last executing test programs:

13.335425033s ago: executing program 1 (id=380):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000380)={[{@gqnoenforce}, {@nodiscard}, {@pquota}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$eJzs3Qm4pnPh+P/nDGNfxlBJqalGtMiaJaqZwQyFZIl2ZElZChXatEhpo0R79i1bWULZWkn2FkoIlSyRFtsw/+uYM4zxJn37/v6+9X6/r+uc53nu577v83k+r3s5R3NdbTZ5o0mDwVyD6Y0bzNrZV02ZOuaK9W89fMuFjlrupDv3e/iK4yeMPE4ceZw0GAxGjbw9NH3Z2MHJp4wazP7A8oead+55huYfDJYfeTmyn8HK0x/mv3TGetNmadaBDj30bZ/pXw+04PCPGH5yyH57HToYDMbMtP3QYDC05yM+qLTNJk6Z/JDVg27DVqNHns/8Ncf0r/kvGAzmP23Ax8fM6w49AR9p+Gfu+fyzRq//BPzs/7g2mzhlnVn8h8/F2UaWrTx8js96Dhqb9Ti/eYnNVx2ZwgeOt8Fg+BL3sHPlP6LNJk5ed/Do1/nB4audt8+06dfNOQfTbxRzDwaDeUaur/M90S717zVx0goP3LNnvB5hn3Es70nHxbFvOuH+4Zv0YDBYeDAYu/aMe0FVVVX9ZzRx0gprwP1/rse6/5944mKndf+vqqr6z22diZNWGL7Xz3L/n++x7v87L3b+h6f/t/8JK0/f6v4n9kNUVVXVv9TkdfD+P+ax7v8rr3Hxut3/q6qq/nPbcL0H7v/zzXL/X+Sx7v+vP2G1xUfWm/F7w30z7XJopv894d6Zls820/J7Zlo+eqb9zLz+HDMtv2um5XMOvwfrjxsMxs7494JTH1o8dtzweyPL755p+YSH/p3O+DVnWj5xpuWTZ1o+aWSsw8unzLR8ykzrr/0YU11VVfV/pg1XmLzGYKZ/Zz+yeNEZ79P9/9zTr176iRpvVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV/Wd2/61nnDUYDIYGg8GowWDqYOT5zI+DadOmTRt+feI5l1zyhA30/0ZDZ181ZeqYK9a/9fAtFzpquZPu3O+hWfqP7T//E9S/07D/XMeMGwx23OSJHko9AXX+u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7j7bz3jrJFjYNRgMHUw8nzPGY+n7/u6N4ysuuqmJ91+wENbjp+w3cizs6+aMnW7J2DsT0BDw591zBXr33r4lgsdtdxJd+73X3D2/Od/gvp3esB/u6HBYOT8HjN8Lq8/ccONlxoMBgfcftKmKw0efG+V4fdWGzvbYLYHNl3qge9rjecd77n29McJw98WeXAfJz6w/3WmHTzb0CyDmKmXnn3d4W/d7M4VZ31c8tE/x6gZTw695tQ7pk2bNu1hC0ea61E2nrH/GZ9l1vN8ZOxLDY99mV13eMcyu+y+x9Lb7bDFtltvu/WOy62wyoorLb/cSqu+eJltttt+62Wnf3+UORv3wPc1Hs+czTfrnN06ceY5m/WzPdqcjXvsOXtgj1P3GNp4xpzN/i/O2RqPPWfjthv5QeMnjB5s/sDUDA0G49ccPdht+MVycw4G49caWXfR4XVXHztqMNj3oQ86/GzOB4/BoT2H19ls8kaTHhrZIz/hI67TD1tx/ISRx4kjj5OmD3Hc4KFDcezg5FNGDc/Fw6Z53rnnGZp/MFh+5OXIfgarjrx70Iz1ps3SrAMdeujbPtO/HmjB4Z0MP3nbsmdcOXwuzrL9/4v+R9f/R3itMvTgRA2NfI2sM91r4pR1HvpZD0zD8NzNNrJs5WGTWefsf7NHjHfc7IMxjzHeyetMWmF48SzzP2MTPL5uW+K8904/tiasPH2r+//HKDTe+R5jvOtMxPHO91jjPeZ9F50yfVf/a+Od5Vq37gPfJzyea93gsa91s9EOtr5w8Vmvda989CE+7DyeMUdzzrLSo13rdjtw+T2H9z/hsa916w6PffTDrnWjBoPxa8y41g1f+CaPHuw7/GL54RdTRg+OGn6xwgMv5h6cM/ziRW/ZafuthhesPWNOlh3e74SxQw+4n7fyTUtO+/y0aWuOjGXC2IePdeT4GDfz/Xzi2OmTOWPbGfsdXnXGfm98yvT3Jo/sd+K/sN8Z29J4b19w+ntTRvY7aZb9jn6M/c7Y9hHnw1JDD164HuV6M3mW683I3zgzftzDvuaY/jX/BYPB/KeR7yzr/tNrJp2/cz3GeCdOWmGN4fHNcv4+eDjS+XvRlCuG7xXzDwaDhQeDsWvPGPu/2NCjjXf2xx7vJBjv7I813suO3mG9/4XxDmYa78OOs802nH6srD1ynE35F47fGdvOeh0b/cC70y/7az+e69i4R1zHPjTbqFkme6Ye7Xe2rWD96c8Xfej33KuOP3LG3I+eZb//7He2mT7LEFzHxszy9/yota8dDNGc73nM6hcP7f/Ycz568PC/LWbM+YxtH2vOpzyeOX/6Y8/54/09eannTH9/9Czjn3nON/jU0z45Y87nmGW//2zOpzz2veORcz5hMJrmfNl7ps/bY11PH23OZ2w7Y86HP+JqY2cfrDV8zxqZ88mPZ84X/d85zueB9ac/3/rBRWceftJrZsz5rHP8z+Z88r865+MePM7HP/Des0cN5phjsNsWu+6683LTv894ufz073wtuuuq6fP8WPfSRzOase1jnRdrPh6jMY/LaOifGS02+6MZPXRqHbbTzk/+n16L1vxXjQZ8LbriyOnz9li/Fz3anM/Ylu6Di8y0/ax/h2643gO/d883y31wxiZ4Hzzz9HX3nrHLkc3um2WYM+6r9860fLaZlt8z0/LRM+1n5vXnmGn5XTMtH/4Ic8y0/gzWccN/844sn/rQ6mOHf3kaN7L87pmWT3ho2/FrzrR84kzLJ8+0fNJDh8b4KTMtnzLT+msP/sVm/Dfp7Wa9yNfjrf/+6y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9z9t55x1sgxMGowmDqY/nxo5HGw59AGt7x8+HEwGIxe+bhpGzzR432CGzr7qilTx1yx/q2Hb7nQUcuddOd+/wVnz3/+J6h/pwf8txsaDEbO7zHbDQaD9SduuPFSg8Fgg2nHrTxq8OB7iw6/t/rYUYPBvkMP28GcD64ztOfwOptN3mjSYDDXyBrjHvFDH3EePWzF8RNGHieOPE6afn0aN3joeB07OPmUUYPZH1j+UPPOPc/Q/IPB8iMvR/YzWHn6w/yXzlhv2izNOtChh77tM/3rgRYc/hHDT3bbdsozhudqlu3/zzTjWr3dqH+6aue/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL392/5t/R8t9Wou7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+6oam/7+7lrXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vf3f/cf5fZ/1cHUk9Inf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c/beecdbIMTBqMJg6mP58aM+Rx8HQCSc/b+QQGb375Ucc/ESP9wlu6Oyrpkwdc8X6tx6+5UJHLXfSnfv9F5w9//mfoP6dHvDfbmgwGDm/x2w3GAzWn7jhxksNBoODj7h891GDB99bdPi91ceOGgz2HXrYDuZ8cJ2hPYfX2WzyRpMGg7lG1hj3iB/6iPPoYSuOnzDyOHHkcdL069O4wUPH69jByaeMGsz+wPKHmnfueYbmHwyWH3k5sp/BytMf5r90xnrTZmnWgQ499G2f6V8PtODwjxh+std8V50wPFezbP9/phnX6u1G/dNVO//d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3P23nnHWyDEwajCYOpj+fNTI49CeN1z/gY2HH4dfL7T23lc90eN9ghs6+6opU8dcsf6th2+50FHLnXTnfv8FZ89//ieof6dh/7mOGTcY7LjJEz2UegLq/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9x9996xlkjT0c9tHTUnh0X2NDZV02ZOuaK9W89fMuFjlrupDv3e6IH9O/2KP4fyh+z+H84f8zi/5H8MYv/R/PHLP575Y9Z/D+WP2bx3zt/zOL/8fwxi/8n8scs/vvkj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvHfN3/M4r9f/pjF/3P5Yxb/z+ePWfz3zx+z+H8hf8zif0D+mMX/wPwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/L+ZP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP7fyh+z+H87f8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+38kfs/iflj9m8T89f8zif0b+mMX/u/ljFv/v5Y9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+XP2bxPz9/zOL/0/wxi/8F+WMW/5/lj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+SPWfyvzB+z+P86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/n/KH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/n/PHLP635Y9Z/G/PH7P4/yV/zOJ/R/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P4T80fs/jflz9m8b8/f8ziPy1/TOI/2yB/zOI/lD9m8R+VP2bxny1/zOI/e/6YxX90/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/zH5Yxb/hfLHLP5j88cs/gvnj1n8F8kfs/g/KX/M4v/k/DGL/1Pyxyz+i+aPWfyfmj9m8V8sf8zi/7T8MYv/0/PHLP6L549Z/J+RP2bxf2b+mMV/XP6Yxf9Z+WMW/2fn/4hmH3k0+D8nf8xy/o/PH7P4L5E/ZvF/bv6YxX/J/DGL/1L5Yxb/5+WPWfyfnz9m8X9B/pjF/4X5Yxb/pfPHLP4vyh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0vyxyz+q+WPWfxXzx+z+L80f8zi/7L8MYv/y/PHLP4T8scs/hPzxyz+k/LHLP5r5I9Z/NfMH7P4r5U/ZvGfnD9m8Z+i8p/tca9p8V9b5f/4s/ivkz9m8X9F/pjF/5X5Yxb/dfPHLP7r5Y9Z/NfPH7P4vyp/zOK/Qf6Yxf/V+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf03+mMV/0/wxi/9m+WMW/9fmj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6YxX/z/DGL/xb5Yxb/LfPHLP5vyR+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/1vzxyz+2+WPWfzflj9m8X97/pjFf/v8MYv/DvljFv8d88cs/jvlj1n835E/ZvF/Z/6YxX/n/DGL/y75Yxb/XfPHLP7vyh+z+L87f8zi/578MYv/bvljFv/d88cs/nvkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvHfM3/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4r9X/pjF/2P5Yxb/vfPHLP4fzx+z+H8if8ziv0/+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv9988cs/vvlj1n8P5c/ZvH/fP6YxX///DGL/xfyxyz+B+SPWfwPzB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/5v5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4v+t/DGL/7fzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/nfwxi/9p+WMW/9Pzxyz+Z+SPWfy/mz9m8f9e/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/3n5Yxb/8/PHLP4/zR+z+F+QP2bx/1n+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Rf6Yxf/K/DGL/6/zxyz+v8kfs/hflT9m8f9t/pjF/+r8MYv/NfljFv9r88cs/r/LH7P4X5c/ZvG/Pn/M4n9D/pjF//f5Yxb/P+SPWfz/mD9m8b8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4n9b/pjF//b8MYv/X/LHLP535I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/1Pwxi/99+WMW//vzxyz+0/LHJP6zD/LHLP5D+WMW/1H5Yxb/2fLHLP6z549Z/Efnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxH5M/ZvFfKH/M4j82f8ziv3D+mMV/kfwxi/+T8scs/k/OH7P4PyV/zOK/aP6Yxf+p+WMW/8Xyxyz+T8sfs/g/PX/M4r94/pjF/xn5Yxb/Z+aPWfzH5Y9Z/J+VP2bxf3b+mMX/OfljFv/x+WMW/yXyxyz+z80fs/gvmT9m8V8qf8zi/7z8MYv/8/PHLP4vyB+z+L8wf8ziv3T+mMX/RfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/xfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X9J/pjFf7X8MYv/6vljFv+X5o9Z/F+WP2bxf3n+mMV/Qv6YxX9i/pjFf1L+mMV/jfwxi/+a+WMW/7Xyxyz+k/PHLP5T8scs/mvnj1n818kfs/i/In/M4v/K/DGL/7r5Yxb/9fLHLP7r549Z/F+VP2bx3yB/zOL/6sEl+UMW/w07/zGL/0b5Yxb/jfPHLP6b5I9Z/F+TP2bx3zR/zOK/Wf6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfPH/M4r9F/pjFf8v8MYv/W/LHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/W/DGL/3b5Yxb/t+WPWfzfnj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/3fkj1n835k/ZvHfOX/M4r9L/pjFf9f8MYv/u/LHLP7vzh+z+L8nf8ziv1v+mMV/9/wxi/8e+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n898wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlT9m8f9Y/pjFf+/8MYv/x/PHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/3/wxi/9++WMW/8/lj1n8P58/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9m/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/h/K3/M4v/t/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4fyd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+aPWfy/lz9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9e/pjF//z8MYv/T/PHLP4X5I9Z/H+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5E/ZvG/Mn/M4v/r/DGL/2/yxyz+V+U/3LTZZllg8f9t/pjF/+r8MYv/NfljFv9r88cs/r/LH7P4X5c/ZvG/Pn/M4n9D/pjF//f5Yxb/P+SPWfz/mD9m8b8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4n9b/pjF//b8MYv/X/LHLP535I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/1Pwxi/99+WMW//vzxyz+0/LHJP6jB/ljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4j8kfs/gvlD9m8R+bP2bxXzh/zOK/SP6Yxf9J+WMW/yfnj1n8n5I/ZvFfNH/M4v/U/DGL/2L5Yxb/p+WPWfyfnj9m8V88f8zi/4z8MYv/M/PHLP7j8scs/s/KH7P4Pzt/zOL/nPwxi//4/DGL/xL5Yxb/5+aPWfyXzB+z+C+VP2bxf17+mMX/+fljFv8X5I9Z/F+YP2bxXzp/zOL/ovwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOL/4vwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+L8kf8ziv1r+mMV/9fwxi/9L88cs/i/LH7P4vzx/zOI/IX/M4j8xf8ziPyl/zOK/Rv6YxX/N/DGL/1r5Yxb/yfljFv8p+WMW/7Xzxyz+6+SPWfxfkT9m8X9l/pjFf938MYv/evljFv/188cs/q/KH7P4b5A/ZvF/df6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/F+TP2bx3zR/zOK/Wf6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfPH/M4r9F/pjFf8v8MYv/W/LHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/W/DGL/3b5Yxb/t+WPWfzfnj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/3fkj1n835k/ZvHfOX/M4r9L/pjFf9f8MYv/u/LHLP7vzh+z+L8nf8ziv1v+mMV/9/wxi/8e+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n898wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlT9m8f9Y/pjFf+/8MYv/x/PHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/3/wxi/9++WMW/8/lj1n8P58/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9m/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/h/K3/M4v/t/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4fyd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+aPWfy/lz9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9e/pjF//z8MYv/T/PHLP4X5I9Z/H+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5E/ZvG/Mn/M4v/r/DGL/2/yxyz+V+WPWfx/mz9m8b86f8zif03+mMX/2vwxi//v8scs/tflj1n8r88fs/jfkD9m8f99/pjF/w/5Yxb/P+aPWfxvzB+z+P8pf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+f84fs/jflj9m8b89f8zi/5f8MYv/HfljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv8788cs/nflj1n8784fs/jfkz9m8b83f8ziPzV/zOJ/X/6Yxf/+/DGL/7T8MYn/HIP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/Mfkj1n8F8ofs/iPzR+z+C+cP2bxXyR/zOL/pPwxi/+T88cs/k/JH7P4L5o/ZvF/av6YxX+x/DGL/9Pyxyz+T88fs/gvnj9m8X9G/pjF/5n5Yxb/cfljFv9n5Y9Z/J+dP2bxf07+mMV/fP6YxX+J/DGL/3Pzxyz+S+aPWfyXyh+z+D8vf8zi//z8MYv/C/LHLP4vzB+z+C+dP2bxf1H+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxf3H+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxfkj9m8V8tf8ziv3r+mMX/pfljFv+X5Y9Z/F+eP2bxn5A/ZvGfmD9m8Z+UP2bxXyN/zOK/Zv6YxX+t/DGL/+T8MYv/lPwxi//a+WMW/3Xyxyz+r8gfs/i/Mn/M4r9u/pjFf738MYv/+vljFv9X5Y9Z/DfIH7P4vzp/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6vyR+z+G+aP2bx3yx/zOL/2vwxi//r8scs/q/PH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4b54/ZvHfIn/M4r9l/pjF/y35Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvF/a/6YxX+7/DGL/9vyxyz+b88fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/878scs/u/MH7P475w/ZvHfJX/M4r9r/pjF/135Yxb/d+ePWfzfkz9m8d8tf8ziv3v+mMV/j/wxi/9788cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/nvmj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n898ofs/h/LH/M4r93/pjF/+P5Yxb/T+SPWfz3yR+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+A/DGL/4H5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/M3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v5U/ZvH/dv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+TP2bxPy1/zOJ/ev6Yxf+M/DGL/3fzxyz+38sfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/L3/M4n9+/pjF/6f5Yxb/C/LHLP4/yx+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/IH7P4X5k/ZvH/df6Yxf83+WMW/6vyxyz+v80fs/hfnT9m8b8mf8zif23+mMX/d/ljFv/r8scs/tfnj1n8b8gfs/j/XuU/+nGvafH/g8r/8Wfx/2P+mMX/xvwxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/bfljFv/b88cs/n/JH7P435E/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/lPzxyz+9+WPWfzvzx+z+E/LH5P4zznIH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8ofs/g/OX/M4v+U/DGL/6L5Yxb/p+aPWfwXyx+z+D8tf8zi//T8MYv/4vljFv9n5I9Z/J+ZP2bxH5c/ZvF/Vv6Yxf/Z+WMW/+fkj1n8x+ePWfyXyB+z+D83f8ziv2T+mMV/qfwxi//z8scs/s/PH7P4vyB/zOL/wvwxhf/4wZxL548p/AeDOV+UP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+cP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+SPWfxXyx+z+K+eP2bxf2n+mMX/ZfljFv+X549Z/Cfkj1n8J+aPWfwn5Y9Z/NfIH7P4r5k/ZvFfK3/M4j85f8ziPyV/zOK/dv6YxX+d/DGL/yvyxyz+r8wfs/ivmz9m8V8vf8ziv37+mMX/VfljFv8N8scs/q/OH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/a/LHLP6b5o9Z/DfLH7P4vzZ/zOL/uvwxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/pvnj1n8t8gfs/hvmT9m8X9L/pjFf6v8MYv/1vljFv9t8scs/tvmj1n835o/ZvHfLn/M4v+2/DGL/9vzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/jvwxi/8788cs/jvnj1n8d8kfs/jvmj9m8X9X/pjF/935Yxb/9+SPWfx3yx+z+O+eP2bx3yN/zOL/3vwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+e+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/73yxyz+H8sfs/jvnT9m8f94/pjF/xP5Yxb/ffLHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+O+bP2bx3y9/zOL/ufwxi//n88cs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+38wfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/2/lj1n8v50/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/v5I9Z/E/LH7P4n54/ZvE/I3/M4v/d/DGL//fyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z8sfs/ifnz9m8f9p/pjF/4L8MYv/z/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r8scs/lfmj1n8f50/ZvH/Tf6Yxf+q/DGL/2/zxyz+V+ePWfyvyR+z+F+bP2bx/13+mMX/uvwxi//1+WMW/xvyxyz+v88fs/j/IX/M4v/H/DGL/435Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfyn5o9Z/O/LH7P4358/ZvGflj8m8Z9rkD9m8R/KH7P4j8ofs/jPlj9m8Z89f8ziPzp/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/mPwxi/9C+WMW/7H5Yxb/hfPHLP6L5I9Z/J+UP2bxf3L+mMX/KfljFv9F88cs/k/NH7P4L5Y/ZvF/Wv6Yxf/p+WMW/8Xzxyz+z8gfs/g/M3/M4j8uf8zi/6z8MYv/s/PHLP7PyR+z+I/PH7P4L5E/ZvF/bv6YxX/J/DGL/1L5Yxb/5+WPWfyfnz9m8X9B/pjF/4X5Yxb/pfPHLP4vyh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0vyxyz+q+WPWfxXzx+z+L80f8zi/7L8MYv/y/PHLP4T8scs/hPzxyz+k/LHLP5r5I9Z/NfMH7P4r5U/ZvGfnD9m8Z+SP2bxXzt/zOK/Tv6Yxf8V+WMW/1fmj1n8180fs/ivlz9m8V8/f8zi/6r8MYv/BvljFv9X549Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/zX5Yxb/TfPHLP6b5Y9Z/F+bP2bxf13+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv/N88cs/lvkj1n8t8wfs/i/JX/M4r9V/pjFf+v8MYv/NvljFv9t88cs/m/NH7P4b5c/ZvF/W/6Yxf/t+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf0f+mMX/nfljFv+d88cs/rvkj1n8d80fs/i/K3/M4v/u/DGL/3vyxyz+u+WPWfx3zx+z+O+RP2bxf2/+mMX/ffljFv/3549Z/D+QP2bx/2D+mMV/z/wxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/9e+WMW/4/lj1n8984fs/h/PH/M4v+J/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfz3zR+z+O+XP2bx/1z+mMX/8/ljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2/mj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/+38scs/t/OH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/d/LHLP6n5Y9Z/E/PH7P4n5E/ZvH/bv6Yxf97+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/uflj1n8z38c/lcs8P9yYP83s/j/tPMfs/hfkD9m8f9Z/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif0X+mMX/yvwxi/+v88cs/r/JH7P4X5U/ZvH/bf6Yxf/q/DGL/zX5Yxb/a/PHLP6/yx+z+F+XP2bxvz5/zOJ/Q/6Yxf/3+WMW/z/kj1n8/5g/ZvG/MX/M4v+n/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/zl/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/9T8MYv/ffljFv/788cs/tPyxyT+cw/yxyz+Q/ljFv9R+WMW/9nyxyz+s+ePWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8R+TP2bxXyh/zOI/Nn/M4r9w/pjFf5H8MYv/k/LHLP5Pzh+z+D8lf8ziv2j+mMX/qfljFv/F8scs/k/LH7P4Pz1/zOK/eP6Yxf8Z+WMW/2fmj1n8x+WPWfyflT9m8X92/pjF/zn5Yxb/8fljFv8l8scs/s/NH7P4L5k/ZvFfKn/M4v+8/DGL//Pzxyz+L8gfs/i/MH/M4r90/pjF/0X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/8X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/Sf6YxX+1/DGL/+r5Yxb/l+aPWfxflj9m8X95/pjFf0L+mMV/Yv6YxX9S/pjFf438MYv/mvljFv+18scs/pPzxyz+U/LHLP5r549Z/NfJH7P4vyJ/zOL/yvwxi/+6+WMW//Xyxyz+6+ePWfxflT9m8d8gf8zi/+r8MYv/hvljFv+N8scs/hvnj1n8N8kfs/i/Jn/M4r9p/pjFf7P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv3n+mMV/i/wxi/+W+WMW/7fkj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/rfljFv/t8scs/m/LH7P4vz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP7vyB+z+L8zf8ziv3P+mMV/l/wxi/+u+WMW/3flj1n8350/ZvF/T/6YxX+3/DGL/+75Yxb/PfLHLP7vzR+z+L8vf8zi//78MYv/B/LHLP4fzB+z+O+ZP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx3yt/zOL/sfwxi//e+WMW/4/nj1n8P5E/ZvHfJ3/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/775Yxb//fLHLP6fyx+z+H8+f8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/zfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/1b+mMX/2/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9O/pjF/7T8MYv/6fljFv8z8scs/t/NH7P4fy9/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/vPwxi//5+WMW/5/mj1n8L8gfs/j/LH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8if8zif2X+mMX/1/ljFv/f5I9Z/K/KH7P4/zZ/7OH+o5/o4fz7PYr/1fljlvP/mvwxi/+1+WMW/9/lj1n8r8sfs/hfnz9m8b8hf8zi//v8MYv/H/LHLP5/zB+z+N+YP2bx/1P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfz/nD9m8b8tf8zif3v+mMX/L/ljFv878scs/n/NH7P4/y1/zOL/9/wxi/8/8scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMV/av6Yxf++/DGL//35Yxb/afljEv95BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/7Yf7//XA++lf8j++/3f6B55ssfs/jPnz9m8V8gf8ziv2D+mMV/TP6YxX+h/DGL/9j8MYv/wvljFv9F8scs/k/KH7P4Pzl/zOL/lPwxi/+i+WMW/6fmj1n8F8sfs/g/LX/M4v/0/DGL/+L5Yxb/Z+SPWfyfmT9m8R+XP2bxf1b+mMX/2fljFv/n5I9Z/Mfnj1n8l8gfs/g/N3/M4r9k/pjFf6n8MYv/8/LHLP7Pzx+z+L8gf8zi/8L8MYv/0vljFv8X5Y9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv8X549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/yX5Yxb/1fLHLP6r549Z/F+aP2bxf1n+mMX/5fljFv8J+WMW/4n5Yxb/SfljFv818scs/mvmj1n818ofs/hPzh+z+E/JH7P4r50/ZvFfJ3/M4v+K/DGL/yvzxyz+6+aPWfzXyx+z+K+fP2bxf1X+mMV/g/wxi/+r88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/5r8MYv/pvljFv/N8scs/q/NH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi//m+WMW/y3yxyz+W+aPWfzfkj9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/7fmj1n8t8sfs/i/LX/M4v/2/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4vyN/zOL/zvwxi//O+WMW/13yxyz+u+aPWfzflT9m8X93/pjF/z35Yxb/3fLHLP67549Z/PfIH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOK/Z/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX+v/DGL/8fyxyz+e+ePWfw/nj9m8f9E/pjFf5/8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP775o9Z/PfLH7P4fy5/zOL/+fwxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/zfzxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf9b+WMW/2/nj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/O/ljFv/T8scs/qfnj1n8z8gfs/h/N3/M4v+9/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pyxyz+5+ePWfx/mj9m8b8gf8zi/7P8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/ivwxi/+V+WMW/1/nj1n8f5M/ZvG/Kn/M4v/b/DGL/9X5Yxb/a/LHLP7X5o9Z/H+XP2bxvy5/zOJ/ff6Yxf+G/DGL/+/zxyz+f8gfs/j/MX/M4n9j/pjF/0/5Yxb/m/LHLP43549Z/G/JH7P435o/ZvH/c/6Yxf+2/DGL/+35Yxb/v+SPWfzvyB+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/qfljFv/78scs/vfnj1n8p+WPSfznHeSPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziPyZ/zOK/UP6YxX9s/pjFf+H8MYv/IvljFv8n5Y9Z/J+cP2bxf0r+mMV/0fwxi/9T88cs/ovlj1n8n5Y/ZvF/ev6YxX/x/DGL/zPyxyz+z8wfs/iPyx+z+D8rf8zi/+z8MYv/c/LHLP7j88cs/kvkj1n8n5s/ZvFfMn/M4r9U/pjF/3n5Yxb/5+ePWfxfkD9m8X9h/pjFf+n8MYv/i/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/i/PHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v+S/DGL/2r5Yxb/1fPHLP4vzR+z+L8sf8zi//L8MYv/hPwxi//E/DGL/6T8MYv/GvljFv8188cs/mvlj1n8J+ePWfyn5I9Z/NfOH7P4r5M/ZvF/Rf6Yxf+V+WMW/3Xzxyz+6+WPWfzXzx+z+L8qf8ziv0H+mMX/1fljFv8N88cs/hvlj1n8N84fs/hvkj9m8X9N/pjFf9P8MYv/ZvljFv/X5o9Z/F+XP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMV/8/wxi/8W+WMW/y3zxyz+b8kfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9b88cs/tvlj1n835Y/ZvF/e/6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/N+RP2bxf2f+mMV/5/wxi/8u+WMW/13zxyz+78ofs/i/O3/M4v+e/DGL/275Yxb/3fPHLP575I9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx3zN/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOK/V/6Yxf9j+WMW/73zxyz+H88fs/h/In/M4r9P/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjF/7P5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf+b+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/rfwxi/+388cs/iflj1n8T84fs/ifkj9m8T81f8zi/538MYv/afljFv/T88cs/mfkj1n8v5s/ZvH/Xv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/95+WMW//Pzxyz+P80fs/hfkD9m8f9Z/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif0X+mMX/yvwxi/+v88cs/r/JH7P4X5U/ZvH/bf6Yxf/q/DGL/zX5Yxb/a/PHLP6/yx+z+F+XP2bxvz5/zOJ/Q/6Yxf/3+WMW/z/kj1n8/5g/ZvG/MX/M4v+n/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/zl/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/9T8MYv/ffljFv/788cs/tPyxyT+8w3yxyz+Q/ljFv9R+WMW/9nyxyz+s+ePWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8R+TP2bxXyh/zOI/Nn/M4r9w/pjFf5H8MYv/k/LHLP5Pzh+z+D8lf8ziv2j+mMX/qfljFv/F8scs/k/LH7P4Pz1/zOK/eP6Yxf8Z+WMW/2fmj1n8x+WPWfyflT9m8X92/pjF/zn5Yxb/8fljFv8l8scs/s/NH7P4L5k/ZvFfKn/M4v+8/DGL//Pzxyz+L8gfs/i/MH/M4r90/pjF/0X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/8X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/Sf6YxX+1/DGL/+r5Yxb/l+aPWfxflj9m8X95/pjFf0L+mMV/Yv6YxX9S/pjFf438MYv/mvljFv+18scs/pPzxyz+U/LHLP5r549Z/NfJH7P4vyJ/zOL/yvwxi/+6+WMW//Xyxyz+6+ePWfxflT9m8d8gf8zi/+r8MYv/hvljFv+N8scs/hvnj1n8N8kfs/i/Jn/M4r9p/pjFf7P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv3n+mMV/i/wxi/+W+WMW/7fkj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/rfljFv/t8scs/m/LH7P4vz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHHvTf5oT/av935I9Zzv935o9Z/HfOH7P475I/ZvHfNX/M4v+u/DGL/7vzxyz+78kfs/jvlj9m8d89f8ziv0f+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8988cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/nvlj1n8P5Y/ZvHfO3/M4v/x/DGL/yfyxyz+++SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8d83f8ziv1/+mMX/c/ljFv/P549Z/PfPH7P4fyF/zOJ/QP6Yxf/A/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n+E0n+Of7qGxf9Ipf8/z+J/VP6Yxf/o/DGL/zH5Yxb/b+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/7fyxyz+384fs/iflD9m8T85f8zif0r+mMX/1Pwxi/938scs/qflj1n8T88fs/ifkT9m8f9u/pjF/3v5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+WPWfzPzx+z+P80f8zif0H+mMX/Z/ljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/8V+WMW/yvzxyz+v84fs/j/Jn/M4n9V/pjF/7f5Yxb/q/PHLP7X5I9Z/K/NH7P4/y5/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+ePWfz/kD9m8f9j/pjF/8b8MYv/n/LHLP435Y9Z/G/OH7P435I/ZvG/NX/M4v/n/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP5T88cs/vflj1n8788fs/hPyx+T+M8/eAz/D/7/MKz/q1n8hzr/MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/iPyR+z+C+UP2bxH5s/ZvFfOH/M4r9I/pjF/0n5Yxb/J+ePWfyfkj9m8V80f8zi/9T8MYv/YvljFv+n5Y9Z/J+eP2bxXzx/zOL/jPwxi/8z88cs/uPyxyz+z8ofs/g/O3/M4v+c/DGL//j8MYv/EvljFv/n5o9Z/JfMH7P4L5U/ZvF/Xv6Yxf/5+WMW/xfkj1n8X5g/ZvFfOn/M4v+i/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/i/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vyR/zOK/Wv6YxX/1/DGL/0vzxyz+L8sfs/i/PH/M4j8hf8ziPzF/zOI/KX/M4r9G/pjFf838MYv/WvljFv/J+WMW/yn5Yxb/tfPHLP7r5I9Z/F+RP2bxf2X+mMV/3fwxi/96+WMW//Xzxyz+r8ofs/hvkD9m8X91/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X5M/ZvHfNH/M4r9Z/pjF/7X5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8d88f8ziv0X+mMV/y/wxi/9b8scs/lvlj1n8t84fs/hvkz9m8d82f8zi/9b8MYv/dvljFv+35Y9Z/N+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/d+SPWfzfmT9m8d85f8ziv0v+mMV/1/wxi/+78scs/u/OH7P4vyd/zOK/W/6YxX/3/DGL/x75Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfz3zB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+O+VP2bx/1j+mMV/7/wxi//H88cs/p/IH7P475M/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/AfljFv8D88cs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/2b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H8rf8zi/+38MYv/SfljFv+T88cs/qfkj1n8T80fs/h/J3/M4n9a/pjF//T8MYv/GfljFv/v5o9Z/L+XP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif17+mMX//Pwxi/9P88cs/hfkj1n8f5Y/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfkT9m8b8yf8zi/+v8MYv/b/LHLP5X5Y9Z/H+bP2bxvzp/zOJ/Tf6Yxf/a/DGL/+/yxyz+1+WPWfyvzx+z+N+QP2bx/33+mMX/D/ljFv8/5o9Z/G/MH7P4/yl/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP5/zh+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOI/NX/M4n9f/pjF//78MYv/tPwxif8Cg/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8x+SPWfwXyh+z+I/NH7P4L5w/ZvFfJH/M4v+k/DGL/5Pzxyz+T8kfs/gvmj9m8X9q/pjFf7H8MYv/0/LHLP5Pzx+z+C+eP2bxf0b+mMX/mfljFv9x+WMW/2flj1n8n50/ZvF/Tv6YxX98/pjFf4n8MYv/c/PHLP5L5o9Z/JfKH7P4Py9/zOL//Pwxi/8L8scs/i/MH7P4L50/ZvF/Uf6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvF/cf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/F+SP2bxXy1/zOK/ev6Yxf+l+WMW/5flj1n8X54/ZvGfkD9m8Z+YP2bxn5Q/ZvFfI3/M4r+myH+uf2Fdi/9aIv9/JYv/5Pwxi/+U/DGL/9r5Yxb/dfLHLP6vyB+z+L8yf8ziv27+mMV/vfwxi//6+WMW/1flj1n8N8gfs/i/On/M4r9h/pjFf6P8MYv/xvljFv9N8scs/q/JH7P4b5o/ZvHfLH/M4v/a/DGL/+vyxyz+r88fs/i/IX/M4v/G/DGL/5vyxyz+b84fs/hvnj9m8d8if8ziv2X+mMX/LfljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9r/pjFf7v8MYv/2/LHLP5vzx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/zvyxyz+78wfs/jvnD9m8d8lf8ziv2v+mMX/XfljFv93549Z/N+TP2bx3y1/zOK/e/6YxX+P/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+e+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfz3yh+z+H8sf8ziv3f+mMX/4/ljFv9P5I9Z/PfJH7P4fzJ/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOK/b/6YxX+//DGL/+fyxyz+n88fs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+H8zf8zif2z+mMX/uPwxi//x+WMW/xN0/o/v01r8T9T5P74s/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5I9Z/K/MH7P4/zp/zOL/m/wxi/9V+WMW/9/mj1n8r84fs/hfkz9m8b82f8zi/7v8MYv/dfljFv/r88cs/jfkj1n8f58/ZvH/Q/6Yxf+P+WMW/xvzxyz+f8ofs/jflD9m8b85f8zif0v+mMX/1vwxi/+f88cs/rflj1n8b88fs/j/JX/M4n9H/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/hPzR+z+N+XP2bxvz9/zOI/LX9M4r/gIH/M4j+UP2bxH5U/ZvGfLX/M4j97/g9rtpFHi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/mPyxyz+C+WPWfzH5o9Z/BfOH7P4L5I/ZvF/Uv6Yxf/J+WMW/6fkj1n8F80fs/g/NX/M4r9Y/pjF/2n5Yxb/p+ePWfwXzx+z+D8jf8zi/8z8MYv/uPwxi/+z8scs/s/OH7P4Pyd/zOI/Pn/M4r9E/pjF/7n5Yxb/JfPHLP5L5Y9Z/J+XP2bxf37+mMX/BfljFv8X5o9Z/JfOH7P4vyh/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vzh/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vyR+z+K+WP2bxXz1/zOL/0vwxi//L8scs/i/PH7P4T8gfs/hPzB+z+E/KH7P4r5E/ZvFfM3/M4r9W/pjFf3L+mMV/Sv6YxX/t/DGL/zr5Yxb/V+SPWfxfmT9m8V83f8ziv17+mMV//fwxi/+r8scs/hvkj1n8X50/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv/X5I9Z/DfNH7P4b5Y/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8N88fs/hvkT9m8d8yf8zi/5b8MYv/VvljFv+t88cs/tvkj1n8t80fs/i/NX/M4r9d/pjF/235Yxb/t+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf8d+WMW/3fmj1n8d84fs/jvkj9m8d81f8zi/678MYv/u/PHLP7vyR+z+O+WP2bx3z1/zOK/R/6Yxf+9+WMW//flj1n835///8cePSAAQihQAPxG3Gzbtm3btu3dbNu2bdu2bdt1gXeC3swVJmr5H+g/avkf5D9q+d/Tf9Tyv5f/qOV/b/9Ry/8+/qOW/339Ry3/+/mPWv739x+1/B/gP2r5P9B/1PJ/kP+o5f9g/1HL/yH+o5b/Q/1HLf+H+Y9a/g/3H7X8H+E/avk/0n/U8n+U/6jl/2j/Ucv/Mf6jlv9j/Uct/8f5j1r+j/cftfyf4D9q+T/Rf9Tyf5L/qOX/ZP9Ry/8p/qOW/1P9Ry3/p/mPWv5P9x+1/J/hP2r5P9N/1PJ/lv+o5f9s/1HL/zn+o5b/c/1HLf/n+Y9a/s/3H7X8X+A/avm/0H/U8n+R/6jl/2L/Ucv/Jf6jlv9L/Uct/5f5j1r+L/cftfxf4T9q+b/Sf9Tyf5X/qOX/av9Ry/81/qOW/2v9Ry3/1/mPWv6v9x+1/N/gP2r5v9F/1PJ/k/+o5f9m/1HL/y3+o5b/W/1HLf+3+Y9a/m/3H7X83+E/avm/03/U8n+X/6jl/27/Ucv/Pf6jlv97/Uct//f5j1r+7/cftfw/4D9q+X/Qf9Ty/5D/qOX/Yf9Ry/8j/qOW/0f9Ry3/j/mPWv4f9x+1/D/hP2r5f9J/1PL/lP+o5f9p/1HL/zP+o5b/Z/1HLf/P+Y9a/p/3H7X8v+A/avl/0X/U8v+S/6jl/2X/Ucv/K/6jlv9X/Uct/6/5j1r+X/cftfy/4T9q+X/Tf9Ty/5b/qOX/bf9Ry/87/qOW/3f9Ry3/7/mPWv7f9x+1/H/gP2r5/9B/1PL/kf+o5f9j/1HL/yf+o5b/T/1HLf+f+Y9a/j/3H7X8f+E/avn/0n/U8v+V/6jl/2v/Ucv/N/6jlv9v/Uct/9/5j1r+v/cftfz/4D9q+f/Rf9Ty/5P/qOX/Z/9Ry/8v/qOW/1/9Ry3/v/mPWv5/9x+1/P/hPyr5H/A3/1HL/9/9Ry3///Aftfz/03/U8v8v/1HL/7/9Ry3///Eftfz/13/U8v8//1HL///9Ry3/g/mPWv4H9x+1/A/hP2r5H9J/1PI/lP+o5X9o/1HL/wD/Ucv/MP6jlv9h/Uct/8P5j1r+h/cftfyP4D9q+R/Rf9TyP5L/qOV/ZP9Ry/8o/qOW/1H9Ry3/o/mPWv5H9x+1/I/hP2r5H9N/1PI/lv+o5X9s/1HL/zj+o5b/cf1HLf/j+Y9a/sf3H7X8T+A/avmf0H/U8j+R/6jlf2L/Ucv/JP6jlv9J/Uct/5P5j1r+J/cftfxP4T9q+Z/Sf9TyP5X/qOV/av9Ry/80/qOW/2n9Ry3/0/mPWv6n9x+1/M/gP2r5n9F/1PI/k/+o5X9m/1HL/yz+o5b/Wf1HLf+z+Y9a/mf3H7X8z+E/avmf03/U8j+X/6jlf27/Ucv/PP6jlv95/Uct//P5j1r+5/cftfwv4D9q+V/Qf9Tyv5D/qOV/Yf9Ry/8i/qOW/0X9Ry3/i/mPWv4X9x+1/C/hP2r5X9J/1PK/lP+o5X9p/1HL/zL+o5b/Zf1HLf/L+Y9a/pf3H7X8r+A/avlf0X/U8r+S/6jlf2X/Ucv/Kv6jlv9V/Uct/6v5j1r+V/cftfyv4T9q+V/Tf9Tyv5b/qOV/bf9Ry/86/qOW/3X9Ry3/6/mPWv7X9x+1/G/gP2r539B/1PK/kf+o5X9j/1HL/yb+o5b/Tf1HLf+b+Y9a/jf3H7X8b+E/avnf0n/U8r+V/6jlf2v/Ucv/Nv6jlv9t/Uct/9v5j1r+t/cftfzv4D9q+d/Rf9Tyv5P/qOV/Z/9Ry/8u/qOW/139Ry3/u/mPWv539x+1/O/hP2r5H+g/avkf5D/6y/0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJ/t2G1tnWfhx/O62jrE//2TEBZehySYXCokw2z1kvCBsMrbVQTeexwBHt3Zjo91m12FXwD28mEQID5JMskSJsmUoYSY0EgPBCiIadFETDT4AohBF40QIuiUu1pz2tLTHrvFc9boW5fN50XPu++x3b2vy3X0vMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD479XQuPDI+Jphp8YPPfjg4Za+1zlHV9584Lc9Fw68lj9eNsIlxw096O3t7Z3z3Owd5cNTiqIo/Ww7y8eTKsel6++s/0Jn/1FY0PPSkuNTft545MCa0x+p6z56f23f2dripnUbWls+Nq4owsW1RWfpoK6mKMLi2uK+0kF96WBJbfFI6WB238GpxbdLB+ev3dzaXDqxNPp7Bv8rGhp3FuOHFVsM+9NgaP87679158DrKJccuNqEotz/FV3ff6viswEn6H/g+mFhZf9V/waBE6qu/xcWDLyOcsl/uf9PfmrVKyN9duL+B64fPq5/SGeE5/9hjVY+91c8/88Y4ZKD+6tquo6X+r/0tmdnlk9N+Hee/9+9fri4sv9xw57/S8/xiwae/08pinDJGL8d8J7S0LjryGj3/9H7nzC9YlMztP8z2jfvL/X/+JLvPVE+VVtl/4tGuf+PW1rxawWq09D45d6K+38V/RcfGeGSg/2//cSvHy71/9jvHzhzyGfV9H9JZf+zOtq2zNq6veu8DW1N61vWt2yqmz1/zrz6unkXzJ3V90jQ/3WM3xV4bxjb/b+YXLGpKYqWwf013QeeLvU/98EH55RPTaqy/8Wj3v9nuP/DiD40rpg4sehs6uhor+v/OnBY3/+1/4eN0H8Vf/8/65zyD6stv9YUxbTB/V1n3r2i1P87h57dXT41scr+l4za/4LBnxeIMMb7f3PFZlj/Bw+91Pf8v+zeg2eUT1X79/+lo/b/qvs/jEVDY8X/8PMfVup/V3FZZKehwX//g3Ry9P/YOzf0xK3DJ/QP6eTo/3efO3pu3Dos0z+kk6P/CRsfeD5uHS7VP6STo//lU+eviFuHy/QP6eTof+2r5/45bh0a9Q/p5Oj/nC/t7oxbh+X6h3Ry9P9Q+5xtceuwQv+QTo7+f3raQ6/FrcPl+od0cvR/7Ng9N8atwxX6h3Ry9N+95+wfxK3DlfqHdHL0f/m6hSFuHa7SP6STo//p0/74eNw6XK1/SCdH//P+9PfT4tbhGv1DOjn6v+PzK/bFrcO1+od0cvQ//vpXXoxbh5X6h3Ry9L/07G0L49bhOv1DOjn6b/5Jc2/cOqzSP6STo/9ZX//Rhrh1uF7/kE6O/g8vf3RP3DrcoH9IJ0f/e+qKKXHrcKP+IZ0c/X/tu6cfiluHT+of0snR/2+eenJ+3Dqs1j+kk6P/5z5w+zfi1uEm/UM6Ofq/d82LZ8WtQ5P+IZ0c/T+89/kvxq3DGv1DOjn6f+ONtv+LW4e1+od0cvQ/edKpr8etQ7P+IZ0c/S+89SvtcevQon9IJ0f/bbu7fxi3Duv0D+nk6P/Dx6etiluH9fqHdHL0v3Lu3vfHrcPN+od0cvT/vmUX7opbhw36h3Ry9H9Rz0cviluHjfqHdHL03/HMZ78atw636B/SydH/3pmvLY5bh1b9Qzo5+n959dIfx61Dm/4hnRz9v/XodZvi1mGT/iGdHP0/+bO3j8Wtw2b9Qzo5+v//Cxb9NW4dtugf0snR/+Ilb66NW4dP6R/SydH/xu5/vBy3Du36h3Ry9D/z8NXL4tZhq/4hnRz9f+e8uv1x69Chf0gnR/93XrmvPm4dtukf0snR//6Dd90dtw636h/SydH/m7+YMT1uHT6tf0gnR//3Tzl0bdw6dOof0snR/y831T4Ttw7b9Q/p5Oj/b/um7ohbhy79Qzo5+n/69Z4/xK3DbfqHdHL0v3rCrybGrcPt+od0cvQ/tWvLfXHrcIf+IZ0c/c+/p+n8uHX4jP4hnRz9b/3LC9+MW4cd+od0tm7vuqWptbWl3RtvvPFm8M3J/pMJSO3d6E/2rwQAAAAAAAAAAAAAADiRHP+c6GT/HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUTvBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8BAAD//+8S49Y=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea})
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000100)={0x401, 0xffffffffffff66a2, 0x6, 0x8000000000000001, 0x4, 0x9, 0x8, 0x80004, 0x4040c405})
syz_emit_ethernet(0xa7, &(0x7f0000000c80)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x71, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xa, 0xc, "71fd5b6bc36de2d764a98a2915bab283d023fa996f4dda1e9a0b5d05df23dc8f251cf8d8a09ac2a11bf47cca8cc28fed09e60850fc002645a2adadc2555ed725ae52242ee0efdb744da76e696ff3a9d58db9df960ff7601976119ba5293be5"}]}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x800)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

