last executing test programs:

3m57.815152974s ago: executing program 4 (id=480):
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0)

3m56.131085976s ago: executing program 4 (id=488):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)
io_submit(0x0, 0x0, 0x0)
io_getevents(0x0, 0x2, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0xc000, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf727e1e38533740c5b1da10b83273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce837a5f88eb1f09a8a7f55959926a7fd5ac27fd519b5c217ed420e41ddcfd9072f503656169e720fdc2da8c998a870683232e5263a0", @ANYBLOB="a09160ded880b9f6182741b8219be2753fed7f6991201facf3ff065502eb11cb54351349bdb6195ff9e3753bda2a4e07e4967c3defaee749122c2229ca590d636a18c34f67c493ea3ebc3f1ff123380993058cbdfdbc63fa604ab6230c747c821dfac7d53dc58327a60007fee77c6cbd346c9cc1f8fadbd0c64e5b247303763ed533018d6138975f73783287a2eeccea823457f09c5734dedfeb763483d170e6784b776c12a2783494370c955ad5964bc27fda6bd4f4ae2722e72234ce2b28244098416b88d560880a5d07258c700797f3287584c0ea81c21bcf14d137de612a580f5a5f4939b4b559944bf1b4e3a6d4f2aa93a1419838fc3abc6fdaa7430ef716c1db679eea21bafbc7ef48c5a0b94794e2ad06da7745cbbbf1afea2da4986e6d0a1736bcb26d151cbae6d7491bd22b15ba97180b3ecb666c48f57e7bfecb95b21e412c88decc222b133eeaadab04de5460a7ccb0d8e366ad2045fa83e68b0431051cde3b6e2b997e64713a5467b4b602f2e9142f72c5d4a3d80ea232155d03b68221708e3e0ee58dd9f22dcd03670708d3224424e10c287add166bafa42e04f8fec01377945fe2bc0e9232031e987db1f9c2a8d162ebd5629349da869b7cd23e1766e92a8522ce907f66e874d4e124f4fe439ea60aba65eb7fea00ae0a5b6da25187536f054350a7365ef998dfe309f2c2c4d7d599c4754b350c4c23366fc7647cae81b9d5eb7482303620f7c4ec93aafbcca04bfd17731bd79fd69d1c6e7f8aa685ca42310b9a19952925c836597de5262951d1b846a754e335fc8290b1beadc11d86315c7c31c2b324071ba8440f65f8c9409de8c9054bd478b3c265a3a470b43e7f4c6acffb8eefd86696655bcaf1b06eadff5b1b1f9884ba7325653209ec163ba7ca48d1beb71813e8cd801d429a33c0111f76882112b002bc87db66d11fcc238908b8cc4ae5b9fd088fe8aec20985bcbecfda8ebf2c72319ea67fa1b67878ce006e558a92d669923057f258b03edbd85fe30655e81deca4d9ecea13b658f68ba4d63d6a2ddd1e078cee7bf4dda2fa4124aaa4e3223c1d6ae1cb08c65b556a2ed67a4dcd58ac57cb6621ba8131463ee8837567fd0e5ba564054c1fe92d2beb675576ac8522d023fd2c47a5b461a8ff2a46b4c3f327692d6660042960b28c4085728a866da03c9fd4eadf2865a36941635e1f6a58b7ed328ecb4a299f5ad14160672bbfa3c4cc3a1c3d547cac38861ebb19f792358aed3dd9060b2ed4c8d509e72b606c7037da7f5c048ff89047c4842e47e595af3e06ad978ee79816cf60db6048f0eb98b435509bb0678cbabb32c698d362ec1e7a6b2ab481ee1aecdfc82664f82cfb740d249ead85055b36a3a8628cfe7233292d6ae40cc446b4f50f33604b679df2ebe3c20f1972dd53f21b8a7a3bb086e266e40bf389b7311d7feddc620eb8b80a86a031ce4f6e00638677541812ff3865232fecf63251019e8cc048ad27120897358d8ec18dd9da2d44de2c6e890d60301171a2ba23ab37a21257b23052994cf7149a5dc827ff40e733537451185a0b4ffbb9d648ecf8204ff0c91f17c21c340bdedae72452859037bc4a569ee1ab644332bf9c6b10ba5ac2fc36de0ce8fd4b032c4e1f1763a13c65abbaeeff5bb8e3a713c51b107cde9440b63e09e10a60a362c671f22bb4b2362ba87bc72a1cfd30baf0e388ae045e150a302b6f7146