last executing test programs:

5.637176019s ago: executing program 0 (id=2681):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000c06, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030362c696f636861727365743d6d6163726f6d616e69616e2c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c75737271756f74612c696e746567726974792c646973636172642c696f636861727365743d69736f383835392d362c75737271756f74612c0068067f9f944b8278884def0e057790dd79a985633a3f082972c5f43e390c14c8a267bd"], 0x24, 0x6303, &(0x7f0000001bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r2, 0x0, 0xfffe82)
syz_mount_image$btrfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x300000a, &(0x7f00000003c0)={[{@nodatacow}, {@enospc_debug}, {@clear_cache}, {@datacow}, {@noflushoncommit}, {@compress_force}, {@flushoncommit}, {@ssd_spread}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x5615, &(0x7f0000025480)="$eJzs3X9snHUdB/Dnrmu3FdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhPXCa/X0j7P9z7P93vfe/L8ce/rvs8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATBH4/dNe2O+2vHb7uh9oELrjt3zcNdi49dfPuWyk2PbBu9t/2Frx6pXNlyeMn8Wx5MND62rq+rIwhiyX6xdP/6K+ZdfWNd/VVjwgEbPpfaVlQM9pSpri+nGiU5Dw70y/1pDIKgODJAUXo7N70Tzxkgs7s8f8AhXT+xu2XKuLkNW1d0bnh+6ZWb8186A8aM9ARGSvq6OnD8WqpJ/o5Hjsi0sy69WM4lmuofveBOyYsAAN6R6kRyk3k7mn6Lm2m3RuuRdk2k3RZph+8Q2rIbJyM1bslg85wUrY/QPGtSUWH0oPOM1NPnP9NORPtH2pGo8Q7mGcuZRzrSjBlsns2R+imeJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBp6aIbZ9Tt2f3oq19p+e3vHn3zW69//PDKhtv6u+ouWbvoyfbt3/vbkcqVLYeXzL/lwUTjY+v6ujqCoCLZL5bqHnuuMh6f0V+79Yn7eqrrP7RgdVF63HA7KuvgYF+4c2l5EDRlVQ6Ew/aVBUEit5BsBuvzC19K7nwmLAAAAPBecnbydzzTTsXB4px2LJkmY8l/oVRYvH5id8uUcXMbtq7o3PD80is3n/x4iUHGqznheJl2xfGfWFYwDuNvdLzj9fDQ5XnjDC06YjTPn3m0b2pT7U1jrt510YLps+o2Xx78ZNqh9mULHxj/8rjFe9uq8/J/xdD5Pzxz8j8AAAD/jdM8/5cEJxzv9M3/TdXlEw9M+W7REzdUHjs076Gfd/S++HT8keL+rmdfKRl7xy9X5eX/STlPmZf/wxmH+T8enFz+BwAAgNPZ//rv/zV54wxtuPz/i32bPv/vFd+YfGj6v7a/9OzvL90yuWzeG6XTb3r7qfmv1e9s/VNe/q8uLP+Pyp52+ODOcMJLy4OguvCTCgAAAOQI/+5+/KOFMK+nPjmI5vUr7il9eudb626On9P8j7MW9c2s+uKuVV9fvzHWv75j7fZlc5bn5f+awvJ/8al5uQAAAEABfrPttnurvrx4y+bdB2dvvzuxqeSyOa/v/mnHNb2vHk0UvXhrb17+TxSW/0ePzMsBAAAATuCZsRNeOPj4wa/N2rVm/J6VrbOfnLp31YKH/jnr71e98udjGy8uy8v/DYXl/9L0Nr3yIdVpR/i/ENrLg2DMwE5zqtAbtH0yUwAAAADeJWFOb2xc27Nj3aiZb5x76Ierly/71Z7Lv33Phqpb9/+68s7zj+7ruTkv/zcPff//8E4H4fr/nPv/5a3/zyqk7vp3mRsDAAAA8H6Uv54/vD1+6psLBvv+/ULX/3/07P2j25surJgU31o186kP9l6zpurNhe2XfGLb7W99OFb210/l5f/WwvJ/Ufb23fz+PwAAADgJ/2/f/78ob5yhDXf//96xz523+rP3/aDmm6XPnP/2vU3faTsw7YJNU8/6SNGFXbNn/OH7efm/rbD8H27PyH553eH5ubM8CCYM7KTvJrglnO7SSKGzOKuQOvGRHnVhj3Shc3RWIak50uNj5UEweWCnNVI4Myy0RQr9ZenCxkhhT1hIXw+ZwuORQnd4pd1flp5utPCzsJBeYNEZrqA4I7MkItLj6GA9Bgon7LE/8+QAAADvK2F4TmfZ4txmEI2ynbHhDigd7oD4cAcUDXfAqMgB0QMHezxoyC2Ej/94TteS1657uLbn2voj58zavfiu1g90L+zZ8YUfdZ/3l2tfWvDpvPy/sbD8H56KktRmsPX/Qbj+P/29hpn1/w1hoSJS6AwLiegdAxLhc6TC7t3hc1Qk0j36J2QKAAAA8J4Wfi5QNMLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D/s3X+clXW9IPDvmd8zDMMkBmYWqInoLsMwRCHilSR3rVwaijavXWIQBp0YAwVcMVvxR7VJupiaZbEXX13tx2UTSzJvJqRXrK5FpeVdwV8XvckqS+hV83pb9jXznO+Zc57DYQ7CKOO+33/M+Z7z+f58zjnPnO/zPOd7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v9w1ao7m58b/r8++dPPbnnms++Y/YvZJ+0+5C+3N7446uKHdp8wsvG7O0YsW/5s54wLbmyfu/aG7etXh9DeWy6TFM/cO6KiYuIfP3T7rdfc1zpn5KxLarL1ZuNhSM+fiuydK2KrTw0N4Y5MCFXpwLjGJFCdvd8Y6zuiMYS3hL5ArkRnQ1Ii3XC4rz6ENaEvkKvqzvoQGvMCs357z4arehLX1YdwTAihNt3Go7VJG/XpwJiaJNCQDiyqSgIv707kAj+qSAKw3+KbIfeiX9demKF5z+VKvP6qD1jH3ljp4VXGRHPpfDveN8CdylOTfqB9v562ouoYEEVvj43ebYPg3Va0nVd52vI/SGU/oezuC9WGivmdC+Yu614aH6kILS2VpWoaoOd5y66L5+1LetC8DmMHmg/I6/DuhhlNVz0//cT1Z/3pvGOWbp69v918JG+T5qcHWm3IvuYGzfMYTbM/GQRvv6JPSaN96AohfPTf3pr5/aLHD9/5ylNnTL/t0S9cP2f5DbOmPzzix5P/4cZD7phzddH8v3nv8//4co63FQW5Y6uvNiVz8/hIY0zsbErm5gAAADBoDIajpu+d+NTj59x7x4rH1n646jNTfnbmYU1VF32p+6OHrp/69iuv7frVIUXz/9Hlnf+Pp/wb80e7MYRpvYnLh4VwWO/jSeA7sTtnDQvhyN5Ue2HgfanAxhDe1ps4LldVqkRdLDE6FfhDUzYwLRXYFAPtqcDNMbAqFbgiBtalAvNiYGMqcEoMhK7CcRzflB1H2YH6GOhINuK6eBXCC02xtdS22pKrCgAA4ADJzg6rC+/mXeuwvxni9HJdfX8Z4hXYJTPUpmpIz2Bz06qSNVT1V0NFfzXkxr1i78MvqjnTX81Fl2FkCjO8OurTFcOmH/XV228ed0vbY9M/8+Lkj777z8+9uPG4f/zvP7p46TeOL5r/t+59/l+7h45kis7/hzCz92/MXZGNdOfiHe0FGQAAAID9cN0vVz/4zeNP+z93PXHXD95x4zcrNl7/kf/75M7Lj5rw4bGZur/91Lqi+f+08q7/j8dEKvMyhwfiYYiFw0JoLQwk1Z5YHEjOeg/JBgAAAGAwyJ2Pz50L78reJpdop+fTxfnb9zF/PPE/bY/5r971+YffdeODZywfc/T2a/7bBa9k3jr5N4ecvnn8r3a8c8zfN9cVX//fXt71/w2Ft0knNsVeXDsshLq8wP2xlz2BXqNj4ImTCwPZ8W+KG2BlrCp7YUKuqpWxREcMtKYCa0qV+HWuxGGFgeyTlWv88tw4urIl8gIAAADwuouHA+J5+Xj9/49mHv+O40Y8Pumxd965/Olpqz9+TsNXjv7uoc8M654x6T3TTnr/74vm/x37dv1/7zy46PL+7iEhjK8KoTL9xYAHGpKFAWOgMZNN/KQhqasyXdWlDSFM7RlYuqons+v/V6XXGPxtfVJVDBx21Ld3jelJfLM+hPH5gd9/4qZJPYmlqUCu8Y/VhzCqZ7TpxtfXJY1Xpxu/oS6Ed+YFclWdVRdCT2M16aruqc3+jkG6qltrQxieF8hV9Z7aEJYHAAap+K90fv6DS5ZftHBud3fn+QOYiMfw68OCru7OlnmLuufXlujT/FSfC5YxurR4TOX+8s3W7BJFs0fdNracdO57gq35bWWP4xddOJi9Hz8LVfeOs6264O7E9JDHHl3cRMj7JFVqyBWvfcixR3sdckN+JX1PYlH9MX9NGBLqli3pPL/lwrlLl54/Iflbbva25G88zZRsqwnpbdWwp76V8fIouVpWymt9eRybX8n4pecuHr9k+UXjus6de3bn2Z2fbps8oa1t0nsnT2ob3zOq1uRvP0M9dk9Vp4a6+6Yyx3UAh3p4VV4lqTd5dRjI3YeEhMQgScxdlbls2pyf/+STR2w698Izj/i7I+aPO/Ovrv7F4jNaTpr5s5v+cnPR/H/x3uf/ca8T9/zZ9RlKnf9vjqf5k8f7TvN3xMCacs//N+/hbH7+PvD+MLov0GtFLLHCaX4AAADeHOLhyHg0Mx6V/kbjP95x6vx5J73804/Puv5vJk8558JtxzR/4frTV/2HbS+s2vD+54vm/yvK+/7/AVr/P7d0/QdLLfN/XCzRWmr9//Qy/7n1/1eUWv8/vcx/bv3/NW/A+v/LcoHUJnnB+v8AAMCbweu3/n+/y/unfyCgKEO/y/unfyCgKEO/y/iX+wMB+7z+/6Luv2gYcfWiKSePW/y1+zcctWr4re/YOv3nR68+Ydyd67/70oTvFc3/V5U3/7dwPwAAABw87v1p3ae+8OKYnzx0/8unZq789c5bPvpXncef9MfhbWfP/ED9l27516L5/5ry5v+v//p/odRqfqNLBdpLLQxo/T8AAAAGqVLr/31r+BOjNy4dd/Mvf/jcdx/v+PH8qU//u1VffvfcMa3f2rTlF83zthXN/9eVN/+Pl11UFOSOvXm1KVnTLqTXtNvZlPvKAAAAAAwOFaGlpbrfXJm+i/qzdrzvtbe5JbsU6N7S+X5314gNyyruvS5Tu/PLX5xzUsslp1+w6NTPbftSw4Nfb5jdUnt+0fx/Y3nz/4LvZdzdMKPpquenn/jq+rP+dN4xSzfP7jv/DwAAAAyc/o9LAAAAAAAAAAAAAAAAB4uHOlaf8MqEDzw7/8gJ//ax0x/98sq3f+L+v77xzxf88JS7juzaPWZW0ff/w8zecqW+/x9/9y9+v+DQgtyx1f7X/8ven/Wh7y3vXbLwgaYQjs4PLLxs4VtC9rf5j80PbJh93MiexGXpEnc9dsrTPYk56cBp4w55qScxNRXoiIskvi0diL+q+NLQVCAur/hgOhC3x7p0oCYb+OLQZByZ9Lba3phsq0x6Wz3SGMKwvEBuW93RmLSRSQ/wulQgN8Dz0oE4wBnZQEVBry4JIQxJehUDjbHoXw9JegUAwEErfgqsDgu6ujtb40f4eHt4VeFtlMlL77i0uNpMmc1vzS5NNnvUbWO37q7sS+c/npeuTH9C7vut8epQ2zOECRV7y5LpHeVeaqkvv5Z+Nt2hJYZcsOn2sNpbRYlyaaU2Ual0zd4G3TuilnmLuudX9zfwz+/evbufLJ1tVf1uvglFk538LBW9m7SMWqozyQbbS1/6HVHnxDK3TRldjvcrQktLZSrXlBhsDgX6e0WU+339/HX+Sr0K8vP8Tf2NV1aOrHz5X6d+7t57hlV3nzOz83OH//Kfhk+Y/7Wv3NNxwx+K5v/N5c3/a/PH9VL2xwBWxF/WO3FYCB1ljggAAADe/P7nJWu/f8aiTdsXbKx6+De/WVjx4TOqd198+8UXfe6Rn6w87Yv//lv7G1+XeWjXGc/uuvDzz3793d+478LHT5l34e0ztpy0rbP25s/8xdpzRhXN/0eXN/+PR7Cyp4KTox0b4+//Xz4shN6f1m9OAt+Jwz1rWAhH9qbaY4nkB/U/GEu0JoHvxAMmx8USHe2FVdXFwLpU4A9N2cDGVGBTDGSPUnw7ZA/lXNMUwqTe1MzCEotjieZU4MMxMDoVaImB1lRgaAxMSwWeG5oNtKcC/xADoatwW/1gaHZbAQAA7EmpSw6y86zqwrshPc9bV9Vfhkx/GRr6y1DRX4ba/jKUGkW8//2YoTp18UomL1N1utb6VC1FGeKP4e9zv4oyhF8X5kwXLGo6Xn+Qu94gU5hhyle+33HCB5d8bdcXvvqrU99zxamrrn3+yg8MGXntw/+765IhQ3c1FM3/W8ub/zcU3iatb4rz/77f/0sC98fuXRsvHR8dA0+cXBjIHhjYFCe7K3NVtWdLZCftK2OJaTEwOhVYHAPTUoGOmdnAmpGFgexMO9f45bnGu7Il8gIAAADwuosHCOJhmjj/Xz8lvHDEqS+3HX7t8MVTfnX/pe+fW39obf0/Td28euqVtfceW1c0/59W3vw/tjckv7ErYm+eGhrCHZm+3uQC4xqTQDyO0Ri/Hn9EYwhvyTvAkSvR2ZCUqEk1HO6rT76hXpOu6s76ZI2BeH/Wb+/ZcFVP4rr6EI7JO/qSa+PR2qSN+nRgTE0SaEgHFlUlgXjkJxf4UUUSgP2WOyoYX1DZS11ymvdcrsTrr7/vGFXtU+feOOnhFR0D3UO+PX3naqDUph/IHlPN2benrag6BkTR22PjgL7bBotB925r9m7L/yCV/YSyuy9UGyrmdy6Yu6x7aXwk/5usRQboec7/lmo56QPwOlzx2nvbv9p0B1pTu4/W4jI1JV+HmVjd3Q0zmq56fvqJ68/603nHLN08u+xulBC/KHzi9xYf/0je5h1otSH7mht0+5P2wv1JTYlyb/L9yT49bcuT9Bv6tI32byCEsPbyBQ/+9p9f3lq1re2/vGfy2luf++Xar59w94Jxb9v+xXft3PHiaUXz//b8+X9lKDX/r0rd9nolbswlw0IYm7dxH4ibf/qwZD+YF+jdS84aXhxITrlva9rjnhMAAAAGQu5wR+54QVf2NrkgPD1PLs7fvrf8fYcbcvnj8Yppe6y/3H4Pn/T3nz35umc+9pFth1/9wOqHtvyn5558/5yT7971u3Xrn2k7/a2/K5r/d+z9/H9dqpvO/zv/zwB5nc//DxYH+RmEurr0Iyv261B0UXUMiH7fHt5t4eB7t2X/m+edr3H+Pzj/v8f+HXTn/4Pz/wfp/iRPu/3JIPg3UPQpabEPXSGEjmHfvO3HDXPHDrnm4k/O2/zD373QOuXRxks+8IP/ccrKcMOlG/5cNP9fXN783/p/e160L7f+X0ep9f8Wl1r/b4X1/wAAgAFVYqG59DyvaPW+ogzp1fuKMvS7QGC/Swxa/2+f1/9rOPOiM59s2nHkDdNv+88/mHvF1jPPePiYyq0fv+3jt4y/fuzj79peNP9fUd78P74chuS3fqDX/1syQOv/jZ5ZoqpVMbDYwoAAAAAcjEodIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCNte6elW/fvfLoE255+K23nPIvazYtOOpnx++eOOmslrErh2eu/dt/3jFi2fJnO2dccGP73LU3bF+/OoSu3nKZpHjm3hEVFRP/+KHbb73mvtY5I2ddUputtzp7+/aC3LHVV5tCWJP3SGNM7GzqudMXmPWh7y2v6kk80BTC0fmBhZctfEtP4uamEI7ND2yYfdzInsRl6RJ3PXbK0z2JOenAaeMOeaknMTUbyKS7+42hSXcz6e5eNTSEYXmBXHc/NbSwqlwb/zEbqEi38a3GpI0YaIxFv9qYtBED3bFEV10I46tCqExX9fPapKrKdFV/V5tUVZmu6r/WhjA1hFCVruqxmqSqqvTIN9ckVcXAYUd9e9eYnsSamhDG5wd+/4mbJvUkzksFco1/pCaEUT0vmXTj369OGq9ON35ddQjvDCHUpEv8S1VSoiZd4smqEIbnBXKNn1MVwvLAm0Lc+czPf3DJ8osWzu3u7jx/ABM12bbqw4Ku7s6WeYu659em+lRKJi+9+9LXPvatuy6e13M7e9RtY8tJV2XLVfd2ua264O7Eg733sV8N+ZX0PR9F9cf8NWFIqFu2pPP8lgvnLl16/oTkb7nZ25K/ldlosq0mDJZtdWx+JeOXnrt4/JLlF43rOnfu2Z1nd366bfKEtrZJ7508qW18z6hak78HYqg3vf5DPbwqr5LXYwcgISEx2BIVBXu31oN9R170Qb+vo9WhtncHXTStyM+S6R3lgRj0+/ofXOMBGnTRlKRoRBOKJg5FWdr6zzKxaDLRl6U+ydL7ua5ocphfU0XvJo33K0JLS2Wp7dNceDd/8+4oY/OWsiW76cpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/48dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//1Mqy+4=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x20000040)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x51)
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)

