last executing test programs:

4.77328431s ago: executing program 3 (id=262):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+n09k/7w77zvzzDvvzO53yXcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLT+EzN/MlQURfmn9teaori4/PeqYmf54fy2C71CAAAA4Gy9V/v7by9Jn9i5jJ0atvmXa//tewsLCwvFF9898f6fLSykC9YVxcjKoqhdFv3rL36+0LhN8HwxPjTc8PFwl5sf6XL5aJfLx7pcvqLL5Su7XD7e5fJFB2CRVfWfx9Su7IbaP9fUD2lxWTFWu+yGNns9P7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68rQeKeFvDDbe1tiiKkz99dk9cw1A4xjcUTTdW0/jYvXNfse7dnz675ztzb1/dbnY9DItWWhQbN5TrfKEoTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuW/W9d5cpnrjPd7PKzzRx3WuTZ87qnri6KYL5bcptXzxXCxuuVW0/Eer58R5XWUD+WHitHTOk/WL+M8Kfd56/rm86T1nIzHf304JqNLrKHx4XjnKysWHfczPU/Ke90P52p53Q+VNzo+3vij1aZztdzm2RuXPgfaPnZtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1W7rxI2dz4HJuUNHJ2effub2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1v0/vkA6Q1cVwOgc3hNeaeA7e3LJt4ym58M1z9zwY75PnQXnfP3tTuaCLh4slzvFymxc2nv3zIH3db3gejDY8D9q+prZ5Howu43lQbnNy4/K+Zo42/Gm3hl69Fq5pOAcu5NfD8jYfvWXp18K1YV0v3nq6Xw9HFp0D8W4Nhede+Zn0/d74XeG4LD4vrikvuGhFcXx25tgdT+2emzs2XYRxXlza8Fi1ni+rG+5Tseh8GT7t82Xn3/zypmvafH5NOFbjt3V+rMpttkx0fqxqr+7tj2fTZzcVYZxj5/t4tvtqVh7PlCU6HM9ymxduP/vvBVMuaXj9G+v2+jcyNlp//RtJR2Os6fVv8UMzUltZUZy8fXmvf2Phz/l+/busT17/ymP16B2dz4FymxcnT/ccGO34+nd9mENhPbeExDDekPvfr10+Xz9NGx7LrufN6OhYOG9G4y02nzebF+1TXlt52xunzuy82Xh982PV9H1LBc+b8lj9+VTn86bc5o3ps3/tWBX/2fDasaLbOTA2sqJc71g6Ceqvdwur4jlwR7GnOFIcLPamfcpHubytiU3LOwdWhD/n+7Xjqj45B8pj9cqmzudAuc0PN5/b7502hs+kbRq+d2r9+cJSmf+a0VPX13rYznXmL9f5yS2dfzZUbvP2ltPNGZ2P023hMxe1OU6tz5+lzum9xfk5TleFdR7c2vlnU+U2l21b5vm0syiKN6ffrP28K/x89++P//v3mn7u2+5nym9Ov/ng5MM/Pp31AwBw5t6v/T2/ov69ZsN/sV7Of/8HAAAABkLM/cNhJvI/AAAAVEbM/SNhJvI/AAAAVEbM/aNhJpnk/8fv2v7qe88V6d0AF4J4eTwMD91T3y52vOfDx+sWTik///Fvj7361eeWd9vDRVH88sEPt93+8XviuuqOxnV+tPnzi1x13bJu/7FHTm3X+P4JJ7fXrz/en+WeBrGr/Prkptr1rnt6ujbfeLCozYfnX3y+fv31j+P2JzbXt//L8KYlO/cNNe2/MaznhjDXhfeUeWjnqeNQzrjfq2uv/edLP3fq9uJ+Qxs+WLubr/xB/Xrje0S9fGl9+3i/l1r/P33tu6+W2z91Y/v1Pzfcfv0nwvW+FeYvdtS3bzzmX21Y/x+F9cfbi/vd8a0ftF3/a1fWt38tnBffCLN1/ff96Ufea/d4xdvZeXd9v3j7U/+9pbZfvL54/a3rH39uuul4tF7/G+/Wr2fHEz8badw+fj7eTvTY3c3n91B4fJt65EVRfPePi6bjXHysvt8/tqw/Xt/Ru9uv/7aWdR4duq62/6n7s6bpfn39rze1vb9xPTv/bk3T/Xn5/nD83p38YXm9Jx4O52O4/H9/VL++1vcyfe3+5tebuP031tSft/H6JlvW/3LL+uevK49d9/U/8G59/a/du7Jp/Ts/Fc6nB+qz2/r3/9UlTft/8zv1x+PYkxOHj8weP7C34ag2Po9Xjq9afdHFH/jgJeG1tPXjXUfmHp85tm5q3VRRrBvAtwzs9fq/FeZ/1cf8ub+Fuh//rH7evfTp+tetm39e//jl8PnHwuMZvz5+/S/Gms7X1sd9/t76PNv13xrWsVxXfu0/r1vWhie+8Prxf/jDt1u/L4j35+jl47X798r6K2qXDb1Rv7z19aqb/7i8+Xn9k9Gp2vx+OK4L4Z2ZN1xRv73W64/vTfLSZ+rP3/idXNy/aHk/kTUjzffjbNf/k/B9zA+uan79i+fH959reTfnNcVQuYT58PpQzNcvj1vF4/3SySva3l58H55i/urTWeaSZp+enTx44PDxpybnZmbnJmeffmbXoSPHD8/tqr136a4vddv/1PN7de35vXdm25ai9mw/Uh89dqHXf/SRPXvvnLpp78y+3cf3zT1ydObY/j2zs3tm9s7etHvfvpknu+1/YO+O6U3bN9+5aWL/gb077tq+ffP2iQOHj5TLqC+qi21TX544fGxXbZfZHVu2T2/dumVq4tCRvTM77pyamjjebf/a16aJcu8nJo7NHNw9d+DQzMTsgWdmdkxv37ZtU9d3fzx0dN/susljxw9PHp+dOTZZvy/r5mqfLr/2ddufPMweCa93LYbCd+efv21ben/c0re/suRV1Tdp/va0eCe8F1T8+tbt45j7x8JMMsn/AAAAkIOY+8Mb/5+6QP4HAACAyoi5f2WYifwPAAAAlRFz/3iYSSb5P6P+/6rGD/T/6/T/9f8L/X/9/x7T/9f/70T/X/9/kNev/6//T3f91v+PuX9VUWSZ/wEAACAHMfevDjOR/wEAAKAyYu6/KMxE/gcAAIDKiLn/4jCTPPL/WOs/K9z/b6L/X6f/363/H7fV/y/0//X/z5D+v/5/J/r/+v+DvP4+7P+v0v+n3/Rb/z/m/g+EmeSR/wEAACALMfd/MMxE/gcAAIDKiLn/kjAT+R8AAAAqI+b+NWEmmeT/jH7/fxP9/zr9f7//v9D/1/8/95oOsf6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z//8JMMsn/AAAAkIOY+z8UZiL/AwAAQGXE3H9pmIn8DwAAAJURc/9lYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/8jCTTPI/AAAA5CDm/ivCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfdfHWaSSf4HAACAHMTcf02YifwPAAAAlRFz/4fDTOR/AAAAqIyY+9eGmWSS//X/9f/1//X/9f/1/3tpsPr/w0teov9fp//fTP9f/1//X/+fzvqt/x9z/0fCTDLJ/wAAAJCDmPuvDTOR/wEAAKAyYu6/LsxE/gcAAIDKiLl/XZhJJvlf/1//X/9f/1//X/+/lwar/780/f86/f9m+v/6//r/+v901m/9/5j714eZZJL/AQAAIAcx928IM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1/9fXv9/RbcrotL6rf8fc/+NYSaZ5H8AAADIQcz9N4WZyP8AAABQGTH33xxmIv8DAABAZcTcvzHMJJP8r/+v/6//r/+v/6//30v6/4v6/2/9T6H/H+n/6/8P8vr1//3+f7rrt/5/zP23hJlkkv8BAAAgBzH33xpmIv8DAABAZcTcf1uYifwPAAAAlRFz/0SYSSb5X/9f/1//X/9f/1//v5eq2v9Pr6N+/7/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//v7/7/eJvzTf9f/3+QVLX/fxa//1//v4H+v/7/IK9f/1//n+76rf8fc/90mEkm+R8AAAByEHP/pjAT+R8AAAAqI+b+zWEm8j8AAABURsz9W8JMMsn/+v/6//r//d3/9/v/9f/1/zvT/9f/L/T/z9iF7s8P+vr1//X/aTbc5nP91v+PuX9rmEkm+R8AAAByEHP/tjAT+R8AAAAGS+v/ubRBzP13hpnI/wAAAFAZMfffFWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu99DGMXc/7Ewk0zyv/5/1fv/Cyv1//X/9f87r1//v7f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8RZpJJ/gcAAIAcxNx/T5iJ/A8AAACVEXP/vWEm8j8AAABURsz9O8NMMsn/+v9V7//7/f/6//r/3dav/99b+v/6/53o/w9m/z9826L/f376/+NL7d/Y/y/PIf1/+lG/9f9j7r8vzCST/A8AAAA5iLn/42Em8j8AAABURsz9nwgzkf8BAACgMmLu/2SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/H8z+f6T/7/f/6//TTb/1/2Puvz/MJJP8DwAAADmIuf9TYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/gTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/ythJpnkfwAAAMhBzP0PhpnI/wAAAFAZMfd/OsxE/gcAAIDKiLn/V8NMMsn/+v/np/8/nK5f/1//X/9f/1///1zS/9f/L/T/z9iF7s8P+vr1//X/6a7f+v8x9/9amEkm+R8AAAByEHP/r4eZyP8AAABQGTH3/0aYifwPAAAAlRFz/0NhJpnkf/1/v/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/zTCTTPI/AAAA5CDm/ofDTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P/ZMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/SJhJJvkfAAAAchBz/+fCTOR/AAAAqIyY+38rzET+BwAAgMqIuf+3w0wyyf/6//r/+v/6//r/+v+9pP+/uP9fvoZdyP7/iuVsqP+/LPr/+v/6//r/dNZv/f+Y+z8fZpJJ/gcAAIAcxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/2iYSSb5X/9f/1//X/9f/1//v5f0//3+/070//X/B3n9+v/6/3TXb/3/mPu/EGaSSf4HAACAHMTc/3thJvI/AAAAVEbM/bvCTOR/AAAAqIyY+x8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP27w0wyyf8AAACQg5j7vxhmIv8DAABAZcTcvyfMRP4HAACAyoi5f2+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu7fF2Yi/wMAAEBlxNy/P8xE/gcAAIDKiLn/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyDMJJP8DwAAADmIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/GGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7D4WZZJL/AQAAIAcx9x8OM5H/AQAAoDJi7j8SZiL/AwAAQGXE3H80zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/7EwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/rkwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3H88zCST/A8AAAA5iLn/iTAT+R8AAAAqI+b+J8NM5H8AAAD4P/buM9eus4rj8AnGgIQQY2EEDIEx8Ikp0HsLvfcSeu+919B7771DIPQqBcFda124iff2Pfbxefe7nufLErZlXrBA+cv6aU8jd/+945Ym+1//r//X/5/2/zfc6+THj9T/n3R++n/9v/7/XPT/+v+d/n9vx+7nt/5+/b/+n3Wj9f+5++8TtzTZ/wAAANBB7v77xi32PwAAAEwjd//94hb7HwAAAKaRu//+cUuT/a//1//r/33/X/+v/z8k/b/+f4n+X/+/5ffr//X/rBut/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBq5+x8Ut9j/AAAAMI3c/Q+OW5rsf/2//l//r//X/+v/D0n/r/9fov/X/2/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/w+OWJvtf/6//1//r//X/+v9D0v/r/5fo//X/W36//l//z7rR+v/c/Y+IW5rsfwAAAOggd/8j4xb7HwAAAKaRu/9RcYv9DwAAANPI3f/ouKXJ/tf/6//1//p//b/+/5D0//r/Jfp//f+W36//1/+z7uD9/z2u/++93P4/d//1cUuT/Q8AAAAd5O5/TNxi/wMAAMA0cvc/Nm6x/wEAAGAaufsfF7c02f/6f/3/af9/y3X6f/2//v/0x/X/V4f+X/+/RP8/av9/ef9N6P/1//p/1hy8/1/p/c/+69z9j49bmux/AAAA6CB3/xPiFvsfAAAAppG7/4lxi/0PAAAA08jd/6S4pcn+1//r/33//8bKz/X/+n/9/9Wn/9f/L9H/j9r/+/7/lfb/d7+M95/2///553D9P3Marf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/5f/+/7//p//f8h6f/1/0v0//r/Lb/f9//1/6wbrf/P3f/0uKXJ/gcAAIAOcvc/I26x/wEAAGAaufufGbfY/wAAADCN3P3Pilua7H/9v/5f/6//v6L+/4L+X/+/TP+v/1+i/9f/b/n9+n/9P+tG6/9z9z87bmmy/wEAAKCD3P3PiVvsfwAAAJhG7v7nxi32PwAAAEwjd//z4pYm+1//r//X/+v/ff9f/39I+v/p+v/r9P+n9P/6f/2//p9lo/X/ufufH7c02f8AAADQQe7+F8Qt9j8AAABMI3f/C+MW+x8AAACmkbv/hrilyf7X/+v/9f/6f/2//v+Q9P/T9f++//8/9P/6f/2//p9lo/X/uftfFLesDb+LKz8PAAAADCN3/4vjliZ//w8AAAAd5O5/Sdxi/wMAAMA0cve/NG5psv/1//p//b/+X/+v/z8k/b/+f4n+/7b7/ztd4t9P/z/W+/X/+n/Wjdb/5+5/WdzSZP8DAABAB7n7Xx632P8AAAAwjdz9r4hb7H8AAACYRu7+V8YtTfb/pfr/m+988vPn7P9vr//X/+v/9f9J/6//3+n/9f8r9P++/7/l9+v/9f+sG63/z93/qrilyf4HAACADnL3vzpusf8BAABgGrn7XxO32P8AAAAwjdz9r41bmux/3//X/+v/9f/6f/3/Ien/9f9L9P/6/y2/X/+v/2fdaP1/7v7XxS1N9j8AAAB0kLv/9XGL/Q8AAADTyN3/hrjF/gcAAIBp5O5/Y9zSZP/r//X/R+//b6f/T/r/+HPV/+v/z0H/r//f6f/3dux+fuvv1//r/1k3Wv+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/6f/3/0ft/3/8v+v/4c9X/6//PQf+v/9/p//d27H5+6+/X/+v/WTda/5+7/21xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+5/V9zSZP8DAABAB7n73x232P8AAAAwjdz974lb7H8AAACYRu7+98YtTfa//n/r/f89b4oX6P/1//p//f+Q9P/6/yX6f/3/lt+v/9f/s260/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy/3v0/xdv9cvm6f99/1//r//X/49N/6//X6L/1/9v+f36f/0/60br/3P3fyhuabL/AQAAoIPc/R+OW+x/AAAAmEbu/o/ELfY/AAAATCN3/0fjlib7v0f/f2sN+v/8j3Vt+/9b7qr/1/8X/b/+f6f/1/+v0P/r/7f8fv2//p91o/X/uftvjFua7H8AAADoIHf/x+IW+x8AAACmkbv/43GL/Q8AAADTyN3/ibjhbnc53pOuKf3/tP2/7//r//X/+v8h6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/GLf7+HwAAAKaRu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3NJk/+v/9f/6f/3/dP1//O9J/z8G/b/+f4n+X/+/5ffr//X/rBut/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBq5+z8ft9j/AAAAMI3c/V+IW5rsf/2//l//f9X6/4tnf3/9v+//6//1//r/Zfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2/7//r//X/h6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Grc02f8AAADQQe7+r8Ut9j8AAABMI3f/1+MW+x8AAACmkbv/G3FLk/0/c/+/9Mv0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDRy9387brH/AQAAYBq5+78TtzTZ/zP3/0v0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDRy938/brH/AQAAYBq5+38QtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/w9nfR/+v/9f/L9P/6/93+v+9Hbuf3/r79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/9+7/7+w8/3//3uP/l//f1v0//r/Jfp//f+W36//1/+zbrT+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAaeTu/3XcYv8DAADANHL3/yZuabL/9f/6f/3/UN//1//r//X/56T/1//v9P97O3Y/v/X36//1/6wbrf/P3X9T3NJk/wMAAEAHuft/G7fY/wAAADCN3P2/i1vsfwAAAJhG7v6b45Ym+1//r/+fsv+/o/5f/6//H4X+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/fdzSZP8DAABAB7n7/xC32P8AAAAwjdz9f4xb7H8AAACYRu7+P8UtTfa//l//P2X/7/v/+v+t9f8XTv8PWP9/Pvp//f9O/7+3Y/fzW3+//l//z7rR+v/c/X+OW5rsfwAAAOggd/9f4hb7HwAAAKaRu/+vcYv9DwAAANPI3f+3uKXJ/u/S/5/NSPT/J/T/+v+d/n+M/r/R9//P/nlfKf2//n+n/9/bsfv5rb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/3fp/8/S/5/Q/+v/d/p//f+B+f6//n+J/l//v+X36//1/6wbrf/P3f/vAAAA//+KYySt")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000800)='./file0\x00', 0x380c07b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000002c0)=@shmem={0xc, 0x1, {0x20}}, 0x201)

