to 1024
[  163.525490][ T5691] udc-core: couldn't find an available UDC or it's busy
[  163.526859][ T4574] DVB: Unable to find symbol tda10046_attach()
[  163.543195][ T5691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  163.560574][ T4574] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  163.583105][ T4574] usb 2-1: USB disconnect, device number 6
[  163.594065][ T4243] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  163.603732][ T5722] hfsplus: unable to parse mount options
[  163.699943][ T5734] FAULT_INJECTION: forcing a failure.
[  163.699943][ T5734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.733365][ T5734] CPU: 1 PID: 5734 Comm: syz.4.337 Not tainted syzkaller #0
[  163.740703][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  163.750940][ T5734] Call Trace:
[  163.754221][ T5734]  <TASK>
[  163.757149][ T5734]  dump_stack_lvl+0x188/0x250
[  163.761959][ T5734]  ? show_regs_print_info+0x20/0x20
[  163.767169][ T5734]  ? load_image+0x410/0x410
[  163.771681][ T5734]  ? __lock_acquire+0x7b50/0x7b50
[  163.776698][ T5734]  should_fail+0x383/0x4b0
[  163.781113][ T5734]  _copy_from_user+0x2e/0x170
[  163.785784][ T5734]  __copy_msghdr_from_user+0xc9/0x630
[  163.791144][ T5734]  ? verify_lock_unused+0x140/0x140
[  163.796440][ T5734]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  163.801717][ T5734]  ___sys_sendmsg+0x19a/0x2e0
[  163.806383][ T5734]  ? __sys_sendmsg+0x290/0x290
[  163.811155][ T5734]  __sys_sendmmsg+0x2ba/0x500
[  163.815828][ T5734]  ? __ia32_sys_sendmsg+0x80/0x80
[  163.820848][ T5734]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  163.826815][ T5734]  ? lock_chain_count+0x20/0x20
[  163.831658][ T5734]  __x64_sys_sendmmsg+0x9c/0xb0
[  163.836494][ T5734]  do_syscall_64+0x4c/0xa0
[  163.840896][ T5734]  ? clear_bhb_loop+0x30/0x80
[  163.845556][ T5734]  ? clear_bhb_loop+0x30/0x80
[  163.850246][ T5734]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  163.856150][ T5734] RIP: 0033:0x7f308d68fe99
[  163.860568][ T5734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.880155][ T5734] RSP: 002b:00007f308b8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  163.888557][ T5734] RAX: ffffffffffffffda RBX: 00007f308d917fa0 RCX: 00007f308d68fe99
[  163.896512][ T5734] RDX: 0000000000000001 RSI: 000020000000d6c0 RDI: 0000000000000003
[  163.904473][ T5734] RBP: 00007f308b8e8090 R08: 0000000000000000 R09: 0000000000000000
[  163.912433][ T5734] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  163.920388][ T5734] R13: 00007f308d918038 R14: 00007f308d917fa0 R15: 00007fffd239f2e8
[  163.928355][ T5734]  </TASK>
[  164.120222][ T4243] usb 3-1: device descriptor read/64, error -71
[  164.263977][ T4574] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  164.381802][ T4187] attempt to access beyond end of device
[  164.381802][ T4187] loop3: rw=2049, want=45104, limit=40427
[  164.846833][ T5751] loop1: detected capacity change from 0 to 32768
[  165.046233][ T4243] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  165.059843][ T5751] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.340 (5751)
[  165.080710][ T4574] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  165.097467][ T4574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.121366][ T4574] usb 1-1: Product: syz
[  165.126143][ T4574] usb 1-1: Manufacturer: syz
[  165.130898][ T4574] usb 1-1: SerialNumber: syz
[  165.146598][ T4574] usb 1-1: config 0 descriptor??
[  165.160402][ T5751] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  165.169748][ T5751] BTRFS info (device loop1): setting nodatacow, compression disabled
[  165.178013][ T5751] BTRFS info (device loop1): setting datasum, datacow enabled
[  165.185743][ T5751] BTRFS info (device loop1): force clearing of disk cache
[  165.192877][ T5751] BTRFS info (device loop1): enabling ssd optimizations
[  165.199952][ T5751] BTRFS info (device loop1): using spread ssd allocation scheme
[  165.207637][ T5751] BTRFS info (device loop1): turning on sync discard
[  165.214392][ T5751] BTRFS info (device loop1): turning off barriers
[  165.220956][ T5751] BTRFS info (device loop1): setting nodatacow, compression disabled
[  165.225444][ T5753] loop4: detected capacity change from 0 to 4096
[  165.229100][ T5751] BTRFS info (device loop1): not using ssd optimizations
[  165.244200][ T5751] BTRFS info (device loop1): not using spread ssd allocation scheme
[  165.251670][ T5753] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  165.252206][ T5751] BTRFS info (device loop1): using free space tree
[  165.263287][ T4243] usb 3-1: device descriptor read/64, error -71
[  165.270072][ T5751] BTRFS info (device loop1): has skinny extents
[  165.286190][ T4574] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  165.298674][ T5753] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  165.337192][ T5753] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  165.416786][ T4243] usb usb3-port1: attempt power cycle
[  165.442368][ T5753] ntfs: volume version 3.1.
[  165.458680][ T5753] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  165.474740][ T5774] loop3: detected capacity change from 0 to 2048
[  165.485447][ T5753] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  165.493558][ T5753] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  165.508665][ T5753] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  165.538528][ T5751] BTRFS info (device loop1): clearing free space tree
[  165.545496][ T5751] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  165.555221][ T5751] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  165.569631][ T5751] BTRFS info (device loop1): creating free space tree
[  165.577755][ T5751] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  165.587653][ T5751] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  165.619934][ T5747] BTRFS info (device loop1): scrub: started on devid 1
[  165.644532][ T5774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.651340][ T5747] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  165.738193][   T26] audit: type=1800 audit(1784487959.601:2): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.344" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  165.765296][ T5774] FAULT_INJECTION: forcing a failure.
[  165.765296][ T5774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.770093][ T5736] loop0: detected capacity change from 0 to 512
[  165.785034][ T5774] CPU: 1 PID: 5774 Comm: syz.3.344 Not tainted syzkaller #0
[  165.785059][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  165.785069][ T5774] Call Trace:
[  165.785076][ T5774]  <TASK>
[  165.785083][ T5774]  dump_stack_lvl+0x188/0x250
[  165.785110][ T5774]  ? show_regs_print_info+0x20/0x20
[  165.785129][ T5774]  ? load_image+0x410/0x410
[  165.785151][ T5774]  ? __lock_acquire+0x7b50/0x7b50
[  165.785177][ T5774]  should_fail+0x383/0x4b0
[  165.785199][ T5774]  _copy_from_user+0x2e/0x170
[  165.785221][ T5774]  iovec_from_user+0x142/0x370
[  165.785242][ T5774]  __import_iovec+0x70/0x490
[  165.785266][ T5774]  import_iovec+0x6f/0xa0
[  165.785285][ T5774]  do_pwritev+0x1fe/0x3a0
[  165.785304][ T5774]  ? do_preadv+0x390/0x390
[  165.859648][ T5774]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  165.865647][ T5774]  ? lock_chain_count+0x20/0x20
[  165.870613][ T5774]  ? lockdep_hardirqs_on+0x94/0x140
[  165.875845][ T5774]  ? __x64_sys_pwritev2+0xba/0x100
[  165.880978][ T5774]  do_syscall_64+0x4c/0xa0
[  165.885401][ T5774]  ? clear_bhb_loop+0x30/0x80
[  165.890088][ T5774]  ? clear_bhb_loop+0x30/0x80
[  165.894774][ T5774]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.900684][ T5774] RIP: 0033:0x7feca7a63e99
[  165.905139][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.924757][ T5774] RSP: 002b:00007feca5cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  165.933216][ T5774] RAX: ffffffffffffffda RBX: 00007feca7cebfa0 RCX: 00007feca7a63e99
[  165.939456][ T4243] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  165.941194][ T5774] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  165.941210][ T5774] RBP: 00007feca5cbc090 R08: 0000000000000000 R09: 0000000000000003
[  165.941219][ T5774] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000001
[  165.941229][ T5774] R13: 00007feca7cec038 R14: 00007feca7cebfa0 R15: 00007ffe2b7299e8
[  165.941252][ T5774]  </TASK>
[  166.054000][ T4574] sonixb 1-1:0.0: Error writing register 01: -110
[  166.060508][ T4574] sonixb: probe of 1-1:0.0 failed with error -110
[  166.067602][ T4243] usb 3-1: device descriptor read/8, error -71
[  166.127499][ T5736] EXT4-fs (loop0): 1 truncate cleaned up
[  166.141000][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  166.193268][ T5785] loop4: detected capacity change from 0 to 2048
[  166.227890][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[  166.256566][ T4403] usb 1-1: USB disconnect, device number 7
[  166.290745][ T5785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.392999][   T26] audit: type=1800 audit(1784487960.261:3): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  166.473570][ T5788] pim6reg0: tun_chr_ioctl cmd 2147767520
[  166.494033][ T4243] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  166.735381][ T4243] usb 3-1: device not accepting address 8, error -71
[  166.740076][ T5798] FAULT_INJECTION: forcing a failure.
[  166.740076][ T5798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.746710][ T4243] usb usb3-port1: unable to enumerate USB device
[  166.760819][ T5798] CPU: 1 PID: 5798 Comm: syz.4.351 Not tainted syzkaller #0
[  166.769514][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  166.779581][ T5798] Call Trace:
[  166.782871][ T5798]  <TASK>
[  166.785813][ T5798]  dump_stack_lvl+0x188/0x250
[  166.790516][ T5798]  ? show_regs_print_info+0x20/0x20
[  166.795736][ T5798]  ? load_image+0x410/0x410
[  166.800258][ T5798]  ? __lock_acquire+0x7b50/0x7b50
[  166.805280][ T5798]  should_fail+0x383/0x4b0
[  166.809692][ T5798]  _copy_from_user+0x2e/0x170
[  166.814392][ T5798]  __copy_msghdr_from_user+0xc9/0x630
[  166.819756][ T5798]  ? verify_lock_unused+0x140/0x140
[  166.824941][ T5798]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  166.830219][ T5798]  ___sys_sendmsg+0x19a/0x2e0
[  166.834889][ T5798]  ? __sys_sendmsg+0x290/0x290
[  166.839657][ T5798]  __sys_sendmmsg+0x2ba/0x500
[  166.844326][ T5798]  ? __ia32_sys_sendmsg+0x80/0x80
[  166.849404][ T5798]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  166.855394][ T5798]  ? lock_chain_count+0x20/0x20
[  166.860249][ T5798]  __x64_sys_sendmmsg+0x9c/0xb0
[  166.865095][ T5798]  do_syscall_64+0x4c/0xa0
[  166.869500][ T5798]  ? clear_bhb_loop+0x30/0x80
[  166.874167][ T5798]  ? clear_bhb_loop+0x30/0x80
[  166.878926][ T5798]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  166.885056][ T5798] RIP: 0033:0x7f308d68fe99
[  166.889468][ T5798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.909073][ T5798] RSP: 002b:00007f308b8e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  166.917481][ T5798] RAX: ffffffffffffffda RBX: 00007f308d917fa0 RCX: 00007f308d68fe99
[  166.925547][ T5798] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006
[  166.933510][ T5798] RBP: 00007f308b8e8090 R08: 0000000000000000 R09: 0000000000000000
[  166.941477][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.949441][ T5798] R13: 00007f308d918038 R14: 00007f308d917fa0 R15: 00007fffd239f2e8
[  166.957421][ T5798]  </TASK>
[  167.524012][ T4577] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  167.565666][ T5815] loop3: detected capacity change from 0 to 64
[  167.670645][ T5815] attempt to access beyond end of device
[  167.670645][ T5815] loop3: rw=0, want=4104, limit=64
[  167.702597][ T5815] Buffer I/O error on dev loop3, logical block 1025, async page read
[  167.737128][ T5815] attempt to access beyond end of device
[  167.737128][ T5815] loop3: rw=0, want=4108, limit=64
[  167.752007][ T5819] loop0: detected capacity change from 0 to 2048
[  167.769517][ T5815] Buffer I/O error on dev loop3, logical block 1026, async page read
[  167.789556][ T5815] hfs: unable to open catalog tree
[  167.797279][ T5815] hfs: can't find a HFS filesystem on dev loop3
[  167.814000][ T4577] usb 3-1: Invalid ep0 maxpacket: 16
[  168.007918][ T5813] loop4: detected capacity change from 0 to 32768
[  168.084934][ T4577] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  168.210087][ T5813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.356 (5813)
[  168.367703][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback.