3.437288238s ago: executing program 2 (id=2695):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$get_persistent(0x16, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x39]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)

3.236082134s ago: executing program 2 (id=2697):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41032, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000180), 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0xdd, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x401, 0x3, 0xe, 0x0, 0x1, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x6, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c9000a00060005001a0102000010"], 0xf)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0xe, 0x200)

2.823788594s ago: executing program 2 (id=2700):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/150, 0x96}], 0x1, 0x3ff, 0x2)
syz_usb_disconnect(r0)

2.466455194s ago: executing program 3 (id=2705):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$get_persistent(0x16, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x39]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)

2.333478638s ago: executing program 1 (id=2706):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x7)

2.321983728s ago: executing program 3 (id=2707):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='8009', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='ipv4', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=t', 0x31)

2.226254271s ago: executing program 0 (id=2708):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41032, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000180), 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0xdd, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x401, 0x3, 0xe, 0x0, 0x1, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x6, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c9000a00060005001a0102000010"], 0xf)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0xe, 0x200)

2.224801131s ago: executing program 1 (id=2709):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b05"], 0xe)

1.953391488s ago: executing program 1 (id=2710):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0)
setuid(0xee00)
setfsuid(0x0)
fchdir(0xffffffffffffffff)
r1 = io_uring_setup(0x43db, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, 0x0, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0414ff00c9"], 0x9)

1.810689401s ago: executing program 1 (id=2711):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x1, 0x2, 0x0, 0x100}, 0x20)
recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/25, 0x19)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000040)=0x4)

1.751566033s ago: executing program 3 (id=2712):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="ac", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

1.558394838s ago: executing program 3 (id=2713):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff0300"], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

1.461439311s ago: executing program 1 (id=2714):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000580)={0xf00, 0x320, 0x80, 0x1e0, 0x3ff, 0x5, 0x0, 0x1, {0x5, 0xfffffc10}, {0x6, 0x7, 0x1}, {0x40000000, 0x3}, {0x200, 0x2}, 0x1, 0x2, 0x62, 0x6, 0x0, 0xc, 0x5, 0x5, 0x0, 0x1, 0xffffc0d0, 0x9, 0x27, 0x0, 0x3, 0xb})

1.421640862s ago: executing program 0 (id=2715):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
keyctl$get_persistent(0x16, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x39]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0)