4.327587872s ago: executing program 3 (id=263):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x7a08080, &(0x7f0000000000), 0xfc, 0x47e, &(0x7f0000000b00)="$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")
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

3.735403806s ago: executing program 3 (id=268):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000008006000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdff09007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ea1addb98500000082000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.963081086s ago: executing program 0 (id=281):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2.772545991s ago: executing program 0 (id=284):
recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x2, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000002180)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0)

2.686811903s ago: executing program 3 (id=285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000780)='auto', 0x4)

2.597829125s ago: executing program 0 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000004c0)="02155e6509", 0x5, 0x2)

2.471757538s ago: executing program 0 (id=289):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)="65486d795fe26defdeed7dda726561645f6db9ff9be37786fe66e431202d2e", 0x1f)

2.471199758s ago: executing program 3 (id=290):
r0 = semget(0x3, 0x4, 0x39c)
semop(r0, &(0x7f00000000c0)=[{0x1, 0x8001, 0x1000}, {0x3, 0x8}, {0x0, 0x7fff, 0x1000}, {0x0, 0x5, 0x800}, {0x1, 0x8000, 0x1000}, {0x2, 0x9, 0x800}], 0x6)
semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff])

2.274298583s ago: executing program 0 (id=292):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2040, 0x0)
read(r0, &(0x7f0000004000)=""/219, 0xdb)

2.164374736s ago: executing program 1 (id=293):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX], 0xbf, 0x5534, &(0x7f0000006040)="$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")
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0xffffffffffffffff, 0xee01)

1.466165594s ago: executing program 0 (id=295):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x5b, 0x2010, 0x0, 0x0}, {0x5, 0x0, 0x0, 0x0}], 0x2})

1.404656235s ago: executing program 3 (id=296):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed54aba245e80eab18bc6f632251fac40000", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.189879741s ago: executing program 1 (id=297):
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4d)
sendto$inet6(r0, 0x0, 0x0, 0x4c805, &(0x7f00000004c0)={0xa, 0x4e22, 0x400, @empty, 0x3}, 0x1c)

717.229713ms ago: executing program 1 (id=299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='prev_comm ~ \"!\"', 0xf)

716.985573ms ago: executing program 2 (id=300):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000005646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

640.330934ms ago: executing program 2 (id=301):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffc, 0x4, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)

617.990495ms ago: executing program 1 (id=302):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000040)="ab", 0x1, 0x40000, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='.', 0x1}], 0x1, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x41, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xaa}}], 0x38, 0x4048800}, 0x10)

529.281857ms ago: executing program 2 (id=303):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x301, &(0x7f0000001780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

323.904882ms ago: executing program 1 (id=304):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f7ad8d9922768f49eb8c52349"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x48}}, 0x0)