[  168.413168][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'.
[  168.488148][ T5819] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.491227][ T4577] usb 3-1: Invalid ep0 maxpacket: 16
[  168.498696][ T5813] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  168.512659][ T5813] BTRFS info (device loop4): setting nodatacow, compression disabled
[  168.520910][ T5813] BTRFS info (device loop4): setting datasum, datacow enabled
[  168.527698][ T4577] usb usb3-port1: attempt power cycle
[  168.528439][ T5813] BTRFS info (device loop4): force clearing of disk cache
[  168.540923][ T5813] BTRFS info (device loop4): enabling ssd optimizations
[  168.545611][ T5819] FAULT_INJECTION: forcing a failure.
[  168.545611][ T5819] name failslab, interval 1, probability 0, space 0, times 0
[  168.548462][ T5813] BTRFS info (device loop4): using spread ssd allocation scheme
[  168.568328][ T5813] BTRFS info (device loop4): turning on sync discard
[  168.575071][ T5813] BTRFS info (device loop4): turning off barriers
[  168.581538][ T5813] BTRFS info (device loop4): setting nodatacow, compression disabled
[  168.589690][ T5813] BTRFS info (device loop4): not using ssd optimizations
[  168.596828][ T5813] BTRFS info (device loop4): not using spread ssd allocation scheme
[  168.605075][ T5813] BTRFS info (device loop4): using free space tree
[  168.611620][ T5813] BTRFS info (device loop4): has skinny extents
[  168.621367][ T5819] CPU: 0 PID: 5819 Comm: syz.0.355 Not tainted syzkaller #0
[  168.628691][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  168.638856][ T5819] Call Trace:
[  168.642359][ T5819]  <TASK>
[  168.645301][ T5819]  dump_stack_lvl+0x188/0x250
[  168.649998][ T5819]  ? show_regs_print_info+0x20/0x20
[  168.655212][ T5819]  ? load_image+0x410/0x410
[  168.659726][ T5819]  ? __lock_acquire+0x7b50/0x7b50
[  168.664757][ T5819]  ? ksys_write+0x1d4/0x260
[  168.669265][ T5819]  should_fail+0x383/0x4b0
[  168.673899][ T5819]  should_failslab+0x5/0x20
[  168.678422][ T5819]  slab_pre_alloc_hook+0x51/0xc0
[  168.683370][ T5819]  ? getname_flags+0xb7/0x4f0
[  168.688062][ T5819]  kmem_cache_alloc+0x3d/0x280
[  168.692844][ T5819]  getname_flags+0xb7/0x4f0
[  168.697369][ T5819]  do_sys_openat2+0xdd/0x500
[  168.701976][ T5819]  ? __lock_acquire+0x7b50/0x7b50
[  168.707021][ T5819]  ? do_sys_open+0xe0/0xe0
[  168.711464][ T5819]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  168.717466][ T5819]  ? lock_chain_count+0x20/0x20
[  168.722340][ T5819]  __x64_sys_openat+0x135/0x160
[  168.727204][ T5819]  do_syscall_64+0x4c/0xa0
[  168.731636][ T5819]  ? clear_bhb_loop+0x30/0x80
[  168.736328][ T5819]  ? clear_bhb_loop+0x30/0x80
[  168.741028][ T5819]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  168.746947][ T5819] RIP: 0033:0x7f7cef686e99
[  168.751464][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.771162][ T5819] RSP: 002b:00007f7ced8df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  168.779592][ T5819] RAX: ffffffffffffffda RBX: 00007f7cef90efa0 RCX: 00007f7cef686e99
[  168.787578][ T5819] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[  168.795558][ T5819] RBP: 00007f7ced8df090 R08: 0000000000000000 R09: 0000000000000000
[  168.803538][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.811518][ T5819] R13: 00007f7cef90f038 R14: 00007f7cef90efa0 R15: 00007ffce79c0c48
[  168.819515][ T5819]  </TASK>
[  168.857887][ T5836] udc-core: couldn't find an available UDC or it's busy
[  168.908202][ T5836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  168.965245][ T5843] FAULT_INJECTION: forcing a failure.
[  168.965245][ T5843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.983869][ T4577] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  169.000696][ T5843] CPU: 1 PID: 5843 Comm: syz.1.365 Not tainted syzkaller #0
[  169.008023][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  169.018090][ T5843] Call Trace:
[  169.021378][ T5843]  <TASK>
[  169.024318][ T5843]  dump_stack_lvl+0x188/0x250
[  169.029016][ T5843]  ? show_regs_print_info+0x20/0x20
[  169.034231][ T5843]  ? load_image+0x410/0x410
[  169.038755][ T5843]  ? __lock_acquire+0x7b50/0x7b50
[  169.043796][ T5843]  should_fail+0x383/0x4b0
[  169.048223][ T5843]  _copy_from_user+0x2e/0x170
[  169.052993][ T5843]  __copy_msghdr_from_user+0xc9/0x630
[  169.058378][ T5843]  ? verify_lock_unused+0x140/0x140
[  169.063593][ T5843]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  169.068899][ T5843]  ___sys_sendmsg+0x19a/0x2e0
[  169.073602][ T5843]  ? __sys_sendmsg+0x290/0x290
[  169.078398][ T5843]  ? verify_lock_unused+0x140/0x140
[  169.083636][ T5843]  __sys_sendmmsg+0x2ba/0x500
[  169.088344][ T5843]  ? __ia32_sys_sendmsg+0x80/0x80
[  169.093401][ T5843]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  169.099396][ T5843]  ? lock_chain_count+0x20/0x20
[  169.104265][ T5843]  __x64_sys_sendmmsg+0x9c/0xb0
[  169.109136][ T5843]  do_syscall_64+0x4c/0xa0
[  169.113573][ T5843]  ? clear_bhb_loop+0x30/0x80
[  169.118258][ T5843]  ? clear_bhb_loop+0x30/0x80
[  169.122949][ T5843]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.128865][ T5843] RIP: 0033:0x7f07ddef1e99
[  169.133379][ T5843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.153169][ T5843] RSP: 002b:00007f07dc14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  169.161605][ T5843] RAX: ffffffffffffffda RBX: 00007f07de179fa0 RCX: 00007f07ddef1e99
[  169.169591][ T5843] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006
[  169.177586][ T5843] RBP: 00007f07dc14a090 R08: 0000000000000000 R09: 0000000000000000
[  169.185568][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.193551][ T5843] R13: 00007f07de17a038 R14: 00007f07de179fa0 R15: 00007ffd12cefdd8
[  169.201548][ T5843]  </TASK>
[  169.205458][ T4404] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  169.284021][ T4577] usb 3-1: Invalid ep0 maxpacket: 16
[  169.300626][ T5813] BTRFS info (device loop4): clearing free space tree
[  169.307616][ T5813] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.317425][ T5813] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.339028][ T5813] BTRFS info (device loop4): creating free space tree
[  169.346700][ T5813] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.356376][ T5813] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.429265][ T5813] BTRFS info (device loop4): scrub: started on devid 1
[  169.433942][ T4577] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  169.439442][ T5813] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0
[  169.554150][ T4577] usb 3-1: Invalid ep0 maxpacket: 16
[  169.559841][ T4577] usb usb3-port1: unable to enumerate USB device
[  169.654645][ T4404] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[  169.662940][ T4404] usb 4-1: config 0 has no interface number 0
[  169.669370][ T4404] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  169.681746][ T4404] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  169.691136][ T4404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.717076][ T4293] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  169.732531][ T4404] usb 4-1: config 0 descriptor??
[  169.754119][ T5835] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  170.220258][ T5874] pim6reg0: tun_chr_ioctl cmd 2147767520
[  170.248897][ T4404] usbhid 4-1:0.3: can't add hid device: -71
[  170.259202][ T4404] usbhid: probe of 4-1:0.3 failed with error -71
[  170.300123][ T4404] usb 4-1: USB disconnect, device number 6
[  170.414250][ T4293] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  170.441463][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.471477][ T5881] loop0: detected capacity change from 0 to 1024
[  170.475245][ T4293] usb 2-1: Product: syz
[  170.488111][ T4293] usb 2-1: Manufacturer: syz
[  170.494643][ T4293] usb 2-1: SerialNumber: syz
[  170.517227][ T4293] usb 2-1: config 0 descriptor??
[  170.552438][ T5881] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  170.569832][ T4293] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  170.618486][ T5881] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  170.837916][ T5887] loop3: detected capacity change from 0 to 4096
[  171.077304][ T5862] loop1: detected capacity change from 0 to 512
[  171.324010][ T4293] sonixb 2-1:0.0: Error writing register 01: -110
[  171.330554][ T4293] sonixb: probe of 2-1:0.0 failed with error -110
[  171.385215][ T5892] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.422188][ T5899] loop2: detected capacity change from 0 to 512
[  171.478362][ T5862] EXT4-fs (loop1): 1 truncate cleaned up
[  171.489677][ T5862] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  171.507792][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.537542][ T5899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  171.552146][ T5899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  171.625442][ T5899] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.376: invalid indirect mapped block 9 (level 0)
[  171.662659][ T5908] FAULT_INJECTION: forcing a failure.