1.349475194s ago: executing program 1 (id=2716):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000c06, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030362c696f636861727365743d6d6163726f6d616e69616e2c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c75737271756f74612c696e746567726974792c646973636172642c696f636861727365743d69736f383835392d362c75737271756f74612c0068067f9f944b8278884def0e057790dd79a985633a3f082972c5f43e390c14c8a267bd"], 0x24, 0x6303, &(0x7f0000001bc0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4GfffXaeTMQ8nfyN7BxTBKSTXZtJ36hTTHhteGtBEKhL9iud22WOrbx2iXQSDYNlEgYFVW0DRdtAaE2NxW+4IJWgHKBWiFRQXtBe4FAqFxEVUABqRJUwFZzzvM8O3N2dmbXHu/OnPP5SPbPe+bMnGfOPOfs/Hb9nQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLNbXzP38aEsyxp/8r+2Ztm1jX9vntyaL3vlRo8QAAAAuFK/zP9+/oa04OAq7tS0zr+89FtfWlxcXMzePfIXY59eXEw3TGbZ2KYsy2+LLv3gPUPN6wRPZBNDw01fD3fZ/EiX20e73D7W5fbxLrdv6nL7RJfbl+2AZTYXP4/JH2xn/s+txS7NbszG8tt2trnXE0Obhofjz3JyQ/l9FseOZfPZiWwum2lZv1h3KF//K7c2tvXGLG5ruGlb2xsz5CePH41jGAr7eGfLtpYeM/rRq7PJn/7k8aN/d/a5m9vVrruh5fGKcd65ozHOj4YlxViHsk1pn8RxDjeNc3ub12SkZZxD+f0a/y6P8/lVjnNkaZjrqvyaT2TD+b+/ne+n0eYf66X9tD0s+9ltWZZdWBp2eZ1l28qGsy0tS4aXXp+JYkY2HqMxlV6Yja5pnt66innaqLM7W+dp+ZiIr/+t4X6jK4yh+WX60UfGm173XyxezjyNGs96pWOlPAd7faz0yxyM8+Lb+ZN+su0c3Bme/+O3rzwH286dNnMwPe+mObij2xwcHh/Jx5xehKH8PktzcFfL+iP5loby+uztnefg9NlHT08vfOjD98w/euT43PG5k3t27ZrZs3fv/v37p4/Nn5ibKf6+zL3d/7Zkw+kY2BH2XTwG7iit2zxVFz83vuz8e7nH4USH43Brad1eH4ej5Sc3tD4H5PI5XRwb72zs9ImLw9kKx1j++tx15cdhet5Nx+Fo03HY9ntKm+NwdBXHYWOd03et7j3LaNOfdmNY+XvBlc3BrU1zsPx+pDwHe/1+pF/m4ESYF9+9a+XvBdvDeJ+cWuv7kZFlczA93XDuaSxJ7/cn9uel3by8pXHDNePZuYW5M/c+duTs2TO7slDWxYua5kp5vm5pek7Zsvk6vOb5enD+pU/e0mb51rCvJu5p/DWx4mvVWOe+ezu/Vvl3t/b7s2Xp7iyUHlvv/dnuu3ljf45n2We+/pGHv/r4Z16z4v5s9Jsfnb7y9+KpL206/46tcP6Nff+viu2lh3piZGy0OH5H0t4Zazkft75Uo/m5ayjf9vPTqzsfj4U/630+vrHD+Xhbad1en4/Hyk8uno+Huv2048qUX8+JME9OzHQ+HzfW2bZ7rXNytOP5+LZQh8L+f0XoFFJf1DR3Vpq3aVujo2PheY3GLbTO0z0t64+F3qyxrad3hzeFaZSrm6d33lasP9J0v2i95ulkad1ez9P0s6+V5ulQt5++XZ7y6zkR5sWNezrP08Y6z9x35efOzfGfTefO8W5zcGxkvDHmsTQJ8/N9trg5zsF7s6PZqexENpvfOp7Pp6F8W1P3r+5cOR7+rPe5cluHOXhnad1ez8H0fWyluTc0uvzJ90D59ZwI8+Kp+zvPwcY6r93X2/eud4YlaZ2m967ln6+t9DOvW0q76WrNldEwzq/v6/yz2cY6J/avtc/svJ/uDkuuabOfysfvSsfUbLY++2lbGOdz+1feT43xNNb59IFVzqeDWZad/8CD+c97w+9Xzp/7zpdafu/S7nc65z/w4I+vO/bPaxk/AIPvV0XZUnyva/rN1Gp+/w8AAAAMhNj3D4ea6P8BAACgMmLfH/9XeKL/BwAAgMqIff9oqEkV+v8/6b7Kttc+N/+r81lK5i8G8fa0Gx4q1osZ15nw9eTiksbyB78w9z//dH51wxvOsuwXD/1x2/W3PRTHVZgM47z0utbly3zpnlVt+/Aj59N2m/Prnw2PH5/PaqdBuwjuTJZlX7nhk/l2Jt9zMa/PPHQ4rw9fePKJxjrPHyi+jvd/9kXF+n8dwr8Hjx1puf+zYT/8MNSZN7XfH/F+X7z4iu373rW0vXi/oR3X50/7qfcWjxs/J+dTTxTrx/280vi/+omnv9hY/7GXtx//+eH24386PO4XQv35S4r1m1+Dxtfxfh8L44/bi/e79/Nfazv+Sx8v1j/9+mK9w6HG7d8Zvt75+ufmm/fXY0NHWp5X9oZivbj9me/8WX57fLz4+OXxTxy62LI/yvPjmX8vHme6tH5cHrcT/WNp+43HaZ6fcftP/+nhlv3cbfuXHn72JY3HLW//7tJ6pz9wV779pcdr/cSmv/nYJ9tuL47n4D+cbnk+B98ejuOw/afeG+ZjuP1/LxWPV/50hcNvbz3/xPU/u/V8y/OJ3vjTYvuXXnU8r5smNm+55trrrr/wssa+y7Jvbyoer9v2j//tqZbxf+6mYn/E22NGv7z9lcTtn/ng1MlTC+fmZ9NeffyG/LNz3lyMJ473hnBuLX996NTZ982dmZyZnMmyyep+hN5l+3yoPy7Khc5rLy47g971SHg9b/mrr2y5/d8+EZf/xzuL5RffVHzfuiOs96mwfGt4/bps/+fdxv/UrTflx/fQM2GEi8s/L/hKbN/53/u7fb5vLjz/8vuCON9Pv/h9+X5o3JZ/34jH9RWO/3uzxeN8OezXxfDJzDtuWtpe8/rxsxEuvqM43q94/4XTXHxd/z683m/5YfH4cVzx+X4vvI/52rbW812cH18+P1x+/PxTPC6E80l2obg9rhX398Xnb2o7vPg5JNmFm/Ov/zw9zs1reporWfjQwvSJ+ZPnHps+O7dwdnrhQx8+9OipcyfPHso/y/PQ+7vdf+n8tCU/P83O7b0vy89Wp4pylW30+E8/cnR238zts3PHjpw7dvaR03Nnjh9dWDg6N7tw+5Fjx+Y+2O3+87MP7Np9YM++3VPH52cf2H/gwJ4DU/MnTzWGUQyqi70zfzh18syh/C4LD9x3YNf99983M/Xoqdm5B/bNzEyd63b//HvTVOPefzR1Zu7EkbPzj85NLcx/eO6BXQf27t3d9dMAHz19bGFy+sy5k9PnFubOTBfPZfJsvrjxva/b/ammhe8X72fLhooP4svedvfe9PmsDV/4yIoPVaxS+gDR58Jn0XzjBaf3r+br2PePhZpUof8HAAAAcrHvHw810f8DAABAZcS+f1Ooif4fAAAAKiP2/ROhpv8SUJP+v3L5/23nV7V9+X/5/+b9Jf9fs/z/O/ot/1+cL+T/e2Nt+f/lrnL+v6v1yP+vakX5f/l/+X/5f/l/eqDf8v+x79+cZX7/DwAAABUV+/4toSb6fwAAAKiM2PdfE2qi/wcAAIDKiH3/taEmNen/5f/l/+X/5f/l/9tvX/5/MMn/d9Zn+f+J8gL5/43P/2f1yv9f6OX4NyD/v7n5C/l/+lG/5f9j339dqElN+n8AAACog9j3Xx9qov8HAACAyoh9/w2hJvp/AAAAqIzY928NNalJ/y//f0X5/5S5Gtz8f7Fl+X/5f/l/+f+qkP/vrM/y/8vI/298/t/1/wcq/99C/p9+1G/5/9j3vyDUpCb9PwAAANRB7PtfGGqi/wcAAID+M3p5d4t9/4tCTZb1/5e5AQAAAGDDxb7/xqwUBK/J7//l/13/v2+v/z8m/y//X+j//P9IJv/fP+T/O5P/76IX+f8L8v/y//L/8v9E/Zb/z/v+bCJ7cahJTfp/AAAAqIPY998UaqL/BwAAgMqIff//CzXR/wMAAEBlxL5/W6hJTfp/+f/K5P9/1vzSVSL/7/r/8v9B/+f/Xf+/n8j/dyb/34Xr/8v/y//L/9NTC207pY3L/8e+/+ZQk5r0/wAAAFAHse+/JdRE/w8AAACVEfv+/x9qov8HAACAyoh9//ZQk5r0//L/fZ7/j8nROl7/X/5f/j/o5/z/hPx/35H/70z+vwv5f/l/+X/5f3pq4fvF+9myjcr/x77/JaEmNen/AQAAoA5i3//SUBP9PwAAAFRG7PtfFmqi/wcAAIDKiH3/ZKhJTfr/teT/hy7I/6/kKl//f3wV1/9vIf+/Ifn/Ufn/Qp3y/5n8f9+R/+9M/r8L+X/5f/l/+X96qt/y/7HvvzXUpCb9PwAAANRB7Pt3hJro/wEAAKAyYt9/W6iJ/h8AAAAqI/b9O0NNatL/u/7/QOT/M/n/Hub/S3M8c/1/+f8Vti//P5jk/zuT/+9C/l/+X/5f/p+e6rf8f+z7Xx5qUpP+HwAAAOog9v23h5ro/wEAAKAyYt9/R6iJ/h8AAAAqI/b9d+b14Tu+GXJmden/5f/l/2uX/7961/+X/w/k/9vrmv+/IP/fC/L/ncn/dyH/L/8v/y//T0/1W/6/6PsnsleEmtSk/wcAAIA6iH3/XaEm+n8AAACojNj33x1qov8HAACAyoh9/1SoSU36f/l/+f9q5v//U/6/w/bl//s0/+/6/z0h/9+Z/H8X8v/y/73I/4+FBfL/8v9seP4/vl+LX8e+/55Qk5r0/wAAAFAHse+/N9RE/w8AAACVEfv+6VAT/T8AAABURuz7Z0JNatL/y//L/1cz/+/6/522f0X5/5ctPa78f0H+v7/I/3cm/99FL/P/m+T/a5v/v6Lr/4/J/1MpG53/L38d+/5doSY16f8BAACgDmLfvzvURP8PAAAAlRH7/j2hJvp/AAAAqIzY998XalKT/l/+X/5f/r8m+f/GIe76//L/NSD/31nv8//xKcr/u/6//H9v8v+u/0+19Fv+P/b994ea1KT/BwAAgDqIff/eUBP9PwAAAFRG7Pv3hZro/wEAAKAyYt+/P9SkJv2//L/8v/x/TfL/vbr+fxP5/4L8f3+R/+/M9f+7kP+X/x/g/H9jbsn/02/6Lf8f+/4DoSatjd/HP7+2pwkAAAD0kdj3vzLUpCa//wcAAIA6iH3/r4Wa6P8BAACgMmLf/+uhJjXp/+X/5f/l/+X/Nzj/P9Yt/z8u/y//vwby/53J/3ch/y//P8D5/xWu/39duFn+nw3Rb/n/2Pc/EGpSk/4fAAAA6iD2/b8RaqL/BwAAgMqIff+rQk30/wAAAFAZse8/GGpSk/5f/n+d8v9xofy//L/8v+v/y/9fVfL/ncn/dyH/L/9fvfx/r6//X/42ncj/006/5f9j3//qUJOa9P8AAABQB7HvfzDURP8PAAAAlRH7/teEmuj/AQAAoDJi3//aUJOa9P/y/67/v/H5/7GWscv/L91P/r8g/y//vxby/53J/3ch/y//L//v+v/0VL/l/2Pf/7pQk5r0/wAAAFAHse9/faiJ/h8AAAAqI/b9bwg10f8DAABAZcS+/42hJjXp/+X/5f83Pv/v+v8bnv9/ofx/u+3L/w8m+f/O5P+7kP+X/5f/l/+np/ot/x/7/t8MNalJ/w8AAAB1EPv+h0JN9P8AAABQGbHvf1Ooif4fAAAAKiP2/W8ONalJ/y//L/8v/y//7/r/7bcv/z+Y5P87G7D8/y+vD8vl/wvy//09/rXm/0dLX1+V/P8PVsr/L24q31/+n6uh3/L/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H9nA5b/d/3/Evn//h6/6//L/7NcKf8/Fv+xUfn/2Pe/PdSkJv0/AAAA1EHs+x8ONdH/AwAAQGXEvv8doSb6fwAAAKiM2Pe/M9SkJv2//L/r/8v/y//L/7ffvvz/YJL/70z+vwv5f/n/fsv//5f8P4OtlP9PNir/H/v+R0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/70z+vwv5f/n/fsv/u/4/A67f8v+x739PqMnq+/+JVa8JAAAAXE3lXyclse//nVCTmvz+HwAAAOog9v2/G2qi/wcAAIDKiH3/74Wa1KT/l/8flPy/6/9nrv8v/196PvL/8v/trF/+P5551pT/39Rt+/L/8v/y/4M7fvl/+X+W67f8f+z7fz+vp69ND1ST/h8AAADqoOj7J7L3hpro/wEAAGAgtPs/2WWx7z8UaqL/BwAAgMqIff/hUJOa9P/y//L/8v99mv//yx3f/O633np4l/y//L/8/5qs6/X/Gwe/6//L/8v/J/L/8v/y/5T1W/4/9v1HQk2WGr83u8A/AAAADLbY9/9BqElNfv8PAAAAdRD7/qOhJvp/AAAAqIzY98+GmtSk/5f/38D8/2iWZfL/8v8VvP5/3B+DlP+f2jRA+f940pX/b2td8//vWsqJy/+vNf8/3nZpOf8/JP/fQv5/zeP/RpZl6zb+8/8q/y//T1m/5f9j3z8XalKT/h8AAADqIPT9w8eKunSD/h8AAAAqI/b9x0NN9P8AAABQGbHvf1+oSU36f/l/1/+X/5f/Xyn/P5K5/n9f5v9d/78j+f/O+if/357r/8v/D/L4Xf9f/p/l+i3/H/v++VCTmvT/AAAAUAex739/qIn+n/9j706+NC3LO44/1VSf7j6cnJNdFlkk+6yyZhFWWSR/QBZsWCTnZBJUnKdunEec5wE9KuKAAygiKs4TOKGIIyrOIk44ISrtoeu6rq7qeut5u7reqvd57/vzWXhJ2U0VhAC/br7cAAAANCN3///FLfY/AAAANCN3///HLZ3sf/2//r/J/v+I/n/s8+/3+//6/9n0/wdD/z9O/z+H/l//r//X/7NQU+v/c/c/KG7pZP8DAABAD3L3XxK32P8AAADQjNz9l8Yt9j8AAAA0I3f/g+OWTva//l//32T//693/8/9/6L/3+nz6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0PiVs62f8AAADQg9z9D41b7H8AAABoRu7+y+IW+x8AAACakbv/YXFLJ/v/jP5/beiz/8+MV//fUv/v/f8dP7/+X//fsoPt/y9/4M98+n/9v/4/6P/1//p/zjS1/j93/8Pjlk72PwAAAPQgd/8j4hb7HwAAAJqRu/+RcYv9DwAAAM3I3f+ouKWT/e/9f+//6//1//r/2Z9f/7+avP8/rqf+/7Lbzr/knuv//obdfH79v/5f/6//Z7Gm1v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAGAFHZv50dz9j4tbOtn/+n/9v/4/+v+j+n/9v/6/Bfr/cT31/+fy+fX/+n/9v/6fxZpa/5+7//FxSyf7HwAAAHqQu/8JcYv9DwAAANM16x/EHpG7/3jcYv8DAABAM3L3n4hbOtn/C+z/81vq/0P2/3/R/69G/+/9f/2//r8J+v9x+v859P/6f/2//p+Fmlr/n7v/8rilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/e//f+//6f/3/wff/G3+y1f+f/r2q/18c/f84/f8c+v+99vOH9f/6f/0/m+2y/79v5E/bC+n/c/c/JW7pZP8DAABAD3L3PzVusf8BAACgGbn7nxa32P8AAADQjNz9T49bOtn/+n/9v/5f/3/O/f/2P/RO8f7/bPr/g6H/HzeZ/n9tfeaH9f8r3/97/1//r/9ni6m9/5+7/xlxSyf7HwAAAHqQu/+ZccvI/t/1D+YDAAAAS5W7/1lxi5//BwAAgJWX1Vnu/mfHLZ3sf/2//l//r/8/+Pf/V7//v2HT16f/nxb9/7jJ9P870P/r/1f569f/6//Zbmr9f+7+58Qtnex/AAAA6EHu/iviFvsfAAAAmpG7/7lxi/0PAAAAzcjd/7y4pZP9P7v/P/2/T7r/PzMSHvT/Sf/fdv+fv0b9/2j/f6H3//uk/x+n/59D/6//1//v1P8fm/f99f/MMrX+P3f/8+OWTvY/AAAA9CB3/wviFvsfAAAAmpG7/4Vxi/0PAAAAzcjd/6K4pZP97/1//b/+fzf9/6FJ9P/e/9+wzPf/hwPv/9f1/2dpuf3/2v35V1D9/7l9/fp//f8qf/1N9v+Hh63v/4/8WwD0/8wytf4/d/+L45ZO9j8AAAD0IHf/S+IW+x8AAABWw+Z/dmDWW3HDULv/pXGL/Q8AAADNyN3/srilnf0/+lan/l//r/9fvff/9f8b9r//Xx+m0/97//9sef9/nP5/Dv3/fvTz6431/1fu9P2n0P8f37/3//953vfX/zPLlv7/ptMfX1b/n7v/5XFLO/sfAAAAupe7/xVxi/0PAAAAzcjd/8q4xf4HAACAZuTuf1Xc0sn+3/f+f+TfPqD/1//r//X/0+7/p/T+v/7/bOn/x+n/59D/e//f+//6f/Zu098ybun/N1lW/5+7/9VxSyf7HwAAAHqQu/81cYv9DwAAAM3I3X9l3GL/AwAAQDNy9782bulk/6/U+/+H9f/6f/2//l//r/8ft6f+/pD+v+j/9f/6f/2//p8FmFr/v3X397f/AQAAoAevO/WfR+PH6+1/AAAAaFHu/tfHLfY/AAAANCN3/xvilk72/0r1/yv4/n9+XP+v/x/0//p//f+B6Pb9/7VZfyXabof+/5b/PvHvWz+i/9f/6//Pqf8/pP/X/3fob0f+t0n0/ydP/91l7v43xi2d7H8AAADoQe7+q+IW+x8AAACakbv/TXGL/Q8AAADNyN1/ddyyy/0/1jxMmf7f+//6f/2//n/259f/r6Zu+/+z5P3/OfT/+n/v/+v/WahJ9P+bfjl3/5vjFj//DwAAAM3I3f+WuMX+BwAAgGbk7n9r3GL/AwAAQDNy978tbulk/+v/9f/6f/2//n/259f/ryb9/zj9/xyr1P9fvYf+f332h5fdz+/Vsr9+/b/+n+2m1v/n7r8mbulk/wMAAEAPcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/+f/fn1/6tJ/z9O/z8Mw7UjX8Cs/v/kkWn2/97/n9zXr//X/7Pd1Pr/3P3vils62f8AAADQg9z918Yt9j8AAAA0I3f/dXGL/Q8AAADNyN3/7rilk/2v/9f/6//1//r/2Z9f/7+a9P/j9P9zrNL7//r/yX39+n/9P9tNrf/P3f+euKWT/Q8AAAA9yN1/fdxi/wMAAEAzcve/N26x/wEAAKAZuftviFs62f/6f/1/z/1//t93z/1//A5oqP8/9f/q+n/9/yrav/5/0P/r//X/c+j/9f/6f840tf4/d//74pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3//rjF/gcAAIBm5O7/QNzSyf7X/+v/e+7/k/f/vf8/6/Pr/1eT9//H6f/n0P/r//X/+n8Wanb/f3xp/X/u/g/GLZ3sfwAAAOhB7v6b4hb7HwAAAJqRu/9DcYv9DwAAAM3I3f/huKWT/a//1/9v7f+HQf+v/9f/b5jR/99+71V/U7+8gP7/6KD/Xzj9/zj9/xz6/zb7/0NDQ/3/sR2/v/6fKZra+/+5+z8St3Sy/wEAAKAHufs/GrfY/wAAANCM3P0fi1vsfwAAAGhG7v6Pxy2d7H/9v/5/we//33XxjK9D/79B/7/y/b/3/1eA/n+c/n8O/X+b/b/3//X/LM3U+v/c/Z+IWzrZ/wAAANCD3P2fjFvsfwAAAGhG7v5PxS32PwAAADQjd/+n45ZO9r/+X/+/4P7f+//6f/3/DvT/B0P/P07/P4f+v7n+P//uXv+v/2c5ptb/5+7/TNzSyf4HAACAHuTuvzlusf8BAACgGbn7b4lb7H8AAABoRu7+z8Ytnex//b/+X/+/mv3/0S39/3mD/v/0t9f/920q/f8FF/zbrfp//b/+f/n9v/f/9f8s19T6/9z9n4tbOtn/AAAA0IPc/Z+PW+x/AAAAaEbu/i/ELfY/AAAANCN3/xfjlk72//b+//CwUahumNX/R6Om/99E/7/169f/z/7jw/v/+n/9//6bSv/v/f9z+/r1//r/Vf76d9X//+P276//p0VT6/9z998at3Sy/wEAAKAHufu/FLfY/wAAANCM3P1fjlvsfwAAAGhG7v7b4pZO9r/3//X/+n/9v/5/9ufX/68m/f84/f8c+n/9v/f/L/3P8/T/LM7U+v/c/V+JWzrZ/wAAANCD3P23xy32PwAAADQjd/9X4xb7HwAAAJqRu/9rcUsn+1//r/+/8fiwpv/X/+v/9f+t0P+P0/+XM3/TNvTT/x+d9cFl9/N7teyvv5n+3/v/LNDU+v/c/V+PWzrZ/wAAANCD3P3fiFvsfwAAAGhG7v5vxi32PwAAADQjd/+34pZO9r/+X//f/vv/F+v/z/j8+n/9f8v0//lX9Nn0/3P00//PtOx+ftW/fv2//p/tptb/5+6/I27pZP8DAABAD3L3fztusf8BAACgGbn7vxO32P8AAADQjNz9341bOtn/+v+++v+1ocf+3/v/+n/9f0/0/+P0/3Po//X/+n/9Pws1tf4/d/+da+td7n8AAABYVf/xT/97x9l+2ztP/efR4Xtxy4XDyePDMBzbh68PAAAAOFgP7P619WH4/qlf8vP/AAAA0KLc/T+IWzrZ//r/vvr/Pt//X/X+//CWX4/+X/+v/x+n/x+n/59D/6//1//r/1moqfX/uft/GLdsGn7ru/6tBAAAAKYkd/+P4pZOfv4fAAAAepC7/8dxy7b9f/Is/6l2AAAAYGpy9/8kbunk5//1/xPv/4d96v/j2+n/N0y7//f+v/5f/78b+v9xe+z/T67p//X/I/T/+n/9P2eaWv+fu/+ncUsn+x8AAAAateVHFHL33xW32P8AAADQjNz9P4tb7H8AAABoRu7+u+OWTva//v/A+/9M1ffx/f9j9d+8/995/3/F0ZmfX/+v/2+Z/n+c9//n0P+30v8f0f/r/5mGqfX/uft/Hrd0sv8BAACgB7n7fxG32P8AAADQjNz9v4xb7H8AAABoRu7+X8Utnex//f/E3/8/p/7/LN7/1//30f/v8Pnb6f//7vwTN1/0X9ddo//ntIPs//OPhQPu/4/s9te5mf5/Dv1/K/2/9//1/0zE4vv/9S0f3G3/n7v/13FLJ/sfAAAAepC7/564xf4HAACAZuTu/03cYv8DAABAM3L3/zZu6WT/6//1/1Pp//P39RL6/xPn3P8fG4ZhKf1/NsW99//e/9f/b+f9/3H6/zn0//p//b/+n4VafP+/9YO77f9z9/8ubulk/wMAAEAPcvf/Pm7J/b+26x+6BwAAACYmd/8f4hY//w8AAADNyN1/b9zSyf7X/+v/p9L/J+//n/5+bb3/f1HFqX32//9Q/03/v7/0/+P0/3Po//X/+n/9Pws1tf4/d/8f45ZO9j8AAAD0IHf/fXGL/Q8AAADNyN3/p7jF/gcAAIBm5O7/c9zSyf7X/7fa/2cRr//X/0+l//f+v/f/D4b+f5z+fw79v/5f/6//Z6Gm1v/n7v9rAAAA///CLFw4")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r2, 0x0, 0xfffe82)
syz_mount_image$btrfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x300000a, &(0x7f00000003c0)={[{@nodatacow}, {@enospc_debug}, {@clear_cache}, {@datacow}, {@noflushoncommit}, {@compress_force}, {@flushoncommit}, {@ssd_spread}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x5615, &(0x7f0000025480)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$P9_RRENAMEAT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x20000040)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x51)
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)

1.287874016s ago: executing program 3 (id=2717):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a4405", 0x17, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000000c0)={0x18, 0x6, 0x5})
fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x5})
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
epoll_create(0x4)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

1.287380896s ago: executing program 0 (id=2718):
mkdir(&(0x7f0000000140)='./file1\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000c000000180001801400020076657468305f746f5f626f6e640000000c010380040001000401038010000180050002000000000004"], 0x138}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x8050)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)

909.522156ms ago: executing program 2 (id=2719):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)

614.929334ms ago: executing program 2 (id=2720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp\x00', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='127.0.0.1', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='8009', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='ipv4', 0x4)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=t', 0x31)

278.266693ms ago: executing program 0 (id=2721):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="ac", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)

170.790146ms ago: executing program 3 (id=2722):
ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000640)={0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

33.350699ms ago: executing program 0 (id=2723):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41032, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000180), 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0xdd, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x401, 0x3, 0xe, 0x0, 0x1, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x6, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c9000a00060005001a0102000010"], 0xf)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0xe, 0x200)

0s ago: executing program 2 (id=2724):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1f1b"], 0x22)
dup(0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

kernel console output (not intermixed with test programs):