250.064154ms ago: executing program 2 (id=305):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c666f7263652c6e6c733d6d61636761656c69632c007e7e5b92fcfaafa893d39194e02dad43adeb29f3f5e9e047c637125ce6e83254fd2c080818d22d96c74dd30551dc18472b3896df88a15261aa887bb5e60d069d5ee385fdf404d2eda22849cd88050c0cc590400cc79b3ff410409d70b5c91b1f1dbf342e4e4b70100519c726eeeec91f72f261c82a2490f41f764e875d2cd7cb8bde7243a1762b07db1fb5d04952a21c8c16612d8d7162ca30cbee83758ba9a2e25fa7c47dce0451b3286c2b0f310ff44db8"], 0x1, 0x5d0, &(0x7f0000001f80)="$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")
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)

120.720528ms ago: executing program 1 (id=306):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x440e0)

91.201638ms ago: executing program 2 (id=307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r1, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000)

0s ago: executing program 2 (id=308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='GPL\x00')
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts.
[   73.883646][ T5762] cgroup: Unknown subsys name 'net'
[   74.015321][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.393576][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.397467][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.401501][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.415225][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.423089][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.431368][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.438903][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.446003][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.454518][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.462602][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.470798][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.479289][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.487895][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.495404][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.497039][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.503867][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.511211][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.517074][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.523629][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.539324][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.539438][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.553584][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.554099][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.560798][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.576696][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.045373][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   78.066204][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   78.122247][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   78.140774][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   78.273015][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.280560][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.287881][ T5775] bridge_slave_0: entered allmulticast mode
[   78.296208][ T5775] bridge_slave_0: entered promiscuous mode
[   78.304101][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.311470][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.318777][ T5777] bridge_slave_0: entered allmulticast mode
[   78.325449][ T5777] bridge_slave_0: entered promiscuous mode
[   78.346365][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.354690][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.361894][ T5775] bridge_slave_1: entered allmulticast mode
[   78.369095][ T5775] bridge_slave_1: entered promiscuous mode
[   78.382891][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.390181][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.397319][ T5777] bridge_slave_1: entered allmulticast mode
[   78.406450][ T5777] bridge_slave_1: entered promiscuous mode
[   78.468654][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.475796][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.483659][ T5774] bridge_slave_0: entered allmulticast mode
[   78.490469][ T5774] bridge_slave_0: entered promiscuous mode
[   78.509495][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.521505][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.533466][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.543473][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.551233][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.558438][ T5774] bridge_slave_1: entered allmulticast mode
[   78.565044][ T5774] bridge_slave_1: entered promiscuous mode
[   78.572541][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.579822][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.586963][ T5783] bridge_slave_0: entered allmulticast mode
[   78.593956][ T5783] bridge_slave_0: entered promiscuous mode
[   78.601312][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.608493][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.615731][ T5783] bridge_slave_1: entered allmulticast mode
[   78.622657][ T5783] bridge_slave_1: entered promiscuous mode
[   78.639359][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.688693][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.720163][ T5775] team0: Port device team_slave_0 added
[   78.735777][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.756086][ T5775] team0: Port device team_slave_1 added
[   78.766940][ T5777] team0: Port device team_slave_0 added
[   78.775337][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.803409][ T5777] team0: Port device team_slave_1 added
[   78.821424][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.843126][ T5774] team0: Port device team_slave_0 added
[   78.876574][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.885874][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.912061][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.926370][ T5774] team0: Port device team_slave_1 added
[   78.934786][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.941935][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.967976][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.981693][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.988773][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.014722][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.029420][ T5783] team0: Port device team_slave_0 added
[   79.042291][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.049303][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.075276][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.103871][ T5783] team0: Port device team_slave_1 added
[   79.127134][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.134250][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.164159][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.176815][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.184098][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.210294][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.257670][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.264883][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.291340][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.339990][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.346964][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.375660][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.393480][ T5775] hsr_slave_0: entered promiscuous mode
[   79.399817][ T5775] hsr_slave_1: entered promiscuous mode
[   79.413382][ T5783] hsr_slave_0: entered promiscuous mode
[   79.419687][ T5783] hsr_slave_1: entered promiscuous mode
[   79.425701][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.433650][ T5783] Cannot create hsr debugfs directory
[   79.469663][ T5777] hsr_slave_0: entered promiscuous mode
[   79.476341][ T5777] hsr_slave_1: entered promiscuous mode
[   79.482552][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.490191][ T5777] Cannot create hsr debugfs directory
[   79.609204][   T51] Bluetooth: hci1: command tx timeout
[   79.613430][ T5087] Bluetooth: hci0: command tx timeout
[   79.614910][   T51] Bluetooth: hci3: command tx timeout
[   79.620428][ T5087] Bluetooth: hci2: command tx timeout
[   79.651055][ T5774] hsr_slave_0: entered promiscuous mode
[   79.657280][ T5774] hsr_slave_1: entered promiscuous mode
[   79.663499][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.671204][ T5774] Cannot create hsr debugfs directory
[   79.945603][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.957043][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.973492][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.985320][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.069425][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.086772][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.112899][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.122518][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.188925][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.208820][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.218171][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.270099][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.308041][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.320086][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.340160][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.354800][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.365117][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.416112][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   80.454373][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.461702][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.473124][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.480250][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.543590][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.605220][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   80.640279][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.647531][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.691727][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.698940][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.743991][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.775990][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.846969][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   80.881362][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   80.896875][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.904053][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.936063][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.943263][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.956418][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.963597][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.999318][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.006478][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.086283][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.106149][ T5774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.123882][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.227902][ T5783] veth0_vlan: entered promiscuous mode
[   81.257443][ T5783] veth1_vlan: entered promiscuous mode
[   81.274659][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.409371][ T5783] veth0_macvtap: entered promiscuous mode
[   81.423634][ T5775] veth0_vlan: entered promiscuous mode
[   81.442066][ T5783] veth1_macvtap: entered promiscuous mode
[   81.466698][ T5775] veth1_vlan: entered promiscuous mode
[   81.497980][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.525225][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.549190][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.558129][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.567893][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.579829][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.689767][ T5782] Bluetooth: hci0: command tx timeout
[   81.689797][ T5087] Bluetooth: hci1: command tx timeout
[   81.695198][ T5782] Bluetooth: hci3: command tx timeout
[   81.706835][   T51] Bluetooth: hci2: command tx timeout