[  171.662659][ T5908] name failslab, interval 1, probability 0, space 0, times 0
[  171.723313][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  171.741642][ T5899] EXT4-fs (loop2): 1 truncate cleaned up
[  171.748872][ T5908] CPU: 1 PID: 5908 Comm: syz.0.378 Not tainted syzkaller #0
[  171.756199][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  171.766272][ T5908] Call Trace:
[  171.769570][ T5908]  <TASK>
[  171.772510][ T5908]  dump_stack_lvl+0x188/0x250
[  171.777211][ T5908]  ? show_regs_print_info+0x20/0x20
[  171.782414][ T5908]  ? load_image+0x410/0x410
[  171.784430][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  171.786944][ T5908]  ? __lock_acquire+0x7b50/0x7b50
[  171.807829][ T5908]  should_fail+0x383/0x4b0
[  171.812268][ T5908]  should_failslab+0x5/0x20
[  171.816809][ T5908]  slab_pre_alloc_hook+0x51/0xc0
[  171.821786][ T5908]  ? getname_flags+0xb7/0x4f0
[  171.821813][ T5908]  kmem_cache_alloc+0x3d/0x280
[  171.821835][ T5908]  getname_flags+0xb7/0x4f0
[  171.821855][ T5908]  do_sys_openat2+0xdd/0x500
[  171.821874][ T5908]  ? do_sys_open+0xe0/0xe0
[  171.821887][ T5908]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  171.821910][ T5908]  ? lock_chain_count+0x20/0x20
[  171.821932][ T5908]  __x64_sys_open+0x11b/0x140
[  171.821949][ T5908]  do_syscall_64+0x4c/0xa0
[  171.821963][ T5908]  ? clear_bhb_loop+0x30/0x80
[  171.821978][ T5908]  ? clear_bhb_loop+0x30/0x80
[  171.821993][ T5908]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  171.880012][ T5908] RIP: 0033:0x7f7cef686e99
[  171.884444][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.904058][ T5908] RSP: 002b:00007f7ced8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  171.912489][ T5908] RAX: ffffffffffffffda RBX: 00007f7cef90f090 RCX: 00007f7cef686e99
[  171.920477][ T5908] RDX: 0000000000000018 RSI: 0000000000101000 RDI: 00002000000003c0
[  171.928461][ T5908] RBP: 00007f7ced8be090 R08: 0000000000000000 R09: 0000000000000000
[  171.936441][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.944426][ T5908] R13: 00007f7cef90f128 R14: 00007f7cef90f090 R15: 00007ffce79c0c48
[  171.952421][ T5908]  </TASK>
[  171.968261][ T4579] usb 2-1: USB disconnect, device number 7
[  172.007166][ T5911] loop4: detected capacity change from 0 to 32768
[  172.032217][   T26] audit: type=1800 audit(1784487965.891:4): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="bus" dev="loop2" ino=18 res=0 errno=0
[  172.082774][ T5911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.377 (5911)
[  172.224751][ T5911] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  172.233946][ T5911] BTRFS info (device loop4): setting nodatacow, compression disabled
[  172.242127][ T5911] BTRFS info (device loop4): setting datasum, datacow enabled
[  172.249871][ T5911] BTRFS info (device loop4): force clearing of disk cache
[  172.257065][ T5911] BTRFS info (device loop4): enabling ssd optimizations
[  172.264047][ T5911] BTRFS info (device loop4): using spread ssd allocation scheme
[  172.271729][ T5911] BTRFS info (device loop4): turning on sync discard
[  172.278492][ T5911] BTRFS info (device loop4): turning off barriers
[  172.285026][ T5911] BTRFS info (device loop4): setting nodatacow, compression disabled
[  172.293334][ T5911] BTRFS info (device loop4): not using ssd optimizations
[  172.300458][ T5911] BTRFS info (device loop4): not using spread ssd allocation scheme
[  172.308513][ T5911] BTRFS info (device loop4): using free space tree
[  172.315104][ T5911] BTRFS info (device loop4): has skinny extents
[  172.779470][ T5911] BTRFS info (device loop4): clearing free space tree
[  172.786644][ T5911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.796401][ T5911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  172.815996][ T5911] BTRFS info (device loop4): creating free space tree
[  172.823609][ T5911] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.833483][ T5911] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  172.877145][ T5909] BTRFS info (device loop4): scrub: started on devid 1
[  172.893628][ T5909] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0
[  173.171799][ T5957] usb usb7: usbfs: process 5957 (syz.2.383) did not claim interface 0 before use
[  173.814219][ T5948] loop1: detected capacity change from 0 to 1024
[  173.878131][ T5948] hfsplus: unable to parse mount options
[  174.179549][ T5273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (5273)
[  174.193000][ T5971] FAULT_INJECTION: forcing a failure.
[  174.193000][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.206384][ T5971] CPU: 0 PID: 5971 Comm: syz.0.390 Not tainted syzkaller #0
[  174.213680][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  174.223744][ T5971] Call Trace:
[  174.227016][ T5971]  <TASK>
[  174.229937][ T5971]  dump_stack_lvl+0x188/0x250
[  174.234602][ T5971]  ? show_regs_print_info+0x20/0x20
[  174.239787][ T5971]  ? load_image+0x410/0x410
[  174.244278][ T5971]  ? __lock_acquire+0x7b50/0x7b50
[  174.249296][ T5971]  should_fail+0x383/0x4b0
[  174.253704][ T5971]  _copy_from_user+0x2e/0x170
[  174.258381][ T5971]  kcmp_epoll_target+0xa3/0x1e0
[  174.263215][ T5971]  ? get_file_raw_ptr+0x130/0x130
[  174.268232][ T5971]  ? do_raw_spin_unlock+0x11d/0x230
[  174.273421][ T5971]  __se_sys_kcmp+0x5d5/0x920
[  174.278003][ T5971]  do_syscall_64+0x4c/0xa0
[  174.282404][ T5971]  ? clear_bhb_loop+0x30/0x80
[  174.287068][ T5971]  ? clear_bhb_loop+0x30/0x80
[  174.291737][ T5971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  174.297614][ T5971] RIP: 0033:0x7f7cef686e99
[  174.302021][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.321614][ T5971] RSP: 002b:00007f7ced8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000138
[  174.330020][ T5971] RAX: ffffffffffffffda RBX: 00007f7cef90f090 RCX: 00007f7cef686e99
[  174.337987][ T5971] RDX: 0000000000000007 RSI: 00000000000000e9 RDI: 00000000000000e9
[  174.345955][ T5971] RBP: 00007f7ced8be090 R08: 00002000000002c0 R09: 0000000000000000
[  174.353959][ T5971] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[  174.361929][ T5971] R13: 00007f7cef90f128 R14: 00007f7cef90f090 R15: 00007ffce79c0c48
[  174.369901][ T5971]  </TASK>
[  174.372926][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.184003][ T4399] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  175.573967][ T4569] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  175.824034][ T4399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.360345][ T4399] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  176.369857][ T4399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.385375][ T6004] loop0: detected capacity change from 0 to 32768
[  176.411044][ T4399] usb 2-1: config 0 descriptor??
[  176.794109][ T4569] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  176.796973][ T6013] loop4: detected capacity change from 0 to 1024
[  176.808688][ T4569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.815575][ T6013] hfsplus: unable to parse mount options
[  176.817970][ T4569] usb 4-1: Product: syz
[  176.839874][ T4569] usb 4-1: Manufacturer: syz
[  176.844693][ T4569] usb 4-1: SerialNumber: syz
[  176.964440][ T4399] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  177.121591][ T4399] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input13
[  177.782687][ T4569] usb 4-1: config 0 descriptor??
[  177.898266][ T4569] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  177.908974][ T4399] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  178.163925][ T4569] sonixb 4-1:0.0: Error reading register 00: -71
[  178.177388][ T4569] usb 4-1: USB disconnect, device number 7
[  178.272527][ T4399] usb 2-1: USB disconnect, device number 8
[  178.411731][ T6043] FAULT_INJECTION: forcing a failure.
[  178.411731][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.437715][ T6043] CPU: 0 PID: 6043 Comm: syz.2.410 Not tainted syzkaller #0
[  178.445046][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  178.455113][ T6043] Call Trace:
[  178.458408][ T6043]  <TASK>
[  178.461359][ T6043]  dump_stack_lvl+0x188/0x250
[  178.466082][ T6043]  ? show_regs_print_info+0x20/0x20
[  178.471282][ T6043]  ? load_image+0x410/0x410
[  178.475791][ T6043]  ? __lock_acquire+0x7b50/0x7b50
[  178.480832][ T6043]  should_fail+0x383/0x4b0
[  178.485258][ T6043]  _copy_from_user+0x2e/0x170
[  178.489950][ T6043]  ___sys_recvmsg+0x173/0x5c0
[  178.494633][ T6043]  ? __sys_recvmsg+0x280/0x280
[  178.499420][ T6043]  ? __fget_files+0x402/0x470
[  178.504104][ T6043]  ? __fdget+0x18b/0x210
[  178.508335][ T6043]  ? do_recvmmsg+0x18e/0x7f0
[  178.512926][ T6043]  do_recvmmsg+0x360/0x7f0
[  178.517334][ T6043]  ? __sys_recvmmsg+0x290/0x290
[  178.522183][ T6043]  ? __context_tracking_exit+0x4c/0x80
[  178.527632][ T6043]  ? __lock_acquire+0x7b50/0x7b50
[  178.532668][ T6043]  __x64_sys_recvmmsg+0x195/0x250
[  178.537709][ T6043]  ? do_recvmmsg+0x7f0/0x7f0
[  178.542304][ T6043]  ? lockdep_hardirqs_on+0x94/0x140
[  178.547497][ T6043]  do_syscall_64+0x4c/0xa0
[  178.551903][ T6043]  ? clear_bhb_loop+0x30/0x80
[  178.556570][ T6043]  ? clear_bhb_loop+0x30/0x80
[  178.561241][ T6043]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.567216][ T6043] RIP: 0033:0x7f7528cb5e99
[  178.571637][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.591273][ T6043] RSP: 002b:00007f7526f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  178.599689][ T6043] RAX: ffffffffffffffda RBX: 00007f7528f3dfa0 RCX: 00007f7528cb5e99
[  178.608007][ T6043] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003
[  178.615998][ T6043] RBP: 00007f7526f0e090 R08: 0000000000000000 R09: 0000000000000000
[  178.623976][ T6043] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000001
[  178.631973][ T6043] R13: 00007f7528f3e038 R14: 00007f7528f3dfa0 R15: 00007ffeb13816e8
[  178.639954][ T6043]  </TASK>
[  178.643023][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.278941][ T6055] loop3: detected capacity change from 0 to 32768
[  179.384063][ T4569] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  179.431287][ T6060] loop0: detected capacity change from 0 to 1024
[  179.514760][ T6060] hfsplus: unable to parse mount options
[  179.584858][ T4569] usb 3-1: device descriptor read/64, error -71
[  179.753897][ T4565] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  179.863883][ T4569] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  180.054046][ T4569] usb 3-1: device descriptor read/64, error -71
[  180.070719][ T6073] loop3: detected capacity change from 0 to 40427
[  180.096672][ T6073] F2FS-fs (loop3): invalid crc value
[  180.122084][ T6073] F2FS-fs (loop3): Found nat_bits in checkpoint
[  180.174434][ T4569] usb usb3-port1: attempt power cycle
[  180.253963][ T6073] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  180.274000][ T4565] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  180.297298][ T4565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.323983][ T4565] usb 2-1: Product: syz
[  180.333900][ T4565] usb 2-1: Manufacturer: syz
[  180.348894][ T4565] usb 2-1: SerialNumber: syz
[  180.376286][ T4565] usb 2-1: config 0 descriptor??