ING: The mand mount option has been deprecated and
[   83.987390][ T5936]          and is ignored by this kernel. Remove the mand
[   83.987390][ T5936]          option from the mount to silence this warning.
[   83.987390][ T5936] =======================================================
[   84.095987][ T5936] F2FS-fs (loop1): invalid crc value
[   84.118869][ T5936] F2FS-fs (loop1): Found nat_bits in checkpoint
[   84.224742][ T5936] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   84.543048][ T5953] loop3: detected capacity change from 0 to 32768
[   84.581428][ T5953] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   84.735410][ T5767] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   85.436480][ T5955] loop2: detected capacity change from 0 to 65536
[   85.558143][ T5955] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   85.605097][ T5968] ip_tables: iptables: counters copy to user failed while replacing table
[   85.736061][ T5955] XFS (loop2): Ending clean mount
[   85.745697][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.957551][ T5777] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   86.516353][ T5983] loop0: detected capacity change from 0 to 32768
[   86.628563][ T5983] JBD2: Ignoring recovery information on journal
[   86.699500][ T6003] kAFS: bad VL server IP address
[   86.858432][ T5983] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   87.108671][ T6008] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[   87.165234][ T6008] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   87.192268][ T6008] OCFS2: File system is now read-only.
[   87.208571][ T6008] (syz.0.47,6008,1):ocfs2_find_entry_id:407 ERROR: status = -30
[   87.229322][ T6008] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[   87.282395][ T6008] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   87.303844][ T6008] (syz.0.47,6008,1):ocfs2_assign_bh:2416 ERROR: status = -30
[   87.326736][ T6008] (syz.0.47,6008,1):ocfs2_inode_lock_full_nested:2511 ERROR: status = -30
[   87.349805][ T6008] (syz.0.47,6008,1):ocfs2_mknod:272 ERROR: status = -30
[   87.369131][ T6008] (syz.0.47,6008,1):ocfs2_create:676 ERROR: status = -30
[   87.479632][ T6004] loop2: detected capacity change from 0 to 32768
[   87.491187][ T5774] ocfs2: Unmounting device (7,0) on (node local)
[   87.499399][ T5991] loop1: detected capacity change from 0 to 65536
[   87.515849][ T6004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.50 (6004)
[   87.583614][ T6004] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.630686][ T5991] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   87.644175][ T6004] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   87.660452][ T6004] BTRFS info (device loop2): force clearing of disk cache
[   87.714566][ T6004] BTRFS info (device loop2): enabling auto defrag
[   87.760672][ T6004] BTRFS info (device loop2): enabling disk space caching
[   87.802248][ T5991] XFS (loop1): Ending clean mount
[   87.825760][ T6004] BTRFS info (device loop2): disk space caching is enabled
[   87.967968][ T5779] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   88.141936][ T6004] BTRFS info (device loop2): enabling ssd optimizations
[   88.190423][ T6004] BTRFS info (device loop2): rebuilding free space tree
[   88.338917][ T6004] BTRFS info (device loop2): disabling free space tree
[   88.373864][ T6004] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   88.406081][ T6004] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   88.766484][   T28] kauditd_printk_skb: 2 callbacks suppressed
[   88.766497][   T28] audit: type=1800 audit(1785925201.558:14): pid=6049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.62" name="buffered_io" dev="configfs" ino=8411 res=0 errno=0
[   88.796030][ T6049] nvmet: disable ns before setting buffered_io value.
[   88.807106][   T49] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   88.913350][ T6006] loop3: detected capacity change from 0 to 65536
[   89.021752][ T6006] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   89.113980][ T6006] XFS (loop3): Ending clean mount
[   89.237984][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.332373][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   90.467441][ T6081] nvmet: disable ns before setting buffered_io value.
[   90.474335][   T28] audit: type=1800 audit(1785925203.258:15): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="buffered_io" dev="configfs" ino=8430 res=0 errno=0
[   90.550808][ T6069] loop2: detected capacity change from 0 to 40427
[   90.569881][ T6069] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   90.584925][ T6069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   90.593642][ T6069] F2FS-fs (loop2): build fault injection attr: rate: 6, type: 0x7ffff
[   90.631404][ T6069] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x3
[   90.671851][ T6069] F2FS-fs (loop2): invalid crc value
[   90.681213][ T6069] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x754/0x4740
[   90.714627][ T6069] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[   90.932296][ T6094] file system registered
[   90.970558][   T28] audit: type=1800 audit(1785925203.758:16): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.77" name="name" dev="configfs" ino=8464 res=0 errno=0
[   90.993296][ T6097] Core dump to core aborted: cannot preserve file permissions
[   91.726985][ T6121] loop1: detected capacity change from 0 to 64
[   92.055930][   T28] audit: type=1800 audit(1785925204.848:17): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="buffered_io" dev="configfs" ino=7858 res=0 errno=0
[   92.080050][ T6137] nvmet: disable ns before setting buffered_io value.
[   92.143654][   T56] cfg80211: failed to load regulatory.db
[   92.576173][  T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   92.582129][ T6149] vicodec vicodec.0: Removing vicodec
[   92.785204][  T174] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.823351][  T174] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[   92.836681][  T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.026079][ T6136] loop3: detected capacity change from 0 to 65536
[   93.070868][ T6136] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   93.137459][ T6136] XFS (loop3): Ending clean mount
[   93.334465][  T174] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[   93.340668][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   93.378035][  T174] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0
[   93.435668][  T174] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0001/input/input5
[   93.638963][  T174] usb 3-1: USB disconnect, device number 2
[   93.776399][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   93.977539][ T5865] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.998345][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.018802][ T5865] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   94.049081][ T5865] usb 2-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00
[   94.065607][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.094052][ T5865] usb 2-1: Product: syz
[   94.115774][ T5865] usb 2-1: Manufacturer: syz
[   94.120436][ T5865] usb 2-1: SerialNumber: syz
[   94.264222][   T28] audit: type=1800 audit(1785925207.048:18): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.103" name="buffered_io" dev="configfs" ino=7914 res=0 errno=0
[   94.287502][ T6172] nvmet: disable ns before setting buffered_io value.
[   94.415974][ T5865] usb 2-1: USB disconnect, device number 2
[   95.537549][ T6183] loop3: detected capacity change from 0 to 65536
[   95.609029][ T6183] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   95.645323][ T6188] loop2: detected capacity change from 0 to 65536
[   95.738103][ T6188] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   95.788530][ T6183] XFS (loop3): Ending clean mount
[   95.940788][ T6188] XFS (loop2): Ending clean mount
[   95.942098][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   96.154743][ T5777] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   97.038779][   T28] audit: type=1800 audit(1785925209.828:19): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.119" name="device_path" dev="configfs" ino=8640 res=0 errno=0
[   97.709185][ T6234] loop2: detected capacity change from 0 to 32768
[   97.725722][ T6234] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[   97.805193][ T6219] loop3: detected capacity change from 0 to 65536
[   97.874111][ T5767] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[   97.887376][ T6219] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   97.989314][ T6219] XFS (loop3): Ending clean mount
[   98.210199][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   99.003794][ T6242] loop2: detected capacity change from 0 to 65536
[   99.055980][ T6242] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   99.115798][ T6242] XFS (loop2): Ending clean mount
[   99.135197][ T6242] XFS (loop2): Quotacheck needed: Please wait.
[   99.238449][ T6242] XFS (loop2): Quotacheck: Done.
[   99.615762][ T6283] netlink: 'syz.2.124': attribute type 2 has an invalid length.
[   99.639072][ T6283] netlink: 'syz.2.124': attribute type 2 has an invalid length.
[   99.779617][ T6294] xfs: Unknown parameter 'overlay'
[  100.552292][ T5777] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  101.240426][ T6339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  101.662784][ T6346] bridge0: port 3(syz_tun) entered blocking state
[  101.685691][ T6346] bridge0: port 3(syz_tun) entered disabled state
[  101.747225][ T6346] syz_tun: entered allmulticast mode
[  101.754773][ T6346] syz_tun: entered promiscuous mode
[  101.798240][ T6346] bridge0: port 3(syz_tun) entered blocking state
[  101.811800][ T6346] bridge0: port 3(syz_tun) entered forwarding state
[  102.763186][ T6370] MTD: Couldn't look up './dev/mtdblock0': -2
[  104.139635][ T6421] ffs_data_put(): freeing
[  104.203938][ T6383] loop2: detected capacity change from 0 to 65536
[  104.316708][ T6383] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  104.381494][ T6383] XFS (loop2): Ending clean mount
[  104.606337][ T5777] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  105.573037][ T6447] ffs_data_put(): freeing
[  107.132352][ T6478] ffs_data_put(): freeing
[  108.408537][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.492145][ T6498] kAFS: Invalid Command on /proc/fs/afs/cells file
[  108.657090][ T6500] ffs_data_put(): freeing
[  108.932499][ T6506] ip_tables: iptables: counters copy to user failed while replacing table
[  109.143821][ T6511] ip_tables: iptables: counters copy to user failed while replacing table
[  115.311630][ T6621] ip_tables: iptables: counters copy to user failed while replacing table
[  115.357996][ T6623] ffs_data_put(): freeing
[  115.492032][ T6629] MTD: Couldn't look up './dev/mtdblock0': -2
[  116.306849][ T6646] ffs_data_put(): freeing
[  117.346605][ T6664] ffs_data_put(): freeing
[  118.317070][ T6686] ffs_data_put(): freeing
[  119.121207][ T6704] ffs_data_put(): freeing
[  120.014544][ T6727] ffs_data_put(): freeing
[  121.290282][ T6748] ffs_data_put(): freeing
[  121.699188][ T6775] ffs_data_put(): freeing
[  121.742550][ T6778] fuse: Bad value for 'fd'
[  121.820440][ T6782] bridge0: port 3(syz_tun) entered blocking state
[  121.827226][ T6782] bridge0: port 3(syz_tun) entered disabled state
[  121.834719][ T6782] syz_tun: entered allmulticast mode
[  121.843933][ T6782] syz_tun: entered promiscuous mode
[  121.849882][ T6782] bridge0: port 3(syz_tun) entered blocking state
[  121.856492][ T6782] bridge0: port 3(syz_tun) entered forwarding state
[  122.208932][ T6803] bridge0: port 3(syz_tun) entered blocking state
[  122.220437][ T6803] bridge0: port 3(syz_tun) entered disabled state
[  122.229612][ T6803] syz_tun: entered allmulticast mode
[  122.238009][ T6803] syz_tun: entered promiscuous mode
[  122.245090][ T6803] bridge0: port 3(syz_tun) entered blocking state
[  122.251742][ T6803] bridge0: port 3(syz_tun) entered forwarding state
[  124.491952][ T6856] jffs2: notice: (6856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  125.079484][ T6872] ip_tables: iptables: counters copy to user failed while replacing table
[  125.407767][ T6882] ffs_data_put(): freeing
[  126.318771][ T6906] ffs_data_put(): freeing
[  127.279880][ T6933] ffs_data_put(): freeing
[  128.106978][ T6961] ffs_data_put(): freeing
[  130.323048][ T6993] ffs_data_put(): freeing
[  130.561878][ T5087] Bluetooth: hci2: link tx timeout
[  130.568494][ T5087] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.118891][ T7014] ffs_data_put(): freeing
[  131.239916][ T7016] ip_tables: iptables: counters copy to user failed while replacing table
[  131.558008][ T5778] Bluetooth: hci3: link tx timeout
[  131.563507][ T5778] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  131.573769][ T5778] Bluetooth: hci3: link tx timeout
[  131.579081][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.432763][ T7035] ffs_data_put(): freeing
[  132.597996][ T5778] Bluetooth: hci2: command 0x0406 tx timeout
[  132.697555][ T5087] Bluetooth: hci1: link tx timeout
[  132.703960][ T5087] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  133.002784][ T7055] ffs_data_put(): freeing
[  133.086152][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.092528][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.635687][ T5778] Bluetooth: hci3: command 0x0406 tx timeout
[  134.421311][ T7075] ffs_data_put(): freeing
[  134.755681][ T5778] Bluetooth: hci1: command 0x0406 tx timeout
[  135.715644][ T5087] Bluetooth: hci3: command 0x0406 tx timeout
[  136.758630][ T7137] ip_tables: iptables: counters copy to user failed while replacing table
[  137.348546][ T7163] vlan2: entered promiscuous mode
[  137.361115][ T7163] vlan2: entered allmulticast mode
[  137.375593][ T7163] hsr_slave_1: entered allmulticast mode
[  137.450579][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'.
[  137.481512][ T7163] hsr_slave_0: left promiscuous mode
[  142.918881][   T51] Bluetooth: hci1: unexpected event for opcode 0x0000
[  144.052972][ T7320] xt_hashlimit: size too large, truncated to 1048576
[  144.766970][   T51] Bluetooth: hci2: unexpected event for opcode 0x0005
[  146.154986][   T51] Bluetooth: hci3: unexpected event for opcode 0x0005
[  146.883237][   T51] Bluetooth: hci1: unexpected event for opcode 0x0005
[  151.963566][ T7483] Zero length message leads to an empty skb
[  159.023186][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.730'.
[  160.527654][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'.
[  161.700888][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'.
[  175.613988][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'.
[  176.194964][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'.
[  177.048562][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  183.361778][ T8141] No source specified
[  184.651500][ T8159] No source specified
[  185.491254][ T8179] No source specified
[  189.289975][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'.
[  189.988526][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'.
[  191.131329][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1043'.
[  191.226803][ T8338] ffs_data_put(): freeing
[  191.305629][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1045'.
[  191.799780][ T8359] ffs_data_put(): freeing
[  191.800553][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1053'.
[  192.567080][ T8377] ffs_data_put(): freeing
[  192.637291][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'.
[  194.051142][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'.
[  194.539149][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.545786][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  196.274264][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'.
[  196.607688][ T5782] Bluetooth: hci1: command 0x0406 tx timeout
[  196.609825][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  197.665230][ T8488] tc_dump_action: action bad kind
[  198.057577][ T8499] ip_tables: iptables: counters copy to user failed while replacing table
[  198.334845][ T8513] tc_dump_action: action bad kind
[  199.930912][ T8534] tc_dump_action: action bad kind
[  200.076784][ T8538] ip_tables: iptables: counters copy to user failed while replacing table
[  200.077953][ T8542] 8021q: adding VLAN 0 to HW filter on device bond1
[  200.118036][ T8544] bond1: (slave geneve2): making interface the new active one
[  200.131970][ T8544] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  200.417046][ T8544] syz.0.1136 (8544) used greatest stack depth: 18312 bytes left
[  200.552608][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'.
[  202.273473][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'.
[  202.426172][ T8616] MTD: Couldn't look up './dev/mtdblock0': -2
[  203.287597][ T8639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'.
[  204.576195][ T8663] ip_tables: iptables: counters copy to user failed while replacing table
[  205.614052][ T8687] ip_tables: iptables: counters copy to user failed while replacing table
[  206.151620][ T8711] MTD: Couldn't look up './dev/mtdblock0': -2
[  206.504915][ T8715] ip_tables: iptables: counters copy to user failed while replacing table
[  208.523978][ T8761] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1231'.
[  208.564661][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'.
[  209.235288][ T8776] futex_wake_op: syz.0.1236 tries to shift op by 144; fix this program
[  209.289712][ T8776] futex_wake_op: syz.0.1236 tries to shift op by 144; fix this program
[  209.556017][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  211.561710][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'.
[  211.847481][ T8808] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  211.972751][ T8808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  212.135834][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'.
[  253.569353][ T9771] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  254.033442][ T9791] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  254.880727][ T9813] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  255.958942][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.965306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  258.366287][ T9905] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  259.316803][ T9927] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  260.086886][ T9949] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  261.045365][ T9967] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  261.930284][ T9995] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  262.539897][T10015] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  263.546399][T10042] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  264.142908][T10065] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  265.437500][T10083] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  266.079978][T10101] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  267.270096][T10120] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  268.530429][T10141] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  269.826114][T10168] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  271.048683][T10193] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  272.303797][T10211] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  273.475597][T10232] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  274.612308][T10255] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  275.429643][T10277] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  276.763235][T10302] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  277.960060][T10325] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  279.273782][T10353] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  283.236826][T10425] UBIFS error (pid: 10425): cannot open "ubi0_0", error -19
[  284.535989][T10455] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  285.402439][T10470] ip_tables: iptables: counters copy to user failed while replacing table
[  285.413389][T10476] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  285.579394][T10485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.587185][T10485] IPv6: NLM_F_CREATE should be set when creating new route
[  285.594516][T10485] IPv6: NLM_F_CREATE should be set when creating new route
[  285.601802][T10485] IPv6: NLM_F_CREATE should be set when creating new route
[  286.343075][T10501] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  286.386686][T10502] ip_tables: iptables: counters copy to user failed while replacing table
[  286.775049][T10524] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  287.485840][T10544] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  287.999469][T10566] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  288.785832][T10590] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  289.149450][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'.
[  289.232543][T10600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.393046][T10600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.512146][T10600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.548451][T10614] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  289.628275][T10600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.853200][T10600] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.891734][T10600] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.927911][T10600] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.970804][T10600] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.810990][T10639] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  292.119086][T10667] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  292.993236][T10692] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  293.166404][T10698] fuse: Bad value for 'fd'