[   81.732470][ T5775] veth0_macvtap: entered promiscuous mode
[   81.756993][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.767861][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.778922][ T5775] veth1_macvtap: entered promiscuous mode
[   81.779805][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.823282][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.846282][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.862995][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.875113][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.890713][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.919013][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.943228][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.962056][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.974561][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.983553][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.996996][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.014429][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.036351][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.134807][ T5774] veth0_vlan: entered promiscuous mode
[   82.216736][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.240480][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.279337][ T5774] veth1_vlan: entered promiscuous mode
[   82.286489][ T5777] veth0_vlan: entered promiscuous mode
[   82.325877][ T5777] veth1_vlan: entered promiscuous mode
[   82.396853][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.418065][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.486232][ T5774] veth0_macvtap: entered promiscuous mode
[   82.522997][ T5777] veth0_macvtap: entered promiscuous mode
[   82.562822][ T5777] veth1_macvtap: entered promiscuous mode
[   82.576493][ T5774] veth1_macvtap: entered promiscuous mode
[   82.627989][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.652069][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.662341][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.673143][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.685073][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.699941][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.711624][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.723275][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.734519][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.745178][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.755986][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.767993][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.802890][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.815831][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.827490][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.842529][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.854863][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.864068][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.876116][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.890344][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.900960][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.910917][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.921411][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.932986][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.956577][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.966728][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.977282][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.994080][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.015575][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.026643][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.044202][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.057275][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.297358][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.313710][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.453853][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.477805][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.487832][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.513712][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.579446][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.598095][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.769443][   T51] Bluetooth: hci2: command tx timeout
[   83.774906][   T51] Bluetooth: hci3: command tx timeout
[   83.780672][ T5782] Bluetooth: hci1: command tx timeout
[   83.786095][ T5782] Bluetooth: hci0: command tx timeout
[   84.154493][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.171555][ T5895] syz.3.26[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   84.177869][ T5895] loop3: detected capacity change from 0 to 256
[   84.255380][ T5895] FAT-fs (loop3): Directory bread(block 1285) failed
[   84.294538][ T5895] FAT-fs (loop3): Directory bread(block 1286) failed
[   84.306437][ T5895] FAT-fs (loop3): Directory bread(block 1287) failed
[   84.319245][ T5895] FAT-fs (loop3): Directory bread(block 1288) failed
[   84.358951][ T5842] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   84.393245][ T5895] FAT-fs (loop3): FAT read failed (blocknr 1281)
[   84.562540][ T5905] loop3: detected capacity change from 0 to 128
[   84.580838][ T5842] usb 1-1: unable to read config index 0 descriptor/start: -71
[   84.602022][ T5842] usb 1-1: can't read configurations, error -71
[   84.631278][ T5905] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.644932][ T5905] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.732566][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.837458][ T5911] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.31'.
[   84.848917][ T5910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.32'.
[   84.866022][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'.
[   84.877267][ T5911] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.31'.
[   84.886972][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'.
[   85.219707][ T5819] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.358105][ T5928] loop2: detected capacity change from 0 to 8192
[   85.365974][ T5928] =======================================================
[   85.365974][ T5928] WARNING: The mand mount option has been deprecated and
[   85.365974][ T5928]          and is ignored by this kernel. Remove the mand
[   85.365974][ T5928]          option from the mount to silence this warning.
[   85.365974][ T5928] =======================================================
[   85.436191][ T5819] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   85.475887][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.494645][ T5819] usb 2-1: Product: syz
[   85.495914][   T27] audit: type=1804 audit(1791932178.306:2): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.39" name="/newroot/15/bus/bus" dev="loop2" ino=1048622 res=1 errno=0
[   85.502447][ T5819] usb 2-1: Manufacturer: syz
[   85.554268][ T5819] usb 2-1: SerialNumber: syz
[   85.561088][   T27] audit: type=1800 audit(1791932178.306:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="bus" dev="loop2" ino=1048622 res=0 errno=0
[   85.590967][ T5820] kernel read not supported for file /dsp1 (pid: 5820 comm: kworker/0:5)
[   85.854437][   T51] Bluetooth: hci1: command tx timeout
[   85.860569][   T51] Bluetooth: hci3: command tx timeout
[   85.866066][   T51] Bluetooth: hci0: command tx timeout
[   85.871815][ T5782] Bluetooth: hci2: command tx timeout
[   85.910432][ T5935] bonding: no command found in bonding_masters - use +ifname or -ifname
[   86.019213][ T5939] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use)
[   86.059678][ T5939] program syz.3.44 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.204514][ T5819] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[   86.219737][ T5948] loop3: detected capacity change from 0 to 2048
[   86.271833][ T5950] capability: warning: `syz.0.49' uses deprecated v2 capabilities in a way that may be insecure
[   86.280488][ T5948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.389055][  T173] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   86.516235][ T5823] usb 2-1: USB disconnect, device number 2
[   86.590628][ T5956] kAFS: bad VL server IP address
[   86.619556][  T173] usb 3-1: too many configurations: 181, using maximum allowed: 8
[   86.654541][  T173] usb 3-1: unable to read config index 0 descriptor/start: -71
[   86.677453][  T173] usb 3-1: can't read configurations, error -71
[   86.816160][    T9] cfg80211: failed to load regulatory.db
[   87.116808][ T5980] loop0: detected capacity change from 0 to 2048
[   87.239483][ T5980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.327739][ T5986] loop3: detected capacity change from 0 to 2048
[   87.423273][ T5986] NILFS (loop3): invalid segment: Magic number mismatch
[   87.448549][ T5986] NILFS (loop3): trying rollback from an earlier position
[   87.503916][ T5986] NILFS (loop3): recovery complete
[   87.527561][ T5993] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.148515][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.335956][ T6024] loop3: detected capacity change from 0 to 128
[   88.358328][ T5823] usb 1-1: Using ep0 maxpacket: 16
[   88.363567][ T5991] loop1: detected capacity change from 0 to 32768
[   88.365393][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.407022][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.446370][ T6024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.454822][ T5991] JBD2: Ignoring recovery information on journal
[   88.489909][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.506693][ T6024] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   88.519476][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   88.537559][ T5991] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   88.546287][ T5823] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   88.603603][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.616264][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.631187][ T5823] usb 1-1: config 0 descriptor??
[   88.637347][ T6024] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[   88.671752][ T5991] UBIFS error (pid: 5991): cannot open "ubi0:testvol", error -19
[   88.739503][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.860609][ T5777] ocfs2: Unmounting device (7,1) on (node local)
[   89.037061][ T6037] loop2: detected capacity change from 0 to 256
[   89.055256][ T6039] loop3: detected capacity change from 0 to 1024
[   89.065242][ T6039] EXT4-fs: Ignoring removed bh option
[   89.089718][ T6037] exfat: Deprecated parameter 'namecase'
[   89.093335][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.108472][ T6037] exfat: Deprecated parameter 'utf8'
[   89.113928][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.124581][ T6039] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   89.138438][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.138966][ T6037] exfat: Deprecated parameter 'namecase'
[   89.166459][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.183074][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.190620][ T6037] exfat: Deprecated parameter 'namecase'
[   89.211212][ T6037] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[   89.227297][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.250881][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.265926][ T6039] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.276200][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.311505][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.338808][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.346101][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   89.373013][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.415600][ T6045] syz.1.78[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.415747][ T6045] syz.1.78[6045] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   89.442732][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   89.577112][ T5823] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   89.627426][ T5823] usb 1-1: USB disconnect, device number 4
[   89.789809][ T6052] fido_id[6052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   89.935782][ T6064] loop1: detected capacity change from 0 to 512