[  180.384960][ T6087] netlink: 'syz.4.424': attribute type 10 has an invalid length.
[  180.392814][ T6087] batman_adv: batadv0: Interface deactivated: dummy0
[  180.422535][ T6087] batman_adv: batadv0: Removing interface: dummy0
[  180.422587][ T4565] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  180.453074][ T6087] team0: Port device dummy0 added
[  180.470389][ T6088] netlink: 'syz.4.424': attribute type 10 has an invalid length.
[  180.519193][ T6079] loop0: detected capacity change from 0 to 40427
[  180.519737][ T6088] team0: Port device dummy0 removed
[  180.555650][ T6088] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  180.565325][ T6079] F2FS-fs (loop0): invalid crc value
[  180.586049][ T6079] F2FS-fs (loop0): Found nat_bits in checkpoint
[  180.602607][ T4569] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  180.682026][ T6092] loop4: detected capacity change from 0 to 4096
[  180.697707][ T6079] F2FS-fs (loop0): Start checkpoint disabled!
[  180.705691][ T4569] usb 3-1: device descriptor read/8, error -71
[  180.728082][ T6092] EXT4-fs (loop4): Test dummy encryption mode enabled
[  180.751074][ T6079] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  180.774335][ T6092] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  180.833226][ T6066] loop1: detected capacity change from 0 to 512
[  180.950494][ T6066] EXT4-fs (loop1): 1 truncate cleaned up
[  180.956484][ T6066] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  180.972538][ T5123] attempt to access beyond end of device
[  180.972538][ T5123] loop0: rw=2049, want=40976, limit=40427
[  180.992521][ T6092] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  181.001125][ T4569] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  181.059901][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  181.104183][ T4565] sonixb 2-1:0.0: Error writing register 01: -71
[  181.110825][ T4569] usb 3-1: device descriptor read/8, error -71
[  181.115571][ T4187] attempt to access beyond end of device
[  181.115571][ T4187] loop3: rw=2049, want=45104, limit=40427
[  181.131114][ T4565] sonixb: probe of 2-1:0.0 failed with error -71
[  181.142786][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  181.152588][ T4565] usb 2-1: USB disconnect, device number 9
[  181.185126][ T4404] Bluetooth: hci0: command 0x0406 tx timeout
[  181.191192][ T4404] Bluetooth: hci3: command 0x0406 tx timeout
[  181.213917][ T4404] Bluetooth: hci2: command 0x0406 tx timeout
[  181.234036][ T4404] Bluetooth: hci1: command 0x0406 tx timeout
[  181.254512][ T4569] usb usb3-port1: unable to enumerate USB device
[  182.149364][ T6110] loop3: detected capacity change from 0 to 4096
[  182.262316][ T4404] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.298458][ T6110] EXT4-fs (loop3): Test dummy encryption mode enabled
[  182.351342][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  182.367361][ T6113] loop2: detected capacity change from 0 to 1024
[  182.376099][ T6113] hfsplus: unable to parse mount options
[  182.421053][ T6110] FAULT_INJECTION: forcing a failure.
[  182.421053][ T6110] name failslab, interval 1, probability 0, space 0, times 0
[  182.468803][ T6110] CPU: 0 PID: 6110 Comm: syz.3.427 Not tainted syzkaller #0
[  182.476143][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  182.486207][ T6110] Call Trace:
[  182.489499][ T6110]  <TASK>
[  182.492430][ T6110]  dump_stack_lvl+0x188/0x250
[  182.497120][ T6110]  ? show_regs_print_info+0x20/0x20
[  182.502328][ T6110]  ? load_image+0x410/0x410
[  182.506843][ T6110]  ? __might_sleep+0xf0/0xf0
[  182.511457][ T6110]  ? __lock_acquire+0x7b50/0x7b50
[  182.516505][ T6110]  should_fail+0x383/0x4b0
[  182.520944][ T6110]  should_failslab+0x5/0x20
[  182.525462][ T6110]  slab_pre_alloc_hook+0x51/0xc0
[  182.530410][ T6110]  ? getname_flags+0xb7/0x4f0
[  182.535101][ T6110]  kmem_cache_alloc+0x3d/0x280
[  182.539882][ T6110]  getname_flags+0xb7/0x4f0
[  182.544413][ T6110]  __x64_sys_mkdirat+0x78/0x90
[  182.549283][ T6110]  do_syscall_64+0x4c/0xa0
[  182.550134][ T6119] loop0: detected capacity change from 0 to 4096
[  182.553710][ T6110]  ? clear_bhb_loop+0x30/0x80
[  182.564706][ T6110]  ? clear_bhb_loop+0x30/0x80
[  182.569401][ T6110]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  182.575304][ T6110] RIP: 0033:0x7feca7a62d07
[  182.579729][ T6110] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.599599][ T6110] RSP: 002b:00007feca5cbbe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  182.608009][ T6110] RAX: ffffffffffffffda RBX: 00007feca5cbbee0 RCX: 00007feca7a62d07
[  182.615971][ T6110] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  182.623934][ T6110] RBP: 00002000000002c0 R08: 0000200000000080 R09: 0000000000000000
[  182.631904][ T6110] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000100
[  182.639868][ T6110] R13: 00007feca5cbbea0 R14: 0000000000000000 R15: 0000000000000000
[  182.647841][ T6110]  </TASK>
[  182.650933][    C0] vkms_vblank_simulate: vblank timer overrun
[  182.960448][ T6123] loop1: detected capacity change from 0 to 32768
[  183.025115][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.105088][ T6119] EXT4-fs (loop0): Test dummy encryption mode enabled
[  183.121586][ T4404] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  183.133052][ T6119] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  183.134605][ T6125] FAULT_INJECTION: forcing a failure.
[  183.134605][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.153890][ T4404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.173711][ T4404] usb 5-1: config 0 descriptor??
[  183.320351][ T6125] CPU: 1 PID: 6125 Comm: syz.3.433 Not tainted syzkaller #0
[  183.327693][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  183.337759][ T6125] Call Trace:
[  183.341046][ T6125]  <TASK>
[  183.343979][ T6125]  dump_stack_lvl+0x188/0x250
[  183.348667][ T6125]  ? show_regs_print_info+0x20/0x20
[  183.353884][ T6125]  ? load_image+0x410/0x410
[  183.358408][ T6125]  ? __lock_acquire+0x7b50/0x7b50
[  183.363446][ T6125]  should_fail+0x383/0x4b0
[  183.367872][ T6125]  _copy_from_user+0x2e/0x170
[  183.372567][ T6125]  __copy_msghdr_from_user+0xc9/0x630
[  183.377952][ T6125]  ? verify_lock_unused+0x140/0x140
[  183.383165][ T6125]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  183.388482][ T6125]  ___sys_sendmsg+0x19a/0x2e0
[  183.393174][ T6125]  ? __sys_sendmsg+0x290/0x290
[  183.398009][ T6125]  __sys_sendmmsg+0x2ba/0x500
[  183.402815][ T6125]  ? __ia32_sys_sendmsg+0x80/0x80
[  183.407866][ T6125]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  183.413863][ T6125]  ? lock_chain_count+0x20/0x20
[  183.418738][ T6125]  __x64_sys_sendmmsg+0x9c/0xb0
[  183.423614][ T6125]  do_syscall_64+0x4c/0xa0
[  183.428049][ T6125]  ? clear_bhb_loop+0x30/0x80
[  183.432748][ T6125]  ? clear_bhb_loop+0x30/0x80
[  183.437530][ T6125]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.443444][ T6125] RIP: 0033:0x7feca7a63e99
[  183.447875][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.467579][ T6125] RSP: 002b:00007feca5cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  183.476016][ T6125] RAX: ffffffffffffffda RBX: 00007feca7cebfa0 RCX: 00007feca7a63e99
[  183.484002][ T6125] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[  183.492126][ T6125] RBP: 00007feca5cbc090 R08: 0000000000000000 R09: 0000000000000000
[  183.500127][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.508093][ T6125] R13: 00007feca7cec038 R14: 00007feca7cebfa0 R15: 00007ffe2b7299e8
[  183.516069][ T6125]  </TASK>
[  183.830182][ T4404] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  183.858271][ T4404] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input14
[  184.109472][ T6145] loop3: detected capacity change from 0 to 32768
[  184.319264][ T4404] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  184.853896][    C0] keytouch 0003:0926:3333.000A: Event data for report 0 was too short (8 vs 4)
[  185.337679][ T6157] pim6reg0: tun_chr_ioctl cmd 2147767520
[  185.391860][ T4404] usb 5-1: USB disconnect, device number 7
[  185.502660][ T6153] fido_id[6153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  185.529109][ T6140] loop0: detected capacity change from 0 to 40427
[  185.561999][ T6140] F2FS-fs (loop0): invalid crc value
[  185.591061][ T6140] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.688290][ T6140] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  185.802304][ T6170] netlink: 'syz.2.445': attribute type 11 has an invalid length.
[  186.396450][ T4569] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  186.800916][ T4193] attempt to access beyond end of device
[  186.800916][ T4193] loop0: rw=2049, want=45104, limit=40427
[  187.089773][ T6195] loop2: detected capacity change from 0 to 32768
[  187.104294][ T4569] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  187.229783][ T4569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.270141][ T4569] usb 5-1: Product: syz
[  187.283604][ T4569] usb 5-1: Manufacturer: syz
[  187.290495][ T4569] usb 5-1: SerialNumber: syz
[  187.309756][ T4569] usb 5-1: config 0 descriptor??
[  187.449749][ T4569] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  187.805651][ T6197] loop1: detected capacity change from 0 to 32768
[  187.857200][ T6197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  187.865749][ T6197] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  187.867204][ T6179] loop4: detected capacity change from 0 to 512
[  187.904406][ T6197] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  187.933306][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  187.946497][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  187.983686][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms
[  187.992223][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  188.006193][ T6197] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  188.204208][ T4569] sonixb 5-1:0.0: Error writing register 01: -110
[  188.240377][ T6206] pim6reg0: tun_chr_ioctl cmd 2147767520
[  188.284188][ T4569] sonixb: probe of 5-1:0.0 failed with error -110
[  188.492797][ T6197] gfs2: fsid=syz:syz.0: found 1 quota changes
[  188.577184][ T6179] EXT4-fs (loop4): 1 truncate cleaned up
[  188.583958][ T6179] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  188.641923][ T6207] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  188.641923][ T6207]   inode = 11 2339
[  188.641923][ T6207]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[  188.663895][ T6207] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  188.841428][ T6207] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing.