11.013984774s ago: executing program 3 (id=388):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150028e5ae410240401c00ce20102030109022400010805800109042202026405790309050d0c0800072804090502000004006709b0617aa426a57bf3dfa5d60c33509165d54b44f4912431b3ca4389d4f2a5bdc8cc7f006c0d61e97c727aa1711aa3"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x11}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x1a}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @multicast1}], 0xb8)

9.866705429s ago: executing program 2 (id=393):
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x3ff, 0x4)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x202, 0x802, 0x9, 0x1a, 0x8000, 0x3})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x400)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000c80)={@remote, 0x63})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000280)="4eac65b0ef5425d8d7005c8df72568c2b25b41c772956e59110738420480fa3e12a8ec34c65d7bc8fb15ff189e10bf98847c412a356a0f1db0f1d499bf53d2f6fe8891aeac3cd41f56c296e2c854dad9acddf0e9d1953b77ff75bf6a3cbf889710654c3b0d4e5c6adbdac6b67f2dac1afead191481bb657f1d9fe43d6fd8b1503645d211ed3eb56056140efab0663c288479821157f264158a502f9beb6abd51c9f22729ecaba2de2ba7bc98a12c3c8da8f96cd2b0", &(0x7f00000005c0)=""/4096, 0x4}, 0x20)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x10000000000)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = eventfd2(0xe5c, 0x80000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b02000000000000000000000110000000800000000000000000000003000000000100000001"], 0x0, 0x4e}, 0x20)
r10 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000100)={r9, 0x7, 0x2, r10})
r11 = eventfd(0x3)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r11, 0xd1, 0x2, r10})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @cgroup_sock}, 0x90)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000180)={r9, 0x7, 0x3})
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

9.839466271s ago: executing program 1 (id=394):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b52, &(0x7f0000000140)={0x0, 0x1, 0x6, 0x2, 0x200, 0x0})
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r3, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9d2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x15, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x4, 0x2060, 0x0)

7.939644204s ago: executing program 3 (id=396):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@datasum}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = creat(&(0x7f0000000240)='./file1\x00', 0xd)
recvmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000280)}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2)
fallocate(r0, 0x10, 0x3, 0x800000000007c27)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000})

7.915875624s ago: executing program 2 (id=397):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xac6, &(0x7f0000001400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b858f48003ba0c953cd07fec48a111164e35c51266975ba65afbe5a0ea85f7cb638e907487038e573b509f52705a13f6b2d2763e53141faa2a8de68aae6d5102a1a5e8db040bdb3cf5f5cadfbdbe28f3b52e872c55f7c6bdbee0047fbb6f9f69a3693162377a369104072ff8924f6cc6736ce60e703efe42d70483a226f6e228bee0c874f14655d5d52f633f89380890d9a5707d3dedf396a82edcbe3d0b4d68344fd418e3e51c000ed602", 0xab}, {&(0x7f0000000180)="d1dfa9dd01ec7bd75e216b636825e0c4cf117bd93158e3a420d1c6f263246a4ecabddc91ff4e95f397addeff196678b02a391db8cb51f1ac1a36d61b675e9154340c13d8523d656386457bfe74f2874233d76d6b8090211b4d603b534ea8e782d8257ca6441f5270ca7c59210d0c5c954059f65d13cf1c227ba1884503da3d5d2f5613ffa620a22037b40d3ac2c74bec1f3066d423a0f578d832608bb0a0c3a079348176133691f34a6d697845cd4aecfd42312366424f9d1851d73014d4dd123744e60eee1c58cc72", 0xc9}, {&(0x7f00000002c0)="78489dba4f3637997f689c0a6541fbcdd1cc048f7550ed656847f6cefb8b939098b24948b48452d786ba4d67e81ca55c89a1a44673dcee07cbf8528a0c5b139ffd252180f70496034a5825ec7e371ed481a35be5ba065c74ae8b6ae78a9fa75e7ef5e920666c5c55ca71269578d1c6146312f9ae1cb3810bd928b2ac8751cbdd2953a02b7d6f40e36134f31967da25284c6b379180f991182d736943bb1e75492ce2acc900a03f693a6e67ee58e03406aefcf4156c74b4b20d81a3a19fa974e3f54581a54bd3", 0xc6}], 0x3, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x400}, @iv={0xc0, 0x117, 0x2, 0xa7, "4bb78d2a615155e54bb40210d3fa5ef81f4b318c76f716f19d88873ee9648e6f5c024b78f736cdd9aa43724cbcd0fe59d5de9bd27783761fe723aeb67519e8a2b0b00109add7d37cbcb58fcfe1587f3a569117f6d5416d52d20bf1805e6f5570713b69b3d903dbb11425a7fda9dc441143af17461f690272891b106243978f758d476b717d12ba96242f563ba276a7993d0e78e624e89fd1bfbc5fce0a9e082df2b14012ccd208"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x47803795}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x138, 0x808}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="2d2f06a3fbd2c370101789158111d86e97317786dc313eb7d061fe9b36df4d6d27ad1f4f8a2c8004fe2ebed875c4dc41869ab5b25fac4240457b299d70d45388f767db2224f8aaf2727032abf055", 0x4e}, {&(0x7f0000000580)="e1d045c8d7d0954987bc19e2a84bf6c024b0b5f9a88cc752f0544bccb750970e5c882cf19b79982596579c31e8793d65d5c1e017d52d4ecc4c55ef161a7f811b20b38a138e090cd2619d3f756ac62cba416eb46d8d191b5378c966fcd7127db95748879626343bc2cee5eef2d7da8b3449c4c47e04f1e5afc5fb662a230c6f7b360f8efbde4f6bdf6ecd4b50f066bce750e27703189887206f4735d17d894478e791240558ce4e76471a29c03525f3830a1577a129969af5c98b895aa6bf31a913ea0dff6f814edaf7a228bce090ce57b897e4e231fcb0dd65dad0614b435f67d5c9", 0xe2}], 0x2, 0x0, 0x0, 0xc1}], 0x2, 0x4800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x125042, 0x2c)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