[  293.577161][T10713] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  294.307226][T10731] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  295.345080][T10752] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  295.642101][T10764] 8021q: adding VLAN 0 to HW filter on device bond1
[  295.693739][T10764] bond1: (slave geneve2): making interface the new active one
[  295.704062][T10764] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  296.073696][T10764] syz.2.2170 (10764) used greatest stack depth: 16856 bytes left
[  296.812135][T10787] siw: device registration error -23
[  297.001734][T10797] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.061577][T10797] bond1: (slave geneve2): making interface the new active one
[  297.074704][T10797] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  298.133399][T10826] bond1: option mode: unable to set because the bond device has slaves
[  299.122156][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'.
[  299.305535][T10851] 8021q: adding VLAN 0 to HW filter on device bond1
[  299.366642][T10853] bond1: (slave geneve2): making interface the new active one
[  299.393910][T10853] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  300.292196][T10873] 8021q: adding VLAN 0 to HW filter on device batadv1
[  300.700344][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'.
[  300.985013][T10902] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.078299][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'.
[  301.762137][T10918] futex_wake_op: syz.1.2239 tries to shift op by 144; fix this program
[  301.802700][T10918] futex_wake_op: syz.1.2239 tries to shift op by 144; fix this program
[  302.691141][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'.
[  302.991729][T10951] futex_wake_op: syz.2.2252 tries to shift op by 144; fix this program
[  303.000535][T10952] futex_wake_op: syz.0.2251 tries to shift op by 144; fix this program
[  303.007373][T10951] futex_wake_op: syz.2.2252 tries to shift op by 144; fix this program
[  303.036607][T10952] futex_wake_op: syz.0.2251 tries to shift op by 144; fix this program
[  303.430871][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'.
[  303.710682][T10974] futex_wake_op: syz.2.2261 tries to shift op by 144; fix this program
[  303.746096][T10974] futex_wake_op: syz.2.2261 tries to shift op by 144; fix this program
[  304.732283][T10995] bond1: option mode: unable to set because the bond device has slaves
[  304.809094][T11000] futex_wake_op: syz.2.2273 tries to shift op by 144; fix this program
[  304.850239][T11000] futex_wake_op: syz.2.2273 tries to shift op by 144; fix this program
[  305.448486][T11017] bond1: option mode: unable to set because the bond device has slaves
[  306.097535][T11043] warning: `syz.2.2294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  307.142980][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  307.182027][T11071] futex_atomic_op_inuser: 7 callbacks suppressed
[  307.182045][T11071] futex_wake_op: syz.0.2308 tries to shift op by 144; fix this program
[  307.306986][T11071] futex_wake_op: syz.0.2308 tries to shift op by 144; fix this program
[  307.661757][T10829] bridge0: port 3(syz_tun) entered disabled state
[  307.754440][T10829] syz_tun (unregistering): left allmulticast mode
[  307.756407][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.775184][T11086] futex_wake_op: syz.0.2313 tries to shift op by 144; fix this program
[  307.776112][T10829] syz_tun (unregistering): left promiscuous mode
[  307.784500][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.796913][T11086] futex_wake_op: syz.0.2313 tries to shift op by 144; fix this program
[  307.808031][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.816087][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.824248][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  307.856503][T10829] bridge0: port 3(syz_tun) entered disabled state
[  307.864258][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.084996][ T2987] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.267977][ T2987] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.391180][ T2987] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.496876][ T2987] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.588577][T11101] futex_wake_op: syz.3.2318 tries to shift op by 144; fix this program
[  308.641369][T11101] futex_wake_op: syz.3.2318 tries to shift op by 144; fix this program
[  308.847567][T11087] chnl_net:caif_netlink_parms(): no params data found
[  308.998519][T11111] futex_wake_op: syz.3.2321 tries to shift op by 144; fix this program
[  309.064772][T11111] futex_wake_op: syz.3.2321 tries to shift op by 144; fix this program
[  309.341601][   T56] IPVS: starting estimator thread 0...
[  309.443303][T11087] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.454035][T11134] IPVS: using max 19 ests per chain, 45600 per kthread
[  309.465281][T11087] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.473875][T11087] bridge_slave_0: entered allmulticast mode
[  309.486731][T11087] bridge_slave_0: entered promiscuous mode
[  309.552265][T11087] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.572337][T11087] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.589248][T11087] bridge_slave_1: entered allmulticast mode
[  309.612485][T11087] bridge_slave_1: entered promiscuous mode
[  309.928165][T11087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.956244][   T51] Bluetooth: hci2: command tx timeout
[  309.978521][T11087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.215296][T11087] team0: Port device team_slave_0 added
[  310.259474][T11087] team0: Port device team_slave_1 added
[  310.369657][T11087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.386866][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.438901][T11087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.490360][T11157] futex_wake_op: syz.3.2333 tries to shift op by 144; fix this program
[  310.526883][T11157] futex_wake_op: syz.3.2333 tries to shift op by 144; fix this program
[  310.560153][T11087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.605553][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.675549][T11087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.004328][T11087] hsr_slave_0: entered promiscuous mode
[  311.037150][T11087] hsr_slave_1: entered promiscuous mode
[  311.050595][T11087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.075975][T11087] Cannot create hsr debugfs directory
[  311.097097][T11169] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  311.189609][ T2987] hsr_slave_0: left promiscuous mode
[  311.206385][ T2987] hsr_slave_1: left promiscuous mode
[  311.215030][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.226122][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.257184][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.285088][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.307964][ T2987] bridge_slave_1: left allmulticast mode
[  311.313677][ T2987] bridge_slave_1: left promiscuous mode
[  311.327727][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.419235][ T2987] bridge_slave_0: left allmulticast mode
[  311.435652][ T2987] bridge_slave_0: left promiscuous mode
[  311.441527][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.578828][ T2987] veth1_macvtap: left promiscuous mode
[  311.602514][ T2987] veth0_macvtap: left promiscuous mode
[  311.622349][ T2987] veth1_vlan: left promiscuous mode
[  311.630882][ T2987] veth0_vlan: left promiscuous mode
[  312.008153][ T2987] bond1 (unregistering): (slave geneve2): Releasing active interface
[  312.040471][   T51] Bluetooth: hci2: command tx timeout
[  312.287525][ T2987] bond1 (unregistering): Released all slaves
[  313.032182][T11209] futex_atomic_op_inuser: 2 callbacks suppressed
[  313.032201][T11209] futex_wake_op: syz.0.2349 tries to shift op by 144; fix this program
[  313.063763][T11209] futex_wake_op: syz.0.2349 tries to shift op by 144; fix this program
[  313.510970][ T2987] team0 (unregistering): Port device team_slave_1 removed
[  313.629121][ T2987] team0 (unregistering): Port device team_slave_0 removed
[  313.721080][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.839178][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.115794][   T51] Bluetooth: hci2: command tx timeout
[  314.600306][ T2987] bond0 (unregistering): Released all slaves
[  314.809213][T11233] futex_wake_op: syz.0.2359 tries to shift op by 144; fix this program
[  314.834197][T11233] futex_wake_op: syz.0.2359 tries to shift op by 144; fix this program
[  315.882618][T11087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.909548][T11087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.940641][T11087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.982957][T11087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  316.196862][   T51] Bluetooth: hci2: command tx timeout
[  316.243351][T11270] futex_wake_op: syz.2.2368 tries to shift op by 144; fix this program
[  316.252471][T11270] futex_wake_op: syz.2.2368 tries to shift op by 144; fix this program
[  316.294781][   T51] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  316.410740][T11087] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.492333][T11087] 8021q: adding VLAN 0 to HW filter on device team0
[  316.581063][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.588257][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.656851][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.664051][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.408891][T11087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.416830][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.423203][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.631110][T11087] veth0_vlan: entered promiscuous mode
[  317.671486][T11087] veth1_vlan: entered promiscuous mode
[  317.767561][T11087] veth0_macvtap: entered promiscuous mode
[  317.817081][T11087] veth1_macvtap: entered promiscuous mode
[  317.874179][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.900450][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.924295][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.949215][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.969114][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.980210][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.994145][T11087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.014746][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.054200][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.074754][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.093600][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.114907][T11087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.137991][T11087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.173333][T11087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.209765][T11087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.231082][T11087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.264932][T11087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.286809][T11087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.336146][T11311] futex_wake_op: syz.2.2377 tries to shift op by 144; fix this program
[  318.345109][T11311] futex_wake_op: syz.2.2377 tries to shift op by 144; fix this program
[  318.395697][   T51] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  318.624369][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.649238][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.726507][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.754954][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.614905][T11332] loop0: detected capacity change from 0 to 8
[  319.729326][T11332] syz.1.2306: attempt to access beyond end of device
[  319.729326][T11332] loop0: rw=2048, sector=8, nr_sectors = 8 limit=8
[  319.775603][T11332] md: disabled device loop0, could not read superblock.
[  319.806777][T11332] md: loop0 does not have a valid v1.2 superblock, not importing!
[  320.308865][T11353] futex_wake_op: syz.0.2387 tries to shift op by 144; fix this program
[  320.361021][T11353] futex_wake_op: syz.0.2387 tries to shift op by 144; fix this program
[  320.458806][   T28] audit: type=1800 audit(1785925433.238:20): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="attr_allow_any_host" dev="configfs" ino=20995 res=0 errno=0
[  320.485130][T11357] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  320.516564][T11357] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  320.535084][   T28] audit: type=1800 audit(1785925433.248:21): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="addr_trtype" dev="configfs" ino=20996 res=0 errno=0
[  320.558313][T11357] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  320.605716][   T28] audit: type=1800 audit(1785925433.308:22): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="addr_traddr" dev="configfs" ino=20997 res=0 errno=0
[  320.657272][   T28] audit: type=1800 audit(1785925433.348:23): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="addr_trsvcid" dev="configfs" ino=20998 res=0 errno=0
[  320.766241][   T28] audit: type=1800 audit(1785925433.368:24): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="addr_adrfam" dev="configfs" ino=20999 res=0 errno=0
[  321.393479][ T5780] bridge0: port 3(syz_tun) entered disabled state
[  321.437118][ T5780] syz_tun (unregistering): left allmulticast mode
[  321.443656][ T5780] syz_tun (unregistering): left promiscuous mode
[  321.459170][ T5780] bridge0: port 3(syz_tun) entered disabled state
[  321.643211][T11388] futex_wake_op: syz.2.2398 tries to shift op by 144; fix this program
[  321.659045][T11388] futex_wake_op: syz.2.2398 tries to shift op by 144; fix this program
[  321.722086][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.737787][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.749183][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.757502][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.767396][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  321.776289][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.808033][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.920725][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.053514][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.242930][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.264880][   T28] audit: type=1800 audit(1785925435.048:25): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2400" name="attr_allow_any_host" dev="configfs" ino=21510 res=0 errno=0
[  322.292695][T11402] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  322.342790][   T28] audit: type=1800 audit(1785925435.078:26): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2400" name="addr_trtype" dev="configfs" ino=21511 res=0 errno=0
[  322.376820][T11402] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  322.443109][   T28] audit: type=1800 audit(1785925435.168:27): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2400" name="addr_traddr" dev="configfs" ino=21513 res=0 errno=0
[  322.450314][T11402] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  322.481629][   T28] audit: type=1800 audit(1785925435.228:28): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2400" name="addr_trsvcid" dev="configfs" ino=21519 res=0 errno=0
[  322.503450][   T28] audit: type=1800 audit(1785925435.268:29): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2400" name="addr_adrfam" dev="configfs" ino=21520 res=0 errno=0
[  322.752621][T11390] chnl_net:caif_netlink_parms(): no params data found
[  323.227263][T11430] futex_wake_op: syz.0.2406 tries to shift op by 144; fix this program
[  323.250434][T11430] futex_wake_op: syz.0.2406 tries to shift op by 144; fix this program
[  323.599595][T11390] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.609229][T11390] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.627181][T11390] bridge_slave_0: entered allmulticast mode
[  323.639996][T11390] bridge_slave_0: entered promiscuous mode
[  323.659512][T11390] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.659737][T11420] loop1: detected capacity change from 0 to 40427
[  323.691787][T11390] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.698639][T11420] F2FS-fs (loop1): invalid crc value
[  323.711273][T11390] bridge_slave_1: entered allmulticast mode
[  323.722859][T11420] F2FS-fs (loop1): Found nat_bits in checkpoint
[  323.740958][T11390] bridge_slave_1: entered promiscuous mode
[  323.855980][T11420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  323.877726][   T51] Bluetooth: hci3: command tx timeout
[  323.981894][T11390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.994729][T11390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.103015][T11390] team0: Port device team_slave_0 added
[  324.220056][T11390] team0: Port device team_slave_1 added
[  324.378349][T11390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.396915][T11390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.455446][T11390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.529360][T11463] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  324.549280][T11463] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  324.565208][T11390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.578851][T11463] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  324.595608][T11390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.645487][T11390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.660688][T11465] futex_wake_op: syz.2.2415 tries to shift op by 144; fix this program
[  324.706734][T11465] futex_wake_op: syz.2.2415 tries to shift op by 144; fix this program
[  324.915631][T11469] tipc: Started in network mode
[  324.920715][T11469] tipc: Node identity , cluster identity 4711
[  324.935646][T11469] tipc: Failed to obtain node identity
[  324.955567][T11469] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  325.013749][T11390] hsr_slave_0: entered promiscuous mode
[  325.066094][T11390] hsr_slave_1: entered promiscuous mode
[  325.095774][T11390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.103406][T11390] Cannot create hsr debugfs directory
[  325.368959][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.385652][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.398309][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.418356][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.438186][   T49] bridge_slave_1: left allmulticast mode
[  325.443906][   T49] bridge_slave_1: left promiscuous mode
[  325.465823][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.479782][   T49] bridge_slave_0: left allmulticast mode
[  325.495850][   T49] bridge_slave_0: left promiscuous mode
[  325.501653][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.579523][   T49] veth1_macvtap: left promiscuous mode
[  325.591636][   T49] veth0_macvtap: left promiscuous mode
[  325.605683][   T49] veth1_vlan: left promiscuous mode
[  325.611067][   T49] veth0_vlan: left promiscuous mode
[  325.813887][T11499] futex_wake_op: syz.2.2424 tries to shift op by 144; fix this program
[  325.834585][T11499] futex_wake_op: syz.2.2424 tries to shift op by 144; fix this program
[  325.957541][   T51] Bluetooth: hci3: command tx timeout
[  325.965141][T11477] loop1: detected capacity change from 0 to 40427
[  325.989363][T11477] F2FS-fs (loop1): invalid crc value
[  326.007070][T11477] F2FS-fs (loop1): Found nat_bits in checkpoint
[  326.015226][   T49] bond1 (unregistering): (slave geneve2): Releasing active interface
[  326.145588][T11477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  326.572334][   T49] bond1 (unregistering): Released all slaves
[  326.760968][T11517] futex_wake_op: syz.2.2432 tries to shift op by 144; fix this program
[  326.797638][T11517] futex_wake_op: syz.2.2432 tries to shift op by 144; fix this program
[  327.500303][   T49] team0 (unregistering): Port device team_slave_1 removed
[  327.554939][   T49] team0 (unregistering): Port device team_slave_0 removed
[  327.630592][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.699216][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.051262][   T51] Bluetooth: hci3: command tx timeout
[  328.409182][   T49] bond0 (unregistering): Released all slaves
[  328.462876][T11544] futex_wake_op: syz.2.2443 tries to shift op by 144; fix this program
[  328.484671][T11544] futex_wake_op: syz.2.2443 tries to shift op by 144; fix this program
[  329.447479][T11569] futex_wake_op: syz.0.2451 tries to shift op by 144; fix this program
[  329.652974][T11390] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  329.677761][T11390] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  329.701677][T11390] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  329.726822][T11390] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  329.974907][T11390] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.056707][T11390] 8021q: adding VLAN 0 to HW filter on device team0
[  330.094812][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.102076][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.126799][   T51] Bluetooth: hci3: command tx timeout
[  330.263961][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.271132][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.086945][T11390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.101588][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  331.101602][   T28] audit: type=1800 audit(1785925443.888:35): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2458" name="attr_allow_any_host" dev="configfs" ino=21868 res=0 errno=0
[  331.107521][T11601] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  331.117970][   T28] audit: type=1800 audit(1785925443.898:36): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2458" name="addr_trtype" dev="configfs" ino=22618 res=0 errno=0