[  188.996706][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'.
[  189.064065][ T6220] FAULT_INJECTION: forcing a failure.
[  189.064065][ T6220] name failslab, interval 1, probability 0, space 0, times 0
[  189.091533][    T7] usb 5-1: USB disconnect, device number 8
[  189.103485][ T6220] CPU: 0 PID: 6220 Comm: syz.0.458 Not tainted syzkaller #0
[  189.110831][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  189.120896][ T6220] Call Trace:
[  189.124183][ T6220]  <TASK>
[  189.127122][ T6220]  dump_stack_lvl+0x188/0x250
[  189.131823][ T6220]  ? show_regs_print_info+0x20/0x20
[  189.137040][ T6220]  ? load_image+0x410/0x410
[  189.141560][ T6220]  ? __might_sleep+0xf0/0xf0
[  189.146153][ T6220]  ? __lock_acquire+0x7b50/0x7b50
[  189.151185][ T6220]  should_fail+0x383/0x4b0
[  189.155605][ T6220]  should_failslab+0x5/0x20
[  189.160117][ T6220]  slab_pre_alloc_hook+0x51/0xc0
[  189.165063][ T6220]  __kmalloc+0x6b/0x340
[  189.169235][ T6220]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  189.174973][ T6220]  tomoyo_realpath_from_path+0xed/0x5e0
[  189.180547][ T6220]  tomoyo_path_number_perm+0x251/0x6b0
[  189.186026][ T6220]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  189.191526][ T6220]  ? ksys_write+0x1d4/0x260
[  189.196082][ T6220]  security_file_ioctl+0x6c/0xa0
[  189.201039][ T6220]  __se_sys_ioctl+0x48/0x170
[  189.205627][ T6220]  do_syscall_64+0x4c/0xa0
[  189.210031][ T6220]  ? clear_bhb_loop+0x30/0x80
[  189.214702][ T6220]  ? clear_bhb_loop+0x30/0x80
[  189.219395][ T6220]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  189.225300][ T6220] RIP: 0033:0x7f7cef686e99
[  189.229707][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.249412][ T6220] RSP: 002b:00007f7ced8be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  189.257826][ T6220] RAX: ffffffffffffffda RBX: 00007f7cef90f090 RCX: 00007f7cef686e99
[  189.265809][ T6220] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  189.273861][ T6220] RBP: 00007f7ced8be090 R08: 0000000000000000 R09: 0000000000000000
[  189.281835][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.283906][ T4569] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  189.289799][ T6220] R13: 00007f7cef90f128 R14: 00007f7cef90f090 R15: 00007ffce79c0c48
[  189.289830][ T6220]  </TASK>
[  189.299618][ T6220] ERROR: Out of memory at tomoyo_realpath_from_path.
[  189.443896][ T4404] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  189.674060][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.691903][ T4569] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  189.711154][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.739592][ T4569] usb 3-1: config 0 descriptor??
[  189.899124][ T4404] usb 4-1: unable to get BOS descriptor or descriptor too short
[  190.104497][ T4404] usb 4-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config
[  190.114968][ T4404] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.225714][ T4569] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  190.243034][ T4569] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000B/input/input15
[  190.562965][ T6235] loop0: detected capacity change from 0 to 32768
[  190.644279][ T4404] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  190.718708][ T4569] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  190.723377][ T4404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.772306][ T4404] usb 4-1: Product: syz
[  190.804994][ T4404] usb 4-1: Manufacturer: syz
[  190.838975][ T4404] usb 4-1: SerialNumber: syz
[  190.927859][ T4404] usb 4-1: selecting invalid altsetting 1
[  190.950380][ T4404] usb 4-1: unit 6 not found!
[  190.968896][ T4404] usb 4-1: unit 107 not found!
[  191.031333][ T4404] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  191.208229][ T5273] udevd[5273]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.243904][    C1] keytouch 0003:0926:3333.000B: Event data for report 0 was too short (8 vs 4)
[  191.374896][ T6246] pim6reg0: tun_chr_ioctl cmd 2147767520
[  191.927190][ T4404] usb 4-1: USB disconnect, device number 8
[  191.957357][ T4577] usb 3-1: USB disconnect, device number 17
[  192.040671][ T6252] FAULT_INJECTION: forcing a failure.
[  192.040671][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.061640][ T6252] CPU: 0 PID: 6252 Comm: syz.0.471 Not tainted syzkaller #0
[  192.068999][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  192.079063][ T6252] Call Trace:
[  192.082333][ T6252]  <TASK>
[  192.085254][ T6252]  dump_stack_lvl+0x188/0x250
[  192.089954][ T6252]  ? show_regs_print_info+0x20/0x20
[  192.095244][ T6252]  ? load_image+0x410/0x410
[  192.099762][ T6252]  ? __lock_acquire+0x7b50/0x7b50
[  192.104810][ T6252]  should_fail+0x383/0x4b0
[  192.109226][ T6252]  _copy_to_user+0x2e/0x130
[  192.113722][ T6252]  simple_read_from_buffer+0xe3/0x150
[  192.119088][ T6252]  proc_fail_nth_read+0x1a6/0x220
[  192.124128][ T6252]  ? proc_fault_inject_write+0x310/0x310
[  192.129776][ T6252]  ? fsnotify_perm+0x254/0x560
[  192.134544][ T6252]  ? proc_fault_inject_write+0x310/0x310
[  192.140207][ T6252]  vfs_read+0x2ff/0xd50
[  192.144366][ T6252]  ? __lock_acquire+0x7b50/0x7b50
[  192.149386][ T6252]  ? kernel_read+0x1e0/0x1e0
[  192.153971][ T6252]  ? mutex_lock_nested+0x17/0x20
[  192.158920][ T6252]  ? __fdget_pos+0x2bf/0x370
[  192.163493][ T6252]  ? ksys_read+0x70/0x260
[  192.167815][ T6252]  ksys_read+0x153/0x260
[  192.172056][ T6252]  ? vfs_write+0xd70/0xd70
[  192.176462][ T6252]  ? lockdep_hardirqs_on+0x94/0x140
[  192.181681][ T6252]  do_syscall_64+0x4c/0xa0
[  192.186108][ T6252]  ? clear_bhb_loop+0x30/0x80
[  192.190785][ T6252]  ? clear_bhb_loop+0x30/0x80
[  192.195444][ T6252]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.201326][ T6252] RIP: 0033:0x7f7cef6476ce
[  192.205746][ T6252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  192.225579][ T6252] RSP: 002b:00007f7ced8defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  192.233988][ T6252] RAX: ffffffffffffffda RBX: 00007f7ced8df6c0 RCX: 00007f7cef6476ce
[  192.241950][ T6252] RDX: 000000000000000f RSI: 00007f7ced8df0a0 RDI: 0000000000000004
[  192.249919][ T6252] RBP: 00007f7ced8df090 R08: 0000000000000000 R09: 0000000000000000
[  192.257891][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.265852][ T6252] R13: 00007f7cef90f038 R14: 00007f7cef90efa0 R15: 00007ffce79c0c48
[  192.273843][ T6252]  </TASK>
[  192.648122][ T6254] loop0: detected capacity change from 0 to 32768
[  192.746272][ T6254] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  192.753730][ T6254] CPU: 0 PID: 6254 Comm: syz.0.472 Not tainted syzkaller #0
[  192.761035][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  192.771200][ T6254] Call Trace:
[  192.774500][ T6254]  <TASK>
[  192.778016][ T6254]  dump_stack_lvl+0x188/0x250
[  192.782724][ T6254]  ? show_regs_print_info+0x20/0x20
[  192.787978][ T6254]  ? load_image+0x410/0x410
[  192.792523][ T6254]  sysfs_create_dir_ns+0x26a/0x290
[  192.797664][ T6254]  ? sysfs_warn_dup+0xa0/0xa0
[  192.802368][ T6254]  ? do_raw_spin_unlock+0x11d/0x230
[  192.807591][ T6254]  kobject_add_internal+0x5ba/0xcd0
[  192.812818][ T6254]  kobject_init_and_add+0x128/0x190
[  192.818042][ T6254]  ? lockdep_softirqs_off+0x430/0x430
[  192.823465][ T6254]  ? kobject_add+0x230/0x230
[  192.828089][ T6254]  ? __init_swait_queue_head+0xa4/0x140
[  192.833664][ T6254]  gfs2_sys_fs_add+0x24f/0x4b0
[  192.833920][ T4577] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  192.838531][ T6254]  ? gfs2_recover_set+0x240/0x240
[  192.851110][ T6254]  ? snprintf+0xe5/0x140
[  192.855533][ T6254]  ? __free_pages+0x95/0x1a0
[  192.861715][ T6254]  ? vscnprintf+0x80/0x80
[  192.866081][ T6254]  gfs2_fill_super+0x11ed/0x1ea0
[  192.871052][ T6254]  ? gfs2_reconfigure+0xd80/0xd80
[  192.876119][ T6254]  ? sb_set_blocksize+0xa5/0xe0
[  192.881332][ T6254]  get_tree_bdev+0x3e6/0x610
[  192.885948][ T6254]  ? gfs2_reconfigure+0xd80/0xd80
[  192.891205][ T6254]  gfs2_get_tree+0x4d/0x1e0
[  192.895752][ T6254]  vfs_get_tree+0x88/0x270
[  192.900170][ T6254]  do_new_mount+0x247/0xa40
[  192.904678][ T6254]  __se_sys_mount+0x2e3/0x3d0
[  192.909375][ T6254]  ? __x64_sys_mount+0xc0/0xc0
[  192.914171][ T6254]  ? lockdep_hardirqs_on+0x94/0x140
[  192.919386][ T6254]  ? __x64_sys_mount+0x1c/0xc0
[  192.924176][ T6254]  do_syscall_64+0x4c/0xa0
[  192.928607][ T6254]  ? clear_bhb_loop+0x30/0x80
[  192.933299][ T6254]  ? clear_bhb_loop+0x30/0x80
[  192.938004][ T6254]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.943918][ T6254] RIP: 0033:0x7f7cef68810a
[  192.948360][ T6254] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.967979][ T6254] RSP: 002b:00007f7ced8dee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  192.976443][ T6254] RAX: ffffffffffffffda RBX: 00007f7ced8deee0 RCX: 00007f7cef68810a
[  192.984432][ T6254] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f7ced8deea0
[  192.992422][ T6254] RBP: 00002000000124c0 R08: 00007f7ced8deee0 R09: 0000000000000000
[  193.000411][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  193.008391][ T6254] R13: 00007f7ced8deea0 R14: 00000000000125c7 R15: 0000200000000180
[  193.016388][ T6254]  </TASK>
[  193.020306][ T6254] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  193.035148][ T6254] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  193.450121][ T6254] loop0: detected capacity change from 0 to 40427
[  193.489911][ T6254] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  193.497755][ T6254] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  193.508971][ T6254] F2FS-fs (loop0): invalid crc_offset: 33558524
[  193.640555][ T6254] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.664390][ T4577] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  193.673614][ T4577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.681752][ T4577] usb 3-1: Product: syz
[  193.684743][ T6254] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  193.686057][ T4577] usb 3-1: Manufacturer: syz
[  193.693005][ T6254] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.697769][ T4577] usb 3-1: SerialNumber: syz
[  193.728414][ T4577] usb 3-1: config 0 descriptor??