7.460914129s ago: executing program 1 (id=398):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_connect$uac1(0x6, 0x80, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0x0, 0x98, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb2a, 0x2}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x80, 0x9}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x1e, "e6e5a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xfa, 0xff, {0x7, 0x25, 0x1, 0x80, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x39, 0x80, 0x0, {0x7, 0x25, 0x1, 0x83, 0xb0, 0x4}}}}}}}]}}, 0x0)
syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="72ce2e10b7a2fe9d0adea9fa86fd000a00"]}]})
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1044, 0x7a4d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfd, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xb0a}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x8, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7, 0x5, 0x3, 0x8, 0x1}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x3, 0x1ff, 0xc}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x422}}, {0xde, &(0x7f0000000280)=@string={0xde, 0x3, "951707e1f82ec2a0783ac8ed9073c1b5edb891da7b41322da1d756c314303ed26b17b265d7d9c50cfa7c0a416639aaee0f20d79ba8f9173a6513641a6ab892a2b6e283aa6279d7103ffc235a3ada2eec2708f2959870d8651894e51c8904f4c1d3c48524a164465178846e951d2b1865ab4be2fe1a91976445ad89405ef15b524d620162000d0f7765ff96a7fbd04c012088b9901e60d99ed7cdc727d04bcf0b9de82acfa118a2313511088c1fb4ee15154c7a0ecda820d106cf62c5a85debeaedd139ffe6fa9407d45967e127e9bcbf34940be712eb6a5fbe4387bc"}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "1a02cdc18090a0b3016e5534344bd31d537ddccff20573af724475d732c1a453d3ce18446730558e953a79a8123b9501472fc15b6d0b9d3c1b270930dffa1fca04ca5e19e9c16ed298d86df51dcc81de061336f74d6fe97cabf3d29864d57377b75c27e3cbeea218f7f3bc4eead652c98b8400454096580e957f04b36dd3cc5024a095521b9568afd16d434c0dccac64d26190350d32d7ddc41feb2f61ad97db3ce7090f12082ac845f41a1a9cf2031e6c0dd56c77ef7737f13708c698d96c6669c962432ad43803d40b4e47571e8ffd10350a43c8e3af97102a53f3b146fbe28728f3f76f95f411545d6133bb0441e80d1df98eb7"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

6.087446428s ago: executing program 2 (id=400):
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, 0xe)
clock_gettime(0x0, &(0x7f00000045c0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000004400)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000240)=""/104, 0x68}], 0x2, &(0x7f0000000300)=""/48, 0x30}, 0x7ff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x67fa}, {{&(0x7f0000000400)=@llc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/10, 0xa}], 0x1, &(0x7f0000000880)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/181, 0xb5}], 0x4, &(0x7f0000001880)=""/137, 0x89}, 0x7}, {{&(0x7f0000001940)=@l2, 0x80, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/163, 0xa3}, {&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/232, 0xe8}, {&(0x7f0000001c00)=""/29, 0x1d}], 0x4}, 0x3}, {{&(0x7f0000001c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001d00)=""/225, 0xe1}, {&(0x7f0000001e00)=""/192, 0xc0}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/21, 0x15}, {&(0x7f0000002f00)=""/14, 0xe}], 0x5}, 0x7eb66395}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002fc0)=""/50, 0x32}, {&(0x7f0000003000)=""/200, 0xc8}, {&(0x7f0000003100)=""/86, 0x56}, {&(0x7f0000003180)=""/223, 0xdf}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x5, &(0x7f0000004300)=""/220, 0xdc}, 0x6}], 0x7, 0x40, &(0x7f0000004600)={r3, r4+10000000})
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

5.12392272s ago: executing program 0 (id=403):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)

4.863233608s ago: executing program 0 (id=404):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x20000, &(0x7f00000002c0)=ANY=[], 0x1, 0xae0, &(0x7f0000000740)="$eJzs3U2MG1cdAPA3u+vNbpI2TknokoY2oZCWj26azRI+IkiqREhETYW4VKq4RGlaIkJAFAmoKjXJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJEZrv+e1X+yOvfGu1+vfT5p9fvPG83/jHY/n870AjK2J+t/FxbkihMtvvHL87/v+Nrs05khzimr971RLrhJCKGJ+Kpvfe5ON9Ob7L5zulBZhof435cMT15vv3RJCuBD2hCuhGnZdvvryWwuPn7x44tLet189fG11lh4AAMbL164cXtz5lz/dt/3Ga/cfDZua49P+eTXmt8b9/qNxxz/t/0+E9nzRMrSazqabisPEbPt0kx2ma41Tyaab6hJ/Ootf6TLdpvDB8SdbxnVabhhlaT2uhmJivi0/MTE/3zgmD/Xj+uli/vzZc888N6SKAgP3rwdCCHtahmOX2vPrbTiyivOu1WovhtWbf23Yn92oDkfXLtaNWsPQl3mNhtq2YW+BABry64W3uZCfWbgzzblN9Rb/+mMTnd8PA7DW639f8aeHHD+I/+uLtjgMzkZdm9Jype/R1pjPryPk9y91//7lVzrax+bXIyo91rPbdYRRub7QrZ6Ta1yPlepW/3y92Ki+FNP0OXw5K2/9/uT/01H5HwOd/Ts//z+mQ/M2hHVQF8NGG2rFQNet9nlV7mRetWFteIB1L79vrpauj0b5fX15+aaS8pmS8tmS8s0l5VtKymGc/fb7PwkvFcvH+fkxfb/nw9N5trtienef9cnPR/YbP7/vt193Gj+/nxjWs9+fevLM559+6mrj/v+iuf7fiut7Otyoxu/WlThBOl+Yn1dv3vtfbY8z0WW6e7L63NVh+vrrHe3TFTuW5xNatjO31WOu/X3buk23u326ajbdbBxmsvrm+yebs/el/Y+0XU2f11S2vJVsOaazeqTtyvaY5vWAlUjrY7f7/9P6ORcqxTNnz515NOYb62kR/jhZ2bQ0/sCa1xy4U70+/zMX2p//2docX5lo3S5sWx5fNLYLr8f5tY9faMZpH38w5tPv3DcnZ+vj509/59zTg198GGvP/ej5b506d+7M97xY8YuvrI9q9PMiHbasl/ps6BeTYV1Uo88XQ94wAatu/4uNnYBHzn771LNnnj1z/uChQwcXFg594eDi/vp+/f7WvftWF4ZQW2CQln/0h10TAAAAAAAAAAAAoFc/OHH86jtvfu7dxvP/y8//pef/052/6fn/H2fP/+fPyafn4NNzgNs7lNenyRpYnc6mq8ThQ1l9d2Rxdmbv+3BMm/34xef/U7i8XddUn3uz8ZUu2aw5gdvaS5nO2iDJ+wv8WEwvxfRXAYaomO08OqZl7VundT21T9HSLkVN+8CjI/3f0tqQ2jFJz393bNep5Z+9fQ3qyOCtxeOEw15GoLN/jFX73/9cXvCh18XQfZha23g/25DrRK3oYbpa1730XnuwARiMYff/eeu7++px0/nP83/46szSkCa7/lhjexl7dLit/VLox5/fac+v9/4nVzv+cgvE47n8efy8PfFB9//Z7P8ubf9i3O7bv6zHvOrK4v7n59febQkbdvUaP1/+1A70jv7i34jx09I8FHqLX/tlFj+/INSj/2bxN/cY/7bl372y+P+L8dPH9vCDvcZv1LiYaK9Hft44Xf/LzxsnN7PlT217fkD8rz/faflX2FHjrRgfxtmo9DPbr6z/3+ZJjpX3/xtdGGz/v83KZpu1/D6Mz8Z82hCn+xzy/k5K6l/L65/ur0i/Azuz+Rclv2/6/x1tX4xp2fch9f+b1sdq/Mlvydc/y5SvdPhsN+q2BkbVe2N1/W8khpmltDKQed097GUZh6E2uYL3Nc/rDLn+tVptdU9olRhqcIb++Q/7OGHY8Yf9+ZfJ+//N9+Hz/n/z8rz/37w87/83L5+N/6Fu5Xn/v/nnmff/m5ffm8037x94rqT8IyXluzqXNw/b7yt5/+6S8o+WlO9tlh9pmyKV31/y/gdKyu8pKX+wpPzjJeWfKCnfV1L+cEt5ax/QqfyTJe/f6NLzKOO6/DDO8ufzfP9hfKTrP92+/ztKyoHR9dPXDhx76jffqDae/59ung9J1/GOxnwlHj/9MObz696hJb9U9mbM/zUrX+/nO2Cc5O1n5L/vD5WUA6Mr3efl+w1jqJjpPDqmZe1WddvPZ7R8KqafjulnYvpITOdjuj+mB2K6ENP8PmRGw7HXf3f4pWL5eH9bVt7r/fD580Bt7USFEA72WJ/8/EC/9+Pn7fj1q7f4M13jr/BxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKGZqP9dXJwrQrj8xivHnzx5dv/SmCPNKar1v1MtuUrzfSE8GtPJmP4ivrj5/gunW9NbMS3CQihC0RwfnrjejLQlhHAh7AlXQjXsunz15bcWHj958cSlvW+/evja6n0CAAAAsPH9PwAA//+yFBKT")
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = getpid()
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xc, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

4.729653976s ago: executing program 3 (id=405):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x11, 0x45)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10)

4.561182149s ago: executing program 1 (id=406):
timer_create(0xfffffffffffffffd, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe700}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@user_xattr}, {@bsdgroups}, {@acl}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==")

4.43319165s ago: executing program 4 (id=407):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x3a9200, 0x40)
r1 = open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x0)
fchdir(r1)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8d, 0x9, 0x8, 0x7, 0x7, 0x9, 0x401}, 0x1c)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendto$packet(r1, &(0x7f0000000100)="21226e97207404a8c6d64e088ffc28e6b7", 0x11, 0x40, &(0x7f00000001c0)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @link_local}, 0x14)
syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x100802, &(0x7f00000005c0), 0x1, 0x516, &(0x7f0000000600)="$eJzs289vHGcZB/Dn9azd9Raom4bUrSpkVImmTRMldtJEMofmBwmRqoBIwz2N7WDVsUPsVE2FSiWQ+g9whQMoBw4gcS2iNyQOSFSAUKAceuKChHxA4gia2Znd2a0Tb0jsjevPJ4pndvbZ9Tuj/e7M+77jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiTn3t5OEjaditAAC204WL3zo84/wPALvK6/r/AACwW6TIYjxSPPOn9fRC8bit+dri8s23L505u/HLxlOkGImsqM//N49Mzxw99srxE9Xy3q9/2J6Jb1x8/eTU6ZVr12/Mr67Oz01dWl68sjI3P/A7POjr+71UHICpa2/enFtYWJ2aPjTT8/TbE/947PF9E7MnDh74UlV76czZsxdrNY3R//u3f4oeHhsZiyx+HylO/fyXaX9EjMSDZ2GT746tNh6NPH/FTlw6c7bYkaXFy8tr+ZNppKxq9GZirMrINmTxgTQiDuZtHZNoHtxoZPFxpDj33fX0YkRkVQ4OFBODm79BYxsaeZdfeygivhk7ILPwiHossjgWKS78dCJeKnNV5L8R8e6wGwdsqUZk8aNIsZLW04HieiA/n+aXza99e+r88sJKrTaNlGfUnd4/2E6uTXiENSOLF4sz/np6ediNAbbVeGSxFik++vdbxbhSFOPST8yeuHCqUR9henqT90llf3x2wD75aDnWmEbyfw9/v4DNNVMW70eKP/ysWTzOs9sq1j75b9uQGwhsnZTFSKT43en1lPrmpbPa/H7HTu/7b237x5unV67furF49TtrGz7fap58Y3XtxuUrGz/dnrvM6ls2m8fs1yjncGEArZTFTyLFbz5Zj9rUeJ75z7cfdT+Nt7/X/S7Y37es1L8/BlkfeBb7PsbR8jallMWrkWLhg8l2PyO/qpEN6JHn/weR4vjiR6lKepn/cma/lv+vdvPTTL3LjiLbX2jf11aNJZxvPX+37VuR/7xNef5vRopTeybLexra+c/6avO6c5Hi3MfPlXUjY3lddVvDRPsdFxaX5g/ntX+NFH+/U9VGUVtNKDzVrT2S1zYixZc/7K1tlbV7u7XTVRtu/mLj2i92a2fy2tuRYnJuqqpt5bV7y9p93dpDV1aW5gY9vOxOef4/jBQ//u3XU/WZv2v+a+f/9/qWHZ/K/L3XH1b+J2rb3itz/VaZ/8Ym+T8YKd64/Vy130X2qq+VJ4uf3fwfihTP/qu3tlnW7unWHhl0t2CY8vz/LVL8euZO5zNffrbLh92E1vP/bKN32bmuHlL+n6xtmyjbNXafxwJ2m9Vb77x5eWlp/oYVK1asdFaG/c0EbLX8+v9XkeL9J7JU9WPL6//PtR91e8z/ebd7/T/bt+wY0vX/ntq22bLXMpr3zdeuXR99OqK5euudg4vXLl+dvzq/PPPK0elj08dPHD08OlZ17rtrAx872Ony/P8lUvx58o+dceze/v/G43+tvmXHkPL/VH2fevo1Ax8K2HWq+b+vLN3pZPle43/VON/+53uXnT+qGVL+99a2TZTtevw+jwUAAAAAAAAAAADsFK2UxQ8jxfl/vpyqe+gGuf93rm/ZMaT7//bVts1t0981DnyQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdrCRyOJ6pPjg1fX0/XzDZMQL9SXwmfW/AAAA///+zUk1")

4.144734035s ago: executing program 3 (id=408):
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x10010, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="43060000921f0000000009000000bc0004800900010073797a31000000001400078008000300f1ffffff08000300060000001300010062726f6164636173742d6c696e6b000014000780080003000020000008000300070000001300010062726f6164636173743d6c696e6b00002400078008000200010000000800030004000000080002000c000000080001001b0000000900010073797a30000000002c00078008000300d30b00000800010006000000080001000f00000008000400a50000000800030000000080"], 0xd0}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x20, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0xc4)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc)
add_key$fscrypt_provisioning(&(0x7f0000002880), &(0x7f00000028c0)={'syz', 0x3}, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000006162636465666768696a6bddebc8b118125bf47475767778797a30313233343536a600000000b58aa0b9c4a80f23bf03cc8b6fef6d74cd3b0d420c07e23eccc9ac5baf0f7b49"], 0x29, 0xfffffffffffffffc)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1})

4.093917432s ago: executing program 4 (id=409):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f0000000000)={[{@grpquota}, {@acl}]}, 0x1, 0x77c, &(0x7f0000001900)="$eJzs3ctrXFUYAPDvTpKmTWsTQdC6CggaKJ2YGlsFFxUXIlgo6Np2mExDzSRTMpPShIAWEVwoqLgQdNO1j7pz62Or/4ULsVRNixVBidzJ3HbaTNIknWSi8/vBTc65jznnm/s4Z+Ye7gTQtYbTP7mIQxHxfhIx2JifRERfPdUbcWJlvZtLi8V0SmJ5+ZXfkvo6N5YWi9G0TWp/I/NIRHz3dsTh3Opyq/MLU4VyuTTbyI/Wps+PVucXjpybLkyWJkszx8bGx48ef/r4sfbF+sePCweufvDiE1+e+Outh6+8930SJ+JAY1lzHO0yHMON96QvfQvv8EK7C+uwpNMVYEvSU7Nn5SyPQzEYPfUUAPB/9kZELAMAXSbR/gNAl8m+B7ixtFjMps5+I7Gzrj0fEXtX4s/ub64s6W3cs9tbvw86cCO5485IEhFDbSh/OCI+/fq1z9Mptuk+JEArb16KiDNDw6uv/8mqMQub9eQ6y/Y0/g/fNd/1D3bON2n/55lW/b/crf5PtOj/9Lc4d7finuf/vjYUso60//dc09i2m03xNwz1NHIP1Pt8fcnZc+VSem07GBEj0def5sfWKWPk+j/X756XvXq9//f3Sv/v9w9f/ywtP/3ftOYvvf13bjtRqBXuN+7MtUsRj/a2ij+5tf+TNfq/pzZYxkvPvvPJWsvS+NN4s2l1/NEYnbQ9li9HPN5y/98e0ZasOz5xtH44jGYHRQtf/fTxwFrlN/f/0yktP/sssBPS/T+wfvxDSfN4zermy/jh8uC3ay27d/ytj/89yav1dNaPuFio1WbHIvYkL6+ef/T2tlk+Wz+Nf+Sx1uf/esd/+pnwzAbj77366xfvHtxq/NsrjX9iU/t/84krN6d61ip/Y/t/vJ4aaczZyPVvoxW8n/cOAAAAAAAAAAAAAAAAAAAAAAAAADYqFxEHIsnlb6VzuXx+5Te8H4qBXLlSrR0+W5mbmYj6b2UPRV8ue9TlYNPzUMcaz8PP8kfvyj8VEQ9GxEf9+5LsOYoTHY4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL71/j9/9TP/Z2uHQCwbfZ2ugIAwI7T/gNA99H+A0D30f4DQPfR/gNA99H+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM1OnTyZTst/Li0W0/zEhfm5qcqFIxOl6lR+eq6YL1Zmz+cnK5XJcilfrEzf6/XKlcr58ZiZuzhaK1Vro9X5hdPTlbmZ2ulz04XJ0ulS345EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbU51fmCqUy6VZiS0klu9r82SXRNGGRE/jcNot9dnRRLI7qtHmRIcvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ef8GAAD//+GAI2c=")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r0, 0x8, 0x1, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdffffffe}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x68, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff81, 0x5c}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x56}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2f8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f00000009c0), 0x1, 0x515, &(0x7f00000010c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0501904431000000010902120001000080040904"], 0x0)

3.236876355s ago: executing program 2 (id=410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x400})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
unshare(0x2c020400)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004800048024000180090001006d65746100000000140002800800014000000001080002400000001a200001800700010063740000140002800800044000000016080002"], 0x9c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getxattr(0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3)
pipe(0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = getpid()
open(0x0, 0x147842, 0x1ef)
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5})

2.907189414s ago: executing program 0 (id=411):
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)="401d91519e0bda285eaf583b08d8ba275ad5c805602a8ac217e4fc38301bcc085dac847199e4aaf5978ce5ddb48077fc31104cec744a29fdb9937ecfcf8ce2566f1742fa40346985300f5b30cb6340b84aa5d8d8c7041d9a398cfb6efcadcca5d8771530d17c1ad0938ba1af58de46d0e7ffcfa01ea653a20520002740dc5a2759bf9ae4311d162911c778f343ed8bf676a9d0a43f9d4ac0ed27c46c76b165c57133afc6158b7759dbf108fa0633e3c8f8dc047acfb306c512f79ba820ceffbc19416c9d94", 0xc5, 0x2)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x400802, 0x0)
connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)="68eee4814c5a4ec4afe56a2e80ee9588af16524f7198f107f6acf26cbc55f3eb49b6771db3bbe16ae0ae7eaebebd0906cad71673e1e09590f58cf87bd6ee4266c7fc9af669652ae9a9cdc7c1aa1be5a262af3df47cf89adb36ef0241cf246d472d64365dbb7312deee49babea7f8ec7ed6d30057de8c565f4dec71a1ed50de7e81de8f8ec0e1052f551f3fd70990097c72d7d1f8fe135298b12830e48091032afc24bc8d3718e8f11c147a67cfa5860184443be02deee8aee96ddb15dcc937a26ea1cf6c6e98d2851d000932557ce5bdeb30", 0xd2, 0x2)
ioctl$RTC_WIE_OFF(r0, 0x7010)
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x22000, &(0x7f0000000500)={[{@userxattr}, {@verity_require}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@xino_on}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}]})
mkdirat(r0, &(0x7f0000000580)='./file0\x00', 0x48)
r1 = socket(0xb, 0x4, 0x7ff)
syz_open_dev$evdev(&(0x7f00000005c0), 0x122, 0x48000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000640)={0x3, [0x0, 0x9f, 0xa]}, 0xa)
symlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00')
sendmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000700)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000780)="d85f965ec846e93af953870137594040b15c666ab56f61660fdfed0eb74d06623ea133cd291db3f55ec065c8b90166b78c2216e83f88ce3b0eb778d8c00629337dbdc21812895ea471ecab493b1c88e5582a7bb6cc", 0x55}, {&(0x7f0000000800)="c135ba9d44b5ae29f225b2f7e47c83b8868d18f4e696f0516351c1decd9f8a0fae1017e69093933fcade73eb89157c0c8c5946225b9d4afde07192130e08949fd4d9df52c1d871355ae64e530627ba2895a7a2a7a7f103f49c6137de378fdf851089", 0x62}, {&(0x7f0000000880)="4e1b02c5a8e1507e8732d6d3ae0cbf9c110a405fbce5477a7761f378d68d52a9cb0b088df776fb797372c7072bb4eae760205bc4e7f3de6252128d70e01bc703be59ecc932cc5a90747a05059600", 0x4e}, {&(0x7f0000000900)="83ed3a7bc2459cbdc3e2d4d5897704782964adf98a", 0x15}], 0x4, &(0x7f0000000980)=[{0xd0, 0x11, 0x7fffffff, "7807ce80fb3f4bbe0d513a5beeb7960aa3f578ce49af403e0d9817970fb93df92f99ea0b8871f7099ed37a209d19e983269f725a7d554bb252ce18ac8553b0f3a9f733c4aa72a1357786cffc73ba8806bf63ad390e22e1332d18f0c3e8102588c9a48a93a1389abf6c51e3c803318b0b4762a6a0268bbc285da7d8265e2037ed0659a30fe733b512345ea7ef5a4f829765df8b42c31fe9f054ddf8f270d9a7b175dc8b1e76f858d6eedf2cf38430df5d1e0d79b2e4e08a7bd153dfecd1"}, {0x98, 0x109, 0x9, "dbdeb07b5da217f8815eb554379c91f7214b029d189330652bccd2400df96363dfc8e3a773dfb7236ba3ea35f74392797b8be8c5b6123490f3fbdf89ad38eba8b4577f986730d627560857387a5c4b6586c851d537e2b9bbf400210618a8f60690976071eaede819d358f7e0d34581c47e0ad52cba614e764feedb0fd4c08d3439c10a"}, {0x20, 0x111, 0x401, "3206fd308736b4ffdc"}, {0x30, 0x102, 0x6, "19f666cde7a0dc2de83812244608a76e6bae5b5b06c113a9e403e7c076c6"}, {0x50, 0x100, 0xffed, "bea04476327e1551712f00d7e5708b313ab71b9dfef1072b03529ff84a7c77f164a271712c160d51b9b969ce922c50222cf41f1f0700057be6a3268385a17f51"}, {0x90, 0x113, 0xff, "9a51b81a59d9467b4b5973e3cd126f9e64f5b1b33e7309b31d6297ebbb6806cd34b4d0bea02b07ee7552fc753f165c9f3edfb9c3f5bd1a356ba94a08cd2b804ecb102f24abeb874f9195801eae8c06aeb875f5d72764db19f5b5a4b519564ef60e4d561e0e48001a8fee3aa9397b0270897f121e5d806deb8f531026"}, {0xa8, 0x116, 0x8000, "67cd352bb55ae6f224852ed3335ffd818ae7b6592f1bc31a83c80c8598df82a6346d27394e9a1345de4ee2da0045eee119af819968a33854d6176851c9c460a7246b8d3832a55d19c7a8599c56c380bf27929340c5c2bef1db137fa87c6fe9d417cd3c990ee11611a6b98b705a19fa79c317e83931f9d8852a75fbced4d6dd0febd70753a69c6f31748cc191c20a4e230769d06c"}], 0x340}, 0x4004810)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000d00)={<r3=>0x0}, &(0x7f0000000d40)=0xc)
process_vm_writev(r3, &(0x7f0000001f00)=[{&(0x7f0000000d80)=""/219, 0xdb}, {&(0x7f0000000e80)=""/118, 0x76}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x3, &(0x7f0000002180)=[{&(0x7f0000001f40)=""/184, 0xb8}, {&(0x7f0000002000)=""/158, 0x9e}, {&(0x7f00000020c0)=""/129, 0x81}], 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002280)={'ip6gre0\x00', &(0x7f0000002200)={'syztnl2\x00', <r4=>0x0, 0x29, 0x6, 0xd, 0x5, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8000, 0x10, 0x7fffffff, 0x80000000}})
sendmsg$nl_route(r0, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)=@dellink={0xa4, 0x11, 0x989742e89180e425, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x8, 0x800}, [@IFLA_PORT_SELF={0x74, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "54a200bdfc49dea74d140f94d3bfdb9c"}, @IFLA_PORT_PROFILE={0x18, 0x2, 'user.incfs.metadata\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c1f9e7aad9aeec049ebd5b115bd60f2"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_TXQLEN={0x8, 0xd, 0xfff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x9}}]}, {0x0, [0x0, 0x30, 0x0]}}, &(0x7f0000002480)=""/163, 0x5d, 0xa3, 0x1, 0x6}, 0x28)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = pidfd_getfd(r0, r2, 0x0)
mknodat(r6, &(0x7f0000002580)='./file0\x00', 0x8000, 0x1)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000025c0), 0x80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000002600)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000002700)={0x28, 0x0, r8, 0x71, &(0x7f0000002680)=""/113})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000002740)={0x2, 'veth1_to_bridge\x00', {0x1000}, 0x200})
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000002780)={0x8a, ""/138})
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000002840)={0x0, 0x40, 0x9, [0xb, 0x7, 0x3, 0xf2ee, 0x4, 0x2, 0x5, 0x7f, 0x9]}, 0x1a)