[   90.181469][ T6072] process 'syz.1.89' launched '/dev/fd/3' with NULL argv: empty string added
[   90.401905][ T6079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.93'.
[   90.420006][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   90.520182][ T6066] loop3: detected capacity change from 0 to 32768
[   90.578238][ T6066] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   90.675828][ T6066] XFS (loop3): Ending clean mount
[   90.723737][ T6066] XFS (loop3): Quotacheck needed: Please wait.
[   90.803645][ T6066] XFS (loop3): Quotacheck: Done.
[   91.136640][ T6110] loop1: detected capacity change from 0 to 256
[   91.237349][ T6112] loop0: detected capacity change from 0 to 512
[   91.285535][ T6112] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.106: invalid indirect mapped block 256 (level 2)
[   91.370287][ T6112] EXT4-fs (loop0): Remounting filesystem read-only
[   91.377503][ T6112] EXT4-fs (loop0): 2 truncates cleaned up
[   91.385383][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.422968][ T6117] loop1: detected capacity change from 0 to 16
[   91.464746][ T6117] erofs: (device loop1): mounted with root inode @ nid 36.
[   91.473348][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.499608][ T6119] ip_tables: iptables: counters copy to user failed while replacing table
[   91.529639][   T27] audit: type=1800 audit(1791932184.336:4): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="file1" dev="loop1" ino=86 res=0 errno=0
[   91.624067][ T5774] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   92.070986][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.117'.
[   92.088718][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.117'.
[   92.108028][ T6137] Zero length message leads to an empty skb
[   92.380945][ T6155] loop0: detected capacity change from 0 to 764
[   92.387479][ T6157] netlink: 'syz.1.126': attribute type 29 has an invalid length.
[   92.401258][ T6157] netlink: 'syz.1.126': attribute type 29 has an invalid length.
[   92.415070][ T6157] netlink: 'syz.1.126': attribute type 29 has an invalid length.
[   92.427911][ T6157] netlink: 'syz.1.126': attribute type 29 has an invalid length.
[   92.438880][ T6155] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   92.814644][ T6173] nbd0: detected capacity change from 0 to 127
[   92.845658][   T51] block nbd0: Receive control failed (result -104)
[   93.081106][ T6181] ftl_cs: FTL header not found.
[   93.160145][ T6181] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[   93.365717][ T6198] loop3: detected capacity change from 0 to 1024
[   93.384351][ T6198] EXT4-fs: Ignoring removed orlov option
[   93.435931][ T6198] EXT4-fs: Ignoring removed i_version option
[   93.499969][ T6198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.594729][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.831811][   T23] IPVS: starting estimator thread 0...
[   93.949912][ T6214] IPVS: using max 18 ests per chain, 43200 per kthread
[   94.217005][ T6222] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   94.610843][ T6216] loop3: detected capacity change from 0 to 40427
[   94.631186][ T6216] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[   94.653400][ T6216] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   94.684827][ T6216] F2FS-fs (loop3): invalid crc value
[   94.704067][ T6216] F2FS-fs (loop3): Found nat_bits in checkpoint
[   94.852883][ T6216] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   94.881071][ T6216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   95.392417][ T5774] syz-executor: attempt to access beyond end of device
[   95.392417][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.426306][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   95.603876][ T6247] loop2: detected capacity change from 0 to 128
[   95.637949][ T6247] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   95.660726][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.178713][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[   96.186676][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[   96.194972][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[   96.202401][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[   96.210191][   T10] block nbd0: Dead connection, failed to find a fallback
[   96.219326][   T10] block nbd0: shutting down sockets
[   96.224949][   T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.235566][   T10] Buffer I/O error on dev nbd0, logical block 3, async page read
[   96.244344][   T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.253518][   T10] Buffer I/O error on dev nbd0, logical block 2, async page read
[   96.261725][   T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.270922][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.278757][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.287815][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.297150][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   96.307481][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.315678][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.323479][   T10] Buffer I/O error on dev nbd0, logical block 2, async page read
[   96.331372][   T10] Buffer I/O error on dev nbd0, logical block 3, async page read
[   96.340497][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   96.349683][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[   96.357932][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[   96.366499][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   96.375934][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.385307][   T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[   96.395791][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   96.406125][ T5784] ldm_validate_partition_table(): Disk read failed.
[   96.419566][ T5784] Dev nbd0: unable to read RDB block 0
[   96.427008][ T5784]  nbd0: unable to read partition table
[   96.441274][ T5784] ldm_validate_partition_table(): Disk read failed.
[   96.450060][ T5784] Dev nbd0: unable to read RDB block 0
[   96.457379][ T5784]  nbd0: unable to read partition table
[   96.605655][ T6253] loop1: detected capacity change from 0 to 40427
[   96.633676][ T6253] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[   96.675102][ T6253] F2FS-fs (loop1): invalid crc value
[   96.692124][ T6253] F2FS-fs (loop1): Found nat_bits in checkpoint
[   96.839272][ T6253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.054520][ T6291] loop0: detected capacity change from 0 to 512
[   98.024105][ T6301] loop0: detected capacity change from 0 to 32768
[   98.779637][ T6322] loop0: detected capacity change from 0 to 1024
[   98.838021][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.860608][ T6311] loop2: detected capacity change from 0 to 32768
[   98.956847][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.154018][ T6333] loop2: detected capacity change from 0 to 2048
[   99.189069][ T6337] loop0: detected capacity change from 0 to 512
[   99.208005][ T6333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.210134][ T6337] EXT4-fs: inline encryption not supported
[   99.289550][ T6337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.323342][ T6337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   99.369880][ T6333] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   99.400034][ T6337] EXT4-fs (loop0): 1 truncate cleaned up
[   99.406965][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.468637][ T6333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 22 with error 28
[   99.519030][ T6333] EXT4-fs (loop2): This should not happen!! Data will be lost
[   99.519030][ T6333] 
[   99.554981][ T6324] loop1: detected capacity change from 0 to 32768
[   99.578455][ T6333] EXT4-fs (loop2): Total free blocks count 0
[   99.588973][ T6344] loop3: detected capacity change from 0 to 128
[   99.596437][ T6344] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   99.605173][ T6337] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #12: comm syz.0.202: bad extra_isize 62 (inode size 256)
[   99.623195][ T6333] EXT4-fs (loop2): Free/Dirty block details
[   99.639645][ T6333] EXT4-fs (loop2): free_blocks=2415919104
[   99.649576][ T6333] EXT4-fs (loop2): dirty_blocks=32
[   99.654737][ T6333] EXT4-fs (loop2): Block reservation details
[   99.661787][ T6333] EXT4-fs (loop2): i_reserved_data_blocks=2
[   99.667033][ T6344] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   99.687262][ T6324] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.744117][ T6337] EXT4-fs (loop0): Remounting filesystem read-only
[   99.788354][ T6337] EXT4-fs warning (device loop0): ext4_rename_delete:3780: inode #12: comm syz.0.202: Deleting old file: nlink 2, error=-5
[   99.835332][ T6324] XFS (loop1): Ending clean mount
[   99.846786][ T4196] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   99.880313][ T6324] XFS (loop1): Quotacheck needed: Please wait.
[   99.985330][ T6324] XFS (loop1): Quotacheck: Done.
[   99.993101][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.205873][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.555724][ T6362] ialloc: diAlloc returned -5!
[  100.653961][ T6370] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  100.782985][ T6372] set_capacity_and_notify: 1 callbacks suppressed
[  100.783002][ T6372] loop0: detected capacity change from 0 to 4096
[  101.002857][ T6372] EXT4-fs (loop0): Test dummy encryption mode enabled
[  101.025103][ T6372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.082999][ T6372] EXT4-fs (loop0): shut down requested (1)
[  101.117319][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.190669][ T6384] sit0: entered promiscuous mode
[  101.206679][ T6384] netlink: 'syz.3.222': attribute type 1 has an invalid length.
[  101.233151][ T6384] netlink: 1 bytes leftover after parsing attributes in process `syz.3.222'.
[  101.619264][ T6390] loop1: detected capacity change from 0 to 512
[  101.674593][ T6386] loop0: detected capacity change from 0 to 32768
[  101.675090][ T6390] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.212: invalid indirect mapped block 8 (level 1)
[  101.696759][ T6386] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.221 (6386)
[  101.755326][ T6386] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  101.790998][ T6390] EXT4-fs (loop1): 1 truncate cleaned up
[  101.797911][ T6390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.808609][ T6386] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  101.828785][ T6386] BTRFS info (device loop0): enabling disk space caching
[  101.835870][ T6386] BTRFS info (device loop0): force clearing of disk cache
[  101.859693][ T6386] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  101.898490][ T6386] BTRFS info (device loop0): use zstd compression, level 3
[  101.912862][ T6386] BTRFS info (device loop0): disk space caching is enabled
[  102.083018][ T6386] BTRFS info (device loop0): enabling ssd optimizations
[  102.111932][ T6386] BTRFS info (device loop0): auto enabling async discard
[  102.156924][ T6386] BTRFS info (device loop0): rebuilding free space tree
[  102.210048][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.276793][ T6386] BTRFS info (device loop0): disabling free space tree
[  102.298074][ T6386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.318894][ T6386] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.363435][   T27] audit: type=1400 audit(1791932195.176:5): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6411 comm="syz.1.225" name="unknown" offset=16
[  102.500974][ T6414] loop1: detected capacity change from 0 to 256
[  102.558764][ T6414] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.613159][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  102.670590][   T27] audit: type=1800 audit(1791932195.486:6): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="file1" dev="loop1" ino=1048636 res=0 errno=0
[  102.701741][ T6409] loop3: detected capacity change from 0 to 32768
[  102.714463][   T27] audit: type=1800 audit(1791932195.516:7): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="file1" dev="loop1" ino=1048636 res=0 errno=0