[  331.177202][T11601] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  331.196922][T11601] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  331.225302][T11601] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  331.246617][   T28] audit: type=1800 audit(1785925443.968:37): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2458" name="addr_traddr" dev="configfs" ino=22623 res=0 errno=0
[  331.294266][T11390] veth0_vlan: entered promiscuous mode
[  331.295994][   T28] audit: type=1800 audit(1785925443.988:38): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2458" name="addr_trsvcid" dev="configfs" ino=22624 res=0 errno=0
[  331.348889][T11390] veth1_vlan: entered promiscuous mode
[  331.368827][   T28] audit: type=1800 audit(1785925444.008:39): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2458" name="addr_adrfam" dev="configfs" ino=22626 res=0 errno=0
[  331.469121][T11390] veth0_macvtap: entered promiscuous mode
[  331.498271][T11390] veth1_macvtap: entered promiscuous mode
[  331.532637][T11618] futex_wake_op: syz.2.2461 tries to shift op by 144; fix this program
[  331.549491][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.585493][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.614602][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.642667][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.673132][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.704885][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.730112][T11390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.771218][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.785204][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.807962][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.822111][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.833620][T11390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.850795][T11390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.863971][T11390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.893948][T11390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.903031][T11390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.914078][T11390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.923736][T11390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.985847][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  332.071913][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.080897][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.150941][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.172656][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.185670][ T5810] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  332.224940][ T5810] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  332.270186][ T5810] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  332.300044][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.333236][T11622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  332.358277][ T5810] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  332.656021][   T56] usb 2-1: USB disconnect, device number 3
[  332.906395][T11657] MTD: Couldn't look up './dev/mtdblock0': -2
[  332.930532][T11655] futex_wake_op: syz.3.2471 tries to shift op by 144; fix this program
[  333.198671][T11664] vcan0: MTU too low for tipc bearer
[  333.219830][T11664] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  334.321193][T11684] futex_wake_op: syz.0.2482 tries to shift op by 144; fix this program
[  334.357436][T11684] futex_wake_op: syz.0.2482 tries to shift op by 144; fix this program
[  334.460800][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  334.493410][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  334.502004][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  334.514989][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  334.529988][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  334.537541][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  334.688383][ T6363] bridge0: port 3(syz_tun) entered disabled state
[  334.733361][   T28] audit: type=1800 audit(1785925447.518:40): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2487" name="attr_allow_any_host" dev="configfs" ino=22246 res=0 errno=0
[  334.736434][T11696] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  334.764764][   T28] audit: type=1800 audit(1785925447.518:41): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2487" name="addr_trtype" dev="configfs" ino=22247 res=0 errno=0
[  334.787156][T11696] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  334.799101][T11696] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  334.809421][T11696] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  334.825595][   T28] audit: type=1800 audit(1785925447.578:42): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2487" name="addr_traddr" dev="configfs" ino=22248 res=0 errno=0
[  334.846824][   T28] audit: type=1800 audit(1785925447.588:43): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2487" name="addr_trsvcid" dev="configfs" ino=22249 res=0 errno=0
[  334.897633][   T28] audit: type=1800 audit(1785925447.598:44): pid=11696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2487" name="addr_adrfam" dev="configfs" ino=22250 res=0 errno=0
[  334.898098][ T6363] syz_tun (unregistering): left allmulticast mode
[  334.941568][ T6363] syz_tun (unregistering): left promiscuous mode
[  334.974015][ T6363] bridge0: port 3(syz_tun) entered disabled state
[  335.330173][T11689] chnl_net:caif_netlink_parms(): no params data found
[  335.418474][T11689] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.425894][T11689] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.433133][T11689] bridge_slave_0: entered allmulticast mode
[  335.441962][T11689] bridge_slave_0: entered promiscuous mode
[  335.442274][T11703] loop3: detected capacity change from 0 to 32768
[  335.451235][T11689] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.462379][T11689] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.468351][T11703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2488 (11703)
[  335.470103][T11689] bridge_slave_1: entered allmulticast mode
[  335.503729][T11703] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  335.521576][T11689] bridge_slave_1: entered promiscuous mode
[  335.525665][T11703] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  335.537790][T11703] BTRFS info (device loop3): force clearing of disk cache
[  335.546332][T11703] BTRFS info (device loop3): enabling auto defrag
[  335.552832][T11703] BTRFS info (device loop3): enabling disk space caching
[  335.575737][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.588768][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.605457][T11703] BTRFS info (device loop3): disk space caching is enabled
[  335.648704][T11689] team0: Port device team_slave_0 added
[  335.659048][T11689] team0: Port device team_slave_1 added
[  335.701225][T11703] BTRFS info (device loop3): enabling ssd optimizations
[  335.707100][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.721108][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.721735][T11703] BTRFS info (device loop3): rebuilding free space tree
[  335.765780][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.778686][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.789745][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.817040][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.830264][T11703] BTRFS info (device loop3): disabling free space tree
[  335.844969][T11703] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  335.857003][T11703] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  335.920667][T11689] hsr_slave_0: entered promiscuous mode
[  335.934418][T11689] hsr_slave_1: entered promiscuous mode
[  335.956255][T11689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.966165][T11689] Cannot create hsr debugfs directory
[  336.070645][   T60] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  336.102419][T11390] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  336.131870][T11737] futex_wake_op: syz.0.2493 tries to shift op by 144; fix this program
[  336.166234][T11737] futex_wake_op: syz.0.2493 tries to shift op by 144; fix this program
[  336.293214][T11234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop3 scanned by udevd (11234)
[  336.411589][T11742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  336.415418][   T28] audit: type=1800 audit(1785925449.188:45): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2496" name="attr_allow_any_host" dev="configfs" ino=22830 res=0 errno=0
[  336.436275][T11742] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  336.478778][T11742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  336.504205][T11747] MTD: Couldn't look up './dev/mtdblock0': -2
[  336.510599][   T28] audit: type=1800 audit(1785925449.198:46): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2496" name="addr_trtype" dev="configfs" ino=22831 res=0 errno=0
[  336.535473][T11742] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  336.570244][T11689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.591285][   T28] audit: type=1800 audit(1785925449.218:47): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2496" name="addr_traddr" dev="configfs" ino=22832 res=0 errno=0
[  336.615661][ T5087] Bluetooth: hci4: command tx timeout
[  336.677123][   T28] audit: type=1800 audit(1785925449.268:48): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2496" name="addr_trsvcid" dev="configfs" ino=22833 res=0 errno=0
[  336.775722][   T28] audit: type=1800 audit(1785925449.288:49): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2496" name="addr_adrfam" dev="configfs" ino=22834 res=0 errno=0
[  336.830490][ T5087] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1
[  336.872631][T11689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.005983][T11756] 9pnet_virtio: no channels available for device syz
[  337.039446][T11689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.197124][T11689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.276122][T11764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.524835][T11689] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  337.548948][T11689] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  337.572788][T11689] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  337.596754][T11689] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  337.802874][T11689] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.844087][T11689] 8021q: adding VLAN 0 to HW filter on device team0
[  337.891479][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.898744][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.964643][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.971882][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.367193][T11774] futex_wake_op: syz.0.2505 tries to shift op by 144; fix this program
[  338.391164][T11774] futex_wake_op: syz.0.2505 tries to shift op by 144; fix this program
[  338.477735][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.492018][T11767] loop1: detected capacity change from 0 to 32768
[  338.526133][T11767] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14
[  338.638044][T11689] veth0_vlan: entered promiscuous mode
[  338.675537][ T5087] Bluetooth: hci4: command tx timeout
[  338.686159][T11689] veth1_vlan: entered promiscuous mode
[  338.706051][T11234] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 14
[  338.820668][T11689] veth0_macvtap: entered promiscuous mode
[  338.853372][T11689] veth1_macvtap: entered promiscuous mode
[  338.896844][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.935451][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.945317][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.006387][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.040159][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.063811][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.084103][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.097613][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.117761][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.163801][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.176287][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.189387][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.200307][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.212387][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.223647][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.234712][T11689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.255549][T11689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.265625][   T55] nvme nvme0: queue 0: timeout cid 0x1001 type 4 opcode 0x18 (Admin Cmd)
[  339.274575][   T55] nvme nvme0: starting error recovery
[  339.292370][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.302181][T11796] futex_wake_op: syz.0.2514 tries to shift op by 144; fix this program
[  339.322076][T11689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.328312][T11796] futex_wake_op: syz.0.2514 tries to shift op by 144; fix this program
[  339.341791][T11689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.365273][T11689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.389631][T11689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.515192][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.527014][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.612822][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.638465][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.755546][ T5087] Bluetooth: hci4: command tx timeout
[  340.994333][T11809] loop9: detected capacity change from 0 to 255852544
[  341.027107][T11798] loop3: detected capacity change from 0 to 32768
[  341.053687][T11811] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.165412][T11798] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  341.199557][T11798] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  341.210155][T11798] BTRFS info (device loop3): force clearing of disk cache
[  341.244929][T11798] BTRFS info (device loop3): enabling auto defrag
[  341.291527][T11798] BTRFS info (device loop3): enabling disk space caching
[  341.310661][T11816] loop1: detected capacity change from 0 to 32768
[  341.345162][T11798] BTRFS info (device loop3): disk space caching is enabled
[  341.410755][T11816] device-mapper: space map common: metadata block out of bounds
[  341.423240][T11816] device-mapper: space map common: dm_tm_shadow_block() failed
[  341.434010][T11816] device-mapper: space map metadata: dm_sm_metadata_create: apply_bops failed
[  341.444829][T11816] device-mapper: transaction manager: couldn't create metadata space map
[  341.466024][   T60] nvme nvme0: qid 1: timeout draining sock wmem allocation expired
[  341.496112][T11822] device-mapper: ioctl: Invalid ioctl structure: name mypool, dev f800
[  341.521652][T11816] device-mapper: thin metadata: tm_create_with_sm failed
[  341.583735][T11816] Trying to write to read-only block-device loop0
[  341.658934][T11816] syz.1.2521: attempt to access beyond end of device
[  341.658934][T11816] loop0: rw=1, sector=8, nr_sectors = 8 limit=8
[  341.680784][T11798] BTRFS info (device loop3): enabling ssd optimizations
[  341.729415][T11798] BTRFS info (device loop3): rebuilding free space tree
[  341.738060][T11837] futex_wake_op: syz.2.2523 tries to shift op by 144; fix this program
[  341.748072][T11816] syz.1.2521: attempt to access beyond end of device
[  341.748072][T11816] loop0: rw=1, sector=16, nr_sectors = 8 limit=8
[  341.763092][T11837] futex_wake_op: syz.2.2523 tries to shift op by 144; fix this program
[  341.782967][T11798] BTRFS info (device loop3): disabling free space tree
[  341.795995][T11798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  341.813277][T11798] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  341.826773][T11816] syz.1.2521: attempt to access beyond end of device
[  341.826773][T11816] loop0: rw=1, sector=24, nr_sectors = 8 limit=8
[  341.881384][   T28] audit: type=1800 audit(1785925454.668:50): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2524" name="attr_allow_any_host" dev="configfs" ino=22954 res=0 errno=0
[  341.882198][T11841] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  341.904698][   T28] audit: type=1800 audit(1785925454.668:51): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2524" name="addr_trtype" dev="configfs" ino=22955 res=0 errno=0
[  341.969440][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.974240][T11816] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EINVAL)
[  341.984789][   T28] audit: type=1800 audit(1785925454.758:52): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2524" name="addr_traddr" dev="configfs" ino=22956 res=0 errno=0
[  341.992891][T11844] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  342.025785][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.035291][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.048944][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.055489][T11816] device-mapper: ioctl: error adding target to table
[  342.070452][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  342.087934][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  342.099458][   T28] audit: type=1800 audit(1785925454.888:53): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2524" name="addr_trsvcid" dev="configfs" ino=24080 res=0 errno=0
[  342.129800][T11841] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  342.173732][T11701] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  342.214808][T11841] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  342.222109][   T28] audit: type=1800 audit(1785925454.998:54): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2524" name="addr_adrfam" dev="configfs" ino=22959 res=0 errno=0
[  342.275250][T11390] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.714574][T11842] chnl_net:caif_netlink_parms(): no params data found
[  342.805654][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  342.836263][ T5087] Bluetooth: hci4: command tx timeout
[  342.863186][T11842] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.871887][T11842] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.879819][T11842] bridge_slave_0: entered allmulticast mode
[  342.887635][T11842] bridge_slave_0: entered promiscuous mode
[  342.898606][T11842] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.906416][T11842] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.913796][T11842] bridge_slave_1: entered allmulticast mode
[  342.922023][T11842] bridge_slave_1: entered promiscuous mode
[  342.974286][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.007420][    T9] nvmet: ctrl 1 keep-alive timer (5 seconds) expired!
[  343.016065][    T9] nvmet: ctrl 1 fatal error occurred!
[  343.036896][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.076136][ T5865] usb 4-1: Using ep0 maxpacket: 8
[  343.083760][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  343.106720][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  343.119799][T11842] team0: Port device team_slave_0 added
[  343.126106][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  343.139180][T11842] team0: Port device team_slave_1 added
[  343.146380][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  343.175735][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  343.184820][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.185564][   T60] nvme nvme0: qid 2: timeout draining sock wmem allocation expired
[  343.200740][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.200753][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.200773][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.202924][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.254835][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.282807][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.417996][T11842] hsr_slave_0: entered promiscuous mode
[  343.437145][T11842] hsr_slave_1: entered promiscuous mode
[  343.449577][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.460412][T11842] Cannot create hsr debugfs directory
[  343.497685][T11874] futex_wake_op: syz.1.2533 tries to shift op by 144; fix this program
[  343.520338][ T5865] usb 4-1: GET_CAPABILITIES returned 0
[  343.526476][ T5865] usbtmc 4-1:16.0: can't read capabilities
[  343.543306][T11874] futex_wake_op: syz.1.2533 tries to shift op by 144; fix this program
[  343.748172][ T5865] usb 4-1: USB disconnect, device number 2
[  343.876787][   T28] audit: type=1800 audit(1785925456.668:55): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="attr_allow_any_host" dev="configfs" ino=24188 res=0 errno=0
[  343.891320][T11879] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  343.900328][   T28] audit: type=1800 audit(1785925456.668:56): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="addr_trtype" dev="configfs" ino=24189 res=0 errno=0
[  343.942822][   T28] audit: type=1800 audit(1785925456.738:57): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="addr_traddr" dev="configfs" ino=24190 res=0 errno=0
[  343.943150][T11879] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  343.968859][T11842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.997024][T11872] loop2: detected capacity change from 0 to 32768
[  344.001053][T11879] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  344.003859][   T28] audit: type=1800 audit(1785925456.788:58): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="addr_trsvcid" dev="configfs" ino=24191 res=0 errno=0
[  344.014730][T11879] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  344.042646][   T28] audit: type=1800 audit(1785925456.808:59): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="addr_adrfam" dev="configfs" ino=24192 res=0 errno=0
[  344.048634][T11872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2532 (11872)
[  344.086917][T11872] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  344.103872][T11872] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  344.113158][T11872] BTRFS info (device loop2): force clearing of disk cache