[  193.960785][ T6279] loop3: detected capacity change from 0 to 32768
[  194.064442][ T6207] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  194.100029][ T6207] CPU: 0 PID: 6207 Comm: gfs2_quotad Not tainted syzkaller #0
[  194.107517][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  194.117586][ T6207] Call Trace:
[  194.120872][ T6207]  <TASK>
[  194.123811][ T6207]  dump_stack_lvl+0x188/0x250
[  194.128511][ T6207]  ? schedule_preempt_disabled+0x20/0x20
[  194.134166][ T6207]  ? show_regs_print_info+0x20/0x20
[  194.136035][ T4577] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  194.139491][ T6207]  ? load_image+0x410/0x410
[  194.150083][ T6207]  ? preempt_schedule_thunk+0x16/0x18
[  194.155482][ T6207]  gfs2_assert_warn_i+0x187/0x2c0
[  194.160529][ T6207]  gfs2_quota_cleanup+0x48c/0x670
[  194.165584][ T6207]  gfs2_make_fs_ro+0x440/0x620
[  194.170371][ T6207]  ? __might_sleep+0xf0/0xf0
[  194.175072][ T6207]  ? gfs2_dinode_out+0xb00/0xb00
[  194.180031][ T6207]  ? _raw_spin_unlock+0x24/0x40
[  194.184905][ T6207]  ? gfs2_glock_nq+0xcaa/0x1510
[  194.189780][ T6207]  ? init_wait_entry+0xd0/0xd0
[  194.194574][ T6207]  gfs2_withdraw+0x660/0x14e0
[  194.199278][ T6207]  ? gfs2_lm+0x240/0x240
[  194.203546][ T6207]  ? gfs2_freeze_lock+0x52/0xc0
[  194.208415][ T6207]  ? gfs2_consist_inode_i+0xc0/0xe0
[  194.213639][ T6207]  gfs2_inode_refresh+0xb2d/0x11a0
[  194.218785][ T6207]  ? gfs2_inode_metasync+0xf0/0xf0
[  194.223924][ T6207]  inode_go_lock+0x127/0x450
[  194.228539][ T6207]  do_promote+0x75b/0xb20
[  194.232900][ T6207]  finish_xmote+0x4c2/0xaf0
[  194.237424][ T6207]  do_xmote+0x752/0x10a0
[  194.241683][ T6207]  gfs2_glock_nq+0xc6b/0x1510
[  194.246372][ T6207]  do_sync+0x49c/0xba0
[  194.250442][ T6207]  ? slot_put+0x1e0/0x1e0
[  194.254763][ T6207]  ? __lock_acquire+0x7b50/0x7b50
[  194.259778][ T6207]  ? do_raw_spin_lock+0x128/0x2f0
[  194.264794][ T6207]  ? do_sync+0x494/0xba0
[  194.269032][ T6207]  ? do_raw_spin_unlock+0x11d/0x230
[  194.274220][ T6207]  gfs2_quota_sync+0x355/0x780
[  194.278978][ T6207]  gfs2_quotad+0x40f/0x890
[  194.283477][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  194.288577][ T6207]  ? init_wait_entry+0xd0/0xd0
[  194.293360][ T6207]  kthread+0x42e/0x520
[  194.297420][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  194.302514][ T6207]  ? kthread_blkcg+0xd0/0xd0
[  194.307096][ T6207]  ret_from_fork+0x1f/0x30
[  194.311514][ T6207]  </TASK>
[  194.322379][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  194.329998][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  194.344368][ T6207] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  194.424790][ T6207] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  194.435944][ T6207] gfs2: fsid=syz:syz.0: File system withdrawn
[  194.442051][ T6207] CPU: 0 PID: 6207 Comm: gfs2_quotad Not tainted syzkaller #0
[  194.449521][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  194.459592][ T6207] Call Trace:
[  194.462890][ T6207]  <TASK>
[  194.465833][ T6207]  dump_stack_lvl+0x188/0x250
[  194.470524][ T6207]  ? show_regs_print_info+0x20/0x20
[  194.475727][ T6207]  ? load_image+0x410/0x410
[  194.480244][ T6207]  ? lockref_put_or_lock+0x6e/0xb0
[  194.485380][ T6207]  gfs2_withdraw+0xb9a/0x14e0
[  194.490083][ T6207]  ? gfs2_lm+0x240/0x240
[  194.494347][ T6207]  ? gfs2_consist_inode_i+0xc0/0xe0
[  194.499562][ T6207]  gfs2_inode_refresh+0xb2d/0x11a0
[  194.504697][ T6207]  ? gfs2_inode_metasync+0xf0/0xf0
[  194.509832][ T6207]  inode_go_lock+0x127/0x450
[  194.514699][ T6207]  do_promote+0x75b/0xb20
[  194.519058][ T6207]  finish_xmote+0x4c2/0xaf0
[  194.523677][ T6207]  do_xmote+0x752/0x10a0
[  194.527950][ T6207]  gfs2_glock_nq+0xc6b/0x1510
[  194.532656][ T6207]  do_sync+0x49c/0xba0
[  194.536746][ T6207]  ? slot_put+0x1e0/0x1e0
[  194.541094][ T6207]  ? __lock_acquire+0x7b50/0x7b50
[  194.546137][ T6207]  ? do_raw_spin_lock+0x128/0x2f0
[  194.551184][ T6207]  ? do_sync+0x494/0xba0
[  194.555459][ T6207]  ? do_raw_spin_unlock+0x11d/0x230
[  194.560692][ T6207]  gfs2_quota_sync+0x355/0x780
[  194.565482][ T6207]  gfs2_quotad+0x40f/0x890
[  194.569943][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  194.575075][ T6207]  ? init_wait_entry+0xd0/0xd0
[  194.579876][ T6207]  kthread+0x42e/0x520
[  194.584043][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  194.589248][ T6207]  ? kthread_blkcg+0xd0/0xd0
[  194.593859][ T6207]  ret_from_fork+0x1f/0x30
[  194.598299][ T6207]  </TASK>
[  194.661087][ T6256] loop2: detected capacity change from 0 to 512
[  194.767529][ T6256] EXT4-fs (loop2): 1 truncate cleaned up
[  194.773233][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  194.812635][ T6286] pim6reg0: tun_chr_ioctl cmd 2147767520
[  194.851168][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  194.874042][ T4577] sonixb 3-1:0.0: Error writing register 01: -110
[  194.881370][ T4577] sonixb: probe of 3-1:0.0 failed with error -110
[  195.479290][    T7] usb 3-1: USB disconnect, device number 18
[  195.757505][ T6303] device syzkaller0 entered promiscuous mode
[  195.869529][ T6305] FAULT_INJECTION: forcing a failure.
[  195.869529][ T6305] name failslab, interval 1, probability 0, space 0, times 0
[  195.885142][ T6305] CPU: 1 PID: 6305 Comm: syz.3.487 Not tainted syzkaller #0
[  195.892470][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  195.902534][ T6305] Call Trace:
[  195.905821][ T6305]  <TASK>
[  195.908752][ T6305]  dump_stack_lvl+0x188/0x250
[  195.913443][ T6305]  ? show_regs_print_info+0x20/0x20
[  195.918660][ T6305]  ? load_image+0x410/0x410
[  195.923210][ T6305]  ? __might_sleep+0xf0/0xf0
[  195.927813][ T6305]  ? __lock_acquire+0x7b50/0x7b50
[  195.932858][ T6305]  should_fail+0x383/0x4b0
[  195.937454][ T6305]  should_failslab+0x5/0x20
[  195.941978][ T6305]  slab_pre_alloc_hook+0x51/0xc0
[  195.946931][ T6305]  __kmalloc+0x6b/0x340
[  195.951100][ T6305]  ? tomoyo_realpath_from_path+0xed/0x5e0
[  195.952809][ T6310] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  195.956840][ T6305]  tomoyo_realpath_from_path+0xed/0x5e0
[  195.956880][ T6305]  tomoyo_path_number_perm+0x251/0x6b0
[  195.956901][ T6305]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  195.956915][ T6305]  ? ksys_write+0x1d4/0x260
[  195.985767][ T6305]  security_file_ioctl+0x6c/0xa0
[  195.990723][ T6305]  __se_sys_ioctl+0x48/0x170
[  195.995323][ T6305]  do_syscall_64+0x4c/0xa0
[  195.999750][ T6305]  ? clear_bhb_loop+0x30/0x80
[  196.004434][ T6305]  ? clear_bhb_loop+0x30/0x80
[  196.009114][ T6305]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  196.015009][ T6305] RIP: 0033:0x7feca7a63e99
[  196.019435][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.038889][ T6313] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  196.039042][ T6305] RSP: 002b:00007feca5cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.054815][ T6305] RAX: ffffffffffffffda RBX: 00007feca7cebfa0 RCX: 00007feca7a63e99
[  196.062807][ T6305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  196.070787][ T6305] RBP: 00007feca5cbc090 R08: 0000000000000000 R09: 0000000000000000
[  196.078778][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.086770][ T6305] R13: 00007feca7cec038 R14: 00007feca7cebfa0 R15: 00007ffe2b7299e8
[  196.094863][ T6305]  </TASK>
[  196.268649][ T6305] ERROR: Out of memory at tomoyo_realpath_from_path.
[  196.578662][ T6325] loop1: detected capacity change from 0 to 32768
[  196.817908][ T6329] loop3: detected capacity change from 0 to 1024
[  196.872172][ T6323] loop0: detected capacity change from 0 to 512
[  196.896685][ T6329] hfsplus: unable to parse mount options
[  196.923631][ T6323] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  196.932844][ T6323] EXT4-fs (loop0): orphan cleanup on readonly fs
[  196.944723][ T6323] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  196.974073][ T6323] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  197.000281][ T6323] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #16: comm syz.0.493: corrupted xattr block 31
[  197.023279][ T6323] EXT4-fs (loop0): Remounting filesystem read-only
[  197.030335][ T6323] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117)
[  197.045390][ T6323] EXT4-fs (loop0): 1 orphan inode deleted
[  197.051410][ T6323] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  198.065785][ T6340] loop2: detected capacity change from 0 to 32768
[  198.162735][ T6346] net_ratelimit: 30 callbacks suppressed
[  198.162749][ T6346] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  199.126690][ T6366] loop2: detected capacity change from 0 to 1024
[  199.220713][ T4569] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  200.045545][ T6366] netlink: 'syz.2.505': attribute type 4 has an invalid length.