2.724536017s ago: executing program 0 (id=412):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x25, 0x38]}}, {@nodatasum}, {@discard}, {@datasum}, {@discard_sync}]}, 0x1, 0x50f3, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
creat(&(0x7f0000000240)='./file1\x00', 0xd)
recvmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000280)}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000})

2.661131292s ago: executing program 1 (id=413):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)={0x0, 0xfb, 0x68, 0x6, 0x7, "4b4bca6ad09d997e604db7ac3aa7e619", "1a692d1c08c602bdb64688a0957478b611a6f956fc7be5427733cea151e6e14a210ed2d44a4575fafac4dab9dad63d1b79677d60acbe677caf5edac7d33937d70b8f75ff3ee6d9961e7097635a6da54a405950"}, 0x68, 0x1)
r0 = syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f00000000c0)='./file0\x00', 0x1000480, &(0x7f0000000040)=ANY=[], 0x1, 0x11e6, &(0x7f0000003180)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f00000001c0)=""/65, 0x66)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x800, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4e22, 0x7, 0x4e22, 0x7, 0xa, 0x20, 0x0, 0x87, 0x0, r4}, {0xffffffff00000000, 0x7, 0x2, 0x7f, 0x2, 0x0, 0x2890b607, 0x8}, {0xfffffffffffffffd, 0xc, 0x8, 0x6}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x2}, {{@in6=@private1, 0x4d5, 0x33}, 0x2, @in=@multicast2, 0x3500, 0x3, 0x0, 0x8, 0xb7e, 0x4, 0x2}}, 0xe8)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r2, 0x4, 0x40800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='wg2\x00', 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3)
ftruncate(r5, 0x2000009)
sendfile(r2, r5, 0x0, 0x7ffff006)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6})
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x92536000)

2.094598857s ago: executing program 4 (id=414):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)

2.057819312s ago: executing program 3 (id=415):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='autogroup\x00')
fchdir(r1) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00')
exit(0xffff) (async)
write$binfmt_format(r3, &(0x7f0000000180)='1\x00', 0x2) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0xffffffc3, 0x4) (async)
exit(0x1) (async)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=<r4=>r0], 0x108}}], 0x2, 0xc040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=r0, @ANYRES16=r4], 0x90}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) (async)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.808233816s ago: executing program 3 (id=416):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000840)='batadv_slave_1\x00\x89/>\x88W\xd4gw\x11\xd5>H\x91\x05,\xf1\x91\"\a\xbb\xb9M\x87\"}\xe04\xc5\xeew\vy\x06\x1d\xd2\xd0\xce\xcd1g\xe4oX\xbc\xbai\xbcK8\x1a\xca\xdaG\xbfx\x99+\x1c\x94\xe1\xdf|\x93q\xa3\xc7\'w\xf2\x00\xacx\x00E\a\x01', 0x6c9f928deea10f50, 0x30, 0x0)
mq_getsetattr(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mq_open(&(0x7f0000000840)='batadv_slave_1\x00\x89/>\x88W\xd4gw\x11\xd5>H\x91\x05,\xf1\x91\"\a\xbb\xb9M\x87\"}\xe04\xc5\xeew\vy\x06\x1d\xd2\xd0\xce\xcd1g\xe4oX\xbc\xbai\xbcK8\x1a\xca\xdaG\xbfx\x99+\x1c\x94\xe1\xdf|\x93q\xa3\xc7\'w\xf2\x00\xacx\x00E\a\x01', 0x6c9f928deea10f50, 0x30, 0x0) (async)
mq_getsetattr(r0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0) (async)

1.673636936s ago: executing program 4 (id=417):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
fchdir(r1)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000300))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd27, 0x2ddfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x880002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x10)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
rename(&(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)

1.436657731s ago: executing program 2 (id=418):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x11, 0x45)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10)

1.434570398s ago: executing program 1 (id=419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000df100bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x44, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e7063e8729dee4da8c9a91b4a487529a1a448ba55956c7a15fa160fdc09bf6600000000000001c36c4f7b28e13627dce84b8b9b1288ca25dff3d80cb380a7639b9a3ea9e1adaae4ed469e1388151d485f3a210bd26e9e653315124584a1978d950e49c04b100ab4f694c051657f2dfd7c538c6f177aa5f6b6a88c2a3bfa8795faef98ead17065ceac2cac299760462e763c74bcc4a341914875d616d0", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1b) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x44, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003876e7063e8729dee4da8c9a91b4a487529a1a448ba55956c7a15fa160fdc09bf6600000000000001c36c4f7b28e13627dce84b8b9b1288ca25dff3d80cb380a7639b9a3ea9e1adaae4ed469e1388151d485f3a210bd26e9e653315124584a1978d950e49c04b100ab4f694c051657f2dfd7c538c6f177aa5f6b6a88c2a3bfa8795faef98ead17065ceac2cac299760462e763c74bcc4a341914875d616d0", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1b)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000090000002f5900000500000041000000bb559e626462a99d5706d4aa87557573156b9f24dc20eb8ec2381f72955ba02bc1a416f0047bc692899f638fc2a82ecd278e3d5dc5b506636a", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="485a0c000000000000ce56016933860000000000", @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="485a0c000000000000ce56016933860000000000", @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

1.43175285s ago: executing program 2 (id=420):
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x7, 0x2}, 0xe)
clock_gettime(0x0, &(0x7f00000045c0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000004400)=[{{&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000240)=""/104, 0x68}], 0x2, &(0x7f0000000300)=""/48, 0x30}, 0x7ff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x67fa}, {{&(0x7f0000000400)=@llc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/10, 0xa}], 0x1, &(0x7f0000000880)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/181, 0xb5}], 0x4, &(0x7f0000001880)=""/137, 0x89}, 0x7}, {{&(0x7f0000001940)=@l2, 0x80, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/163, 0xa3}, {&(0x7f0000001a80)=""/126, 0x7e}, {&(0x7f0000001b00)=""/232, 0xe8}, {&(0x7f0000001c00)=""/29, 0x1d}], 0x4}, 0x3}, {{&(0x7f0000001c80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001d00)=""/225, 0xe1}, {&(0x7f0000001e00)=""/192, 0xc0}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/21, 0x15}, {&(0x7f0000002f00)=""/14, 0xe}], 0x5}, 0x7eb66395}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002fc0)=""/50, 0x32}, {&(0x7f0000003000)=""/200, 0xc8}, {&(0x7f0000003100)=""/86, 0x56}, {&(0x7f0000003180)=""/223, 0xdf}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x5, &(0x7f0000004300)=""/220, 0xdc}, 0x6}], 0x7, 0x40, &(0x7f0000004600)={r3, r4+10000000})
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

948.471609ms ago: executing program 4 (id=421):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r2 = syz_open_dev$I2C(&(0x7f0000000780), 0x0, 0x1836c2)
ioctl$I2C_RDWR(r2, 0x707, 0x0) (async, rerun: 64)
r3 = getpid() (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000000000010f50c11980000000d0012800e00010069703665737370616e015dd9020000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
writev(r8, &(0x7f00000018c0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000028c0)="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", 0x104b}, {&(0x7f0000000280)="26c21206912b5949a6a027c7bb38a5f42a43de7be1811196303fff5c5fd906bec24b75035b6c0cbe8b1de28e8a660ea4aee579b8b273480eb28dc127918315eca4175961803a59acaaa2d3b88af42e1065d437e2368af1e4fb3b77e2163ea7d7e7845af3937125b2eb1d4dbaeb27612b017124739dad70baa42674a66cf3", 0x7e}, {&(0x7f0000000180)="d6301f83d8dff97b952c676634cf3be0496684222e66013bb81bce6e9720635e63916f6f8b5741e31b2e7cc8c35e2bed4aa9b9ea05584c8a2e78420ed1f14948", 0x40}, {&(0x7f0000000100)="6d100c3d19850a73a83084cfffa5e3a2e7c68e", 0x13}, {&(0x7f0000000340)="d2786e02e9d07446e2a333125f4b23b89d014b34c4427415526d8ca71066ac6558b61a0686ed39b54bbe69b76532ed7f46f7cc8cfed1a00558498c8e0f3d27615b941fda5074255c6c969daab47334bbd8", 0x51}], 0x6) (async)
sendto$inet6(r7, &(0x7f0000000040)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @remote}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) (async)
shutdown(r7, 0x1) (async)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)

428.284378ms ago: executing program 0 (id=422):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x9, 0x0, {0x0, 0x2, 0x958, 0x3, 0xffffffff}, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000080)={0xbcf612e0d065bb72, 0x0, 0x8000000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x18})

232.791749ms ago: executing program 4 (id=423):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettaction={0x20, 0x32, 0x200, 0x70b52c, 0x5, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x1})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x1c6, &(0x7f0000000300)="$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")
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
creat(&(0x7f0000000140)='./file1\x00', 0xf2)

0s ago: executing program 0 (id=424):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
io_setup(0x8, &(0x7f0000000540)=<r1=>0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0, 0x0, 0x2a25}])
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r2, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000002480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0x58, 0x8, 0x8, &(0x7f0000002540)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002740)={'ip6_vti0\x00', &(0x7f00000026c0)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x3, 0xc, 0x1, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8, 0x60, 0x5, 0xf7}})
sendmmsg$inet(r0, &(0x7f0000002980)=[{{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000003c0)="7e42d1af6545f2a01547cf9649cb84b2f4c49de8a7d5a1a7de63a30bf9de06eb6f27e9689709bd04c68509bc937e15665d87e179c06ad032aebef22365be336d8d93ed7c4239eb41ffeb0bd925c43b7ead8180d874c8424d3c27c89659388b3c865d5e496b6c889bcaee570709d941439f9ff87bf5640cbcc92cf774d4f98aafd4a4dba2c2cf34cfe69b98ef62aa7b13a31e5537f30cb2e6a777fb972bf731debda11f2d5e3829402fcda592bf3f295c59c70e6fd0154b8632427e0869c278157010c71c52adc1f3af51e259360f6023a93b", 0xd2}, {&(0x7f00000004c0)="606fc67c842e38ff83242ac324403af648d77f3c15a90e7d139b5d03a47842631be6448f948e6a3e52ae14f3e77ed0cbdde8315d9e2b178b42ec4dfc911eeec510c40d905e2ce8325b850a2c4f", 0x4d}, {&(0x7f0000000580)="b90cd542cd51b47cc5f75304829485cacd94904f2678e6656619213bdee1972baac797153b2f8ac33a78dd9f7b020988df2b2c274b5b6b729aa776fef3cd58e8e50ada7d4e4bd3796a9f65020c01dbdfa96f9eb77704806ca4a0004f7bd3b0fd6b6b8f367df7b954b85c4c08f4c1a643854abedb4314bdac0772ddaac6f077c55881b79bb160a4624ca8713880be895d33fee155a412b8c23e06cefcf8068b6fe8f4835cc24ab1d97e69f667e1f734c1cbff84807e1dd82b1a93e2efb1b720e831b29bba03653909b9a105873f7c789f884a6e9f924b6ddcd02f682786b7fb43ddba08f18ffc852f90a68e30", 0xec}, {&(0x7f0000000700)="c9668a1c04493958c4a0a382cb11a09bb0b28dfd9c3587b3f4fd459a2ccec7ab632c1a5585860ca93312aba8370afb46bd597202b4eaef03e98f0f75d0e38318bc6a78b0344bf78a6dd00cf61f712b684f7b804174f7e1a436f64c9c3b9bdc742d898ce93e215a44b180550e8ceb7499e49dae3624c03497fe820bfd8730f5931ace9e1a4e28a15c778826eae0f67003e02fc749aae61d3a83e8861f5e2a9e644007a6bdde6348b9ddee882fcf96c92af6e6cec9d0adab1b910481a56ef473fcef7ba4beaf54371fab", 0xc9}, {&(0x7f0000000680)="9b4284ba04f59be61f196d8083a62d360045e8aa2c9a175913b69b91303a975ea6a76ddab1c8c8793b45240aac052c882f35f588118f63ec4a6f976547a7", 0x3e}, {&(0x7f0000000800)="f77eef778b593a6de6a26f6724c44dbe2681eefc1f780982cb6d8737182709bf6d08bdf43aab576b2e948abdcf70af4daf4c5e61a39e029742552e5698a4025d4eb44ef5a59cd54e606283cd5a1d09883e60f079148910a0a1df1400bc0179eb1680c82d3a5fceb790d5d60aa9d35a9020703f66792dfe5c9da79afd17a346dc69c7203ee265b3557db26496f065c665e200f9e30b5cef9405518fd4295f84", 0x9f}, {&(0x7f00000008c0)="864a4be2240b2936c1247c538a3bd172a9d365858641d42d18c03204d12142a570675b0bda3ba60e8bd707b036325ce9c7404eb4772a34d61a88f584d8fcf0bcad03ad52b30a735bfeded9acd0de6530cb0db0aa1e1e4dfde649b2d4298036c165700512c0af952071e4b19d0df8962c3fbb7610dab98bbfcd8afa07b3fe7547691f", 0x82}], 0x7}}, {{&(0x7f0000000a00)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000a40)="463ea84be9b69b715aec37973605ab8f3c1bac8f9193c885befd26d464fa187db580c2a01e88b8272370dde91b29d911a3061125462854d31145572e47b2c2e3f54890e555c33909e8b6510b648c672e99d97ce1e84ca190290d8d742a6082848bb6939afe4c082035a3e78537904a4f75634dd1e676aa888621c59a20f0a1b010d6342045656ee841798bdf76b06a5746819ba947756b2b9bcb308c0216d6c03f05755902dd0386", 0xa8}, {&(0x7f0000000b00)="902da360c9f707985e5d476f58020f15e3039a55fdb5aa6b3016532d38ec66097c67a88f27b1dc7a7bcbca698feacb58421ef432b0e114c3c215e6b4ccd412ef38507c503034575c30f3260c4274b73107f8e71f73043707cee9a87935b2d837c457b61697710fb8e4910dc14777877567cd2c8dbc1fa008f6ff29f80f2c6414c6cce3ea8f080ebb3086c1f8204ce7bd9b0f9c18d5301b0f93f1b4af8bec394e169b5070b61ea19ffb13ea4df6d858659fbab0ebc9d237db13243e7af729cd10ebc2deaf7829278ce2fa61cfd57b52ac70c39781c463fe74ed72c68aaa44879ab1b0a0b9cfea6fa5ebb11a3b789215d41c", 0xf1}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="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", 0xfa}, {&(0x7f0000001d00)="b6e82282c5709831bd389085e967e48eb2c1be523f18e07a0ec08d7d4653c141eaa0fccf613d3775407d63f4e734333630044555ca1a9c06a066f5a17a3cd314b8d18d22f303e62fc74ee7c2cda4456f8c4bc4346438d73c8b35d0e729b92f460e91d4e7824745c43638c587fbb0def1", 0x70}, {&(0x7f0000001d80)="c99f0f52c9515e6f594547c5b53a38d24a3517114c77ea3e26ce7b040edb021d9ba8c43a071a946f32912ed27d0f", 0x2e}, {&(0x7f0000001dc0)="8ff96dfa84375a932f8d17cb197d7986539e71ec46d8d0c1e6ae2a126af7332afc63adbbbfd51cdbaaf5b1b01cd9a1efa62b7dd277c2034fe0603addb54e0396b8f5e11c0a3e94d4943f5a5f938f6c1484bbce1b4a2d2b2281f9dfa879054fdde38555e5ca004ded4fd4eacdb962680b24449cad515bc8316a4788a018e86a47063e3cdd0ef31479e28121da66c73c493663206bb65c4d9f57dbdb342dd4caaf9e5de829aae06f", 0xa7}, {&(0x7f0000002940)="4a9d81d58dc8b38b7c78c16e4db699623dabf2869b5980fbee923e122c466cc6d1e44949c57529", 0x27}, {&(0x7f0000001ec0)="abc068b4fc95a805d91ea1e98fb7ea087b1ed9a97f6d6f06f1482b11cb0069f882149e2d49766e91df3e7fb8fba2293743448e44ceadd142cdf1520758a6d3849107e3093f7cfb838b85988698d5dfa73e531fd1380f64aaf4d382146545cea26f92665d52d616bb46c70a1ca9242d259106b04b8023ca16571ee17e52099d200e4c6c67f17dfe6d58c249833032e893388259cb5821233214074168432f3b8bb7cf776231", 0xa5}], 0x9, &(0x7f0000002040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}], 0x38}}, {{&(0x7f0000002080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002340)=[{&(0x7f00000020c0)="85cf332ac83f204e550b2983edeeb537ed72ccba3b4957d2", 0x18}, {&(0x7f0000002100)="7d2584d23a094145aef11e1753da791a6f9f22b8a77610482828f6bd5a8c9280ce892c8ffdf0d549ab9fe0dde1e9b5603211a9db5233f51b9cb747615c48b8e6af0d55c467d123a3b8a39e54f39f958b9b82498bba5111df205ba9d03be48d8fa05e30b31328d33a999c6de25c3e3463e6aee61ead9f2e86b0b86189a834037fe9e4abf05bfb26649438e34f93d7931f", 0x90}, {&(0x7f00000021c0)="092e5f569d84268f0f80f7b9271c8f55", 0x10}, {&(0x7f0000002200)="3ee254ed0b9de14ff462f35f34528dcf099dedc6375e092b81ac1e97ab8c0d6d4cd8daec70ae0b0181c8f0c8a594a6562968df6f28b0e9bfe20364467d9d1e869909e12448fb76d728cb10e3caf62c3205f5946b18830c313e56d269a584", 0x5e}, {&(0x7f0000002280)="9a6b9853f174697ca621ee8495bc701db79c70d68d978816bc794ccc198f1b867d207398d47730ee3b0aecb21691f2d7b9f3700c4a63bec8ac82c3d530a6dc9e0569cba8601efef0ff21eb64e31b0eda59c132f938b22cfc27af2ca1d2b4d2e5d4ab65d5630e5b6a4dbf894869", 0x6d}, {&(0x7f0000002300)="8b", 0x1}], 0x6, &(0x7f0000002780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe18e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa85}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xe8}}], 0x3, 0x90)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="62275a1b803a"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$phonet_pipe(0x23, 0x5, 0x2)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000007d40)={0x1f, 0x4}, 0x6)
bind$bt_hci(r8, &(0x7f0000008140)={0x1f, 0x3, 0x2}, 0x6)
r9 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', <r10=>0x0, 0x2d, 0x1, 0x2, 0x1, 0x3c, @mcast1, @mcast1, 0x7800, 0x7, 0xfffc, 0x3d0b}})
bind$xdp(r9, &(0x7f0000000300)={0x2c, 0x8, r10, 0x32}, 0x10)
r11 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r11, &(0x7f00000000c0), 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ab8f00001000010400"/20, @ANYRES32=0x0, @ANYBLOB="002000000000000014001280090001007663616e00000000040002801400030069705f76746930000000000000000000"], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