[  344.135154][T11872] BTRFS info (device loop2): enabling auto defrag
[  344.145150][T11842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.153797][T11872] BTRFS info (device loop2): enabling disk space caching
[  344.162862][T11872] BTRFS info (device loop2): disk space caching is enabled
[  344.195567][ T5087] Bluetooth: hci0: command tx timeout
[  344.231381][T11842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.421408][T11872] BTRFS info (device loop2): enabling ssd optimizations
[  344.475661][T11872] BTRFS info (device loop2): rebuilding free space tree
[  344.480868][T11842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.519971][T11872] BTRFS info (device loop2): disabling free space tree
[  344.539026][T11872] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  344.559644][T11872] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  344.631283][T11903] tipc: Started in network mode
[  344.636504][T11903] tipc: Node identity 4, cluster identity 4711
[  344.687236][T11903] tipc: Node number set to 4
[  344.761656][T11701] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  344.794993][T11689] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  344.826944][   T60] nvme nvme0: qid 1: timeout draining sock wmem allocation expired
[  344.829817][T11842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  344.894027][T11842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  344.930232][T11842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  344.959859][T11842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  345.282287][T11842] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.351485][T11842] 8021q: adding VLAN 0 to HW filter on device team0
[  345.382026][  T998] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.389228][  T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.421239][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.428466][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.614438][T11913] futex_wake_op: syz.2.2542 tries to shift op by 144; fix this program
[  345.615676][T11915] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  345.624198][T11913] futex_wake_op: syz.2.2542 tries to shift op by 144; fix this program
[  345.670351][T11915] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  345.706051][T11915] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  345.769767][T11917] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  346.201597][   T55] nvme nvme0: queue 0: timeout cid 0x1001 type 4 opcode 0x18 (Admin Cmd)
[  346.270625][T11842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.285799][ T5087] Bluetooth: hci0: command tx timeout
[  346.430090][T11924] loop3: detected capacity change from 0 to 32768
[  346.443294][T11842] veth0_vlan: entered promiscuous mode
[  346.448466][T11924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2546 (11924)
[  346.480886][T11842] veth1_vlan: entered promiscuous mode
[  346.486914][T11924] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  346.500197][T11924] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  346.509283][T11924] BTRFS info (device loop3): force clearing of disk cache
[  346.519175][   T60] nvme nvme0: qid 2: timeout draining sock wmem allocation expired
[  346.555569][T11924] BTRFS info (device loop3): enabling auto defrag
[  346.571730][T11924] BTRFS info (device loop3): enabling disk space caching
[  346.600177][T11842] veth0_macvtap: entered promiscuous mode
[  346.625673][T11924] BTRFS info (device loop3): disk space caching is enabled
[  346.652206][T11842] veth1_macvtap: entered promiscuous mode
[  346.738207][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.762803][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.774073][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.785785][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.796166][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.807623][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.813176][T11924] BTRFS info (device loop3): enabling ssd optimizations
[  346.817981][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.836068][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.846115][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.856691][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.870968][T11842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.871031][T11924] BTRFS info (device loop3): rebuilding free space tree
[  346.889649][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.942319][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.957131][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.962904][T11924] BTRFS info (device loop3): disabling free space tree
[  346.970029][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.984767][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.997955][T11924] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  347.002375][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.019414][T11924] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  347.025060][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.052142][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.081097][T11842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.094092][T11842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.113863][T11842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.148881][T11952] netlink: 'syz.2.2547': attribute type 17 has an invalid length.
[  347.202643][T11933] netlink: 'syz.2.2547': attribute type 4 has an invalid length.
[  347.222120][   T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  347.360270][T11390] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  347.426250][T11842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.435095][T11842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.464287][T11842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.489857][T11842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.648655][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.678339][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.732663][  T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.745466][  T174] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  347.766421][  T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.895438][   T55] nvme nvme0: qid 0: timeout draining sock wmem allocation expired
[  347.905040][    C1] nvme nvme0: long keepalive RTT (8620 ms)
[  347.911070][    C1] nvme nvme0: failed nvme_keep_alive_end_io error=10
[  347.936592][  T174] usb 2-1: Using ep0 maxpacket: 8
[  347.953225][  T174] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  347.984109][  T174] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  348.022935][  T174] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  348.063038][  T174] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  348.090755][  T174] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  348.114182][  T174] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  348.140137][  T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.167967][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  348.167980][   T28] audit: type=1800 audit(1785925460.958:65): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2553" name="attr_allow_any_host" dev="configfs" ino=24563 res=0 errno=0
[  348.200207][T11965] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  348.215202][T11965] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  348.234646][   T28] audit: type=1800 audit(1785925460.988:66): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2553" name="addr_trtype" dev="configfs" ino=24564 res=0 errno=0
[  348.257474][T11965] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  348.273761][T11965] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  348.298767][   T28] audit: type=1800 audit(1785925460.998:67): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2553" name="addr_traddr" dev="configfs" ino=24565 res=0 errno=0
[  348.334960][T11967] futex_wake_op: syz.0.2554 tries to shift op by 144; fix this program
[  348.349798][T11967] futex_wake_op: syz.0.2554 tries to shift op by 144; fix this program
[  348.371358][ T5087] Bluetooth: hci0: command tx timeout
[  348.383436][  T174] usb 2-1: usb_control_msg returned -32
[  348.390135][  T174] usbtmc 2-1:16.0: can't read capabilities
[  348.396339][   T28] audit: type=1800 audit(1785925461.018:68): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2553" name="addr_trsvcid" dev="configfs" ino=24566 res=0 errno=0
[  348.396382][   T28] audit: type=1800 audit(1785925461.058:69): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2553" name="addr_adrfam" dev="configfs" ino=24567 res=0 errno=0
[  348.743990][T11980] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  348.891347][T11982] lo speed is unknown, defaulting to 1000
[  348.913251][T11982] lo speed is unknown, defaulting to 1000
[  348.923526][T11982] lo speed is unknown, defaulting to 1000
[  348.946218][   T56] usb 2-1: USB disconnect, device number 4
[  348.978276][T11982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  349.044081][T11982] lo speed is unknown, defaulting to 1000
[  349.047923][T11986] nvme nvme1: rdma_resolve_addr failed (-19).
[  349.061031][T11982] lo speed is unknown, defaulting to 1000
[  349.074107][T11982] lo speed is unknown, defaulting to 1000
[  349.092105][T11982] lo speed is unknown, defaulting to 1000
[  349.101741][T11982] lo speed is unknown, defaulting to 1000
[  349.120096][T11982] lo speed is unknown, defaulting to 1000
[  349.185531][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  349.220807][T11977] loop2: detected capacity change from 0 to 32768
[  349.254400][T11977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2558 (11977)
[  349.277862][T11977] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  349.306809][T11977] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  349.322919][T11977] BTRFS info (device loop2): force clearing of disk cache
[  349.326634][   T28] audit: type=1800 audit(1785925462.108:70): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2563" name="attr_allow_any_host" dev="configfs" ino=24619 res=0 errno=0
[  349.341742][T11977] BTRFS info (device loop2): enabling auto defrag
[  349.356095][T11991] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  349.364841][T11977] BTRFS info (device loop2): enabling disk space caching
[  349.370291][T11991] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  349.383626][ T5814] usb 4-1: Using ep0 maxpacket: 32
[  349.390584][T11977] BTRFS info (device loop2): disk space caching is enabled
[  349.393130][ T5814] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  349.409950][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.415617][   T28] audit: type=1800 audit(1785925462.148:71): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2563" name="addr_trtype" dev="configfs" ino=24620 res=0 errno=0
[  349.423324][T11991] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  349.451776][   T28] audit: type=1800 audit(1785925462.168:72): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2563" name="addr_traddr" dev="configfs" ino=24621 res=0 errno=0
[  349.452587][ T5814] usb 4-1: config 0 descriptor??
[  349.473692][   T28] audit: type=1800 audit(1785925462.208:73): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2563" name="addr_trsvcid" dev="configfs" ino=24622 res=0 errno=0
[  349.486604][   T60] nvme nvme0: qid 0: timeout draining sock wmem allocation expired
[  349.519962][   T28] audit: type=1800 audit(1785925462.308:74): pid=11991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2563" name="addr_adrfam" dev="configfs" ino=23541 res=0 errno=0
[  349.542223][T11991] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  349.604506][T11991] nvme_fabrics: missing parameter 'transport=%s'
[  349.626807][T11991] nvme_fabrics: missing parameter 'nqn=%s'
[  349.627325][ T5814] as10x_usb: device has been detected
[  349.676467][T11977] BTRFS info (device loop2): enabling ssd optimizations
[  349.686552][ T5814] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  349.722906][T11977] BTRFS info (device loop2): rebuilding free space tree
[  349.764131][T11977] BTRFS info (device loop2): disabling free space tree
[  349.789239][T11977] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  349.807368][ T5814] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  349.815583][T11977] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  349.968717][ T5814] as10x_usb: error during firmware upload part1
[  349.981645][ T5814] Registered device nBox DVB-T Dongle
[  350.006472][  T998] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  350.022193][ T5814] usb 4-1: USB disconnect, device number 3
[  350.110746][ T5814] Unregistered device nBox DVB-T Dongle
[  350.118245][ T5814] as10x_usb: device has been disconnected
[  350.124667][T11689] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  350.435729][ T5087] Bluetooth: hci0: command tx timeout
[  350.498252][T11234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop2 scanned by udevd (11234)
[  350.985167][T12028] futex_wake_op: syz.0.2568 tries to shift op by 144; fix this program
[  350.994827][T12028] futex_wake_op: syz.0.2568 tries to shift op by 144; fix this program
[  351.045453][   T60] nvme nvme0: qid 0: timeout draining sock wmem allocation expired
[  351.064200][   T60] nvme nvme0: Reconnecting in 10 seconds...
[  351.137223][T12029] nvme nvme1: rdma connection establishment failed (-104)
[  351.374576][T12036] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  351.417038][T12036] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  351.444522][T12036] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  351.464480][T12036] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  351.619639][T12036] nvme_fabrics: missing parameter 'transport=%s'
[  351.637245][T12036] nvme_fabrics: missing parameter 'nqn=%s'
[  351.856124][T12047] overlayfs: failed to resolve './file1': -2
[  352.211667][T12041] loop3: detected capacity change from 0 to 32768
[  352.249087][T12041] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  352.395852][T12059] futex_wake_op: syz.1.2580 tries to shift op by 144; fix this program
[  352.438296][T12059] futex_wake_op: syz.1.2580 tries to shift op by 144; fix this program
[  352.454255][T11236] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  352.824239][T12081] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  352.867502][T12081] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  352.895758][T12081] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  352.927591][T12081] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  353.022407][T12081] nvme_fabrics: missing parameter 'transport=%s'
[  353.033607][T12081] nvme_fabrics: missing parameter 'nqn=%s'
[  353.465611][ T5764] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  353.677119][T12107] futex_wake_op: syz.2.2592 tries to shift op by 144; fix this program
[  353.685547][ T5764] usb 1-1: Using ep0 maxpacket: 32
[  353.688578][ T5764] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  353.734817][T12107] futex_wake_op: syz.2.2592 tries to shift op by 144; fix this program
[  353.750523][ T5764] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  353.762880][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  353.781464][ T5764] usb 1-1: Product: syz
[  353.789241][ T5764] usb 1-1: Manufacturer: syz
[  353.809108][ T5764] usb 1-1: SerialNumber: syz
[  353.835889][ T5764] usb 1-1: config 0 descriptor??
[  353.848964][T12093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  354.051159][T12098] loop3: detected capacity change from 0 to 32768
[  354.063663][T12098] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  354.160029][T12120] 9pnet_virtio: no channels available for device syz
[  354.251770][T11234] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  354.266000][ T5764] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  354.332000][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  354.332016][   T28] audit: type=1800 audit(1785925467.118:85): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2596" name="attr_allow_any_host" dev="configfs" ino=24799 res=0 errno=0
[  354.353743][T12124] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  354.378458][   T56] usb 1-1: USB disconnect, device number 2
[  354.415941][   T28] audit: type=1800 audit(1785925467.138:86): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2596" name="addr_trtype" dev="configfs" ino=24800 res=0 errno=0
[  354.448862][T12124] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  354.467004][T12124] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  354.491427][   T28] audit: type=1800 audit(1785925467.208:87): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2596" name="addr_traddr" dev="configfs" ino=24801 res=0 errno=0
[  354.515450][ T5764] usb 3-1: Using ep0 maxpacket: 16
[  354.531020][T12124] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  354.552194][ T5764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.565626][   T28] audit: type=1800 audit(1785925467.258:88): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2596" name="addr_trsvcid" dev="configfs" ino=24802 res=0 errno=0
[  354.586539][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  354.599290][ T5764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  354.609400][   T28] audit: type=1800 audit(1785925467.278:89): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2596" name="addr_adrfam" dev="configfs" ino=24803 res=0 errno=0
[  354.630400][ T5764] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  354.640382][ T5764] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.657355][ T5764] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  354.666907][ T5764] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  354.675223][ T5764] usb 3-1: Manufacturer: syz
[  354.688870][ T5764] usb 3-1: config 0 descriptor??
[  354.719482][T12124] nvme_fabrics: missing parameter 'transport=%s'
[  354.726494][T12124] nvme_fabrics: missing parameter 'nqn=%s'
[  355.061883][T12142] futex_wake_op: syz.0.2602 tries to shift op by 144; fix this program
[  355.075977][ T5764] rc_core: IR keymap rc-hauppauge not found
[  355.083498][T12142] futex_wake_op: syz.0.2602 tries to shift op by 144; fix this program
[  355.102820][ T5764] Registered IR keymap rc-empty
[  355.115001][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.178285][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.231277][ T5764] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  355.270158][ T5764] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  355.313535][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.355468][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.427767][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.465447][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.506594][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.555491][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.596214][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.641457][T12147] loop3: detected capacity change from 0 to 32768
[  355.652465][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.677245][T12147] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  355.694034][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.755944][ T5764] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  355.809789][ T5764] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  355.859215][ T5764] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  355.891286][   T28] audit: type=1800 audit(1785925468.678:90): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="attr_allow_any_host" dev="configfs" ino=25779 res=0 errno=0
[  355.900962][T12155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  355.930691][ T5764] usb 3-1: USB disconnect, device number 3
[  355.975877][T11234] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 14
[  356.003625][   T28] audit: type=1800 audit(1785925468.688:91): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="addr_trtype" dev="configfs" ino=25780 res=0 errno=0
[  356.051914][T12155] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  356.070183][T12158] CIFS mount error: No usable UNC path provided in device string!
[  356.070183][T12158] 
[  356.094987][T12155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  356.111501][   T28] audit: type=1800 audit(1785925468.838:92): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="addr_traddr" dev="configfs" ino=25789 res=0 errno=0
[  356.136230][T12158] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  356.179499][T12162] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  356.215456][   T28] audit: type=1800 audit(1785925468.878:93): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="addr_trsvcid" dev="configfs" ino=25841 res=0 errno=0
[  356.303169][   T28] audit: type=1800 audit(1785925468.968:94): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2607" name="addr_adrfam" dev="configfs" ino=25859 res=0 errno=0
[  356.385224][T12159] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  356.415094][T12155] nvme_fabrics: missing parameter 'transport=%s'
[  356.422636][T12155] nvme_fabrics: missing parameter 'nqn=%s'
[  356.487272][ T2999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  356.505587][T12168] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  356.899859][T12173] lo speed is unknown, defaulting to 1000
[  357.012140][T12176] futex_wake_op: syz.1.2613 tries to shift op by 144; fix this program
[  357.033334][T12176] futex_wake_op: syz.1.2613 tries to shift op by 144; fix this program
[  357.514145][T12184] loop2: detected capacity change from 0 to 32768
[  357.559883][T12184] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  357.613375][T12184] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  357.627392][T12184] BTRFS info (device loop2): force clearing of disk cache