[  200.124087][ T4569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.166844][ T4569] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  200.231892][ T4569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.250237][ T4424] hfsplus: b-tree write err: -5, ino 25
[  200.290793][ T4569] usb 5-1: config 0 descriptor??
[  200.302036][ T4424] hfsplus: b-tree write err: -5, ino 4
[  200.329396][ T4424] hfsplus: b-tree write err: -5, ino 2
[  200.402278][ T6362] loop3: detected capacity change from 0 to 40427
[  200.448631][ T6362] F2FS-fs (loop3): invalid crc value
[  200.544822][ T6362] F2FS-fs (loop3): Found nat_bits in checkpoint
[  200.897428][ T6386] loop0: detected capacity change from 0 to 32768
[  200.983213][ T6362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  201.145102][ T4569] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  201.164416][ T4569] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000C/input/input16
[  201.337006][ T4569] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  201.863893][    C1] keytouch 0003:0926:3333.000C: Event data for report 0 was too short (8 vs 4)
[  202.217875][ T4569] usb 5-1: USB disconnect, device number 9
[  202.293879][ T4293] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  202.310620][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  204.288833][ T4293] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  204.298006][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.306106][ T4293] usb 1-1: Product: syz
[  204.310291][ T4293] usb 1-1: Manufacturer: syz
[  204.318127][ T4293] usb 1-1: SerialNumber: syz
[  204.324940][ T4293] usb 1-1: config 0 descriptor??
[  204.325233][ T6436] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  204.588716][ T6441] loop1: detected capacity change from 0 to 32768
[  204.854255][ T4293] usb 1-1: can't set config #0, error -71
[  204.861309][ T4293] usb 1-1: USB disconnect, device number 8
[  206.138473][ T4577] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  207.041809][ T6442] loop3: detected capacity change from 0 to 40427
[  207.094066][ T4577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.113639][ T6442] F2FS-fs (loop3): invalid crc value
[  207.129955][ T4577] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  207.171511][ T4577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.223885][ T6442] F2FS-fs (loop3): Found nat_bits in checkpoint
[  207.268479][ T4577] usb 2-1: config 0 descriptor??
[  207.748172][ T6489] pim6reg0: tun_chr_ioctl cmd 2147767520
[  208.014913][ T4577] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  208.030894][ T4577] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input17
[  208.121717][ T4577] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  208.484132][ T4569] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  208.553891][    C1] keytouch 0003:0926:3333.000D: Event data for report 0 was too short (8 vs 4)
[  208.735278][ T6505] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  208.958411][ T6506] loop2: detected capacity change from 0 to 32768
[  209.130296][ T4293] usb 2-1: USB disconnect, device number 10
[  210.044107][ T4569] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  210.068840][ T4569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.107302][ T4569] usb 5-1: Product: syz
[  210.112241][ T4569] usb 5-1: Manufacturer: syz
[  210.156272][ T4569] usb 5-1: SerialNumber: syz
[  210.333240][ T4569] usb 5-1: config 0 descriptor??
[  210.834480][ T4569] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  211.074065][ T6542] loop4: detected capacity change from 0 to 512
[  211.242016][ T6546] pim6reg0: tun_chr_ioctl cmd 2147767520
[  211.393003][ T6542] EXT4-fs (loop4): 1 truncate cleaned up
[  211.399086][ T4569] sonixb 5-1:0.0: Error writing register 01: -110
[  211.413128][ T4569] sonixb: probe of 5-1:0.0 failed with error -110
[  211.428951][ T6542] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  211.530481][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'.
[  211.547797][ T6555] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  211.608398][ T4569] usb 5-1: USB disconnect, device number 10
[  211.727166][ T6527] loop2: detected capacity change from 0 to 40427
[  211.792009][ T6527] F2FS-fs (loop2): invalid crc value
[  212.015683][ T6527] F2FS-fs (loop2): Found nat_bits in checkpoint
[  212.090047][ T6527] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  212.356296][ T6569] loop0: detected capacity change from 0 to 32768
[  214.781978][ T4404] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  214.980955][ T6598] pim6reg0: tun_chr_ioctl cmd 2147767520
[  215.346177][ T6601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  215.692041][ T6612] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  215.764208][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.969070][ T6614] loop3: detected capacity change from 0 to 32768
[  215.980422][ T4404] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  215.989624][ T4404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.117847][ T4404] usb 5-1: config 0 descriptor??
[  216.263904][ T4176] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  217.024379][ T4176] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  217.085094][ T4404] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[  217.095961][ T4404] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input18
[  217.229204][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.237478][ T4176] usb 2-1: Product: syz
[  217.241786][ T4176] usb 2-1: Manufacturer: syz
[  217.246915][ T4176] usb 2-1: SerialNumber: syz
[  217.320057][ T4404] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  217.326716][ T4176] usb 2-1: config 0 descriptor??
[  217.586104][ T4176] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  217.623893][    C0] keytouch 0003:0926:3333.000E: Event data for report 0 was too short (8 vs 4)
[  217.829340][ T4569] usb 5-1: USB disconnect, device number 11
[  218.011920][ T6610] loop1: detected capacity change from 0 to 512
[  218.124330][ T6610] EXT4-fs (loop1): 1 truncate cleaned up
[  218.130024][ T6610] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  218.217940][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  218.304244][ T4176] sonixb 2-1:0.0: Error writing register 01: -71
[  218.312642][ T4176] sonixb: probe of 2-1:0.0 failed with error -71
[  218.343393][ T4176] usb 2-1: USB disconnect, device number 11
[  219.425480][ T6646] pim6reg0: tun_chr_ioctl cmd 2147767520
[  219.444630][ T6649] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  219.478219][ T6631] loop2: detected capacity change from 0 to 40427
[  219.509499][ T6631] F2FS-fs (loop2): invalid crc value
[  219.600219][ T6631] F2FS-fs (loop2): Found nat_bits in checkpoint
[  220.362517][ T6660] loop4: detected capacity change from 0 to 32768
[  220.371937][ T6631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  220.491449][ T6660] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  220.500168][ T6660] BTRFS info (device loop4): setting nodatacow, compression disabled
[  220.508363][ T6660] BTRFS info (device loop4): setting datasum, datacow enabled
[  220.515895][ T6660] BTRFS info (device loop4): force clearing of disk cache
[  220.523032][ T6660] BTRFS info (device loop4): enabling ssd optimizations
[  220.530063][ T6660] BTRFS info (device loop4): using spread ssd allocation scheme
[  220.537761][ T6660] BTRFS info (device loop4): turning on sync discard
[  220.544504][ T6660] BTRFS info (device loop4): turning off barriers
[  220.551145][ T6660] BTRFS info (device loop4): setting nodatacow, compression disabled
[  220.559287][ T6660] BTRFS info (device loop4): not using ssd optimizations
[  220.566953][ T6660] BTRFS info (device loop4): not using spread ssd allocation scheme
[  220.575009][ T6660] BTRFS info (device loop4): using free space tree
[  220.581523][ T6660] BTRFS info (device loop4): has skinny extents
[  221.835771][ T6660] BTRFS info (device loop4): clearing free space tree
[  221.842760][ T6660] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.852652][ T6660] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.870456][ T6660] BTRFS info (device loop4): creating free space tree
[  221.878064][ T6660] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.887708][ T6660] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.962239][ T6660] BTRFS info (device loop4): scrub: started on devid 1
[  222.001978][ T6660] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0
[  222.177397][ T6710] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:04:00:00:00:85
[  222.423944][ T4404] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  223.294141][ T4577] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  223.703168][ T6724] pim6reg0: tun_chr_ioctl cmd 2147767520
[  224.180869][ T4404] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  224.218126][ T4404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.228498][ T4404] usb 4-1: Product: syz
[  224.232795][ T4404] usb 4-1: Manufacturer: syz
[  224.238014][ T4404] usb 4-1: SerialNumber: syz
[  224.287232][ T4404] usb 4-1: config 0 descriptor??
[  224.326768][ T4404] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  224.473405][ T4577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.484679][ T4577] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  224.493737][ T4577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.505353][ T4577] usb 3-1: config 0 descriptor??