[  145.926392][ T6495] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  145.928629][ T6507] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  145.970045][ T6495] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  146.020733][ T6495] XFS (loop2): SB validate failed with error -74.
[  146.430192][ T6507] BTRFS info (device loop0): rebuilding free space tree
[  146.536518][ T6507] BTRFS info (device loop0): allowing degraded mounts
[  146.569692][ T6507] BTRFS info (device loop0): enabling ssd optimizations
[  146.586999][ T6507] BTRFS info (device loop0): enabling free space tree
[  146.602210][ T6517] loop4: detected capacity change from 0 to 32768
[  146.604062][ T6507] BTRFS info (device loop0): force clearing of disk cache
[  146.616240][ T6511] loop1: detected capacity change from 0 to 40427
[  146.643624][ T6507] BTRFS info (device loop0): use zstd compression, level 3
[  146.656283][ T6511] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  146.673066][ T6507] BTRFS info (device loop0): max_inline set to 0
[  146.690726][ T6511] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  146.756732][ T6511] F2FS-fs (loop1): invalid crc value
[  146.772679][ T6517] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.788167][   T30] audit: type=1800 audit(1764548527.017:37): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="bus" dev="loop0" ino=263 res=0 errno=0
[  146.927611][ T6547] gretap0: entered promiscuous mode
[  146.937633][ T6547] gretap0: entered allmulticast mode
[  146.998290][ T6517] XFS (loop4): Ending clean mount
[  147.190789][ T5823] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.381694][ T6511] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  147.423229][ T5857] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.450534][ T6511] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  147.492663][ T6511] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  147.678694][ T5827] syz-executor: attempt to access beyond end of device
[  147.678694][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.880785][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  147.880813][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  147.880836][ T5827] Call Trace:
[  147.880845][ T5827]  <TASK>
[  147.880855][ T5827]  dump_stack_lvl+0x189/0x250
[  147.880890][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.880924][ T5827]  ? dump_stack+0x9/0x20
[  147.880954][ T5827]  f2fs_handle_critical_error+0x37c/0x540
[  147.880994][ T5827]  f2fs_write_end_io+0x94b/0xc10
[  147.881037][ T5827]  __submit_merged_bio+0x256/0x660
[  147.881074][ T5827]  __submit_merged_write_cond+0x269/0x530
[  147.881114][ T5827]  f2fs_write_data_pages+0x2756/0x3290
[  147.881135][ T5827]  ? __lock_acquire+0x6b6/0x2cf0
[  147.881191][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.881230][ T5827]  ? finish_task_switch+0x23d/0x940
[  147.881291][ T5827]  ? unwind_next_frame+0xa5/0x2390
[  147.881315][ T5827]  ? rcu_is_watching+0x15/0xb0
[  147.881339][ T5827]  ? __kasan_check_byte+0x12/0x40
[  147.881363][ T5827]  ? __bfs+0x154/0x290
[  147.881382][ T5827]  ? __pfx_hlock_conflict+0x10/0x10
[  147.881428][ T5827]  ? irqentry_exit+0x5dd/0x660
[  147.881458][ T5827]  ? irqentry_exit+0x5dd/0x660
[  147.881495][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.881524][ T5827]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  147.881548][ T5827]  do_writepages+0x32e/0x550
[  147.881590][ T5827]  ? do_raw_spin_unlock+0x122/0x240
[  147.881630][ T5827]  filemap_fdatawrite+0x199/0x240
[  147.881659][ T5827]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  147.881746][ T5827]  ? do_raw_spin_unlock+0x122/0x240
[  147.881781][ T5827]  f2fs_sync_dirty_inodes+0x30f/0x810
[  147.881822][ T5827]  f2fs_write_checkpoint+0x93e/0x2440
[  147.881879][ T5827]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  147.881966][ T5827]  kill_f2fs_super+0x2d2/0x6c0
[  147.881997][ T5827]  ? __pfx_kill_f2fs_super+0x10/0x10
[  147.882040][ T5827]  ? shrinker_free+0x2ce/0x3e0
[  147.882068][ T5827]  deactivate_locked_super+0xbc/0x130
[  147.882102][ T5827]  cleanup_mnt+0x425/0x4c0
[  147.882135][ T5827]  ? lockdep_hardirqs_on+0x98/0x140
[  147.882162][ T5827]  task_work_run+0x1d4/0x260
[  147.882195][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  147.882231][ T5827]  ? exit_to_user_mode_loop+0x55/0x4f0
[  147.882258][ T5827]  exit_to_user_mode_loop+0xff/0x4f0
[  147.882279][ T5827]  ? rcu_is_watching+0x15/0xb0
[  147.882310][ T5827]  do_syscall_64+0x2e3/0xf80
[  147.882341][ T5827]  ? rcu_is_watching+0x15/0xb0
[  147.882363][ T5827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.882383][ T5827]  ? clear_bhb_loop+0x60/0xb0
[  147.882408][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.882428][ T5827] RIP: 0033:0x7fd9b6390a77
[  147.882457][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  147.882475][ T5827] RSP: 002b:00007ffcba1e5078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.882498][ T5827] RAX: 0000000000000000 RBX: 00007fd9b6413d7d RCX: 00007fd9b6390a77
[  147.882512][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcba1e5130
[  147.882525][ T5827] RBP: 00007ffcba1e5130 R08: 0000000000000000 R09: 0000000000000000
[  147.882538][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcba1e61c0
[  147.882551][ T5827] R13: 00007fd9b6413d7d R14: 0000000000024046 R15: 00007ffcba1e6200
[  147.882587][ T5827]  </TASK>
[  148.446809][ T5827] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  149.531347][ T6568] loop0: detected capacity change from 0 to 128
[  151.604340][   T30] audit: type=1804 audit(1764548531.817:38): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.137" name="/newroot/31/file0/bus" dev="loop0" ino=1048611 res=1 errno=0
[  152.290911][ T6571] loop0: detected capacity change from 0 to 512
[  152.380531][ T6576] pimreg: entered allmulticast mode
[  152.494257][ T6571] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  152.515678][ T6578] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  152.992673][ T5844] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  153.392426][ T5844] usb 2-1: device descriptor read/64, error -71
[  153.632468][ T5844] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  153.753207][ T6590] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.146'.
[  153.797209][ T6592] loop0: detected capacity change from 0 to 4096
[  153.805410][ T5844] usb 2-1: device descriptor read/64, error -71
[  153.876059][ T6597] syz.2.145: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  153.891584][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) 
[  153.891614][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  153.891628][ T6597] Call Trace:
[  153.891638][ T6597]  <TASK>
[  153.891649][ T6597]  dump_stack_lvl+0x189/0x250
[  153.891681][ T6597]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  153.891705][ T6597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.891731][ T6597]  ? __pfx__printk+0x10/0x10
[  153.891764][ T6597]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  153.891789][ T6597]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  153.891821][ T6597]  warn_alloc+0x214/0x310
[  153.891851][ T6597]  ? __pfx_warn_alloc+0x10/0x10
[  153.891880][ T6597]  ? __pfx___schedule+0x10/0x10
[  153.891902][ T6597]  ? kasan_save_track+0x4f/0x80
[  153.891924][ T6597]  ? xskq_create+0x56/0x170
[  153.891944][ T6597]  ? xsk_setsockopt+0x4dc/0x8d0
[  153.891974][ T6597]  ? do_sock_setsockopt+0x17c/0x1b0
[  153.892000][ T6597]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  153.892031][ T6597]  __vmalloc_node_range_noprof+0x134/0x16a0
[  153.892054][ T6597]  ? rcu_is_watching+0x15/0xb0
[  153.892082][ T6597]  ? trace_irq_disable+0x37/0x100
[  153.892112][ T6597]  ? preempt_schedule_irq+0xde/0x150
[  153.892154][ T6597]  ? irqentry_exit+0x5dd/0x660
[  153.892184][ T6597]  ? irqentry_exit+0x5dd/0x660
[  153.892207][ T6597]  ? rcu_is_watching+0x15/0xb0
[  153.892236][ T6597]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  153.892268][ T6597]  ? vmalloc_user_noprof+0x1d/0xf0
[  153.892293][ T6597]  vmalloc_user_noprof+0xad/0xf0
[  153.892318][ T6597]  ? xskq_create+0xbf/0x170
[  153.892340][ T6597]  xskq_create+0xbf/0x170
[  153.892363][ T6597]  xsk_init_queue+0xb0/0x110
[  153.892387][ T6597]  xsk_setsockopt+0x4dc/0x8d0
[  153.892424][ T6597]  ? __pfx_xsk_setsockopt+0x10/0x10
[  153.892461][ T6597]  ? __pfx_aa_sk_perm+0x10/0x10
[  153.892497][ T6597]  ? aa_sock_opt_perm+0xff/0x1a0
[  153.892535][ T6597]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  153.892555][ T6597]  ? __pfx_xsk_setsockopt+0x10/0x10
[  153.892591][ T6597]  do_sock_setsockopt+0x17c/0x1b0
[  153.892623][ T6597]  __x64_sys_setsockopt+0x13f/0x1b0
[  153.892656][ T6597]  do_syscall_64+0xfa/0xf80
[  153.892683][ T6597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.892705][ T6597]  ? clear_bhb_loop+0x60/0xb0
[  153.892731][ T6597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.892753][ T6597] RIP: 0033:0x7f9b74f8f749
[  153.892773][ T6597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.892791][ T6597] RSP: 002b:00007f9b75d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  153.892814][ T6597] RAX: ffffffffffffffda RBX: 00007f9b751e6180 RCX: 00007f9b74f8f749
[  153.892830][ T6597] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  153.892843][ T6597] RBP: 00007f9b75013f91 R08: 0000000000000004 R09: 0000000000000000
[  153.892856][ T6597] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.892870][ T6597] R13: 00007f9b751e6218 R14: 00007f9b751e6180 R15: 00007ffe8e8fdf68
[  153.892906][ T6597]  </TASK>
[  154.198237][ T6597] Mem-Info:
[  154.201409][ T6597] active_anon:25161 inactive_anon:0 isolated_anon:0
[  154.201409][ T6597]  active_file:11652 inactive_file:39908 isolated_file:0
[  154.201409][ T6597]  unevictable:768 dirty:41 writeback:25
[  154.201409][ T6597]  slab_reclaimable:10816 slab_unreclaimable:95653
[  154.201409][ T6597]  mapped:33493 shmem:20130 pagetables:1255
[  154.201409][ T6597]  sec_pagetables:0 bounce:0
[  154.201409][ T6597]  kernel_misc_reclaimable:0
[  154.201409][ T6597]  free:1302109 free_pcp:14173 free_cma:0
[  154.205314][ T5844] usb usb2-port1: attempt power cycle
[  154.254598][ T6597] Node 0 active_anon:100644kB inactive_anon:0kB active_file:46608kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135572kB dirty:160kB writeback:100kB shmem:78984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12788kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  154.286895][ T6597] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  154.322447][ T6597] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  154.354307][ T6597] lowmem_reserve[]: 0 2493 2494 2494 2494
[  154.360148][ T6597] Node 0 DMA32 free:1297736kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91832kB inactive_anon:0kB active_file:46608kB inactive_file:159432kB unevictable:1536kB writepending:212kB zspages:0kB present:3129332kB managed:2553404kB mlocked:0kB bounce:0kB free_pcp:48660kB local_pcp:18232kB free_cma:0kB
[  154.394262][ T6597] lowmem_reserve[]: 0 0 1 1 1
[  154.399053][ T6597] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  154.430086][ T6597] lowmem_reserve[]: 0 0 0 0 0
[  154.434966][ T6597] Node 1 Normal free:3895340kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:11808kB free_cma:0kB
[  154.468868][ T6597] lowmem_reserve[]: 0 0 0 0 0
[  154.473711][ T6597] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  154.486568][ T6597] Node 0 DMA32: 1862*4kB (UM) 1108*8kB (UME) 712*16kB (UM) 232*32kB (UME) 129*64kB (UME) 72*128kB (UM) 33*256kB (UM) 15*512kB (M) 5*1024kB (UM) 1*2048kB (M) 302*4096kB (UM) = 1312888kB
[  154.505119][ T6597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  154.516719][ T6597] Node 1 Normal: 175*4kB (UME) 48*8kB (UME) 39*16kB (UME) 86*32kB (UME) 31*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3895340kB
[  154.534977][ T6597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  154.544598][ T6597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  154.555642][ T6597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  154.565279][ T6597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  154.574651][ T6597] 64709 total pagecache pages
[  154.579363][ T6597] 0 pages in swap cache
[  154.583590][ T6597] Free swap  = 124996kB
[  154.587766][ T6597] Total swap = 124996kB
[  154.591945][ T6597] 2097051 pages RAM
[  154.595842][ T6597] 0 pages HighMem/MovableOnly
[  154.600554][ T6597] 426802 pages reserved
[  154.602481][ T5844] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  154.604762][ T6597] 0 pages cma reserved
[  154.672210][ T6599] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.686351][ T5844] usb 2-1: device descriptor read/8, error -71
[  154.739848][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  154.829858][ T6592] loop0: detected capacity change from 4096 to 0
[  154.843145][   T30] audit: type=1800 audit(1764548535.077:39): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="file1" dev="loop0" ino=15 res=0 errno=0
[  154.922397][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  154.929778][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.942455][ T5844] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  154.950364][ T5887] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.973172][ T5844] usb 2-1: device descriptor read/8, error -71
[  154.987259][ T5887] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.042729][ T5887] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  155.076135][ T5823] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  155.083072][ T5844] usb usb2-port1: unable to enumerate USB device
[  155.086977][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0
[  155.112998][ T5887] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  155.122199][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.130606][ T5823] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=130)
[  155.152408][ T5823] NILFS error (device loop0): nilfs_readdir: bad page in #12
[  155.161985][ T5823] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  155.173543][ T5823] NILFS (loop0): unable to write superblock: err=-5
[  155.181309][ T5887] usb 4-1: config 0 descriptor??
[  155.192732][ T5823] Buffer I/O error on dev loop0, logical block 2044, lost sync page write
[  155.201325][ T5823] NILFS (loop0): unable to write superblock: err=-5
[  155.211445][ T5823] Remounting filesystem read-only
[  155.245700][ T5823] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  155.293225][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  155.403209][ T6610] qnx6: unable to read the first superblock
[  155.407322][ T6593] loop4: detected capacity change from 0 to 32768
[  155.460376][ T6593] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.475080][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  155.503163][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  155.537234][ T5844] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  155.579445][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.612186][ T6593] XFS (loop4): Ending clean mount
[  155.622395][ T5844] usb 3-1: Product: syz
[  155.626623][ T5844] usb 3-1: Manufacturer: syz
[  155.657836][ T6593] XFS (loop4): Quotacheck needed: Please wait.
[  155.664781][ T5844] usb 3-1: SerialNumber: syz
[  155.692162][ T5844] usb 3-1: config 0 descriptor??
[  155.752085][ T6593] XFS (loop4): Quotacheck: Done.
[  155.785299][ T5844] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  155.804941][ T5844] usb 3-1: Detected SIO
[  155.809294][ T5844] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  155.816726][ T5844] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[  155.857169][ T5844] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  155.881166][ T5857] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.955336][ T5887] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  156.002798][ T5887] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  156.010734][ T5844] usb 3-1: USB disconnect, device number 4
[  156.036551][ T5887] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  156.052435][ T5887] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  156.055434][ T5844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  156.090107][ T5887] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  156.146152][ T5844] ftdi_sio 3-1:0.0: device disconnected
[  156.182305][ T5887] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  156.269333][ T6610] loop0: detected capacity change from 0 to 32768
[  156.270504][ T5887] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints?
[  156.323397][ T6610] ocfs2: Unknown parameter ''
[  157.876444][ T6631] loop0: detected capacity change from 0 to 32768
[  157.884820][ T6631] BTRFS warning: excessive commit interval 2147483648, use with care
[  157.896742][ T6631] btrfs: Deprecated parameter 'usebackuproot'
[  157.906685][ T6631] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  157.919909][ T6631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.156 (6631)
[  157.999562][ T6631] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.009876][ T6631] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  158.346213][ T6095] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  158.362195][ T6631] BTRFS error (device loop0): failed to load root extent
[  158.369443][ T6631] BTRFS warning (device loop0): try to load backup roots slot 1
[  158.378437][ T6074] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  158.392750][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'.
[  158.449974][ T6631] BTRFS warning (device loop0): couldn't read tree root
[  158.457638][ T6631] BTRFS warning (device loop0): try to load backup roots slot 2
[  158.466194][ T1042] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  158.537423][ T6631] BTRFS warning (device loop0): couldn't read tree root
[  158.545970][ T6631] BTRFS warning (device loop0): try to load backup roots slot 3
[  158.583171][ T6631] BTRFS info (device loop0): rebuilding free space tree
[  158.606254][ T6631] BTRFS info (device loop0): checking UUID tree
[  158.614510][ T6631] BTRFS info (device loop0): enabling ssd optimizations
[  158.621495][ T6631] BTRFS info (device loop0): using spread ssd allocation scheme
[  158.629248][ T6631] BTRFS info (device loop0): turning off barriers
[  158.635925][ T6631] BTRFS info (device loop0): turning on flush-on-commit
[  158.644225][ T6631] BTRFS info (device loop0): turning on async discard
[  158.651015][ T6631] BTRFS info (device loop0): enabling free space tree
[  158.657883][ T6631] BTRFS info (device loop0): force clearing of disk cache
[  158.665158][ T6631] BTRFS info (device loop0): enabling auto defrag
[  158.671590][ T6631] BTRFS info (device loop0): trying to use backup root at mount time
[  158.775573][ T5965] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  158.783763][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  158.982654][ T5887] usb 3-1: Using ep0 maxpacket: 32
[  158.993055][ T5965] usb 5-1: config 0 has no interfaces?
[  159.004804][ T5887] usb 3-1: config 1 interface 0 has no altsetting 0
[  159.026447][ T5965] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  159.084437][ T5887] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.40
[  159.095915][ T5965] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  159.113350][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.124733][ T5965] usb 5-1: Product: syz
[  159.129181][ T5965] usb 5-1: Manufacturer: syz
[  159.134480][ T5887] usb 3-1: Product: syz
[  159.138970][ T5965] usb 5-1: SerialNumber: syz
[  159.148426][ T5887] usb 3-1: Manufacturer: syz
[  159.183302][ T5887] usb 3-1: SerialNumber: syz
[  159.189566][ T5965] usb 5-1: config 0 descriptor??
[  159.217200][ T5887] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  159.233536][ T5887] usb 3-1: no configuration chosen from 1 choice
[  159.954483][ T5823] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.067190][    C1] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71
[  160.144941][ T6673] netlink: 666 bytes leftover after parsing attributes in process `syz.4.153'.
[  160.648582][ T5932] usb 4-1: USB disconnect, device number 7
[  161.876858][ T5953] usb 3-1: USB disconnect, device number 5
[  162.027020][ T5932] usb 5-1: USB disconnect, device number 4
[  162.034881][ T6685] syz.3.164 uses obsolete (PF_INET,SOCK_PACKET)
[  162.754884][ T6706] loop0: detected capacity change from 0 to 256
[  162.962303][ T6706] exfat: Deprecated parameter 'namecase'
[  164.353129][ T6706] fuse: Bad value for 'fd'
[  164.372208][ T6712] loop1: detected capacity change from 0 to 512
[  164.567691][ T6712] EXT4-fs: Ignoring removed i_version option
[  164.608111][ T6712] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  165.442196][ T6723] FAULT_INJECTION: forcing a failure.
[  165.442196][ T6723] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.491138][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT(full) 
[  165.491168][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.491185][ T6723] Call Trace:
[  165.491194][ T6723]  <TASK>
[  165.491203][ T6723]  dump_stack_lvl+0x189/0x250
[  165.491235][ T6723]  ? __pfx____ratelimit+0x10/0x10
[  165.491258][ T6723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.491283][ T6723]  ? __pfx__printk+0x10/0x10
[  165.491326][ T6723]  should_fail_ex+0x414/0x560
[  165.491356][ T6723]  strncpy_from_user+0x36/0x2c0
[  165.491383][ T6723]  getname_flags+0xf3/0x540
[  165.491414][ T6723]  __x64_sys_symlink+0x5d/0x90
[  165.491438][ T6723]  do_syscall_64+0xfa/0xf80
[  165.491464][ T6723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.491485][ T6723]  ? clear_bhb_loop+0x60/0xb0
[  165.491508][ T6723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.491528][ T6723] RIP: 0033:0x7fd9b638f749
[  165.491546][ T6723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.491563][ T6723] RSP: 002b:00007fd9b7215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  165.491584][ T6723] RAX: ffffffffffffffda RBX: 00007fd9b65e5fa0 RCX: 00007fd9b638f749
[  165.491600][ T6723] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 00002000000005c0
[  165.491614][ T6723] RBP: 00007fd9b7215090 R08: 0000000000000000 R09: 0000000000000000
[  165.491626][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.491638][ T6723] R13: 00007fd9b65e6038 R14: 00007fd9b65e5fa0 R15: 00007ffcba1e5de8
[  165.491670][ T6723]  </TASK>
[  165.889844][ T6728] loop1: detected capacity change from 0 to 1024
[  165.910631][ T6728] ext3: Unknown parameter 'euid<00000000000000000000'
[  165.977656][ T6728] bridge0: port 3(gretap0) entered blocking state
[  166.016211][ T6728] bridge0: port 3(gretap0) entered disabled state
[  166.093151][ T6728] gretap0: entered allmulticast mode
[  166.185959][ T6728] gretap0: entered promiscuous mode
[  166.192088][ T6728] bridge0: port 3(gretap0) entered blocking state
[  166.199006][ T6728] bridge0: port 3(gretap0) entered forwarding state
[  166.703435][ T6736] tls_set_device_offload_rx: netdev not found
[  166.742638][ T6733] gretap0: left allmulticast mode
[  166.747711][ T6733] gretap0: left promiscuous mode
[  166.813345][ T6733] bridge0: port 3(gretap0) entered disabled state
[  166.889904][ T6728] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  167.025263][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[  167.118827][ T6749] loop3: detected capacity change from 0 to 64
[  167.876337][ T6757] loop1: detected capacity change from 0 to 512
[  167.982626][  T912] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  168.146344][  T912] usb 1-1: config 0 has no interfaces?
[  168.158238][  T912] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  168.167041][ T6757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.170679][  T912] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  168.198000][  T912] usb 1-1: Product: syz
[  168.219091][  T912] usb 1-1: Manufacturer: syz
[  168.239693][  T912] usb 1-1: SerialNumber: syz
[  168.270883][  T912] usb 1-1: config 0 descriptor??
[  168.309764][ T6757] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 6: comm syz.1.185: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=4096, size=4096 fake=0
[  168.552241][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.566995][ T6770] loop3: detected capacity change from 0 to 2048
[  168.626167][ T6771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.083122][ T6323] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  169.134469][ T6776] netlink: 666 bytes leftover after parsing attributes in process `syz.0.181'.
[  169.832640][ T6323] usb 4-1: Using ep0 maxpacket: 32
[  169.850134][ T6323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.886614][ T6323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.914725][ T6323] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  169.934555][ T6323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.947938][ T6763] loop2: detected capacity change from 0 to 40427
[  169.956148][ T6773] loop1: detected capacity change from 0 to 32768
[  169.959520][ T6323] usb 4-1: config 0 descriptor??
[  169.963730][ T6773] btrfs: Unknown parameter 'pcr'
[  169.974643][ T6763] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  169.982541][ T6763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  170.018335][ T6763] F2FS-fs (loop2): invalid crc_offset: 33558524
[  170.242185][ T6763] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.292153][ T6763] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  170.322716][ T6763] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  170.393178][ T6763] f2fs: Unknown parameter 'bh'
[  170.409576][ T5197] udevd[5197]: worker [5826] terminated by signal 33 (Unknown signal 33)
[  170.421713][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  170.437539][ T5197] udevd[5197]: worker [5826] failed while handling '/devices/virtual/block/loop1'
[  170.462103][ T6323] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  170.595148][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.620604][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  170.653702][ T5953] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  170.676087][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.747662][ T5953] usb 2-1: config 0 descriptor??
[  170.775290][ T6785] loop4: detected capacity change from 0 to 16
[  170.844550][ T6323] usb 1-1: USB disconnect, device number 7
[  170.845239][ T6785] erofs (device loop4): mounted with root inode @ nid 36.
[  170.919861][ T6785] erofs (device loop4): readahead error at folio 6 @ nid 36
[  170.959097][ T6785] erofs (device loop4): readahead error at folio 4 @ nid 36
[  170.988640][ T6785] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 36
[  171.040705][ T6785] erofs (device loop4): readahead error at folio 0 @ nid 36
[  171.061444][ T5953] Bluetooth: Can't get state to change to load ram patch err
[  171.074726][ T6785] syz.4.192: attempt to access beyond end of device
[  171.074726][ T6785] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16
[  171.113941][ T5953] Bluetooth: Loading patch file failed
[  171.151607][ T5953] ath3k 2-1:0.0: probe with driver ath3k failed with error -71
[  171.164547][ T6785] syz.4.192: attempt to access beyond end of device
[  171.164547][ T6785] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  171.211178][ T6785] syz.4.192: attempt to access beyond end of device
[  171.211178][ T6785] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  171.240682][ T6785] syz.4.192: attempt to access beyond end of device
[  171.240682][ T6785] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16
[  171.275920][ T5953] usb 2-1: USB disconnect, device number 9
[  171.276202][ T6785] erofs (device loop4): bogus lookback distance 1 @ lcn 0 of nid 36
[  171.292707][ T6785] syz.4.192: attempt to access beyond end of device
[  171.292707][ T6785] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  171.308109][ T6785] erofs (device loop4): read error -5 @ 0 of nid 36
[  171.324432][ T6785] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  171.602426][ T5953] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  172.527877][   T43] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  172.582493][ T5965] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  172.593179][  T912] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  172.639147][ T5953] usb 2-1: Using ep0 maxpacket: 16
[  172.659199][ T5953] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.677461][ T5953] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.766805][ T5953] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  172.795935][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0
[  172.817447][ T5953] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  172.834027][ T6771] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  172.842509][  T912] usb 3-1: Using ep0 maxpacket: 16
[  172.852134][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  172.856262][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.871404][ T6771] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  172.885969][  T912] usb 3-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 16
[  172.900197][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  172.903732][ T5953] usb 2-1: config 0 descriptor??
[  172.916157][  T912] usb 3-1: config 1 interface 0 has no altsetting 0
[  172.926807][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  172.934123][ T6771] Remounting filesystem read-only
[  172.943599][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  172.957421][  T912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  172.963820][ T5855] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  172.966966][ T5965] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  172.987986][  T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.997405][  T912] usb 3-1: Product: Б
[  173.001533][  T912] usb 3-1: Manufacturer: Є
[  173.006578][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.014908][  T912] usb 3-1: SerialNumber: И
[  173.021187][ T5965] usb 1-1: Product: syz
[  173.027828][ T6799] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  173.036488][ T5965] usb 1-1: Manufacturer: syz
[  173.041152][ T5965] usb 1-1: SerialNumber: syz
[  173.076626][ T5965] usb 1-1: config 0 descriptor??
[  173.189489][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'.
[  173.265331][ T6799] netlink: 14 bytes leftover after parsing attributes in process `syz.2.191'.
[  173.331816][ T6807] program syz.0.196 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  173.471746][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.494445][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.508199][ T6799] bond0 (unregistering): Released all slaves