[  102.772845][ T6409] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.854311][ T6421] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200)
[  102.910897][ T6426] loop0: detected capacity change from 0 to 2048
[  102.930996][ T6409] XFS (loop3): Ending clean mount
[  102.946214][ T6421] FAT-fs (loop1): Filesystem has been set read-only
[  102.975235][ T6409] XFS (loop3): Quotacheck needed: Please wait.
[  102.999698][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.038982][ T6409] XFS (loop3): Quotacheck: Done.
[  103.109490][ T6426] EXT4-fs error (device loop0): ext4_ext_precache:639: inode #2: comm syz.0.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  103.214158][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.243788][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.401266][   T27] audit: type=1326 audit(1791932196.216:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.445801][   T27] audit: type=1326 audit(1791932196.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.471945][   T27] audit: type=1326 audit(1791932196.216:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.495504][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.511339][   T27] audit: type=1326 audit(1791932196.216:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.555133][   T27] audit: type=1326 audit(1791932196.216:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.578696][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.598928][   T27] audit: type=1326 audit(1791932196.216:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.622493][    C1] vkms_vblank_simulate: vblank timer overrun
[  103.640553][   T27] audit: type=1326 audit(1791932196.246:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.2.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43aa59e2d9 code=0x50000
[  103.859690][ T6455] rnbd_client L127: Can't parse path i: -93
[  104.054854][ T6466] pim6reg1: tun_chr_ioctl cmd 1074025681
[  104.198404][ T5823] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  104.408489][ T5823] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  104.427069][ T5823] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  104.453470][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  104.468670][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  104.486424][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  104.513696][ T5823] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  104.533062][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  104.544364][ T6480] sit0: entered promiscuous mode
[  104.550512][ T5823] usb 3-1: Product: syz
[  104.556728][ T6480] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[  104.565538][ T5823] usb 3-1: Manufacturer: syz
[  104.576761][ T6480] netlink: 1 bytes leftover after parsing attributes in process `syz.1.252'.
[  104.596308][ T5823] cdc_wdm 3-1:1.0: skipping garbage
[  104.608847][ T5823] cdc_wdm 3-1:1.0: skipping garbage
[  104.636579][ T5823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  104.654993][ T5823] cdc_wdm 3-1:1.0: Unknown control protocol
[  104.666718][ T6483] netlink: 112 bytes leftover after parsing attributes in process `syz.3.229'.
[  104.815057][ T6490] loop1: detected capacity change from 0 to 1024
[  104.978608][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  105.017387][ T6490] hfsplus: bad catalog file entry
[  105.067911][    C0] cdc_wdm 3-1:1.0: Unexpected error -71
[  105.068571][ T5843] usb 3-1: USB disconnect, device number 4
[  105.075772][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  105.086830][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  105.092933][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  105.110680][   T11] hfsplus: b-tree write err: -5, ino 3
[  105.119865][   T11] hfsplus: bad catalog file entry
[  105.143781][ T6496] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  105.216092][    T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  105.228609][    T9] usb 1-1: config 0 has no interface number 0
[  105.234754][    T9] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  105.247206][    T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.280447][    T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  105.293622][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.313882][    T9] usb 1-1: Product: syz
[  105.318086][    T9] usb 1-1: Manufacturer: syz
[  105.327164][    T9] usb 1-1: SerialNumber: syz
[  105.339853][    T9] usb 1-1: config 0 descriptor??
[  105.345780][ T6484] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  105.361340][    T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  105.378103][    T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  105.634749][ T6502] loop3: detected capacity change from 0 to 32768
[  105.806195][ T6506] loop3: detected capacity change from 0 to 512
[  105.818430][    T9] usb 1-1: USB disconnect, device number 5
[  105.835988][ T6506] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.263: invalid indirect mapped block 8 (level 1)
[  105.839122][    T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  105.904894][ T6506] EXT4-fs (loop3): 1 truncate cleaned up
[  105.934477][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.955348][    T9] cyberjack 1-1:0.69: device disconnected
[  105.962940][ T6509] loop1: detected capacity change from 0 to 1024
[  105.971653][ T6509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  106.028910][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.295713][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.321854][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.732376][ T6528] sctp: [Deprecated]: syz.0.274 (pid 6528) Use of int in max_burst socket option.
[  106.732376][ T6528] Use struct sctp_assoc_value instead
[  107.446440][ T6557] loop1: detected capacity change from 0 to 256
[  107.478470][ T6553] WARNING! power/level is deprecated; use power/control instead
[  107.483814][ T6557] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  108.435396][ T6574] loop2: detected capacity change from 0 to 512
[  108.467831][ T6574] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.536255][ T6571] loop1: detected capacity change from 0 to 40427
[  108.538477][ T6574] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.294: invalid indirect mapped block 32768 (level 2)
[  108.566035][ T6571] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  108.578387][ T6571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  108.590041][ T6571] F2FS-fs (loop1): invalid crc value
[  108.665618][ T6574] EXT4-fs (loop2): 1 orphan inode deleted
[  108.687123][ T6574] EXT4-fs (loop2): 1 truncate cleaned up
[  108.703664][ T6571] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  108.711511][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.724522][ T6571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.745351][ T6584] program syz.3.296 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.812851][ T6585] EXT4-fs error (device loop2): ext4_search_dir:1551: inode #12: block 7: comm syz.2.294: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  108.856273][ T5777] syz-executor: attempt to access beyond end of device
[  108.856273][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.875197][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  108.948463][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  109.126982][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.160447][ T5819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  109.178570][ T5819] usb 1-1: config 0 has no interface number 0
[  109.192981][ T5819] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  109.211532][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.229133][ T5819] usb 1-1: Product: syz
[  109.237860][ T5819] usb 1-1: Manufacturer: syz
[  109.248341][ T5819] usb 1-1: SerialNumber: syz
[  109.262575][ T5819] usb 1-1: config 0 descriptor??
[  109.499294][ T5819] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  109.539840][ T5819] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  109.555158][ T5819] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  109.566334][ T5819] usb 1-1: media controller created
[  109.587059][ T6602] loop2: detected capacity change from 0 to 64
[  109.617381][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.685577][   T27] kauditd_printk_skb: 522 callbacks suppressed
[  109.685592][   T27] audit: type=1800 audit(1791932202.496:537): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.303" name="file1" dev="loop2" ino=21 res=0 errno=0
[  109.858082][ T6606] loop2: detected capacity change from 0 to 1024
[  110.049835][ T6608] loop1: detected capacity change from 0 to 2048
[  110.100499][ T6608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.730002][ T5819] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  132.891420][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  132.898148][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  170.010433][ T5141] udevd[5141]: worker [5784] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time
[  194.336777][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  194.343199][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  201.533079][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  201.539265][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  201.545330][ T5790] Bluetooth: hci2: command 0x0406 tx timeout
[  201.548335][ T5778] Bluetooth: hci3: command 0x0406 tx timeout
[  255.771117][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  255.777487][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  258.328418][   T28] INFO: task syz-executor:5762 blocked for more than 143 seconds.
[  258.336298][   T28]       Not tainted syzkaller #0
[  258.345266][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.354075][   T28] task:syz-executor    state:D stack:22888 pid:5762  ppid:5761   flags:0x00004002
[  258.363851][   T28] Call Trace:
[  258.367160][   T28]  <TASK>
[  258.370187][   T28]  __schedule+0x15ae/0x4660
[  258.374757][   T28]  ? mark_lock+0x94/0x320
[  258.379200][   T28]  ? asan.module_dtor+0x20/0x20
[  258.384222][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  258.389336][   T28]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  258.395272][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  258.400560][   T28]  schedule+0xbd/0x170
[  258.404659][   T28]  io_schedule+0x80/0xd0
[  258.408985][   T28]  bit_wait_io+0x11/0xd0
[  258.413245][   T28]  __wait_on_bit+0x9f/0x2c0
[  258.417741][   T28]  ? bit_wait+0xd0/0xd0
[  258.422248][   T28]  out_of_line_wait_on_bit+0x13c/0x190
[  258.427730][   T28]  ? bit_wait+0xd0/0xd0
[  258.432365][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  258.437258][   T28]  ? do_raw_spin_lock+0x11f/0x2b0
[  258.442382][   T28]  ? bit_waitqueue+0x30/0x30
[  258.446985][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  258.452260][   T28]  do_get_write_access+0x5c9/0xe00
[  258.457393][   T28]  jbd2_journal_get_write_access+0x10c/0x140
[  258.463889][   T28]  __ext4_journal_get_write_access+0x208/0x6d0
[  258.470174][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  258.476345][   T28]  ? __might_sleep+0xe0/0xe0
[  258.481028][   T28]  ext4_reserve_inode_write+0x205/0x2a0
[  258.486621][   T28]  __ext4_mark_inode_dirty+0x13f/0x720
[  258.492402][   T28]  ext4_dirty_inode+0xcb/0x110
[  258.497184][   T28]  ? __ext4_expand_extra_isize+0x400/0x400
[  258.503214][   T28]  __mark_inode_dirty+0x2cc/0xc90
[  258.508335][   T28]  file_update_time+0x187/0x1a0
[  258.513228][   T28]  ext4_page_mkwrite+0x1f9/0x11a0
[  258.518378][   T28]  ? do_wp_page+0x4ce/0x34d0
[  258.523003][   T28]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  258.529328][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  258.534369][   T28]  do_page_mkwrite+0x153/0x3f0
[  258.539350][   T28]  do_wp_page+0xd4d/0x34d0
[  258.543810][   T28]  ? folio_put+0xd0/0xd0
[  258.548040][   T28]  ? do_raw_spin_lock+0x11f/0x2b0
[  258.553132][   T28]  ? __rwlock_init+0x150/0x150
[  258.557913][   T28]  handle_mm_fault+0x1306/0x4a50
[  258.563560][   T28]  ? handle_mm_fault+0xe6/0x4a50
[  258.568699][   T28]  ? numa_migrate_prep+0x350/0x350
[  258.573839][   T28]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  258.579204][   T28]  do_user_addr_fault+0x736/0x12d0