[  224.646262][ T6729] loop0: detected capacity change from 0 to 40427
[  224.741826][ T6707] loop3: detected capacity change from 0 to 512
[  224.772146][ T6729] F2FS-fs (loop0): invalid crc value
[  224.881354][ T6729] F2FS-fs (loop0): Found nat_bits in checkpoint
[  225.024130][ T6207] ==================================================================
[  225.032229][ T6207] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7b50
[  225.039527][ T6207] Read of size 8 at addr ffff888079070bb0 by task gfs2_quotad/6207
[  225.047414][ T6207] 
[  225.049736][ T6207] CPU: 0 PID: 6207 Comm: gfs2_quotad Not tainted syzkaller #0
[  225.057194][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.067253][ T6207] Call Trace:
[  225.070534][ T6207]  <TASK>
[  225.073463][ T6207]  dump_stack_lvl+0x188/0x250
[  225.078149][ T6207]  ? show_regs_print_info+0x20/0x20
[  225.083346][ T6207]  ? load_image+0x410/0x410
[  225.087849][ T6207]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  225.093328][ T6207]  ? __lock_acquire+0x13dc/0x7b50
[  225.098353][ T6207]  print_address_description+0x60/0x2d0
[  225.103901][ T6207]  ? __lock_acquire+0x107/0x7b50
[  225.108843][ T6207]  kasan_report+0xdf/0x130
[  225.113259][ T6207]  ? __lock_acquire+0x107/0x7b50
[  225.118210][ T6207]  __lock_acquire+0x107/0x7b50
[  225.122998][ T6207]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  225.128983][ T6207]  ? lock_chain_count+0x20/0x20
[  225.133836][ T6207]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  225.139295][ T6207]  ? verify_lock_unused+0x140/0x140
[  225.144493][ T6207]  ? lockdep_hardirqs_off+0x70/0x100
[  225.149775][ T6207]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  225.155671][ T6207]  ? lockdep_hardirqs_on+0x94/0x140
[  225.160866][ T6207]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  225.166761][ T6207]  ? _raw_spin_unlock+0x40/0x40
[  225.171612][ T6207]  lock_acquire+0x19e/0x400
[  225.176114][ T6207]  ? finish_wait+0xb8/0x1c0
[  225.180755][ T6207]  ? timer_delete_sync+0x20/0x20
[  225.185706][ T6207]  ? read_lock_is_recursive+0x10/0x10
[  225.191085][ T6207]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  225.196553][ T6207]  ? lockdep_hardirqs_off+0x70/0x100
[  225.201933][ T6207]  _raw_spin_lock_irqsave+0xb0/0x100
[  225.207219][ T6207]  ? finish_wait+0xb8/0x1c0
[  225.211722][ T6207]  ? _raw_spin_lock+0x40/0x40
[  225.216397][ T6207]  ? update_process_times+0x200/0x200
[  225.221774][ T6207]  finish_wait+0xb8/0x1c0
[  225.226109][ T6207]  gfs2_quotad+0x713/0x890
[  225.230526][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  225.235633][ T6207]  ? init_wait_entry+0xd0/0xd0
[  225.240407][ T6207]  kthread+0x42e/0x520
[  225.244492][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  225.249624][ T6207]  ? kthread_blkcg+0xd0/0xd0
[  225.254224][ T6207]  ret_from_fork+0x1f/0x30
[  225.258653][ T6207]  </TASK>
[  225.261679][ T6207] 
[  225.263998][ T6207] Allocated by task 6527:
[  225.268317][ T6207]  __kasan_kmalloc+0xaf/0xe0
[  225.272929][ T6207]  kvmalloc_node+0x84/0x130
[  225.277447][ T6207]  f2fs_build_segment_manager+0x1326/0x6870
[  225.283442][ T6207]  f2fs_fill_super+0x48a3/0x7050
[  225.288392][ T6207]  mount_bdev+0x28a/0x3c0
[  225.292731][ T6207]  legacy_get_tree+0xe6/0x180
[  225.294559][ T6707] EXT4-fs (loop3): 1 truncate cleaned up
[  225.297410][ T6207]  vfs_get_tree+0x88/0x270
[  225.303049][ T6707] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  225.307442][ T6207]  do_new_mount+0x247/0xa40
[  225.307466][ T6207]  __se_sys_mount+0x2e3/0x3d0
[  225.307477][ T6207]  do_syscall_64+0x4c/0xa0
[  225.307488][ T6207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.307502][ T6207] 
[  225.307505][ T6207] Freed by task 4191:
[  225.307512][ T6207]  kasan_set_track+0x4b/0x70
[  225.307526][ T6207]  kasan_set_free_info+0x1f/0x40
[  225.360758][ T6207]  ____kasan_slab_free+0xd5/0x110
[  225.365793][ T6207]  slab_free_freelist_hook+0xec/0x170
[  225.371168][ T6207]  kfree+0xef/0x2a0
[  225.374975][ T6207]  f2fs_destroy_segment_manager+0xba9/0xe90
[  225.380882][ T6207]  f2fs_put_super+0x7ba/0xd00
[  225.385567][ T6207]  generic_shutdown_super+0x130/0x300
[  225.390948][ T6207]  kill_block_super+0x7c/0xe0
[  225.395729][ T6207]  kill_f2fs_super+0x310/0x3d0
[  225.400639][ T6207]  deactivate_locked_super+0x93/0xf0
[  225.406109][ T6207]  cleanup_mnt+0x426/0x4d0
[  225.410532][ T6207]  task_work_run+0x125/0x1a0
[  225.415130][ T6207]  exit_to_user_mode_loop+0x10f/0x130
[  225.420507][ T6207]  exit_to_user_mode_prepare+0xee/0x180
[  225.426087][ T6207]  syscall_exit_to_user_mode+0x16/0x40
[  225.431556][ T6207]  do_syscall_64+0x58/0xa0
[  225.435974][ T6207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.441872][ T6207] 
[  225.444199][ T6207] Last potentially related work creation:
[  225.449994][ T6207]  kasan_save_stack+0x35/0x60
[  225.454671][ T6207]  kasan_record_aux_stack+0xb8/0x100
[  225.459964][ T6207]  insert_work+0x54/0x3d0
[  225.464299][ T6207]  __queue_work+0x90b/0xc80
[  225.468807][ T6207]  queue_work_on+0x124/0x1f0
[  225.473403][ T6207]  sg_release+0x1d0/0x2c0
[  225.473932][ T6729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  225.477732][ T6207]  __fput+0x212/0x8c0
[  225.489140][ T6207]  task_work_run+0x125/0x1a0
[  225.493740][ T6207]  exit_to_user_mode_loop+0x10f/0x130
[  225.499118][ T6207]  exit_to_user_mode_prepare+0xee/0x180
[  225.504670][ T6207]  syscall_exit_to_user_mode+0x16/0x40
[  225.510132][ T6207]  do_syscall_64+0x58/0xa0
[  225.514551][ T6207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.520445][ T6207] 
[  225.522767][ T6207] The buggy address belongs to the object at ffff888079070000
[  225.522767][ T6207]  which belongs to the cache kmalloc-8k of size 8192
[  225.536821][ T6207] The buggy address is located 2992 bytes inside of
[  225.536821][ T6207]  8192-byte region [ffff888079070000, ffff888079072000)
[  225.550364][ T6207] The buggy address belongs to the page:
[  225.556017][ T6207] page:ffffea0001e41c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79070
[  225.566178][ T6207] head:ffffea0001e41c00 order:3 compound_mapcount:0 compound_pincount:0
[  225.574514][ T6207] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  225.582696][ T6207] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42280
[  225.591290][ T6207] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  225.599872][ T6207] page dumped because: kasan: bad access detected
[  225.606304][ T6207] page_owner tracks the page as allocated
[  225.612106][ T6207] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5105, ts 121232403093, free_ts 121228252542
[  225.632777][ T6207]  get_page_from_freelist+0x24f6/0x2670
[  225.638336][ T6207]  __alloc_pages+0x1ee/0x480
[  225.642927][ T6207]  new_slab+0xc0/0x4b0
[  225.646993][ T6207]  ___slab_alloc+0x807/0xdd0
[  225.651584][ T6207]  kmem_cache_alloc_trace+0xf9/0x290
[  225.656870][ T6207]  ipv4_sysctl_init_net+0x25b/0x310
[  225.662069][ T6207]  ops_init+0x360/0x5f0
[  225.666222][ T6207]  setup_net+0x39e/0xa10
[  225.670462][ T6207]  copy_net_ns+0x33e/0x5b0
[  225.674873][ T6207]  create_new_namespaces+0x3ce/0x700
[  225.680166][ T6207]  unshare_nsproxy_namespaces+0x116/0x160
[  225.685879][ T6207]  ksys_unshare+0x4f6/0x8e0
[  225.690395][ T6207]  __x64_sys_unshare+0x34/0x40
[  225.695165][ T6207]  do_syscall_64+0x4c/0xa0
[  225.699582][ T6207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.705480][ T6207] page last free stack trace:
[  225.710144][ T6207]  free_unref_page_prepare+0x637/0x6c0
[  225.715604][ T6207]  free_unref_page+0x8f/0x2a0
[  225.720287][ T6207]  __unfreeze_partials+0x188/0x1e0
[  225.725401][ T6207]  put_cpu_partial+0x12d/0x190
[  225.730166][ T6207]  qlist_free_all+0x35/0x90
[  225.734669][ T6207]  kasan_quarantine_reduce+0x150/0x160
[  225.740126][ T6207]  __kasan_slab_alloc+0x2f/0xc0
[  225.744978][ T6207]  slab_post_alloc_hook+0x4c/0x380
[  225.750085][ T6207]  __kmalloc+0x189/0x340
[  225.754325][ T6207]  tomoyo_encode+0x28a/0x550
[  225.758916][ T6207]  tomoyo_realpath_from_path+0x5a2/0x5e0
[  225.764545][ T6207]  tomoyo_path_number_perm+0x251/0x6b0
[  225.770005][ T6207]  security_file_ioctl+0x6c/0xa0
[  225.774948][ T6207]  __se_sys_ioctl+0x48/0x170
[  225.779531][ T6207]  do_syscall_64+0x4c/0xa0
[  225.783938][ T6207]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  225.789830][ T6207] 
[  225.792149][ T6207] Memory state around the buggy address:
[  225.797775][ T6207]  ffff888079070a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.805834][ T6207]  ffff888079070b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.813900][ T6207] >ffff888079070b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.821957][ T6207]                                      ^
[  225.827582][ T6207]  ffff888079070c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.835640][ T6207]  ffff888079070c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.843695][ T6207] ==================================================================
[  225.851755][ T6207] Disabling lock debugging due to kernel taint
[  225.857929][ T6207] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  225.865124][ T6207] CPU: 0 PID: 6207 Comm: gfs2_quotad Tainted: G    B             syzkaller #0
[  225.873975][ T6207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.884015][ T6207] Call Trace:
[  225.887278][ T6207]  <TASK>
[  225.890188][ T6207]  dump_stack_lvl+0x188/0x250
[  225.894861][ T6207]  ? show_regs_print_info+0x20/0x20
[  225.900062][ T6207]  ? load_image+0x410/0x410
[  225.904548][ T6207]  panic+0x2f8/0x850
[  225.908422][ T6207]  ? bpf_jit_dump+0xd0/0xd0
[  225.912902][ T6207]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  225.918780][ T6207]  ? _raw_spin_unlock+0x40/0x40
[  225.923627][ T6207]  ? __lock_acquire+0x107/0x7b50
[  225.928564][ T6207]  check_panic_on_warn+0x80/0xa0
[  225.933508][ T6207]  ? __lock_acquire+0x107/0x7b50
[  225.938442][ T6207]  end_report+0x6d/0xf0
[  225.942583][ T6207]  kasan_report+0x102/0x130
[  225.947073][ T6207]  ? __lock_acquire+0x107/0x7b50
[  225.952007][ T6207]  __lock_acquire+0x107/0x7b50
[  225.956759][ T6207]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  225.962725][ T6207]  ? lock_chain_count+0x20/0x20
[  225.967558][ T6207]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  225.973012][ T6207]  ? verify_lock_unused+0x140/0x140
[  225.978193][ T6207]  ? lockdep_hardirqs_off+0x70/0x100
[  225.983462][ T6207]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  225.989342][ T6207]  ? lockdep_hardirqs_on+0x94/0x140
[  225.994613][ T6207]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  226.000493][ T6207]  ? _raw_spin_unlock+0x40/0x40
[  226.005331][ T6207]  lock_acquire+0x19e/0x400
[  226.009824][ T6207]  ? finish_wait+0xb8/0x1c0
[  226.014314][ T6207]  ? timer_delete_sync+0x20/0x20
[  226.019235][ T6207]  ? read_lock_is_recursive+0x10/0x10
[  226.024591][ T6207]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  226.030036][ T6207]  ? lockdep_hardirqs_off+0x70/0x100
[  226.035308][ T6207]  _raw_spin_lock_irqsave+0xb0/0x100
[  226.040582][ T6207]  ? finish_wait+0xb8/0x1c0
[  226.045072][ T6207]  ? _raw_spin_lock+0x40/0x40
[  226.049734][ T6207]  ? update_process_times+0x200/0x200
[  226.055093][ T6207]  finish_wait+0xb8/0x1c0
[  226.059412][ T6207]  gfs2_quotad+0x713/0x890
[  226.063827][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  226.069164][ T6207]  ? init_wait_entry+0xd0/0xd0
[  226.073934][ T6207]  kthread+0x42e/0x520
[  226.077995][ T6207]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  226.083097][ T6207]  ? kthread_blkcg+0xd0/0xd0
[  226.087672][ T6207]  ret_from_fork+0x1f/0x30
[  226.092078][ T6207]  </TASK>
[  226.095379][ T6207] Kernel Offset: disabled
[  226.099703][ T6207] Rebooting in 86400 seconds..