[  173.579632][ T5965] adutux 1-1:0.0: ADU208  now attached to /dev/usb/adutux1
[  173.614886][   T24] usb 2-1: USB disconnect, device number 10
[  173.637341][  T912] usblp 3-1:1.0: usblp2: USB Unidirectional printer dev 6 if 0 alt 15 proto 1 vid 0x0525 pid 0xA4A8
[  173.648927][   T43] usb 4-1: device descriptor read/64, error -71
[  173.668486][ T5965] usb 1-1: USB disconnect, device number 8
[  173.715812][  T912] usb 3-1: USB disconnect, device number 6
[  173.748280][  T912] usblp2: removed
[  173.913134][   T43] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  174.053984][   T43] usb 4-1: device descriptor read/64, error -71
[  174.292466][   T43] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  174.306758][ T6827] loop0: detected capacity change from 0 to 2048
[  174.493278][   T43] usb 4-1: device descriptor read/8, error -71
[  174.537637][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.595703][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.801573][   T43] usb 4-1: reset high-speed USB device number 8 using dummy_hcd
[  175.914307][   T43] usb 4-1: device descriptor read/8, error -71
[  176.420826][ T5927] usb 4-1: USB disconnect, device number 8
[  176.433603][ T6842] loop1: detected capacity change from 0 to 128
[  176.506056][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[  176.813008][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  176.893965][ T6849] syz.3.207 (6849): /proc/6848/oom_adj is deprecated, please use /proc/6848/oom_score_adj instead.
[  176.966519][ T6852] dummy0: left allmulticast mode
[  177.044629][   T24] usb 1-1: config 0 has no interfaces?
[  177.091288][ T6852] bridge0: port 3(dummy0) entered disabled state
[  177.102735][   T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  177.136080][   T24] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  177.147008][ T6852] batman_adv: batadv0: Adding interface: dummy0
[  177.178004][   T24] usb 1-1: Product: syz
[  177.185776][ T6852] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.220729][   T24] usb 1-1: Manufacturer: syz
[  177.225568][ T6852] batman_adv: batadv0: Interface activated: dummy0
[  177.235734][   T24] usb 1-1: SerialNumber: syz
[  177.244898][   T24] usb 1-1: config 0 descriptor??
[  177.721136][ T6855] batadv0: mtu less than device minimum
[  177.923252][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.935665][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.947648][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.959618][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.971549][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.983536][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  177.995495][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  178.007456][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  178.019382][ T6855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  178.388060][ T6862] netlink: 666 bytes leftover after parsing attributes in process `syz.0.204'.
[  179.024751][ T6847] loop4: detected capacity change from 0 to 32768
[  179.811896][ T6860] loop1: detected capacity change from 0 to 32768
[  179.904024][ T6860] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.925342][ T6867] loop3: detected capacity change from 0 to 32768
[  180.005964][ T6867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.211 (6867)
[  180.055041][ T5932] usb 1-1: USB disconnect, device number 9
[  180.088412][ T6867] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.122836][ T6867] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  180.155133][ T6860] XFS (loop1): Ending clean mount
[  180.208071][ T6860] XFS (loop1): Quotacheck needed: Please wait.
[  180.222668][ T6887] netlink: 'syz.2.213': attribute type 1 has an invalid length.
[  181.325415][ T6867] BTRFS info (device loop3): enabling ssd optimizations
[  181.365685][ T6867] BTRFS info (device loop3): turning on async discard
[  181.373434][ T6860] XFS (loop1): Quotacheck: Done.
[  181.379448][ T6867] BTRFS info (device loop3): enabling free space tree
[  181.482438][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.706817][ T6867] 9p: Bad value for 'wfdno'
[  181.752443][ T6917] loop0: detected capacity change from 0 to 512
[  181.805329][ T6917] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.854430][ T6917] EXT4-fs (loop0): 1 truncate cleaned up
[  181.861854][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.932493][ T6022] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  182.102471][ T6022] usb 5-1: Using ep0 maxpacket: 16
[  182.116950][ T6022] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.145999][ T5855] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.163340][ T6022] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.184347][ T6022] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  182.199562][ T6917] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.233956][ T6022] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.268055][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.297472][ T6022] usb 5-1: Product: syz
[  182.340697][ T6022] usb 5-1: Manufacturer: syz
[  182.352449][ T6022] usb 5-1: SerialNumber: syz
[  182.546473][ T6909] loop2: detected capacity change from 0 to 32768
[  182.698178][ T6909] JBD2: Ignoring recovery information on journal
[  183.693653][ T6909] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.624346][ T6924] loop1: detected capacity change from 0 to 32768
[  184.659990][ T6944] overlayfs: conflicting lowerdir path
[  185.037284][ T5833] ocfs2: Unmounting device (7,2) on (node local)
[  185.142542][ T5953] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  185.205867][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.226'.
[  185.285529][ T6950] loop3: detected capacity change from 0 to 1764
[  185.313528][ T6950] iso9660: Unknown parameter 'mapiocharset'
[  185.331085][ T5953] usb 2-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e
[  185.373810][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.388847][ T5953] usb 2-1: Product: syz
[  185.396098][ T5953] usb 2-1: Manufacturer: syz
[  185.400746][ T5953] usb 2-1: SerialNumber: syz
[  185.425867][ T5953] usb 2-1: config 0 descriptor??
[  185.472893][ T5953] pwc: Samsung SNC-35E (v3.0) USB webcam detected.
[  185.596763][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[  185.650887][ T6924] find_entry called with index = 0
[  185.662753][ T6924] find_entry called with index = 0
[  185.706085][ T5953] pwc: Failed to set LED on/off time (-71)
[  185.723513][ T5953] pwc: send_video_command error -71
[  185.728873][ T5953] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  185.745649][ T5953] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  185.779563][ T5953] usb 2-1: USB disconnect, device number 11
[  185.852473][ T6323] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  186.014255][ T6323] usb 3-1: config 0 has no interfaces?
[  186.024767][ T6323] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  186.042361][ T6323] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  186.072416][ T6323] usb 3-1: Product: syz
[  186.082537][ T6323] usb 3-1: Manufacturer: syz
[  186.088774][ T6323] usb 3-1: SerialNumber: syz
[  186.124500][ T6323] usb 3-1: config 0 descriptor??
[  186.253851][ T6950] loop3: detected capacity change from 0 to 40427
[  186.282666][ T6950] F2FS-fs (loop3): invalid crc value
[  186.525965][ T6950] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.564321][ T6950] F2FS-fs (loop3): Start checkpoint disabled!
[  186.593775][ T6950] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  186.612494][ T6950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  186.780782][ T6966] loop4: detected capacity change from 0 to 32768
[  186.912562][ T5953] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  187.068102][ T6977] netlink: 666 bytes leftover after parsing attributes in process `syz.2.224'.
[  187.102488][ T5953] usb 1-1: Using ep0 maxpacket: 16
[  187.341996][ T5953] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  187.588441][ T5953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.730699][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.745523][ T5953] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.964426][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.972980][ T5953] usb 1-1: Product: syz
[  187.977555][ T5953] usb 1-1: Manufacturer: syz
[  187.983313][ T5953] usb 1-1: SerialNumber: syz
[  188.013046][ T5927] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  188.833995][ T5844] usb 3-1: USB disconnect, device number 7
[  188.954076][ T6022] usb 5-1: 0:2 : does not exist
[  189.032867][ T5927] usb 2-1: Using ep0 maxpacket: 16
[  189.073897][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.100519][ T5927] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  189.121226][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.131701][ T5953] usb 1-1: 0:2 : does not exist
[  189.175665][ T5927] usb 2-1: config 0 descriptor??
[  189.218416][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'.
[  189.288405][ T6989] mkiss: ax0: crc mode is auto.
[  189.413510][ T6995] netlink: 68 bytes leftover after parsing attributes in process `syz.2.235'.
[  189.431024][ T6995] ieee802154 phy0 wpan0: encryption failed: -90
[  189.599965][ T5927] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  189.732598][ T6323] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  189.825883][ T5927] usb 2-1: USB disconnect, device number 12
[  189.927300][ T6323] usb 3-1: Using ep0 maxpacket: 32
[  189.939817][ T5953] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  189.949371][ T6323] usb 3-1: config 0 has an invalid interface number: 218 but max is 0
[  189.975037][ T6323] usb 3-1: config 0 has no interface number 0
[  189.994564][ T6323] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07
[  190.005331][ T6323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.013711][ T6323] usb 3-1: Product: syz
[  190.020256][ T6323] usb 3-1: Manufacturer: syz
[  190.025338][ T6323] usb 3-1: SerialNumber: syz
[  190.054877][ T5953] usb 1-1: USB disconnect, device number 10
[  190.063371][ T6323] usb 3-1: config 0 descriptor??
[  190.120764][ T6819] udevd[6819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  190.220243][ T6999] IPVS: set_ctl: invalid protocol: 8 127.150.84.214:13995
[  190.279283][ T5953] usb 3-1: USB disconnect, device number 8
[  190.341964][ T6988] loop4: detected capacity change from 0 to 40427
[  190.352072][ T6988] F2FS-fs (loop4): invalid crc value
[  190.481919][ T7007] loop1: detected capacity change from 0 to 4096
[  190.525705][ T6988] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  190.550261][ T6988] F2FS-fs (loop4): Start checkpoint disabled!
[  190.574047][ T6988] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  190.595544][ T6988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  190.601686][ T7011] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.612513][ T5844] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.758475][ T6988] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  190.792459][ T5844] usb 4-1: Using ep0 maxpacket: 8
[  190.814012][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.832522][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  190.841640][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.876912][ T5932] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  190.887915][ T5844] usb 4-1: config 0 descriptor??
[  190.909916][ T5844] gspca_main: vc032x-2.14.0 probing 046d:0892
[  190.942444][ T5927] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.056149][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.275997][ T5927] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  191.292115][ T5927] usb 1-1: config 1 has no interface number 0
[  191.299213][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.312843][ T5927] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  191.345554][ T5932] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  191.355675][ T5927] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64
[  191.367882][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  191.390545][ T5932] usb 2-1: SerialNumber: syz
[  191.408057][ T5927] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  191.527012][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.609672][ T5927] usb 1-1: Product: syz
[  191.646911][ T5927] usb 1-1: Manufacturer: syz
[  191.665456][ T5927] usb 1-1: SerialNumber: syz
[  191.695162][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.742041][ T7012] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  191.757524][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.805744][ T7012] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  191.880166][ T5927] usb 1-1: Expected 3 endpoints, found: 2
[  192.286543][ T1042] kworker/u8:6: attempt to access beyond end of device
[  192.286543][ T1042] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  192.289546][ T5932] usb 2-1: 0:2 : does not exist
[  192.338553][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  192.338582][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.338595][ T1042] Workqueue: writeback wb_workfn (flush-7:4)
[  192.338637][ T1042] Call Trace:
[  192.338646][ T1042]  <TASK>
[  192.338656][ T1042]  dump_stack_lvl+0x189/0x250
[  192.338691][ T1042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.338717][ T1042]  ? __pfx_queue_work_on+0x10/0x10
[  192.338740][ T1042]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.338765][ T1042]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.338801][ T1042]  f2fs_handle_critical_error+0x37c/0x540
[  192.338841][ T1042]  f2fs_write_end_io+0x94b/0xc10
[  192.338884][ T1042]  __submit_merged_bio+0x256/0x660
[  192.338924][ T1042]  __submit_merged_write_cond+0x269/0x530
[  192.338964][ T1042]  f2fs_write_data_pages+0x2756/0x3290
[  192.339025][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.339128][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.339158][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.339189][ T1042]  ? f2fs_write_meta_pages+0x357/0x450
[  192.339213][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.339236][ T1042]  do_writepages+0x32e/0x550
[  192.339271][ T1042]  ? reacquire_held_locks+0x121/0x1c0
[  192.339296][ T1042]  ? writeback_sb_inodes+0x3bd/0x1870
[  192.339329][ T1042]  __writeback_single_inode+0x133/0x1240
[  192.339356][ T1042]  ? do_raw_spin_unlock+0x122/0x240
[  192.339391][ T1042]  writeback_sb_inodes+0x93a/0x1870
[  192.339446][ T1042]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  192.339516][ T1042]  ? rcu_is_watching+0x15/0xb0
[  192.339562][ T1042]  wb_writeback+0x42b/0xaa0
[  192.339596][ T1042]  ? queue_io+0x241/0x450
[  192.339624][ T1042]  ? __pfx_wb_writeback+0x10/0x10
[  192.339658][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.339686][ T1042]  wb_workfn+0x3f9/0xed0
[  192.339736][ T1042]  ? __pfx_wb_workfn+0x10/0x10
[  192.339792][ T1042]  ? process_one_work+0x868/0x15a0
[  192.339820][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.339846][ T1042]  ? process_one_work+0x868/0x15a0
[  192.339865][ T1042]  process_one_work+0x93a/0x15a0
[  192.339912][ T1042]  ? __pfx_process_one_work+0x10/0x10
[  192.339945][ T1042]  ? assign_work+0x3a1/0x410
[  192.339973][ T1042]  worker_thread+0x9b0/0xee0
[  192.340026][ T1042]  kthread+0x711/0x8a0
[  192.340057][ T1042]  ? __pfx_worker_thread+0x10/0x10
[  192.340080][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.340116][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.340138][ T1042]  ? lockdep_hardirqs_on+0x98/0x140
[  192.340160][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.340189][ T1042]  ret_from_fork+0x599/0xb30
[  192.340214][ T1042]  ? __pfx_ret_from_fork+0x10/0x10
[  192.340247][ T1042]  ? __switch_to_asm+0x39/0x70
[  192.340273][ T1042]  ? __switch_to_asm+0x33/0x70
[  192.340299][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.340328][ T1042]  ret_from_fork_asm+0x1a/0x30
[  192.340377][ T1042]  </TASK>
[  192.341087][ T1042] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  192.379123][ T5932] usb 2-1: USB disconnect, device number 13
[  192.501729][ T1042] CPU: 0 UID: 0 PID: 1042 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  192.501763][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.501780][ T1042] Workqueue: writeback wb_workfn (flush-7:4)
[  192.501834][ T1042] Call Trace:
[  192.501844][ T1042]  <TASK>
[  192.501856][ T1042]  dump_stack_lvl+0x189/0x250
[  192.501893][ T1042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.501922][ T1042]  ? __pfx_queue_work_on+0x10/0x10
[  192.501949][ T1042]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.501976][ T1042]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.502015][ T1042]  f2fs_handle_critical_error+0x37c/0x540
[  192.502062][ T1042]  f2fs_write_end_io+0x94b/0xc10
[  192.502110][ T1042]  __submit_merged_bio+0x256/0x660
[  192.502155][ T1042]  __submit_merged_write_cond+0x269/0x530
[  192.502200][ T1042]  f2fs_write_data_pages+0x2756/0x3290
[  192.502266][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.502379][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.502413][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.502449][ T1042]  ? f2fs_write_meta_pages+0x357/0x450
[  192.502474][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.502501][ T1042]  do_writepages+0x32e/0x550
[  192.502549][ T1042]  ? reacquire_held_locks+0x121/0x1c0
[  192.502579][ T1042]  ? writeback_sb_inodes+0x3bd/0x1870
[  192.502616][ T1042]  __writeback_single_inode+0x133/0x1240
[  192.502647][ T1042]  ? do_raw_spin_unlock+0x122/0x240
[  192.502685][ T1042]  writeback_sb_inodes+0x93a/0x1870
[  192.502744][ T1042]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  192.502822][ T1042]  ? rcu_is_watching+0x15/0xb0
[  192.502864][ T1042]  wb_writeback+0x42b/0xaa0
[  192.502902][ T1042]  ? queue_io+0x241/0x450
[  192.502932][ T1042]  ? __pfx_wb_writeback+0x10/0x10
[  192.502971][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.503002][ T1042]  wb_workfn+0x3f9/0xed0
[  192.503058][ T1042]  ? __pfx_wb_workfn+0x10/0x10
[  192.503119][ T1042]  ? process_one_work+0x868/0x15a0
[  192.503152][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.503183][ T1042]  ? process_one_work+0x868/0x15a0
[  192.503206][ T1042]  process_one_work+0x93a/0x15a0
[  192.503261][ T1042]  ? __pfx_process_one_work+0x10/0x10
[  192.503295][ T1042]  ? assign_work+0x3a1/0x410
[  192.503327][ T1042]  worker_thread+0x9b0/0xee0
[  192.503384][ T1042]  kthread+0x711/0x8a0
[  192.503420][ T1042]  ? __pfx_worker_thread+0x10/0x10
[  192.503446][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.503481][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.503504][ T1042]  ? lockdep_hardirqs_on+0x98/0x140
[  192.503537][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.503571][ T1042]  ret_from_fork+0x599/0xb30
[  192.503596][ T1042]  ? __pfx_ret_from_fork+0x10/0x10
[  192.503635][ T1042]  ? __switch_to_asm+0x39/0x70
[  192.503664][ T1042]  ? __switch_to_asm+0x33/0x70
[  192.503694][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.503727][ T1042]  ret_from_fork_asm+0x1a/0x30
[  192.503781][ T1042]  </TASK>
[  192.516789][ T1042] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  192.972914][ T5844] usb 4-1: USB disconnect, device number 10
[  192.992145][ T1042] CPU: 1 UID: 0 PID: 1042 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  192.992176][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.992192][ T1042] Workqueue: writeback wb_workfn (flush-7:4)
[  192.992235][ T1042] Call Trace:
[  192.992245][ T1042]  <TASK>
[  192.992255][ T1042]  dump_stack_lvl+0x189/0x250
[  192.992289][ T1042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.992319][ T1042]  ? __pfx_queue_work_on+0x10/0x10
[  192.992341][ T1042]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.992365][ T1042]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.992401][ T1042]  f2fs_handle_critical_error+0x37c/0x540
[  192.992440][ T1042]  f2fs_write_end_io+0x94b/0xc10
[  192.992482][ T1042]  __submit_merged_bio+0x256/0x660
[  192.992521][ T1042]  __submit_merged_write_cond+0x269/0x530
[  192.992557][ T1042]  f2fs_write_data_pages+0x2756/0x3290
[  192.992614][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.992714][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.992751][ T1042]  ? __lock_acquire+0x6b6/0x2cf0
[  192.992781][ T1042]  ? f2fs_write_meta_pages+0x357/0x450
[  192.992802][ T1042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.992822][ T1042]  do_writepages+0x32e/0x550
[  192.992854][ T1042]  ? reacquire_held_locks+0x121/0x1c0
[  192.992874][ T1042]  ? writeback_sb_inodes+0x3bd/0x1870
[  192.992905][ T1042]  __writeback_single_inode+0x133/0x1240
[  192.992930][ T1042]  ? do_raw_spin_unlock+0x122/0x240
[  192.992960][ T1042]  writeback_sb_inodes+0x93a/0x1870
[  192.993011][ T1042]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  192.993081][ T1042]  ? rcu_is_watching+0x15/0xb0
[  192.993115][ T1042]  wb_writeback+0x42b/0xaa0
[  192.993145][ T1042]  ? queue_io+0x241/0x450
[  192.993169][ T1042]  ? __pfx_wb_writeback+0x10/0x10
[  192.993199][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.993224][ T1042]  wb_workfn+0x3f9/0xed0
[  192.993271][ T1042]  ? __pfx_wb_workfn+0x10/0x10
[  192.993327][ T1042]  ? process_one_work+0x868/0x15a0
[  192.993358][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.993385][ T1042]  ? process_one_work+0x868/0x15a0
[  192.993404][ T1042]  process_one_work+0x93a/0x15a0
[  192.993455][ T1042]  ? __pfx_process_one_work+0x10/0x10
[  192.993489][ T1042]  ? assign_work+0x3a1/0x410
[  192.993518][ T1042]  worker_thread+0x9b0/0xee0
[  192.993576][ T1042]  kthread+0x711/0x8a0
[  192.993609][ T1042]  ? __pfx_worker_thread+0x10/0x10
[  192.993631][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.993661][ T1042]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.993684][ T1042]  ? lockdep_hardirqs_on+0x98/0x140
[  192.993706][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.993743][ T1042]  ret_from_fork+0x599/0xb30
[  192.993768][ T1042]  ? __pfx_ret_from_fork+0x10/0x10
[  192.993803][ T1042]  ? __switch_to_asm+0x39/0x70
[  192.993830][ T1042]  ? __switch_to_asm+0x33/0x70
[  192.993855][ T1042]  ? __pfx_kthread+0x10/0x10
[  192.993885][ T1042]  ret_from_fork_asm+0x1a/0x30
[  192.993936][ T1042]  </TASK>
[  193.339091][ T1042] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  193.684222][ T5844] usb 1-1: USB disconnect, device number 11
[  194.124087][ T5844] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  194.222507][   T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  194.284885][ T5844] usb 4-1: Using ep0 maxpacket: 16
[  194.339595][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.377379][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.425597][   T10] usb 1-1: config 0 has an invalid interface number: 206 but max is 0
[  194.426699][ T7042] loop2: detected capacity change from 0 to 40427
[  194.452888][ T7042] F2FS-fs (loop2): invalid crc value
[  194.462854][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  194.479421][   T10] usb 1-1: config 0 has no interface number 0
[  194.487492][   T10] usb 1-1: config 0 interface 206 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  194.507981][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  194.517331][   T10] usb 1-1: config 0 interface 206 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  194.533736][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.552196][   T10] usb 1-1: config 0 interface 206 has no altsetting 0
[  194.574728][   T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=2b.4b
[  194.577438][ T7042] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  194.593766][ T5844] usb 4-1: config 0 descriptor??
[  194.599118][ T7042] F2FS-fs (loop2): Start checkpoint disabled!
[  194.611237][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.615141][ T7042] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  194.631616][ T7042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  194.681038][   T10] usb 1-1: Product: syz
[  194.697119][   T10] usb 1-1: Manufacturer: syz
[  194.716800][   T10] usb 1-1: SerialNumber: syz
[  194.764779][   T10] usb 1-1: config 0 descriptor??
[  194.851447][ T7033] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  194.931705][   T10] imon_raw 1-1:0.206: IR endpoint missing
[  195.047017][ T7055] net_ratelimit: 10 callbacks suppressed
[  195.047037][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.104632][   T43] usb 1-1: USB disconnect, device number 12
[  195.195488][   T50] kworker/u8:3: attempt to access beyond end of device
[  195.195488][   T50] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.214601][   T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  195.214632][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  195.214650][   T50] Workqueue: writeback wb_workfn (flush-7:2)
[  195.214693][   T50] Call Trace:
[  195.214702][   T50]  <TASK>
[  195.214711][   T50]  dump_stack_lvl+0x189/0x250
[  195.214746][   T50]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.214773][   T50]  ? __pfx_queue_work_on+0x10/0x10
[  195.214795][   T50]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.214821][   T50]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.214856][   T50]  f2fs_handle_critical_error+0x37c/0x540
[  195.214899][   T50]  f2fs_write_end_io+0x94b/0xc10
[  195.214945][   T50]  __submit_merged_bio+0x256/0x660
[  195.214979][   T50]  __submit_merged_write_cond+0x269/0x530
[  195.215013][   T50]  f2fs_write_data_pages+0x2756/0x3290
[  195.215066][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.215098][   T50]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  195.215154][   T50]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  195.215181][   T50]  ? __lock_acquire+0x6b6/0x2cf0
[  195.215217][   T50]  ? __lock_acquire+0x6b6/0x2cf0
[  195.215240][   T50]  ? __lock_acquire+0x6b6/0x2cf0
[  195.215272][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  195.215299][   T50]  do_writepages+0x32e/0x550
[  195.215329][   T50]  ? reacquire_held_locks+0x121/0x1c0
[  195.215349][   T50]  ? writeback_sb_inodes+0x3bd/0x1870
[  195.215377][   T50]  __writeback_single_inode+0x133/0x1240
[  195.215399][   T50]  ? do_raw_spin_unlock+0x122/0x240
[  195.215428][   T50]  writeback_sb_inodes+0x93a/0x1870
[  195.215476][   T50]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  195.215540][   T50]  ? rcu_is_watching+0x15/0xb0
[  195.215572][   T50]  wb_writeback+0x42b/0xaa0
[  195.215601][   T50]  ? queue_io+0x241/0x450
[  195.215624][   T50]  ? __pfx_wb_writeback+0x10/0x10
[  195.215653][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.215677][   T50]  wb_workfn+0x3f9/0xed0
[  195.215720][   T50]  ? __pfx_wb_workfn+0x10/0x10
[  195.215767][   T50]  ? process_one_work+0x868/0x15a0
[  195.215791][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.215813][   T50]  ? process_one_work+0x868/0x15a0
[  195.215829][   T50]  process_one_work+0x93a/0x15a0
[  195.215876][   T50]  ? __pfx_process_one_work+0x10/0x10
[  195.215903][   T50]  ? assign_work+0x3a1/0x410
[  195.215926][   T50]  worker_thread+0x9b0/0xee0
[  195.215972][   T50]  kthread+0x711/0x8a0
[  195.215999][   T50]  ? __pfx_worker_thread+0x10/0x10
[  195.216018][   T50]  ? __pfx_kthread+0x10/0x10
[  195.216043][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.216060][   T50]  ? lockdep_hardirqs_on+0x98/0x140
[  195.216079][   T50]  ? __pfx_kthread+0x10/0x10
[  195.216103][   T50]  ret_from_fork+0x599/0xb30
[  195.216123][   T50]  ? __pfx_ret_from_fork+0x10/0x10
[  195.216152][   T50]  ? __switch_to_asm+0x39/0x70
[  195.216173][   T50]  ? __switch_to_asm+0x33/0x70
[  195.216195][   T50]  ? __pfx_kthread+0x10/0x10
[  195.216219][   T50]  ret_from_fork_asm+0x1a/0x30
[  195.216260][   T50]  </TASK>
[  195.216816][   T50] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  195.527673][ T5844] usbhid 4-1:0.0: can't add hid device: -71
[  195.533794][ T5844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  195.547002][ T5844] usb 4-1: USB disconnect, device number 11
[  195.582438][ T5953] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  195.641010][ T7055] loop4: detected capacity change from 0 to 32768
[  195.733970][ T5953] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  195.762441][ T5953] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  195.846090][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0
[  195.892474][ T5953] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  195.992416][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.037887][ T5953] usb 2-1: config 0 descriptor??
[  196.071637][ T5953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  196.461403][ T7076] loop2: detected capacity change from 0 to 512
[  196.490072][ T7076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  196.683435][ T7076] EXT4-fs (loop2): 1 truncate cleaned up
[  196.691227][ T7076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.774618][ T7085] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 2: comm syz.2.251: invalid block
[  196.791078][ T7085] EXT4-fs (loop2): Remounting filesystem read-only
[  196.980449][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.958799][ T7093] ipvlan2: entered promiscuous mode
[  198.030403][ T7068] loop3: detected capacity change from 0 to 32768
[  198.125989][ T7068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.254 (7068)
[  198.183614][ T5953] usb 2-1: USB disconnect, device number 14
[  198.232076][ T7068] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  198.262691][ T7068] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  198.445369][ T7116] capability: warning: `syz.1.262' uses deprecated v2 capabilities in a way that may be insecure
[  198.467352][ T7068] BTRFS info (device loop3): allowing degraded mounts
[  198.480297][ T7068] BTRFS info (device loop3): enabling ssd optimizations
[  198.502574][ T7068] BTRFS info (device loop3): turning on flush-on-commit
[  198.519277][ T7068] BTRFS info (device loop3): turning on sync discard
[  198.529395][ T7068] BTRFS info (device loop3): enabling free space tree
[  198.552485][ T7068] BTRFS info (device loop3): max_inline set to 0
[  198.768535][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'.
[  199.084148][ T5855] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.194192][ T7134] loop1: detected capacity change from 0 to 2048
[  199.223457][ T7134] nilfs2: Unknown parameter ''