[  258.584338][   T28]  exc_page_fault+0x64/0x100
[  258.588990][   T28]  ? clear_bhb_loop+0x40/0x90
[  258.593687][   T28]  asm_exc_page_fault+0x26/0x30
[  258.598650][   T28] RIP: 0033:0x7f0b7107c862
[  258.603107][   T28] RSP: 002b:00007ffe36d01cd0 EFLAGS: 00010202
[  258.609258][   T28] RAX: 00007f0b6ee2c000 RBX: 0000555561ac6100 RCX: 0000000000000003
[  258.617247][   T28] RDX: 0000000000000fbd RSI: 0000555561aca158 RDI: 0000000000000008
[  258.625284][   T28] RBP: 00007ffe36d021d0 R08: 0000555561aca1d0 R09: 0000000000000090
[  258.633322][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe36d02010
[  258.641396][   T28] R13: 00007ffe36d01e00 R14: 585858582e7a7973 R15: 00007ffe36d01d50
[  258.649597][   T28]  </TASK>
[  258.652624][   T28] INFO: task kworker/0:4:5819 blocked for more than 143 seconds.
[  258.660431][   T28]       Not tainted syzkaller #0
[  258.665650][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.674385][   T28] task:kworker/0:4     state:D stack:22872 pid:5819  ppid:2      flags:0x00004000
[  258.683670][   T28] Workqueue: usb_hub_wq hub_event
[  258.689126][   T28] Call Trace:
[  258.692433][   T28]  <TASK>
[  258.695367][   T28]  __schedule+0x15ae/0x4660
[  258.699956][   T28]  ? verify_lock_unused+0x140/0x140
[  258.705184][   T28]  ? lock_chain_count+0x20/0x20
[  258.710109][   T28]  ? asan.module_dtor+0x20/0x20
[  258.714980][   T28]  ? kthread_data+0x4f/0xc0
[  258.719569][   T28]  ? wq_worker_sleeping+0x63/0x240
[  258.724725][   T28]  schedule+0xbd/0x170
[  258.728882][   T28]  schedule_timeout+0xc1/0x2d0
[  258.733672][   T28]  ? console_conditional_schedule+0x40/0x40
[  258.739659][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  258.745654][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  258.750794][   T28]  ? lock_chain_count+0x20/0x20
[  258.755664][   T28]  ? _raw_spin_lock_irq+0xbb/0xf0
[  258.760895][   T28]  ? _raw_spin_lock_irqsave+0x100/0x100
[  258.766461][   T28]  ? kobject_put+0x41a/0x450
[  258.771474][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  258.776708][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  258.782008][   T28]  ? wait_for_completion+0x273/0x5a0
[  258.787303][   T28]  wait_for_completion+0x2c6/0x5a0
[  258.792484][   T28]  ? io_schedule+0xd0/0xd0
[  258.796918][   T28]  ? kobject_put+0x41a/0x450
[  258.801585][   T28]  i2c_del_adapter+0x2da/0x440
[  258.806365][   T28]  ? i2c_add_numbered_adapter+0x140/0x140
[  258.812192][   T28]  ? dvb_usbv2_exit+0x80d/0x980
[  258.817064][   T28]  dvb_usbv2_probe+0x4cf/0x3d20
[  258.822197][   T28]  ? technisat_usb2_i2c_access+0x500/0x500
[  258.828028][   T28]  usb_probe_interface+0x6eb/0xcf0
[  258.835593][   T28]  ? usb_register_driver+0x360/0x360
[  258.841099][   T28]  ? sysfs_do_create_link_sd+0xe0/0x110
[  258.846651][   T28]  ? driver_sysfs_add+0x1f5/0x210
[  258.851956][   T28]  ? usb_register_driver+0x360/0x360
[  258.857256][   T28]  really_probe+0x247/0xae0
[  258.861788][   T28]  ? pm_runtime_barrier+0x14b/0x1c0
[  258.867019][   T28]  __driver_probe_device+0x1f5/0x390
[  258.873184][   T28]  driver_probe_device+0x4f/0x420
[  258.878271][   T28]  __device_attach_driver+0x2ca/0x510
[  258.883724][   T28]  bus_for_each_drv+0x252/0x2e0
[  258.888826][   T28]  ? coredump_store+0x90/0x90
[  258.893542][   T28]  ? bus_find_device+0x300/0x300
[  258.898920][   T28]  __device_attach+0x2c1/0x420
[  258.903720][   T28]  ? device_attach+0x20/0x20
[  258.908455][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  258.913669][   T28]  bus_probe_device+0x180/0x260
[  258.918629][   T28]  device_add+0x87c/0xc40
[  258.922974][   T28]  usb_set_configuration+0x1ad0/0x2150
[  258.928545][   T28]  usb_generic_driver_probe+0x8d/0x150
[  258.934022][   T28]  usb_probe_device+0x12a/0x260
[  258.938935][   T28]  ? is_usb_device_driver+0x40/0x40
[  258.944143][   T28]  really_probe+0x247/0xae0
[  258.948768][   T28]  ? pm_runtime_barrier+0x14b/0x1c0
[  258.953977][   T28]  __driver_probe_device+0x1f5/0x390
[  258.959337][   T28]  driver_probe_device+0x4f/0x420
[  258.964389][   T28]  __device_attach_driver+0x2ca/0x510
[  258.970375][   T28]  bus_for_each_drv+0x252/0x2e0
[  258.975617][   T28]  ? coredump_store+0x90/0x90
[  258.980394][   T28]  ? bus_find_device+0x300/0x300
[  258.985356][   T28]  __device_attach+0x2c1/0x420
[  258.990239][   T28]  ? device_attach+0x20/0x20
[  258.994841][   T28]  ? __kmem_cache_free+0xba/0x1f0
[  258.999910][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  259.005121][   T28]  bus_probe_device+0x180/0x260
[  259.010150][   T28]  device_add+0x87c/0xc40
[  259.014519][   T28]  usb_new_device+0x995/0x1550
[  259.019360][   T28]  ? lock_chain_count+0x20/0x20
[  259.024224][   T28]  ? usb_disconnect+0x8a0/0x8a0
[  259.029213][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  259.034432][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  259.039708][   T28]  hub_event+0x29d5/0x4a80
[  259.044167][   T28]  ? hub_post_resume+0x120/0x120
[  259.049212][   T28]  ? read_lock_is_recursive+0x20/0x20
[  259.054604][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  259.059868][   T28]  ? process_scheduled_works+0x975/0x1600
[  259.065600][   T28]  ? process_scheduled_works+0x975/0x1600
[  259.071461][   T28]  process_scheduled_works+0xa60/0x1600
[  259.077436][   T28]  ? worker_attach_to_pool+0x370/0x370
[  259.082995][   T28]  ? assign_work+0x3cc/0x5d0
[  259.087606][   T28]  worker_thread+0xa5e/0xfe0
[  259.092309][   T28]  kthread+0x2fa/0x390
[  259.096390][   T28]  ? pr_cont_work+0x550/0x550
[  259.101121][   T28]  ? kthread_blkcg+0xd0/0xd0
[  259.105723][   T28]  ret_from_fork+0x48/0x80
[  259.110260][   T28]  ? kthread_blkcg+0xd0/0xd0
[  259.114862][   T28]  ret_from_fork_asm+0x11/0x20
[  259.119764][   T28]  </TASK>
[  259.122811][   T28] INFO: task syz.0.295:6580 blocked for more than 144 seconds.
[  259.135117][   T28]       Not tainted syzkaller #0
[  259.140153][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  259.148959][   T28] task:syz.0.295       state:D stack:27048 pid:6580  ppid:5775   flags:0x00004004
[  259.158243][   T28] Call Trace:
[  259.161537][   T28]  <TASK>
[  259.164476][   T28]  __schedule+0x15ae/0x4660
[  259.169061][   T28]  ? mark_lock+0x94/0x320
[  259.173405][   T28]  ? asan.module_dtor+0x20/0x20
[  259.179003][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.184077][   T28]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  259.190043][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  259.195258][   T28]  schedule+0xbd/0x170
[  259.199381][   T28]  io_schedule+0x80/0xd0
[  259.203639][   T28]  bit_wait_io+0x11/0xd0
[  259.207893][   T28]  __wait_on_bit+0x9f/0x2c0
[  259.212594][   T28]  ? bit_wait+0xd0/0xd0
[  259.216767][   T28]  out_of_line_wait_on_bit+0x13c/0x190
[  259.222275][   T28]  ? bit_wait+0xd0/0xd0
[  259.226441][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  259.231268][   T28]  ? do_raw_spin_lock+0x11f/0x2b0
[  259.236306][   T28]  ? bit_waitqueue+0x30/0x30
[  259.241006][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  259.246240][   T28]  do_get_write_access+0x5c9/0xe00
[  259.251408][   T28]  jbd2_journal_get_write_access+0x10c/0x140
[  259.257401][   T28]  __ext4_journal_get_write_access+0x208/0x6d0
[  259.263607][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  259.269827][   T28]  ? __might_sleep+0xe0/0xe0
[  259.274430][   T28]  ext4_reserve_inode_write+0x205/0x2a0
[  259.280575][   T28]  __ext4_mark_inode_dirty+0x13f/0x720
[  259.286079][   T28]  ext4_dirty_inode+0xcb/0x110
[  259.290906][   T28]  ? __ext4_expand_extra_isize+0x400/0x400
[  259.296731][   T28]  __mark_inode_dirty+0x2cc/0xc90
[  259.301804][   T28]  file_update_time+0x187/0x1a0
[  259.306701][   T28]  ext4_page_mkwrite+0x1f9/0x11a0
[  259.311801][   T28]  ? filemap_fault+0x103c/0x1540
[  259.316757][   T28]  ? mapping_seek_hole_data+0x1330/0x1330
[  259.322535][   T28]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  259.328826][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.333857][   T28]  ? __pte_offset_map+0x20d/0x280
[  259.338951][   T28]  do_page_mkwrite+0x153/0x3f0
[  259.343730][   T28]  handle_mm_fault+0x1a2c/0x4a50
[  259.348791][   T28]  ? handle_mm_fault+0xe6/0x4a50
[  259.353746][   T28]  ? numa_migrate_prep+0x350/0x350
[  259.358938][   T28]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  259.364245][   T28]  do_user_addr_fault+0x736/0x12d0
[  259.369412][   T28]  exc_page_fault+0x64/0x100
[  259.374022][   T28]  ? clear_bhb_loop+0x40/0x90
[  259.378807][   T28]  asm_exc_page_fault+0x26/0x30
[  259.384053][   T28] RIP: 0033:0x7f39a48730b2
[  259.388530][   T28] RSP: 002b:00007ffc6dc06aa0 EFLAGS: 00010202
[  259.394610][   T28] RAX: 0000000000006008 RBX: 00007f39a5755720 RCX: 0000000000000000
[  259.402613][   T28] RDX: 0000001b2dc1e000 RSI: 0000000000000008 RDI: 00007f39a5755720
[  259.410651][   T28] RBP: 000000000000010d R08: 00007f39a4c10000 R09: 00007f39a4c26038
[  259.418691][   T28] R10: 0000000000000007 R11: 0000000000000003 R12: ffffffff86f834d6
[  259.426677][   T28] R13: 00007f39a4c26038 R14: 0000000000000044 R15: ffffffffffffa000
[  259.434710][   T28]  ? __i2c_transfer+0x296/0x2090
[  259.439751][   T28]  </TASK>
[  259.442771][   T28] INFO: task syz.1.306:6607 blocked for more than 144 seconds.
[  259.450422][   T28]       Not tainted syzkaller #0
[  259.455363][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  259.464131][   T28] task:syz.1.306       state:D stack:27048 pid:6607  ppid:5777   flags:0x00004004
[  259.473383][   T28] Call Trace:
[  259.476658][   T28]  <TASK>
[  259.479660][   T28]  __schedule+0x15ae/0x4660
[  259.484849][   T28]  ? mark_lock+0x94/0x320
[  259.489250][   T28]  ? asan.module_dtor+0x20/0x20
[  259.494117][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.499210][   T28]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  259.505119][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  259.510373][   T28]  schedule+0xbd/0x170
[  259.514475][   T28]  io_schedule+0x80/0xd0
[  259.518752][   T28]  bit_wait_io+0x11/0xd0
[  259.522987][   T28]  __wait_on_bit+0x9f/0x2c0
[  259.527476][   T28]  ? bit_wait+0xd0/0xd0
[  259.532135][   T28]  out_of_line_wait_on_bit+0x13c/0x190
[  259.537627][   T28]  ? bit_wait+0xd0/0xd0
[  259.541834][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  259.546585][   T28]  ? do_raw_spin_lock+0x11f/0x2b0
[  259.551660][   T28]  ? bit_waitqueue+0x30/0x30
[  259.556268][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  259.561528][   T28]  do_get_write_access+0x5c9/0xe00
[  259.566669][   T28]  jbd2_journal_get_write_access+0x10c/0x140
[  259.572758][   T28]  __ext4_journal_get_write_access+0x208/0x6d0
[  259.578943][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  259.585080][   T28]  ? __might_sleep+0xe0/0xe0
[  259.590384][   T28]  ext4_reserve_inode_write+0x205/0x2a0
[  259.595950][   T28]  __ext4_mark_inode_dirty+0x13f/0x720
[  259.601473][   T28]  ext4_dirty_inode+0xcb/0x110
[  259.606249][   T28]  ? __ext4_expand_extra_isize+0x400/0x400
[  259.612187][   T28]  __mark_inode_dirty+0x2cc/0xc90
[  259.617246][   T28]  file_update_time+0x187/0x1a0
[  259.622169][   T28]  ext4_page_mkwrite+0x1f9/0x11a0
[  259.627214][   T28]  ? filemap_fault+0x103c/0x1540
[  259.632226][   T28]  ? mapping_seek_hole_data+0x1330/0x1330
[  259.637955][   T28]  ? pte_alloc_one+0x3b6/0x540
[  259.642763][   T28]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  259.649076][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.654113][   T28]  do_page_mkwrite+0x153/0x3f0
[  259.658921][   T28]  handle_mm_fault+0x1a2c/0x4a50
[  259.663883][   T28]  ? handle_mm_fault+0xe6/0x4a50
[  259.668931][   T28]  ? numa_migrate_prep+0x350/0x350
[  259.674092][   T28]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  259.679540][   T28]  do_user_addr_fault+0x736/0x12d0
[  259.684678][   T28]  exc_page_fault+0x64/0x100
[  259.689963][   T28]  asm_exc_page_fault+0x26/0x30
[  259.694835][   T28] RIP: 0033:0x7fa5f9072989
[  259.699314][   T28] RSP: 002b:00007ffc7ba48d00 EFLAGS: 00010202
[  259.705393][   T28] RAX: 0000001b2dd24000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  259.713396][   T28] RDX: 0000001b2dd23ffc RSI: 00000000005ffde8 RDI: 00007fa5f9f55700