[  357.636446][T12184] BTRFS info (device loop2): enabling auto defrag
[  357.644432][T12184] BTRFS info (device loop2): enabling disk space caching
[  357.673066][T12184] BTRFS info (device loop2): disk space caching is enabled
[  357.778737][T12184] BTRFS info (device loop2): enabling ssd optimizations
[  357.800209][T12184] BTRFS info (device loop2): rebuilding free space tree
[  357.897385][T12184] BTRFS info (device loop2): disabling free space tree
[  357.924489][T12184] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  357.954598][T12184] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  358.125432][   T51] Bluetooth: hci4: command 0x206a tx timeout
[  358.126124][ T5087] Bluetooth: hci4: Opcode 0x206a failed: -110
[  358.225496][T12206] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  358.255084][  T998] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  358.266755][T12206] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  358.330049][T12206] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  358.402198][T11689] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  358.539438][T12206] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  359.007973][T12211] nvme_fabrics: missing parameter 'transport=%s'
[  359.093327][T12211] nvme_fabrics: missing parameter 'nqn=%s'
[  359.409792][T12217] futex_wake_op: syz.3.2624 tries to shift op by 144; fix this program
[  359.434632][T12217] futex_wake_op: syz.3.2624 tries to shift op by 144; fix this program
[  360.017436][T12238] syz_tun: entered allmulticast mode
[  360.341907][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  360.341922][   T28] audit: type=1800 audit(1785925473.128:100): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2634" name="attr_allow_any_host" dev="configfs" ino=24986 res=0 errno=0
[  360.343422][T12245] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  360.359502][   T28] audit: type=1800 audit(1785925473.128:101): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2634" name="addr_trtype" dev="configfs" ino=24987 res=0 errno=0
[  360.417604][   T28] audit: type=1800 audit(1785925473.208:102): pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2634" name="addr_traddr" dev="configfs" ino=25936 res=0 errno=0
[  360.445580][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  360.456023][T12245] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  360.466428][T12245] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  360.466495][   T28] audit: type=1800 audit(1785925473.258:103): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2634" name="addr_trsvcid" dev="configfs" ino=24988 res=0 errno=0
[  360.487123][T12245] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  360.525619][   T28] audit: type=1800 audit(1785925473.268:104): pid=12245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2634" name="addr_adrfam" dev="configfs" ino=24989 res=0 errno=0
[  360.611068][T12238] syz_tun: left allmulticast mode
[  360.648818][T12245] nvme_fabrics: missing parameter 'nqn=%s'
[  360.790621][T12236] loop0: detected capacity change from 0 to 32768
[  361.086331][   T28] audit: type=1800 audit(1785925473.878:105): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2630" name="file1" dev="loop0" ino=7 res=0 errno=0
[  361.184061][T12254] futex_wake_op: syz.3.2636 tries to shift op by 144; fix this program
[  361.219352][T12254] futex_wake_op: syz.3.2636 tries to shift op by 144; fix this program
[  361.573508][   T60] nvme nvme0: failed to connect socket: -111
[  361.594349][   T60] nvme nvme0: Failed reconnect attempt 1
[  361.612863][   T60] nvme nvme0: Reconnecting in 10 seconds...
[  361.700143][T12252] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.709978][T12252] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.464926][   T28] audit: type=1800 audit(1785925475.248:106): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2630" name="bus" dev="loop0" ino=9 res=0 errno=0
[  362.506282][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.573006][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.789820][   T28] audit: type=1800 audit(1785925475.578:107): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2643" name="attr_allow_any_host" dev="configfs" ino=25021 res=0 errno=0
[  362.816916][T12272] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  362.820982][   T28] audit: type=1800 audit(1785925475.608:108): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2643" name="addr_trtype" dev="configfs" ino=25022 res=0 errno=0
[  362.840312][T12272] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  362.861069][   T28] audit: type=1800 audit(1785925475.618:109): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2643" name="addr_traddr" dev="configfs" ino=25023 res=0 errno=0
[  362.894416][T12272] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  362.905215][T12272] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  362.960724][T12272] nvme_fabrics: missing parameter 'nqn=%s'
[  363.280678][T12252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.290554][T12252] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.300164][T12252] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.310680][T12252] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.344982][T12280] futex_wake_op: syz.3.2647 tries to shift op by 144; fix this program
[  363.389539][T12280] futex_wake_op: syz.3.2647 tries to shift op by 144; fix this program
[  363.750993][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'.
[  363.810107][T12290] UBIFS error (pid: 12290): cannot open "ubi0_0", error -19
[  363.985290][T12294] random: crng reseeded on system resumption
[  364.245449][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  364.389794][T12299] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  364.407032][T12299] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  364.418001][T12299] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  364.448403][   T23] usb 3-1: Using ep0 maxpacket: 8
[  364.454848][T12299] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  364.487041][   T23] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  364.506462][   T23] usb 3-1: config 0 has no interface number 0
[  364.515185][   T23] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  364.533701][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.545678][   T23] usb 3-1: config 0 descriptor??
[  364.590899][T12297] loop0: detected capacity change from 0 to 32768
[  364.617897][T12299] nvme_fabrics: missing parameter 'nqn=%s'
[  364.676344][   T23] viperboard 3-1:0.143: version 0.00 found at bus 003 address 004
[  364.718634][   T23] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  364.728386][   T23] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  364.777757][T12292] WARNING! power/level is deprecated; use power/control instead
[  364.796462][   T23] usb 3-1: USB disconnect, device number 4
[  364.871983][T12304] futex_wake_op: syz.3.2656 tries to shift op by 144; fix this program
[  364.917527][T12304] futex_wake_op: syz.3.2656 tries to shift op by 144; fix this program
[  365.115971][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2659'.
[  365.565190][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  365.565204][   T28] audit: type=1800 audit(1785925478.348:118): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="attr_allow_any_host" dev="configfs" ino=25127 res=0 errno=0
[  365.596958][T12326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  365.617250][T12326] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  365.626680][   T28] audit: type=1800 audit(1785925478.388:119): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="addr_trtype" dev="configfs" ino=25128 res=0 errno=0
[  365.650098][T12326] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  365.664874][T12326] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  365.675564][   T28] audit: type=1800 audit(1785925478.398:120): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="addr_traddr" dev="configfs" ino=25133 res=0 errno=0
[  365.705811][   T28] audit: type=1800 audit(1785925478.448:121): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="addr_trsvcid" dev="configfs" ino=25136 res=0 errno=0
[  365.734952][   T28] audit: type=1800 audit(1785925478.448:122): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="addr_adrfam" dev="configfs" ino=25137 res=0 errno=0
[  365.769699][T12326] nvme_fabrics: missing parameter 'nqn=%s'
[  365.999069][T12329] futex_wake_op: syz.2.2667 tries to shift op by 144; fix this program
[  366.019280][T12329] futex_wake_op: syz.2.2667 tries to shift op by 144; fix this program
[  366.141521][   T28] audit: type=1800 audit(1785925478.928:123): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2653" name="bus" dev="loop0" ino=9 res=0 errno=0
[  366.436009][T12336] md: pers->run() failed ...
[  366.567841][   T28] audit: type=1800 audit(1785925479.358:124): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2674" name="attr_allow_any_host" dev="configfs" ino=25160 res=0 errno=0
[  366.605027][   T28] audit: type=1800 audit(1785925479.388:125): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2674" name="addr_trtype" dev="configfs" ino=26104 res=0 errno=0
[  366.606669][T12345] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  366.621069][   T28] audit: type=1800 audit(1785925479.408:126): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2674" name="addr_traddr" dev="configfs" ino=26109 res=0 errno=0
[  366.624445][T12345] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  366.626550][   T28] audit: type=1800 audit(1785925479.418:127): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2674" name="addr_trsvcid" dev="configfs" ino=26110 res=0 errno=0
[  366.630610][T12345] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  366.634333][T12345] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  366.690441][T12345] nvme_fabrics: missing parameter 'nqn=%s'
[  366.728904][T12351] CIFS: Attempting to mount //127.0.0.1/share
[  366.732396][T12351] CIFS: VFS: Error connecting to socket. Aborting operation.
[  366.732608][T12351] CIFS: VFS: cifs_mount failed w/return code = -101
[  366.923372][T12355] futex_wake_op: syz.2.2677 tries to shift op by 144; fix this program
[  366.924337][T12355] futex_wake_op: syz.2.2677 tries to shift op by 144; fix this program
[  367.125586][T12359] logitech-hidpp-device 0005:046D:B012.0002: received hid++ report of bad size (2)
[  367.146240][T12359] logitech-hidpp-device 0005:046D:B012.0002: Event data for report 17 was too short (19 vs 1)
[  367.182608][   T23] logitech-hidpp-device 0005:046D:B012.0002: Device not connected
[  367.583183][T12375] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  367.782360][T12375] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  367.955637][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  367.999886][T12375] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  368.245238][T12375] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  368.392649][T12375] nvme_fabrics: missing parameter 'nqn=%s'
[  368.450919][T12383] vlan2: entered allmulticast mode
[  368.471344][T12383] bond0: entered allmulticast mode
[  368.497550][T12383] bond_slave_0: entered allmulticast mode
[  368.503348][T12383] bond_slave_1: entered allmulticast mode
[  368.533820][T12384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2685'.
[  368.547635][T12386] futex_wake_op: syz.1.2687 tries to shift op by 144; fix this program
[  368.560527][T12386] futex_wake_op: syz.1.2687 tries to shift op by 144; fix this program
[  368.629362][T12368] loop0: detected capacity change from 0 to 32768
[  368.724251][T12384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.740224][T12384] bond_slave_0: left allmulticast mode
[  368.767883][T12384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.799044][T12384] bond_slave_1: left allmulticast mode
[  368.848832][T12384] bond0 (unregistering): Released all slaves
[  369.304764][T12404] jffs2: notice: (12404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  369.572009][T12412] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  369.590855][T12412] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  369.611669][T12412] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  369.676773][T12412] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  369.802825][T12412] nvme nvme1: failed to connect socket: -111
[  369.849319][T12417] futex_wake_op: syz.2.2697 tries to shift op by 144; fix this program
[  369.890860][T12417] futex_wake_op: syz.2.2697 tries to shift op by 144; fix this program
[  370.396120][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  370.587422][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  370.605627][   T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  370.635565][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  370.644648][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  370.669233][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  370.669249][   T28] audit: type=1800 audit(1785925483.458:140): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2707" name="attr_allow_any_host" dev="configfs" ino=25339 res=0 errno=0
[  370.707088][T12441] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  370.716464][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  370.728039][   T28] audit: type=1800 audit(1785925483.498:141): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2707" name="addr_trtype" dev="configfs" ino=25340 res=0 errno=0
[  370.763295][T12441] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  370.765728][ T5087] Bluetooth: hci2: unexpected subevent 0x05 length: 10 < 12
[  370.779539][   T28] audit: type=1800 audit(1785925483.548:142): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2707" name="addr_traddr" dev="configfs" ino=26242 res=0 errno=0
[  370.801415][   T28] audit: type=1800 audit(1785925483.588:143): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2707" name="addr_trsvcid" dev="configfs" ino=26243 res=0 errno=0
[  370.822596][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  370.822625][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  370.822645][   T23] usb 3-1: Product: syz
[  370.822659][   T23] usb 3-1: Manufacturer: syz
[  370.836539][T12441] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  370.860829][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  370.875568][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  370.878672][T12441] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  370.882898][   T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  370.903585][   T23] cdc_wdm 3-1:1.0: Unknown control protocol
[  370.913661][   T28] audit: type=1800 audit(1785925483.668:144): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2707" name="addr_adrfam" dev="configfs" ino=26244 res=0 errno=0
[  371.000967][T12441] nvme nvme1: failed to connect socket: -111
[  371.121250][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.128206][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.135699][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.142336][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.156548][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.163208][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.170211][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.176864][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.183220][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.189855][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.196612][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.203267][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.209667][    T9] usb 3-1: USB disconnect, device number 5
[  371.215639][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  371.215666][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  371.215702][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  371.276616][T12452] futex_wake_op: syz.0.2708 tries to shift op by 144; fix this program
[  371.303711][T12452] futex_wake_op: syz.0.2708 tries to shift op by 144; fix this program
[  371.664692][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'.
[  371.684281][T12467] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  371.693268][T12467] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  371.701786][T12467] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  371.804517][   T60] nvme nvme0: failed to connect socket: -111
[  371.827826][   T60] nvme nvme0: Failed reconnect attempt 2
[  371.852232][   T60] nvme nvme0: Reconnecting in 10 seconds...
[  372.383110][   T28] audit: type=1800 audit(1785925485.168:145): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2720" name="attr_allow_any_host" dev="configfs" ino=26294 res=0 errno=0
[  372.384884][T12474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[  372.408476][T12463] loop1: detected capacity change from 0 to 32768
[  372.428336][T12474] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[  372.432219][   T28] audit: type=1800 audit(1785925485.168:146): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2720" name="addr_trtype" dev="configfs" ino=26295 res=0 errno=0
[  372.476802][T12474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[  372.515077][T12474] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[  372.548770][   T28] audit: type=1800 audit(1785925485.218:147): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2720" name="addr_traddr" dev="configfs" ino=26296 res=0 errno=0
[  372.652474][   T28] audit: type=1800 audit(1785925485.268:148): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2720" name="addr_trsvcid" dev="configfs" ino=26297 res=0 errno=0
[  372.747096][T12474] nvme nvme1: failed to connect socket: -101
[  372.753833][   T28] audit: type=1800 audit(1785925485.278:149): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2720" name="addr_adrfam" dev="configfs" ino=26298 res=0 errno=0
[  372.909860][T12481] 
[  372.912258][T12481] =============================
[  372.917382][T12481] WARNING: suspicious RCU usage
[  372.922312][T12481] syzkaller #0 Not tainted
[  372.926804][T12481] -----------------------------
[  372.931681][T12481] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage!
[  372.940181][T12481] 
[  372.940181][T12481] other info that might help us debug this:
[  372.940181][T12481] 
[  372.950499][T12481] 
[  372.950499][T12481] rcu_scheduler_active = 2, debug_locks = 1
[  372.958630][T12481] 1 lock held by syz.3.2722/12481:
[  372.963765][T12481]  #0: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[  372.973801][T12481] 
[  372.973801][T12481] stack backtrace:
[  372.980151][T12481] CPU: 1 PID: 12481 Comm: syz.3.2722 Not tainted syzkaller #0
[  372.987643][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  372.997743][T12481] Call Trace:
[  373.001085][T12481]  <TASK>
[  373.004031][T12481]  dump_stack_lvl+0x18c/0x250
[  373.008810][T12481]  ? load_image+0x420/0x420
[  373.013397][T12481]  ? show_regs_print_info+0x20/0x20
[  373.018624][T12481]  ? load_image+0x420/0x420
[  373.023167][T12481]  ? print_tainted+0x14c/0x170
[  373.028033][T12481]  lockdep_rcu_suspicious+0x1e1/0x300
[  373.033489][T12481]  ieee80211_check_concurrent_iface+0x46b/0x950
[  373.039873][T12481]  ieee80211_open+0xc1/0x200
[  373.044511][T12481]  __dev_open+0x2cb/0x430
[  373.048980][T12481]  ? dev_open+0x190/0x190
[  373.053363][T12481]  __dev_change_flags+0x1e8/0x6a0
[  373.058425][T12481]  ? dev_load+0x21/0x1f0
[  373.062697][T12481]  ? __lock_acquire+0x7d80/0x7d80
[  373.067742][T12481]  ? dev_get_flags+0x1c0/0x1c0
[  373.072512][T12481]  ? full_name_hash+0x92/0xe0
[  373.077270][T12481]  dev_change_flags+0x7c/0x1a0
[  373.082043][T12481]  dev_ioctl+0x7b4/0x1140
[  373.086379][T12481]  sock_do_ioctl+0x239/0x310
[  373.091061][T12481]  ? sock_show_fdinfo+0xb0/0xb0
[  373.095925][T12481]  sock_ioctl+0x5be/0x7e0
[  373.100253][T12481]  ? sock_poll+0x3e0/0x3e0
[  373.104671][T12481]  ? bpf_lsm_file_ioctl+0x9/0x10
[  373.109637][T12481]  ? security_file_ioctl+0x80/0xa0
[  373.114782][T12481]  ? sock_poll+0x3e0/0x3e0
[  373.119207][T12481]  __se_sys_ioctl+0xfd/0x170
[  373.123827][T12481]  do_syscall_64+0x55/0xb0
[  373.128241][T12481]  ? clear_bhb_loop+0x40/0x90
[  373.133026][T12481]  ? clear_bhb_loop+0x40/0x90
[  373.137702][T12481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.143601][T12481] RIP: 0033:0x7fc67079e019
[  373.148025][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.167636][T12481] RSP: 002b:00007fc66e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  373.176064][T12481] RAX: ffffffffffffffda RBX: 00007fc670a25fa0 RCX: 00007fc67079e019
[  373.184137][T12481] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006
[  373.192111][T12481] RBP: 00007fc67083500c R08: 0000000000000000 R09: 0000000000000000
[  373.200085][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.208062][T12481] R13: 00007fc670a26038 R14: 00007fc670a25fa0 R15: 00007fff06a24aa8
[  373.216073][T12481]  </TASK>
[  373.247675][T12485] futex_wake_op: syz.0.2723 tries to shift op by 144; fix this program
[  373.371971][T12485] futex_wake_op: syz.0.2723 tries to shift op by 144; fix this program
[  374.608111][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  374.617161][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  374.627810][ T5778] Bluetooth: hci2: hardware error 0x00
[  375.315566][ T5087] Bluetooth: hci4: Opcode 0x206a failed: -110
[  375.315812][   T51] Bluetooth: hci4: command 0x206a tx timeout
[  376.675830][ T5778] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  378.838790][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.845206][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  382.042492][ T2999] nvme nvme0: failed to connect socket: -111
[  382.048924][ T2999] nvme nvme0: Failed reconnect attempt 3
[  382.054575][ T2999] nvme nvme0: Reconnecting in 10 seconds...