[  199.439987][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  199.446731][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.517437][ T7099] loop4: detected capacity change from 0 to 32768
[  199.652787][ T5965] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  199.716962][ T7099] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  199.879630][ T7099] XFS (loop4): Ending clean mount
[  199.952404][ T5844] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  200.017275][ T7168] loop1: detected capacity change from 0 to 512
[  200.030589][ T7166] loop0: detected capacity change from 0 to 2048
[  200.050808][ T7168] EXT4-fs: Ignoring removed nobh option
[  200.051929][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'.
[  200.101468][ T7168] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  200.111839][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'.
[  200.145236][ T7168] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.273: attempt to clear invalid blocks 1 len 1
[  200.187812][ T7166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.201069][ T5844] usb 4-1: Using ep0 maxpacket: 8
[  200.217368][ T7166] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  200.223217][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  200.232273][ T7168] EXT4-fs (loop1): Remounting filesystem read-only
[  200.247553][ T5844] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  200.258163][ T5857] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.267059][ T5844] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  200.275644][ T5844] usb 4-1: Product: syz
[  200.279846][ T5844] usb 4-1: Manufacturer: syz
[  200.284607][ T5844] usb 4-1: SerialNumber: syz
[  200.284969][ T7168] EXT4-fs (loop1): 1 truncate cleaned up
[  200.334311][ T7168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.360363][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.576646][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.593603][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.602232][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.630184][ T5844] usb 4-1: palm_os_3_probe - error -110 getting connection information
[  200.691981][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.699735][ T7178] bridge0: entered allmulticast mode
[  200.759373][ T5844] visor 4-1:1.0: probe with driver visor failed with error -110
[  201.155099][ T7183] overlayfs: conflicting lowerdir path
[  201.282813][ T7184] warning: `syz.3.271' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  202.903393][ T5844] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  203.119800][ T7188] loop4: detected capacity change from 0 to 40427
[  203.176842][ T7188] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  203.203281][ T7188] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  203.232500][ T5844] usb 3-1: Invalid ep0 maxpacket: 64
[  203.294736][ T7194] loop0: detected capacity change from 0 to 128
[  203.375263][   T30] audit: type=1804 audit(1764548583.587:40): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.278" name="/newroot/61/file0/bus" dev="loop0" ino=1048613 res=1 errno=0
[  203.402614][ T5844] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  203.672227][ T7188] F2FS-fs (loop4): invalid crc value
[  203.758449][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  203.765204][ T5844] usb 3-1: Invalid ep0 maxpacket: 64
[  203.938985][ T5844] usb usb3-port1: attempt power cycle
[  204.054833][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.195702][   T43] usb 4-1: USB disconnect, device number 12
[  204.255906][ T7200] nbd: socks must be embedded in a SOCK_ITEM attr
[  204.332541][ T5844] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  204.399237][ T7188] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  204.416810][ T5844] usb 3-1: Invalid ep0 maxpacket: 64
[  204.423013][ T7188] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  204.430090][ T7188] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  204.569232][ T5844] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  204.734280][ T5844] usb 3-1: Invalid ep0 maxpacket: 64
[  204.958807][ T5844] usb usb3-port1: unable to enumerate USB device
[  205.257684][ T7216] loop3: detected capacity change from 0 to 164
[  205.720554][ T7203] loop1: detected capacity change from 0 to 32768
[  207.424553][ T7245] loop1: detected capacity change from 0 to 32768
[  207.436979][ T7245] (syz.1.289,7245,0):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0
[  207.445427][ T7245] (syz.1.289,7245,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  207.453501][ T7245] (syz.1.289,7245,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  207.462036][ T7245] (syz.1.289,7245,0):ocfs2_fill_super:1177 ERROR: status = -22
[  207.656884][ T7218] loop0: detected capacity change from 0 to 40427
[  207.692748][ T7218] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  207.712470][ T7218] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  207.744967][ T7218] F2FS-fs (loop0): invalid crc value
[  208.159088][ T7218] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.239319][ T7218] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  208.246689][ T7218] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  208.598107][ T7251] loop1: detected capacity change from 0 to 32768
[  208.637468][ T7251] btrfs: Deprecated parameter 'usebackuproot'
[  208.670924][ T7251] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  208.693112][ T7251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.290 (7251)
[  208.990494][ T7251] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.026771][ T7251] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  209.142439][ T7251] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  209.155790][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'.
[  209.367130][ T6505] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  209.456230][ T7251] BTRFS error (device loop1): failed to load root extent
[  209.495630][ T7251] BTRFS warning (device loop1): try to load backup roots slot 1
[  209.504723][ T6505] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  209.532398][ T7251] BTRFS warning (device loop1): couldn't read tree root
[  209.551208][ T7251] BTRFS warning (device loop1): try to load backup roots slot 2
[  209.571089][ T6203] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  209.722564][ T5902] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  209.734359][ T7263] loop3: detected capacity change from 0 to 8192
[  209.815224][ T7251] BTRFS warning (device loop1): couldn't read tree root
[  209.822259][ T7251] BTRFS warning (device loop1): try to load backup roots slot 3
[  209.924139][ T7284] loop0: detected capacity change from 0 to 128
[  210.020452][   T30] audit: type=1804 audit(1764548590.207:41): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.294" name="/newroot/64/file0/bus" dev="loop0" ino=1048614 res=1 errno=0
[  210.119387][ T7251] BTRFS info (device loop1): rebuilding free space tree
[  210.530273][ T7251] BTRFS info (device loop1): disabling free space tree
[  210.587486][ T7251] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  210.658180][ T7251] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  210.719568][ T7287] loop2: detected capacity change from 0 to 2048
[  210.750253][ T7251] BTRFS info (device loop1): setting nodatasum
[  210.765711][ T7289] loop4: detected capacity change from 0 to 8
[  210.798447][ T7251] BTRFS info (device loop1): setting nodatacow
[  210.812429][ T6119]  loop3: AHDI p2 p3
[  210.816792][ T6119] loop3: p2 size 65535 extends beyond EOD, truncated
[  210.840310][ T7287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.870981][ T7251] BTRFS info (device loop1): enabling ssd optimizations
[  210.880473][ T7289] SQUASHFS error: zlib decompression failed, data probably corrupt
[  210.900069][ T7251] BTRFS info (device loop1): turning off barriers
[  210.907731][ T7289] SQUASHFS error: Failed to read block 0x4e8: -5
[  210.954915][ T7263]  loop3: AHDI p2 p3
[  210.966410][ T7251] BTRFS info (device loop1): turning on sync discard
[  210.993236][ T7263] loop3: p2 size 65535 extends beyond EOD, truncated
[  211.032273][ T7251] BTRFS info (device loop1): enabling disk space caching
[  211.086908][   T30] audit: type=1800 audit(1764548591.317:42): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.297" name="file1" dev="loop4" ino=5 res=0 errno=0
[  211.110436][ T7295] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  211.135821][ T7251] BTRFS info (device loop1): force clearing of disk cache
[  211.186328][ T7251] BTRFS info (device loop1): enabling auto defrag
[  211.226271][ T7251] BTRFS info (device loop1): trying to use backup root at mount time
[  211.259476][ T7295] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  211.289236][ T7251] BTRFS info (device loop1): max_inline set to 0
[  211.350553][ T7295] EXT4-fs (loop2): This should not happen!! Data will be lost
[  211.350553][ T7295] 
[  211.436083][ T7295] EXT4-fs (loop2): Total free blocks count 0
[  211.473227][ T7295] EXT4-fs (loop2): Free/Dirty block details
[  211.520739][ T7295] EXT4-fs (loop2): free_blocks=2415919504
[  211.547459][ T7295] EXT4-fs (loop2): dirty_blocks=32
[  211.553893][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.587378][ T5902] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  211.592527][ T7295] EXT4-fs (loop2): Block reservation details
[  211.602417][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.610497][ T5902] usb 4-1: Product: syz
[  211.632362][ T5902] usb 4-1: Manufacturer: syz
[  211.637039][ T5902] usb 4-1: SerialNumber: syz
[  211.668543][ T7295] EXT4-fs (loop2): i_reserved_data_blocks=2
[  211.780053][ T5825] Bluetooth: hci3: command 0x0406 tx timeout
[  211.791962][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  211.802232][ T5830] Bluetooth: hci0: command 0x0406 tx timeout
[  211.808777][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  211.853936][ T1308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  212.175372][ T7303] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(38)
[  212.182417][ T7303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  212.216728][ T5902] rtl8150 4-1:1.0: couldn't reset the device
[  212.252952][ T5902] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  212.284623][ T5902] usb 4-1: USB disconnect, device number 13
[  212.307902][ T7303] vhci_hcd vhci_hcd.0: Device attached
[  212.421082][ T7309] loop0: detected capacity change from 0 to 256
[  212.428536][ T7309] exfat: Unknown parameter ''
[  212.482538][ T5844] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  213.262946][ T5844] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  213.969167][ T6819] udevd[6819]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  213.993347][ T7307] vhci_hcd: connection reset by peer
[  214.025524][   T60] vhci_hcd vhci_hcd.4: stop threads
[  214.056474][   T60] vhci_hcd vhci_hcd.4: release socket
[  214.118685][   T60] vhci_hcd vhci_hcd.4: disconnect device
[  214.446833][ T7343] overlayfs: conflicting lowerdir path
[  215.158989][ T7347] loop4: detected capacity change from 0 to 512
[  215.271884][ T7347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.313860][ T7347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  215.321938][ T7347] System zones: 1-2, 4-12, 8-8
[  215.393330][ T7347] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.308: iget: bad i_size value: 38620345925642
[  215.446278][ T7351] loop2: detected capacity change from 0 to 512
[  215.472182][ T7351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.498160][ T7347] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.308: couldn't read orphan inode 15 (err -117)
[  215.543514][ T7351] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.561628][ T7347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.625175][   T30] audit: type=1800 audit(1764548595.857:43): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file2" dev="loop2" ino=16 res=0 errno=0
[  215.663117][ T7347] Direct I/O collision with buffered writes! File: /file1 Comm: syz.4.308
[  215.702796][   T30] audit: type=1800 audit(1764548595.867:44): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file2" dev="loop2" ino=16 res=0 errno=0
[  215.803667][   T50] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  215.868202][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.873013][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  215.934775][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[  215.934775][   T50] 
[  215.962359][   T50] EXT4-fs (loop4): Total free blocks count 0
[  215.982402][   T50] EXT4-fs (loop4): Free/Dirty block details
[  215.999424][   T50] EXT4-fs (loop4): free_blocks=0
[  216.041146][   T50] EXT4-fs (loop4): dirty_blocks=4
[  216.050788][   T50] EXT4-fs (loop4): Block reservation details
[  216.080933][   T50] EXT4-fs (loop4): i_reserved_data_blocks=4
[  216.083854][ T7361] netlink: 68 bytes leftover after parsing attributes in process `syz.2.312'.
[  216.116635][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.406757][ T6022] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  216.540512][ T7353] loop0: detected capacity change from 0 to 40427
[  216.556410][ T7353] F2FS-fs (loop0): invalid crc value
[  216.570113][ T6022] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  216.602065][ T6022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.634408][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  216.651898][ T6022] usb 3-1: Product: syz
[  216.662103][ T6022] usb 3-1: Manufacturer: syz
[  216.676981][ T6022] usb 3-1: SerialNumber: syz
[  216.695176][ T6022] usb 3-1: config 0 descriptor??
[  217.356354][ T7353] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  217.363789][ T6022] usb 3-1: Firmware version (0.0) predates our first public release.
[  217.435208][ T6022] usb 3-1: Please update to version 0.2 or newer
[  217.473504][ T7353] F2FS-fs (loop0): Start checkpoint disabled!
[  217.555706][ T6022] usb 3-1: USB disconnect, device number 13
[  217.560656][ T7353] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  217.605158][ T7353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  217.941183][ T7353] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  218.130685][   T60] kworker/u8:4: attempt to access beyond end of device
[  218.130685][   T60] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  218.187509][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  218.187548][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  218.187564][   T60] Workqueue: writeback wb_workfn (flush-7:0)
[  218.187608][   T60] Call Trace:
[  218.187616][   T60]  <TASK>
[  218.187626][   T60]  dump_stack_lvl+0x189/0x250
[  218.187659][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.187685][   T60]  ? __pfx_queue_work_on+0x10/0x10
[  218.187708][   T60]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.187732][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.187771][   T60]  f2fs_handle_critical_error+0x37c/0x540
[  218.187815][   T60]  f2fs_write_end_io+0x94b/0xc10
[  218.187863][   T60]  __submit_merged_bio+0x256/0x660
[  218.187904][   T60]  __submit_merged_write_cond+0x269/0x530
[  218.187947][   T60]  f2fs_write_data_pages+0x2756/0x3290
[  218.188015][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.188134][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  218.188164][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  218.188199][   T60]  ? f2fs_write_meta_pages+0x357/0x450
[  218.188224][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.188267][   T60]  do_writepages+0x32e/0x550
[  218.188305][   T60]  ? reacquire_held_locks+0x121/0x1c0
[  218.188330][   T60]  ? writeback_sb_inodes+0x3bd/0x1870
[  218.188364][   T60]  __writeback_single_inode+0x133/0x1240
[  218.188392][   T60]  ? do_raw_spin_unlock+0x122/0x240
[  218.188429][   T60]  writeback_sb_inodes+0x93a/0x1870
[  218.188490][   T60]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  218.188578][   T60]  ? rcu_is_watching+0x15/0xb0
[  218.188619][   T60]  wb_writeback+0x42b/0xaa0
[  218.188655][   T60]  ? queue_io+0x241/0x450
[  218.188685][   T60]  ? __pfx_wb_writeback+0x10/0x10
[  218.188722][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.188752][   T60]  wb_workfn+0x3f9/0xed0
[  218.188806][   T60]  ? __pfx_wb_workfn+0x10/0x10
[  218.188866][   T60]  ? process_one_work+0x868/0x15a0
[  218.188897][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.188925][   T60]  ? process_one_work+0x868/0x15a0
[  218.188944][   T60]  process_one_work+0x93a/0x15a0
[  218.188997][   T60]  ? __pfx_process_one_work+0x10/0x10
[  218.189032][   T60]  ? assign_work+0x3a1/0x410
[  218.189061][   T60]  worker_thread+0x9b0/0xee0
[  218.189119][   T60]  kthread+0x711/0x8a0
[  218.189152][   T60]  ? __pfx_worker_thread+0x10/0x10
[  218.189175][   T60]  ? __pfx_kthread+0x10/0x10
[  218.189206][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.189228][   T60]  ? lockdep_hardirqs_on+0x98/0x140
[  218.189251][   T60]  ? __pfx_kthread+0x10/0x10
[  218.189281][   T60]  ret_from_fork+0x599/0xb30
[  218.189307][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  218.189343][   T60]  ? __switch_to_asm+0x39/0x70
[  218.189371][   T60]  ? __switch_to_asm+0x33/0x70
[  218.189397][   T60]  ? __pfx_kthread+0x10/0x10
[  218.189427][   T60]  ret_from_fork_asm+0x1a/0x30
[  218.189480][   T60]  </TASK>
[  218.192023][   T60] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  218.572512][ T5844] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  218.770830][ T7388] ptrace attach of "./syz-executor exec"[7387] was attempted by "./syz-executor exec"[7388]
[  218.936504][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  218.936539][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  218.936554][   T60] Workqueue: writeback wb_workfn (flush-7:0)
[  218.936598][   T60] Call Trace:
[  218.936607][   T60]  <TASK>
[  218.936616][   T60]  dump_stack_lvl+0x189/0x250
[  218.936649][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.936676][   T60]  ? __pfx_queue_work_on+0x10/0x10
[  218.936698][   T60]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.936724][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.936761][   T60]  f2fs_handle_critical_error+0x37c/0x540
[  218.936803][   T60]  f2fs_write_end_io+0x94b/0xc10
[  218.936848][   T60]  __submit_merged_bio+0x256/0x660
[  218.936889][   T60]  __submit_merged_write_cond+0x269/0x530
[  218.936930][   T60]  f2fs_write_data_pages+0x2756/0x3290
[  218.936991][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.937096][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  218.937127][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  218.937160][   T60]  ? f2fs_write_meta_pages+0x357/0x450
[  218.937184][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.937216][   T60]  do_writepages+0x32e/0x550
[  218.937252][   T60]  ? reacquire_held_locks+0x121/0x1c0
[  218.937278][   T60]  ? writeback_sb_inodes+0x3bd/0x1870
[  218.937313][   T60]  __writeback_single_inode+0x133/0x1240
[  218.937341][   T60]  ? do_raw_spin_unlock+0x122/0x240
[  218.937377][   T60]  writeback_sb_inodes+0x93a/0x1870
[  218.937432][   T60]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  218.937507][   T60]  ? rcu_is_watching+0x15/0xb0
[  218.937545][   T60]  wb_writeback+0x42b/0xaa0
[  218.937580][   T60]  ? queue_io+0x241/0x450
[  218.937609][   T60]  ? __pfx_wb_writeback+0x10/0x10
[  218.937644][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.937673][   T60]  wb_workfn+0x3f9/0xed0
[  218.937725][   T60]  ? __pfx_wb_workfn+0x10/0x10
[  218.937780][   T60]  ? process_one_work+0x868/0x15a0
[  218.937810][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.937838][   T60]  ? process_one_work+0x868/0x15a0
[  218.937858][   T60]  process_one_work+0x93a/0x15a0
[  218.937906][   T60]  ? __pfx_process_one_work+0x10/0x10
[  218.937939][   T60]  ? assign_work+0x3a1/0x410
[  218.937968][   T60]  worker_thread+0x9b0/0xee0
[  218.938021][   T60]  kthread+0x711/0x8a0
[  218.938054][   T60]  ? __pfx_worker_thread+0x10/0x10
[  218.938077][   T60]  ? __pfx_kthread+0x10/0x10
[  218.938108][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.938130][   T60]  ? lockdep_hardirqs_on+0x98/0x140
[  218.938153][   T60]  ? __pfx_kthread+0x10/0x10
[  218.938183][   T60]  ret_from_fork+0x599/0xb30
[  218.938213][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  218.938248][   T60]  ? __switch_to_asm+0x39/0x70
[  218.938275][   T60]  ? __switch_to_asm+0x33/0x70
[  218.938302][   T60]  ? __pfx_kthread+0x10/0x10
[  218.938332][   T60]  ret_from_fork_asm+0x1a/0x30
[  218.938382][   T60]  </TASK>
[  219.322512][   T60] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  219.329602][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  219.329629][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  219.329644][   T60] Workqueue: writeback wb_workfn (flush-7:0)
[  219.329686][   T60] Call Trace:
[  219.329695][   T60]  <TASK>
[  219.329704][   T60]  dump_stack_lvl+0x189/0x250
[  219.329736][   T60]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.329762][   T60]  ? __pfx_queue_work_on+0x10/0x10
[  219.329784][   T60]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.329808][   T60]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.329843][   T60]  f2fs_handle_critical_error+0x37c/0x540
[  219.329883][   T60]  f2fs_write_end_io+0x94b/0xc10
[  219.329926][   T60]  __submit_merged_bio+0x256/0x660
[  219.329964][   T60]  __submit_merged_write_cond+0x269/0x530
[  219.330003][   T60]  f2fs_write_data_pages+0x2756/0x3290
[  219.330061][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  219.330160][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  219.330197][   T60]  ? __lock_acquire+0x6b6/0x2cf0
[  219.330223][   T60]  ? f2fs_write_meta_pages+0x357/0x450
[  219.330244][   T60]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  219.330266][   T60]  do_writepages+0x32e/0x550
[  219.330299][   T60]  ? reacquire_held_locks+0x121/0x1c0
[  219.330323][   T60]  ? writeback_sb_inodes+0x3bd/0x1870
[  219.330354][   T60]  __writeback_single_inode+0x133/0x1240
[  219.330400][   T60]  ? do_raw_spin_unlock+0x122/0x240
[  219.330441][   T60]  writeback_sb_inodes+0x93a/0x1870
[  219.330494][   T60]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  219.330563][   T60]  ? rcu_is_watching+0x15/0xb0
[  219.330600][   T60]  wb_writeback+0x42b/0xaa0
[  219.330632][   T60]  ? queue_io+0x241/0x450
[  219.330660][   T60]  ? __pfx_wb_writeback+0x10/0x10
[  219.330692][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.330720][   T60]  wb_workfn+0x3f9/0xed0
[  219.330769][   T60]  ? __pfx_wb_workfn+0x10/0x10
[  219.330822][   T60]  ? process_one_work+0x868/0x15a0
[  219.330850][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.330875][   T60]  ? process_one_work+0x868/0x15a0
[  219.330895][   T60]  process_one_work+0x93a/0x15a0
[  219.330939][   T60]  ? __pfx_process_one_work+0x10/0x10
[  219.330971][   T60]  ? assign_work+0x3a1/0x410
[  219.330998][   T60]  worker_thread+0x9b0/0xee0
[  219.331047][   T60]  kthread+0x711/0x8a0
[  219.331079][   T60]  ? __pfx_worker_thread+0x10/0x10
[  219.331101][   T60]  ? __pfx_kthread+0x10/0x10
[  219.331130][   T60]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.331151][   T60]  ? lockdep_hardirqs_on+0x98/0x140
[  219.331174][   T60]  ? __pfx_kthread+0x10/0x10
[  219.331202][   T60]  ret_from_fork+0x599/0xb30
[  219.331225][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  219.331258][   T60]  ? __switch_to_asm+0x39/0x70
[  219.331283][   T60]  ? __switch_to_asm+0x33/0x70
[  219.331309][   T60]  ? __pfx_kthread+0x10/0x10
[  219.331337][   T60]  ret_from_fork_asm+0x1a/0x30
[  219.331384][   T60]  </TASK>
[  219.331392][   T60] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  220.128018][ T7404] netlink: 'syz.4.322': attribute type 32 has an invalid length.
[  220.530924][ T7413] overlayfs: conflicting lowerdir path
[  221.086653][ T7383] loop2: detected capacity change from 0 to 32768
[  221.147812][ T7383] (syz.2.315,7383,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.228616][ T7383] (syz.2.315,7383,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.263826][ T7383] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  221.296534][ T7383] (syz.2.315,7383,0):ocfs2_initialize_super:2229 ERROR: status = -12
[  221.376055][ T7383] (syz.2.315,7383,0):ocfs2_fill_super:1177 ERROR: status = -12
[  221.619377][ T7422] overlayfs: conflicting lowerdir path
[  222.082581][ T7345] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  222.254580][ T7345] usb 3-1: config index 0 descriptor too short (expected 65305, got 72)
[  222.276315][ T7345] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  222.298066][ T7345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.320116][ T7345] usb 3-1: Product: syz
[  222.349440][ T7345] usb 3-1: Manufacturer: syz
[  222.379949][ T7345] usb 3-1: SerialNumber: syz
[  222.433920][ T7345] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  222.548010][ T5844] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  222.663386][ T7421] loop1: detected capacity change from 0 to 32768
[  222.682553][ T7421] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.324 (7421)
[  222.745152][ T7421] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  222.772548][ T7421] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  222.872745][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  222.960025][   T24] usb 3-1: USB disconnect, device number 14
[  223.005529][   T50] BTRFS warning (device loop1): checksum verify failed on logical 5267456 mirror 1 wanted 0x3831e3715d987aad found 0xfd9cf30b502d5938 level 0
[  223.069924][ T7421] BTRFS warning (device loop1): failed to read fs tree: -5
[  223.122447][ T7345] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  223.210385][ T7421] BTRFS error (device loop1): open_ctree failed: -5
[  223.343526][ T7345] usb 1-1: Using ep0 maxpacket: 32
[  223.381335][ T7345] usb 1-1: config 0 interface 0 has no altsetting 0
[  223.401613][ T7345] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  223.431336][ T7345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.471905][ T7345] usb 1-1: Product: syz
[  223.492639][ T7345] usb 1-1: Manufacturer: syz
[  223.498236][ T7345] usb 1-1: SerialNumber: syz
[  223.502469][  T912] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  223.511464][ T7345] usb 1-1: config 0 descriptor??
[  223.674567][ T5844] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  223.682779][  T912] usb 4-1: Using ep0 maxpacket: 8
[  223.699618][  T912] usb 4-1: config 8 has an invalid interface number: 238 but max is 0
[  223.713993][ T5844] ath9k_htc: Failed to initialize the device
[  223.723016][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[  223.734011][  T912] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  223.778743][  T912] usb 4-1: config 8 has no interface number 0
[  223.799009][  T912] usb 4-1: config 8 interface 238 has no altsetting 0
[  223.825451][  T912] usb 4-1: New USB device found, idVendor=0421, idProduct=00e9, bcdDevice=43.de
[  223.847856][  T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.871350][  T912] usb 4-1: Product: syz
[  223.884941][  T912] usb 4-1: Manufacturer: syz
[  223.892980][ T5887] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  223.914292][  T912] usb 4-1: SerialNumber: syz
[  223.966335][ T7434] loop0: detected capacity change from 0 to 32768
[  223.991152][ T7345] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  224.018591][ T7434] btrfs: Unknown parameter 'autodeGPL'
[  224.072440][ T5887] usb 2-1: Using ep0 maxpacket: 16
[  224.084963][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.108235][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.132559][ T5887] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  224.189673][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.225902][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.271642][ T5887] usb 2-1: Product: syz
[  224.297333][ T5887] usb 2-1: Manufacturer: syz
[  224.302051][ T5887] usb 2-1: SerialNumber: syz
[  224.604451][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'.
[  224.681376][ T7474] bond0: entered promiscuous mode
[  224.723720][ T7474] bond_slave_0: entered promiscuous mode
[  224.755670][ T7474] bond_slave_1: entered promiscuous mode
[  224.787624][ T7474] geneve0: entered promiscuous mode
[  224.824144][ T7474] hsr1: entered promiscuous mode
[  225.009355][ T7468] loop2: detected capacity change from 0 to 32768
[  225.125768][ T7468] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.333 (7468)
[  225.195812][ T7468] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  225.239376][ T7468] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  225.258318][ T7479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  225.421515][ T7479] Bluetooth: MGMT ver 1.23
[  225.907935][ T7345] usb 1-1: USB disconnect, device number 14
[  226.146597][ T7468] BTRFS info (device loop2): enabling ssd optimizations
[  226.182739][ T7468] BTRFS info (device loop2): turning on async discard
[  226.245639][ T7468] BTRFS info (device loop2): enabling free space tree
[  226.301027][ T7468] BTRFS info (device loop2): use zstd compression, level 3
[  226.492739][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'.
[  226.800205][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[  227.213315][ T5147] Bluetooth: hci4: command 0x0406 tx timeout
[  227.431882][ T5833] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.524549][  T912] rndis_host 4-1:8.238: skipping garbage
[  227.544993][  T912] usb 4-1: bad CDC descriptors
[  227.551322][  T912] cdc_acm 4-1:8.238: skipping garbage
[  227.588944][ T5887] usb 2-1: 0:2 : does not exist
[  227.642693][  T912] usb 4-1: USB disconnect, device number 14
[  227.695193][ T5887] usb 2-1: USB disconnect, device number 15
[  227.916321][ T6819] udevd[6819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  228.033077][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[  228.367604][ T7532] netlink: 'syz.0.342': attribute type 39 has an invalid length.
[  228.442408][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  228.538779][ T7536] overlayfs: conflicting lowerdir path
[  228.824281][ T5887] usb 3-1: config 0 has no interfaces?
[  228.843815][ T5887] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  228.863242][ T5887] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  228.888631][ T5887] usb 3-1: Product: syz
[  228.902591][ T5887] usb 3-1: Manufacturer: syz
[  228.909978][ T5887] usb 3-1: SerialNumber: syz