[  259.721425][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa5f9412000
[  259.729485][   T28] R10: 00007fa5f9f55700 R11: 0000000000000000 R12: 0000000000000000
[  259.737480][   T28] R13: 000000000001bb43 R14: ffffffff81322060 R15: 00007fa5f9f55720
[  259.745546][   T28]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  259.751685][   T28]  </TASK>
[  259.754698][   T28] INFO: task syz.2.308:6611 blocked for more than 144 seconds.
[  259.762290][   T28]       Not tainted syzkaller #0
[  259.767226][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  259.776105][   T28] task:syz.2.308       state:D stack:27560 pid:6611  ppid:5783   flags:0x00004004
[  259.785357][   T28] Call Trace:
[  259.788792][   T28]  <TASK>
[  259.792131][   T28]  __schedule+0x15ae/0x4660
[  259.796667][   T28]  ? mark_lock+0x94/0x320
[  259.801029][   T28]  ? asan.module_dtor+0x20/0x20
[  259.805897][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.810979][   T28]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  259.816883][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  259.822150][   T28]  schedule+0xbd/0x170
[  259.826247][   T28]  io_schedule+0x80/0xd0
[  259.830618][   T28]  bit_wait_io+0x11/0xd0
[  259.834875][   T28]  __wait_on_bit+0x9f/0x2c0
[  259.839427][   T28]  ? bit_wait+0xd0/0xd0
[  259.843610][   T28]  out_of_line_wait_on_bit+0x13c/0x190
[  259.849191][   T28]  ? bit_wait+0xd0/0xd0
[  259.853368][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  259.858146][   T28]  ? do_raw_spin_lock+0x11f/0x2b0
[  259.863235][   T28]  ? bit_waitqueue+0x30/0x30
[  259.867877][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  259.873145][   T28]  do_get_write_access+0x5c9/0xe00
[  259.878355][   T28]  jbd2_journal_get_write_access+0x10c/0x140
[  259.884370][   T28]  __ext4_journal_get_write_access+0x208/0x6d0
[  259.890639][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  259.897192][   T28]  ? __might_sleep+0xe0/0xe0
[  259.901918][   T28]  ext4_reserve_inode_write+0x205/0x2a0
[  259.907482][   T28]  __ext4_mark_inode_dirty+0x13f/0x720
[  259.912986][   T28]  ext4_dirty_inode+0xcb/0x110
[  259.917773][   T28]  ? __ext4_expand_extra_isize+0x400/0x400
[  259.923646][   T28]  __mark_inode_dirty+0x2cc/0xc90
[  259.929326][   T28]  file_update_time+0x187/0x1a0
[  259.934201][   T28]  ext4_page_mkwrite+0x1f9/0x11a0
[  259.939382][   T28]  ? filemap_fault+0x103c/0x1540
[  259.944341][   T28]  ? mapping_seek_hole_data+0x1330/0x1330
[  259.950188][   T28]  ? pte_alloc_one+0x3b6/0x540
[  259.954981][   T28]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  259.961271][   T28]  ? __lock_acquire+0x7eb0/0x7eb0
[  259.966309][   T28]  do_page_mkwrite+0x153/0x3f0
[  259.971137][   T28]  handle_mm_fault+0x1a2c/0x4a50
[  259.976101][   T28]  ? handle_mm_fault+0xe6/0x4a50
[  259.981122][   T28]  ? numa_migrate_prep+0x350/0x350
[  259.986250][   T28]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  259.991574][   T28]  do_user_addr_fault+0x736/0x12d0
[  259.997100][   T28]  exc_page_fault+0x64/0x100
[  260.001768][   T28]  ? clear_bhb_loop+0x40/0x90
[  260.006456][   T28]  asm_exc_page_fault+0x26/0x30
[  260.011851][   T28] RIP: 0033:0x7f43aa46bc23
[  260.016288][   T28] RSP: 002b:00007fff9e409680 EFLAGS: 00010246
[  260.022421][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000
[  260.030443][   T28] RDX: 0000001b2d824000 RSI: 0000000000600000 RDI: 00007f43aa7e2708
[  260.038458][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  260.046437][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  260.054474][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff9e409910
[  260.062511][   T28]  </TASK>
[  260.065559][   T28] 
[  260.065559][   T28] Showing all locks held in the system:
[  260.073342][   T28] 1 lock held by khungtaskd/28:
[  260.078229][   T28]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  260.088139][   T28] 6 locks held by kworker/u4:10/4196:
[  260.093570][   T28]  #0: ffff888141e4c938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  260.105475][   T28]  #1: ffffc9000eb6fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  260.118018][   T28]  #2: ffff8880323820e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  260.128736][   T28]  #3: ffff888032384c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  260.139284][   T28]  #4: ffff8880320ea990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  260.149037][   T28]  #5: ffff888078182088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[  260.158905][   T28] 2 locks held by getty/5536:
[  260.163581][   T28]  #0: ffff88802d55f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  260.174276][   T28]  #1: ffffc900032862f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  260.185754][   T28] 3 locks held by syz-executor/5762:
[  260.191321][   T28]  #0: ffff8880323ab120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  260.201867][   T28]  #1: ffff888032382510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  260.211683][   T28]  #2: ffff8880320ea990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  260.221404][   T28] 4 locks held by udevd/5784:
[  260.226078][   T28]  #0: ffff888030a4d0a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xa1/0xc50
[  260.234970][   T28]  #1: ffff8880276a8488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5d/0x410
[  260.244282][   T28]  #2: ffff88801c732100 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x410
[  260.254356][   T28]  #3: ffff88802c2e51d8 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0
[  260.263817][   T28] 5 locks held by kworker/0:4/5819:
[  260.269085][   T28]  #0: ffff888140055938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  260.280589][   T28]  #1: ffffc90004927d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  260.292544][   T28]  #2: ffff888143b661d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80
[  260.301581][   T28]  #3: ffff88802c2e51d8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420
[  260.311210][   T28]  #4: ffff888031ad01a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420
[  260.320533][   T28] 3 locks held by syz.0.295/6580:
[  260.325554][   T28]  #0: ffff88801c3b6a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  260.335608][   T28]  #1: ffff888032382510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  260.345434][   T28]  #2: ffff8880320ea990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  260.355176][   T28] 3 locks held by syz.1.306/6607:
[  260.360262][   T28]  #0: ffff88802741cda0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  260.370259][   T28]  #1: ffff888032382510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  260.380497][   T28]  #2: ffff8880320ea990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  260.390364][   T28] 3 locks held by syz.2.308/6611:
[  260.395400][   T28]  #0: ffff88802741c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  260.405423][   T28]  #1: ffff888032382510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  260.415984][   T28]  #2: ffff8880320ea990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  260.428195][   T28] 
[  260.430535][   T28] =============================================
[  260.430535][   T28] 
[  260.439231][   T28] NMI backtrace for cpu 1
[  260.443578][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  260.450756][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.460807][   T28] Call Trace:
[  260.464103][   T28]  <TASK>
[  260.467017][   T28]  dump_stack_lvl+0x18c/0x250
[  260.471703][   T28]  ? show_regs_print_info+0x20/0x20
[  260.476888][   T28]  ? load_image+0x420/0x420
[  260.481381][   T28]  nmi_cpu_backtrace+0x3a6/0x3e0
[  260.486315][   T28]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  260.492458][   T28]  ? load_image+0x420/0x420
[  260.496945][   T28]  ? wq_watchdog_touch+0xef/0x170
[  260.501959][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  260.508032][   T28]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  260.514029][   T28]  watchdog+0xf59/0xfa0
[  260.518184][   T28]  ? watchdog+0x1e1/0xfa0
[  260.522519][   T28]  kthread+0x2fa/0x390
[  260.526595][   T28]  ? hungtask_pm_notify+0x50/0x50
[  260.531612][   T28]  ? kthread_blkcg+0xd0/0xd0
[  260.536189][   T28]  ret_from_fork+0x48/0x80
[  260.540612][   T28]  ? kthread_blkcg+0xd0/0xd0
[  260.545214][   T28]  ret_from_fork_asm+0x11/0x20
[  260.549980][   T28]  </TASK>
[  260.553875][   T28] Sending NMI from CPU 1 to CPUs 0:
[  260.559336][    C0] NMI backtrace for cpu 0
[  260.559345][    C0] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0
[  260.559359][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.559366][    C0] Workqueue: bat_events batadv_nc_worker
[  260.559385][    C0] RIP: 0010:__lock_acquire+0x1b8/0x7eb0
[  260.559405][    C0] Code: 91 0f 93 c0 48 81 fb c0 93 95 91 0f 82 6d 17 00 00 84 c0 0f 85 bf 00 00 00 48 c7 c0 c0 93 95 91 48 89 d9 48 29 c1 48 c1 f9 04 <48> b8 c5 4e ec c4 4e ec c4 4e 48 0f af c1 48 0f a3 05 c2 74 96 10
[  260.559416][    C0] RSP: 0018:ffffc900015a77c0 EFLAGS: 00000002
[  260.559428][    C0] RAX: ffffffff919593c0 RBX: ffffffff9195ae90 RCX: 00000000000001ad
[  260.559439][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df320e0
[  260.559448][    C0] RBP: ffffc900015a7a08 R08: dffffc0000000000 R09: 0000000000000000
[  260.559458][    C0] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: 0000000000000000
[  260.559468][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
[  260.559476][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  260.559488][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  260.559499][    C0] CR2: 000055d63ff5f168 CR3: 000000000dd32000 CR4: 00000000003506f0
[  260.559512][    C0] Call Trace:
[  260.559517][    C0]  <TASK>
[  260.559534][    C0]  ? verify_lock_unused+0x140/0x140
[  260.559553][    C0]  ? mark_lock+0x94/0x320
[  260.559568][    C0]  ? verify_lock_unused+0x140/0x140
[  260.559590][    C0]  lock_acquire+0x19e/0x420
[  260.559606][    C0]  ? batadv_nc_worker+0xd2/0x600
[  260.559622][    C0]  ? batadv_nc_worker+0xd2/0x600
[  260.559636][    C0]  ? read_lock_is_recursive+0x20/0x20
[  260.559652][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  260.559669][    C0]  ? __lock_acquire+0x7eb0/0x7eb0
[  260.559686][    C0]  ? batadv_nc_worker+0xd2/0x600
[  260.559699][    C0]  batadv_nc_worker+0xef/0x600
[  260.559713][    C0]  ? batadv_nc_worker+0xd2/0x600
[  260.559727][    C0]  ? process_scheduled_works+0x975/0x1600
[  260.559746][    C0]  process_scheduled_works+0xa60/0x1600
[  260.559775][    C0]  ? worker_attach_to_pool+0x370/0x370
[  260.559794][    C0]  ? assign_work+0x3cc/0x5d0
[  260.559813][    C0]  worker_thread+0xa5e/0xfe0
[  260.559840][    C0]  kthread+0x2fa/0x390
[  260.559860][    C0]  ? pr_cont_work+0x550/0x550
[  260.559876][    C0]  ? kthread_blkcg+0xd0/0xd0
[  260.559890][    C0]  ret_from_fork+0x48/0x80
[  260.559906][    C0]  ? kthread_blkcg+0xd0/0xd0
[  260.559921][    C0]  ret_from_fork_asm+0x11/0x20
[  260.559944][    C0]  </TASK>
[  260.563015][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  260.813212][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  260.820403][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  260.830454][   T28] Call Trace:
[  260.833722][   T28]  <TASK>
[  260.836647][   T28]  dump_stack_lvl+0x18c/0x250
[  260.841323][   T28]  ? show_regs_print_info+0x20/0x20
[  260.847123][   T28]  ? load_image+0x420/0x420
[  260.851631][   T28]  panic+0x2ca/0x720
[  260.855526][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  260.860023][   T28]  ? __irq_work_queue_local+0x13a/0x3b0
[  260.865562][   T28]  ? preempt_schedule_thunk+0x1a/0x30
[  260.870933][   T28]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  260.877083][   T28]  watchdog+0xf98/0xfa0
[  260.881235][   T28]  ? watchdog+0x1e1/0xfa0
[  260.885561][   T28]  kthread+0x2fa/0x390
[  260.889624][   T28]  ? hungtask_pm_notify+0x50/0x50
[  260.894641][   T28]  ? kthread_blkcg+0xd0/0xd0
[  260.899223][   T28]  ret_from_fork+0x48/0x80
[  260.903630][   T28]  ? kthread_blkcg+0xd0/0xd0
[  260.908213][   T28]  ret_from_fork_asm+0x11/0x20
[  260.912977][   T28]  </TASK>
[  260.916227][   T28] Kernel Offset: disabled
[  260.920542][   T28] Rebooting in 86400 seconds..