[  228.944124][ T5887] usb 3-1: config 0 descriptor??
[  229.137714][ T7524] loop1: detected capacity change from 0 to 32768
[  229.226510][ T7524] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  229.378231][ T7524] XFS (loop1): Ending clean mount
[  229.544128][ T7560] mmap: syz.0.345 (7560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  229.738628][ T7524] syzkaller0: entered promiscuous mode
[  229.762742][ T7524] syzkaller0: entered allmulticast mode
[  229.783423][ T7565] netlink: 666 bytes leftover after parsing attributes in process `syz.2.339'.
[  229.860225][ T7560] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  230.254617][ T7572] loop3: detected capacity change from 0 to 4096
[  230.430656][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.587975][ T7576] loop4: detected capacity change from 0 to 512
[  230.620462][ T7572] ntfs3(loop3): ino=18, mi_enum_attr
[  230.636439][ T7576] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  230.733316][ T7576] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  230.752603][ T7576] EXT4-fs (loop4): failed to initialize system zone (-117)
[  230.786392][ T7572] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  230.815267][ T7576] EXT4-fs (loop4): mount failed
[  230.973014][ T7564] netlink: 192 bytes leftover after parsing attributes in process `syz.3.346'.
[  231.185400][ T6122] usb 3-1: USB disconnect, device number 15
[  232.057789][ T7591] ip6gretap1: entered promiscuous mode
[  232.057815][ T7591] ip6gretap1: entered allmulticast mode
[  232.058750][ T7592] loop4: detected capacity change from 0 to 128
[  232.205593][ T7592] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.235109][ T7592] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  232.344572][ T7579] loop1: detected capacity change from 0 to 32768
[  232.378240][ T7579] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.348 (7579)
[  232.444483][ T7579] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.454919][ T7599] loop2: detected capacity change from 0 to 4096
[  232.473669][ T7579] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  232.492120][ T7599] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  232.564404][ T5857] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.579970][ T7599] ntfs3(loop2): Failed to load $Bitmap (-22).
[  232.758781][ T7579] BTRFS info (device loop1): enabling ssd optimizations
[  232.765910][ T7579] BTRFS info (device loop1): turning on async discard
[  232.802479][ T7579] BTRFS info (device loop1): enabling free space tree
[  232.821014][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'.
[  232.904122][ T7579] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same
[  233.301904][ T7630] overlayfs: conflicting lowerdir path
[  233.646373][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.130074][ T7636] netlink: 'syz.3.361': attribute type 1 has an invalid length.
[  234.647552][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'.
[  234.927072][ T7643] bond1 (unregistering): Released all slaves
[  234.943335][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  235.103929][    T9] usb 1-1: Using ep0 maxpacket: 32
[  235.117547][    T9] usb 1-1: config 0 has an invalid interface number: 74 but max is 1
[  235.132728][    T9] usb 1-1: config 0 has no interface number 1
[  235.149448][    T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  235.168627][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.184862][    T9] usb 1-1: Product: syz
[  235.189758][    T9] usb 1-1: Manufacturer: syz
[  235.202105][    T9] usb 1-1: SerialNumber: syz
[  235.207083][ T6122] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  235.259819][    T9] usb 1-1: config 0 descriptor??
[  235.383056][ T6122] usb 3-1: Using ep0 maxpacket: 16
[  235.394686][ T6122] usb 3-1: config 3 has an invalid interface number: 62 but max is 0
[  235.403985][    T9] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22
[  235.431707][ T7661] syz_tun: entered promiscuous mode
[  235.444714][ T7661] macvtap1: entered promiscuous mode
[  235.452925][ T6122] usb 3-1: config 3 has no interface number 0
[  235.474434][ T6122] usb 3-1: config 3 interface 62 has no altsetting 0
[  235.496718][ T6122] usb 3-1: language id specifier not provided by device, defaulting to English
[  235.509268][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.550062][ T7661] syz_tun: left promiscuous mode
[  235.560874][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.579564][ T6122] usb 3-1: New USB device found, idVendor=0409, idProduct=0248, bcdDevice=45.a6
[  235.596573][ T6122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.616385][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.635752][ T6122] usb 3-1: Manufacturer: 澚ٿᚅẺ괡Ꙑ淧ꚸ杷䟮쳕㲫燪⚿쪗缎੆㫱얦䌼ﳌ堤⎍왦퀲ᵉ竴⼿򀩦
[  235.680275][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.694099][ T6122] usb 3-1: SerialNumber: syz
[  235.706972][ T6819] udevd[6819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  235.793903][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.819696][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.280650][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.291398][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.291416][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.350152][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.374969][ T6122] usb 3-1: USB disconnect, device number 16
[  236.387918][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.419653][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.585963][ T7677] loop1: detected capacity change from 0 to 4096
[  236.619793][   T43] usb 1-1: USB disconnect, device number 15
[  237.348830][ T7692] loop1: detected capacity change from 0 to 512
[  237.430907][ T7692] EXT4-fs (loop1): 1 truncate cleaned up
[  237.465890][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.563330][ T7692] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.374: invalid indirect mapped block 234881024 (level 0)
[  238.635966][ T7692] batadv_slave_0: mtu less than device minimum
[  238.772012][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.776268][ T7708] dummy0: entered promiscuous mode
[  238.834297][ T7708] bond0: entered promiscuous mode
[  238.839387][ T7708] bond_slave_0: entered promiscuous mode
[  238.865534][ T7708] bond_slave_1: entered promiscuous mode
[  238.874840][ T7708] debugfs: 'hsr1' already exists in 'hsr'
[  238.909035][ T7708] Cannot create hsr debugfs directory
[  238.932832][ T7708] hsr1: entered allmulticast mode
[  238.948885][ T7708] dummy0: entered allmulticast mode
[  238.963325][ T7708] bond0: entered allmulticast mode
[  239.008924][ T7708] bond_slave_0: entered allmulticast mode
[  239.023586][ T7708] bond_slave_1: entered allmulticast mode
[  239.110468][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.118706][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.127006][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.135466][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.142487][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.149480][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.156786][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.164213][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.171116][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.178309][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.185281][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.192624][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.199667][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.206858][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.213817][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.220829][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.227853][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.236879][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.243897][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.250882][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.252510][ T6122] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  239.257919][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.272820][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.279791][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.286786][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.294185][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.301077][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.308039][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.315027][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.321926][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.328896][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.336835][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.345523][   T52] Bluetooth: hci3: unexpected event for opcode 0x080c
[  239.485501][ T6122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.723061][ T6122] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.733791][ T6122] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  240.742920][ T6122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  240.751000][ T6122] usb 2-1: SerialNumber: syz
[  240.984836][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.103806][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.179520][ T7733] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  241.484711][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  241.531396][ T7743] loop0: detected capacity change from 0 to 2048
[  241.582224][ T7743] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.618855][ T7739] loop1: detected capacity change from 0 to 32768
[  241.638545][ T7743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.672541][   T24] usb 4-1: Using ep0 maxpacket: 16
[  241.706544][ T7739] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.710596][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  241.823655][   T24] usb 4-1: config 8 has an invalid interface number: 34 but max is 0
[  241.888386][   T24] usb 4-1: config 8 has no interface number 0
[  241.936792][ T7739] XFS (loop1): Ending clean mount
[  241.942877][   T24] usb 4-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  241.970553][ T7739] XFS (loop1): Quotacheck needed: Please wait.
[  242.041632][   T24] usb 4-1: config 8 interface 34 has no altsetting 0
[  242.088616][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c
[  242.115513][ T7739] XFS (loop1): Quotacheck: Done.
[  242.131318][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.145208][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.169203][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.186278][   T24] usb 4-1: Product: syz
[  242.221003][   T24] usb 4-1: Manufacturer: syz
[  242.239404][   T24] usb 4-1: SerialNumber: syz
[  242.254765][ T6122] usb 2-1: skipping empty audio interface (v1)
[  242.389138][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.420069][ T6122] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  242.519572][ T6122] usb 2-1: USB disconnect, device number 16
[  243.600368][ T6819] udevd[6819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  243.630649][   T24] usb 4-1: USB disconnect, device number 15
[  244.455486][ T7783] loop2: detected capacity change from 0 to 2048
[  244.653186][ T7786] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.877211][   T30] audit: type=1800 audit(1764548625.107:45): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.397" name="file2" dev="loop2" ino=16 res=0 errno=0
[  245.041664][ T7778] loop4: detected capacity change from 0 to 32768
[  245.072415][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  245.207392][ T7786] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 4)
[  245.388569][ T7786] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  245.626919][ T7786] Remounting filesystem read-only
[  246.018054][ T5833] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  246.019627][    T9] usb 2-1: Using ep0 maxpacket: 16
[  246.044462][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.062956][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.113357][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  246.121633][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  246.158907][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.200609][    T9] usb 2-1: config 0 descriptor??
[  246.231763][ T7782] loop3: detected capacity change from 0 to 32768
[  246.232773][ T7798] vimc link validate: Scaler:src:4096x16 (0x33524742, 10, 2, 0, 6) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  246.241322][ T7782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.396 (7782)
[  246.369408][ T7782] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.432495][ T7782] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  246.638804][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'.
[  246.647830][ T7810] netlink: 'syz.0.402': attribute type 7 has an invalid length.
[  246.655647][ T7810] netlink: 'syz.0.402': attribute type 8 has an invalid length.
[  246.672687][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'.
[  246.685672][    T9] hid (null): unknown global tag 0xd
[  246.691059][    T9] hid (null): unknown global tag 0xc
[  246.729805][    T9] hid (null): bogus close delimiter
[  246.744729][    T9] hid (null): bogus close delimiter
[  246.766261][ T7782] BTRFS info (device loop3): allowing degraded mounts
[  246.774618][    T9] hid (null): invalid report_size -248023057
[  246.780919][ T7782] BTRFS info (device loop3): enabling ssd optimizations
[  246.792434][ T7782] BTRFS info (device loop3): turning on flush-on-commit
[  246.833487][    T9] hid (null): unknown global tag 0xd
[  246.854569][ T7782] BTRFS info (device loop3): turning on sync discard
[  246.861360][ T7782] BTRFS info (device loop3): enabling free space tree
[  246.924070][ T7782] BTRFS info (device loop3): max_inline set to 0
[  246.938290][    T9] usb 2-1: USB disconnect, device number 17
[  247.404438][ T7835] loop0: detected capacity change from 0 to 2048
[  247.495582][ T5855] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.539445][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'.
[  247.590345][ T7835] netlink: 'syz.0.404': attribute type 16 has an invalid length.
[  247.622664][ T7835] netlink: 'syz.0.404': attribute type 17 has an invalid length.
[  247.843766][ T7846] loop4: detected capacity change from 0 to 256
[  248.037158][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.045879][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.256245][ T7852] loop4: detected capacity change from 0 to 2048
[  248.350223][ T7852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.581139][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.615308][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.630666][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.674076][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.983225][ T7835] hsr1: left allmulticast mode
[  248.988079][ T7835] dummy0: left allmulticast mode
[  249.033299][ T7835] bond0: left allmulticast mode
[  249.059518][ T7835] bond_slave_0: left allmulticast mode
[  249.073327][ T7835] bond_slave_1: left allmulticast mode
[  249.138356][ T7839] tipc: Started in network mode
[  249.152495][ T7839] tipc: Node identity 5a60db5ba573, cluster identity 4711
[  249.172895][ T7839] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[  249.193305][ T6003] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.203052][ T6003] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.221579][ T7840] tipc: Cannot configure node identity twice
[  249.234655][ T7840] tipc: Cannot configure node identity twice
[  249.259797][ T6003] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.314442][ T6003] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.516678][ T7868] loop1: detected capacity change from 0 to 512
[  249.562974][ T7868] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.413: Invalid inode bitmap blk 4 in block_group 0
[  249.634859][ T7868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.731838][ T7868] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  250.060377][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.179353][ T5965] tipc: Node number set to 4279491419
[  250.469904][ T7869] loop0: detected capacity change from 0 to 32768
[  250.477056][ T7886] loop4: detected capacity change from 0 to 512
[  250.519298][ T7869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.412 (7869)
[  250.522408][ T7886] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  250.604271][ T7869] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.605323][ T7886] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.417: bad orphan inode 131083
[  250.640625][ T7886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.642621][ T7869] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  250.670462][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /77/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0
[  250.692488][ T6122] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  250.924038][ T5827] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0
[  250.992374][ T6122] usb 4-1: Using ep0 maxpacket: 8
[  250.994886][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /77/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0
[  250.999609][ T6122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.021036][ T5827] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0
[  251.062205][ T6122] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  251.074089][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /77/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0
[  251.105921][ T5827] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0
[  251.113333][ T6122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.149638][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.173014][ T6122] usb 4-1: Product: syz
[  251.195528][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /77/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0
[  251.218210][ T6122] usb 4-1: Manufacturer: syz
[  251.228824][ T6122] usb 4-1: SerialNumber: syz
[  251.229242][ T5827] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 20: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=393216, rec_len=1024, size=1024 fake=0
[  251.260949][ T6122] usb 4-1: config 0 descriptor??
[  251.271961][ T7869] BTRFS info (device loop0): allowing degraded mounts
[  251.306810][ T6122] cdc_phonet 4-1:0.0: skipping garbage
[  251.314829][ T5827] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /77/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=393216, rec_len=1024, size=1024 fake=0
[  251.331246][ T6122] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22
[  251.355854][ T7869] BTRFS info (device loop0): enabling ssd optimizations
[  251.408698][ T7869] BTRFS info (device loop0): turning on flush-on-commit
[  251.466123][ T7869] BTRFS info (device loop0): turning on sync discard
[  251.499174][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.532410][ T7869] BTRFS info (device loop0): enabling free space tree
[  251.561175][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.569645][ T7869] BTRFS info (device loop0): max_inline set to 0
[  251.740767][ T5823] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.026517][ T7924] loop4: detected capacity change from 0 to 8
[  252.079833][ T6022] usb 4-1: USB disconnect, device number 16
[  252.095998][ T7924] squashfs image failed sanity check
[  252.141109][ T7883] ==================================================================
[  252.149227][ T7883] BUG: KASAN: slab-use-after-free in locks_remove_file+0xdb/0xea0
[  252.157079][ T7883] Read of size 8 at addr ffff888144292418 by task syz.3.416/7883
[  252.164824][ T7883] 
[  252.167177][ T7883] CPU: 1 UID: 0 PID: 7883 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) 
[  252.167203][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  252.167228][ T7883] Call Trace:
[  252.167237][ T7883]  <TASK>
[  252.167247][ T7883]  dump_stack_lvl+0x189/0x250
[  252.167276][ T7883]  ? __kasan_check_byte+0x12/0x40
[  252.167302][ T7883]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.167327][ T7883]  ? lock_release+0x4b/0x3b0
[  252.167353][ T7883]  ? __virt_addr_valid+0x4a5/0x5c0
[  252.167383][ T7883]  print_report+0xca/0x240
[  252.167404][ T7883]  ? locks_remove_file+0xdb/0xea0
[  252.167429][ T7883]  kasan_report+0x118/0x150
[  252.167453][ T7883]  ? do_exit+0x6c5/0x2310
[  252.167481][ T7883]  ? locks_remove_file+0xdb/0xea0
[  252.167510][ T7883]  locks_remove_file+0xdb/0xea0
[  252.167545][ T7883]  ? __pfx_locks_remove_file+0x10/0x10
[  252.167590][ T7883]  ? __pfx___might_resched+0x10/0x10
[  252.167624][ T7883]  __fput+0x3ab/0xa70
[  252.167657][ T7883]  task_work_run+0x1d4/0x260
[  252.167688][ T7883]  ? __pfx_task_work_run+0x10/0x10
[  252.167718][ T7883]  ? do_raw_spin_unlock+0x122/0x240
[  252.167751][ T7883]  do_exit+0x6c5/0x2310
[  252.167781][ T7883]  ? do_raw_spin_lock+0x121/0x290
[  252.167816][ T7883]  ? __pfx_do_exit+0x10/0x10
[  252.167851][ T7883]  do_group_exit+0x21c/0x2d0
[  252.167880][ T7883]  ? lockdep_hardirqs_on+0x98/0x140
[  252.167906][ T7883]  get_signal+0x1285/0x1340
[  252.167936][ T7883]  arch_do_signal_or_restart+0x9a/0x7a0
[  252.167968][ T7883]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  252.168007][ T7883]  ? exit_to_user_mode_loop+0x55/0x4f0
[  252.168031][ T7883]  exit_to_user_mode_loop+0x87/0x4f0
[  252.168052][ T7883]  ? rcu_is_watching+0x15/0xb0
[  252.168080][ T7883]  do_syscall_64+0x2e3/0xf80
[  252.168105][ T7883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.168127][ T7883]  ? clear_bhb_loop+0x60/0xb0
[  252.168150][ T7883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.168171][ T7883] RIP: 0033:0x7fba1a18f749
[  252.168189][ T7883] Code: Unable to access opcode bytes at 0x7fba1a18f71f.
[  252.168200][ T7883] RSP: 002b:00007fba183f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  252.168223][ T7883] RAX: fffffffffffffe00 RBX: 00007fba1a3e5fa8 RCX: 00007fba1a18f749
[  252.168240][ T7883] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fba1a3e5fa8
[  252.168254][ T7883] RBP: 00007fba1a3e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  252.168267][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.168280][ T7883] R13: 00007fba1a3e6038 R14: 00007ffcdf0f0e10 R15: 00007ffcdf0f0ef8
[  252.168305][ T7883]  </TASK>
[  252.168313][ T7883] 
[  252.417841][ T7883] Allocated by task 7883:
[  252.422174][ T7883]  kasan_save_track+0x3e/0x80
[  252.426861][ T7883]  __kasan_slab_alloc+0x6c/0x80
[  252.431722][ T7883]  kmem_cache_alloc_lru_noprof+0x36c/0x6e0
[  252.437554][ T7883]  mqueue_alloc_inode+0x28/0x40
[  252.442521][ T7883]  alloc_inode+0x6a/0x1b0
[  252.447050][ T7883]  new_inode+0x22/0x170
[  252.451221][ T7883]  mqueue_get_inode+0x27/0xb50
[  252.456002][ T7883]  mqueue_create_attr+0x1ac/0x2e0
[  252.461041][ T7883]  vfs_mkobj+0xcf/0x290
[  252.465218][ T7883]  do_mq_open+0x60d/0x7c0
[  252.469587][ T7883]  __x64_sys_mq_open+0x16a/0x1c0
[  252.474531][ T7883]  do_syscall_64+0xfa/0xf80
[  252.479051][ T7883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.484948][ T7883] 
[  252.487279][ T7883] Freed by task 7916:
[  252.491266][ T7883]  kasan_save_track+0x3e/0x80
[  252.495955][ T7883]  kasan_save_free_info+0x46/0x50
[  252.501026][ T7883]  __kasan_slab_free+0x5c/0x80
[  252.505809][ T7883]  kmem_cache_free+0x197/0x620
[  252.510581][ T7883]  rcu_core+0xd70/0x1870
[  252.514833][ T7883]  handle_softirqs+0x27d/0x850
[  252.519623][ T7883]  __irq_exit_rcu+0xca/0x1f0
[  252.524309][ T7883]  irq_exit_rcu+0x9/0x30
[  252.528560][ T7883]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  252.534204][ T7883]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  252.540198][ T7883] 
[  252.542533][ T7883] Last potentially related work creation:
[  252.548362][ T7883]  kasan_save_stack+0x3e/0x60
[  252.553058][ T7883]  kasan_record_aux_stack+0xbd/0xd0
[  252.558285][ T7883]  call_rcu+0x157/0x9c0
[  252.562457][ T7883]  evict+0x931/0xae0
[  252.566363][ T7883]  __dentry_kill+0x209/0x660
[  252.570962][ T7883]  finish_dput+0xc9/0x480
[  252.575322][ T7883]  __fput+0x68e/0xa70
[  252.579331][ T7883]  task_work_run+0x1d4/0x260
[  252.583946][ T7883]  exit_to_user_mode_loop+0xff/0x4f0
[  252.589252][ T7883]  do_syscall_64+0x2e3/0xf80
[  252.593874][ T7883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.599815][ T7883] 
[  252.602149][ T7883] The buggy address belongs to the object at ffff8881442921c0
[  252.602149][ T7883]  which belongs to the cache mqueue_inode_cache of size 1576
[  252.616905][ T7883] The buggy address is located 600 bytes inside of
[  252.616905][ T7883]  freed 1576-byte region [ffff8881442921c0, ffff8881442927e8)
[  252.630798][ T7883] 
[  252.633141][ T7883] The buggy address belongs to the physical page:
[  252.639571][ T7883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888144291440 pfn:0x144290
[  252.649727][ T7883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  252.658230][ T7883] memcg:ffff88814c226201
[  252.662480][ T7883] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  252.670140][ T7883] page_type: f5(slab)
[  252.674139][ T7883] raw: 057ff00000000040 ffff888144ebc640 dead000000000122 0000000000000000
[  252.682737][ T7883] raw: ffff888144291440 0000000080120011 00000000f5000000 ffff88814c226201
[  252.691331][ T7883] head: 057ff00000000040 ffff888144ebc640 dead000000000122 0000000000000000
[  252.700009][ T7883] head: ffff888144291440 0000000080120011 00000000f5000000 ffff88814c226201
[  252.708683][ T7883] head: 057ff00000000003 ffffea000510a401 00000000ffffffff 00000000ffffffff
[  252.717355][ T7883] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  252.726051][ T7883] page dumped because: kasan: bad access detected
[  252.732520][ T7883] page_owner tracks the page as allocated
[  252.738235][ T7883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8511355024, free_ts 0
[  252.757868][ T7883]  post_alloc_hook+0x234/0x290
[  252.762644][ T7883]  get_page_from_freelist+0x2365/0x2440
[  252.768201][ T7883]  __alloc_frozen_pages_noprof+0x181/0x370
[  252.774014][ T7883]  alloc_pages_mpol+0x232/0x4a0
[  252.778881][ T7883]  allocate_slab+0x86/0x3b0
[  252.783402][ T7883]  ___slab_alloc+0xf2b/0x1960
[  252.788084][ T7883]  __slab_alloc+0x65/0x100
[  252.792510][ T7883]  kmem_cache_alloc_lru_noprof+0x3fe/0x6e0
[  252.798333][ T7883]  mqueue_alloc_inode+0x28/0x40
[  252.803191][ T7883]  alloc_inode+0x6a/0x1b0
[  252.807615][ T7883]  new_inode+0x22/0x170
[  252.811776][ T7883]  mqueue_fill_super+0xdc/0x380
[  252.816638][ T7883]  get_tree_nodev+0xbb/0x150
[  252.821230][ T7883]  vfs_get_tree+0x92/0x2a0
[  252.825652][ T7883]  fc_mount_longterm+0x1c/0x100
[  252.830510][ T7883]  mq_init_ns+0x275/0x360
[  252.834844][ T7883] page_owner free stack trace missing
[  252.840206][ T7883] 
[  252.842533][ T7883] Memory state around the buggy address:
[  252.848164][ T7883]  ffff888144292300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.856231][ T7883]  ffff888144292380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.864305][ T7883] >ffff888144292400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.872369][ T7883]                             ^
[  252.877222][ T7883]  ffff888144292480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.885292][ T7883]  ffff888144292500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.893351][ T7883] ==================================================================
[  253.112191][ T7883] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  253.119467][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) 
[  253.128699][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  253.138783][ T7883] Call Trace:
[  253.142085][ T7883]  <TASK>
[  253.145038][ T7883]  dump_stack_lvl+0x99/0x250
[  253.149661][ T7883]  ? __asan_memcpy+0x40/0x70
[  253.154288][ T7883]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.159516][ T7883]  ? __pfx__printk+0x10/0x10
[  253.164155][ T7883]  vpanic+0x237/0x6d0
[  253.168166][ T7883]  ? __pfx_vpanic+0x10/0x10
[  253.172694][ T7883]  ? preempt_schedule+0xae/0xc0
[  253.177608][ T7883]  ? __pfx_preempt_schedule+0x10/0x10
[  253.183009][ T7883]  panic+0xb9/0xc0
[  253.186757][ T7883]  ? __pfx_panic+0x10/0x10
[  253.191195][ T7883]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  253.197100][ T7883]  ? locks_remove_file+0xdb/0xea0
[  253.202137][ T7883]  check_panic_on_warn+0x89/0xb0
[  253.207103][ T7883]  ? locks_remove_file+0xdb/0xea0
[  253.212167][ T7883]  end_report+0x6f/0x140
[  253.216432][ T7883]  kasan_report+0x129/0x150
[  253.220955][ T7883]  ? do_exit+0x6c5/0x2310
[  253.225299][ T7883]  ? locks_remove_file+0xdb/0xea0
[  253.230349][ T7883]  locks_remove_file+0xdb/0xea0
[  253.235225][ T7883]  ? __pfx_locks_remove_file+0x10/0x10
[  253.240714][ T7883]  ? __pfx___might_resched+0x10/0x10
[  253.246013][ T7883]  __fput+0x3ab/0xa70
[  253.250012][ T7883]  task_work_run+0x1d4/0x260
[  253.254614][ T7883]  ? __pfx_task_work_run+0x10/0x10
[  253.259737][ T7883]  ? do_raw_spin_unlock+0x122/0x240
[  253.264955][ T7883]  do_exit+0x6c5/0x2310
[  253.269140][ T7883]  ? do_raw_spin_lock+0x121/0x290
[  253.274280][ T7883]  ? __pfx_do_exit+0x10/0x10
[  253.278893][ T7883]  do_group_exit+0x21c/0x2d0
[  253.283502][ T7883]  ? lockdep_hardirqs_on+0x98/0x140
[  253.288718][ T7883]  get_signal+0x1285/0x1340
[  253.293241][ T7883]  arch_do_signal_or_restart+0x9a/0x7a0
[  253.298803][ T7883]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  253.304982][ T7883]  ? exit_to_user_mode_loop+0x55/0x4f0
[  253.310475][ T7883]  exit_to_user_mode_loop+0x87/0x4f0
[  253.315767][ T7883]  ? rcu_is_watching+0x15/0xb0
[  253.320630][ T7883]  do_syscall_64+0x2e3/0xf80
[  253.325236][ T7883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.331337][ T7883]  ? clear_bhb_loop+0x60/0xb0
[  253.336039][ T7883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.341951][ T7883] RIP: 0033:0x7fba1a18f749
[  253.346381][ T7883] Code: Unable to access opcode bytes at 0x7fba1a18f71f.
[  253.353410][ T7883] RSP: 002b:00007fba183f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  253.361853][ T7883] RAX: fffffffffffffe00 RBX: 00007fba1a3e5fa8 RCX: 00007fba1a18f749
[  253.369844][ T7883] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fba1a3e5fa8
[  253.377957][ T7883] RBP: 00007fba1a3e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  253.385999][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.393996][ T7883] R13: 00007fba1a3e6038 R14: 00007ffcdf0f0e10 R15: 00007ffcdf0f0ef8
[  253.401993][ T7883]  </TASK>
[  253.405368][ T7883] Kernel Offset: disabled
[  253.409709][ T7883] Rebooting in 86400 seconds..