e53d31e8ac6943914be749e5de9037d46353471b0c92de12d3eb386522b9e30a574744f2e1467dccd94563f78f43f3726add2614fd94c4cba14d442511e8ad044369522d4c9d09fb199fdfdf89739821de9347c9b213636df6eda119fef023188154c3f7f9997e2789435a4ecb9b210c0b185e805279329b7ac4ede49cd5b812604bca5eee8fa94711272c80b452f454fd3d2f1a50b8c8aaf208064389bda22892a8d9a7a710a1ae0db3a2813608079a37843119397f4c299ea57965e735bdf45857ea6502e29a97585f0f24a43608539dc13e2a967c867767cb9d1738fb7471e53e51474f64f0fa5c07f9e3207f6c402acafc19b4a480f7ffdbd6867abc289147bcd37fbc1da5ec58dac242b7492b8a3e7773bcd5ea424a9d79bc11bae8776234d0c47ff68ceee2a1cb7c7f2aa7e82aefedf683f98fdd0bb4725b32586ba33b625675da494d2f75322d08ff57d78081662f87cc9876528aea338bbfa8afd8914dda0754ed51c0e973522345c1617d218bb57ef061dda5436d3e396a812be788aafe0441426193a578cdb6096e1710689943b1ae69e21960782fa6195c1760ac0c07c3d04b1f0836ab558e7d98a1d0a261f7cb08949d42f3b0ac3f62cae3301aa3cfb9bea7fb0d2603cce9589156bfca5489685c08bd0645cefa7267d6d489a29f95d5d9885fa385b84ffef08c8a13ce7d34390a1e9750e81babf7c3033741887435a8d701d9f60587379820dc199ed3f68bef931b282e5f461bd6f820c33228d541a4c2dcec4ee48603257600b9433046dbe3899a0608cc77e281ba890bb148ce52b4687524448f42df1bd7fa8288a16c1c465962f7518d8a3c5e336fc81e65bf98173436dc089d7233186a4fdf833be495f514e7cb6393d4abb746ffa56bd468cfa76036deaa7f89d135c8ad759d5265d01201d5062c35f2bcf3c8f11c1b54d2eb70fd4c73de32ff580e2f8df5383e4054d176e3af8cfe234c6f8d6ebbb952f724efc5a212c4cc360bfa0afeebf03b33014f0c38da9787eaf1b0862d49681f151ee757ecb104176dfa7a27b9ca2986dfcfaf25925009958ebf9287ae2eb2a57757dce11bbf465e9bbd2c2dcc0ad2790ca64fe2564e0395ab009c7f56990df72be1f0f275b6c086bf563f7b2f2916d0ea146c3a3e6264b5af241a5e71742b296f982333ee8a0164d470c6a139f54cdb13ca6c680cf61b436b196596942214cf5e409b037708e4aa674c7f157d9a535cdd3255ed1f7826a6172e45d352c742b80ba815eba0d5ae045e502be1ede7d05bc25f53a1ef14ea5ef2e4048e3351b000a8dbab5c4f047c5f62fbbc4a9f719d82835ab809749ffdc8668b17b7df6586861847a8bec7a3980050479230eeebdd4407751450a24856320a6f757c36e5739a3a3742926dcb7f0f55a1fa1f9d3db20163c7cd513905127d461314d73f1a77368ea39ffb449a86b4eb1c3d2a287fd1139d435f707f5eb3f70adb1ff711fc257549c665f6de6474066194582ed515646180933df9af7bfc8f8132be1650b8cbb565bfeef499e2e81c04ad15a7e88543a95ea8a241cb3e731c0fcb34c9d97b7ec111bca16d4203fca37a033942af33f60b5b4dd3b72ca6672bc53e459fd8afc3299d81f431d96d5cada93ca5458d96f88993ef32aff2a8a225e7e00bb5ed9f309ead76c8c8c633a32c3d0ebcfe11bcf31d1cef350e54a192069cc12e2b13bed75c1b9b8eefe57d3c70fb7ff6679763a16b1c0e5b908a2a376dac088d91d55ac04614afd64b2f4cc8df033f3823f1d437d96b4c3918989a0072cc4969eb3bb99184edd4c519c4173812d55543a2cd7859b78a5f1982aad199aa015aaaabe6e1d1c8388c080283442ae90205e61ee20238587799d29dd175ec5ff8121b85773e357a8067eb29aab493698afc5978e0793faa8414e48044a37876db9735c3d59b2bba003b8abe01129d0fd93cf900d4acf48b67609ef8bc4599a7a3178290dbbd2a21ec4b40496dec2d278105b975c8ef7fad3d09bc33943e230cd1c49b17bab8c06721b6232039f30c7696ad8244aa3a7a43691adfd5bfe2770e45a3a45121258c515db8f3ac16384bf9531bd6abc5661ab58f7089ae670c23549e4153492fda1bac1431fafb65392f95bdd8e97a78a6b582a56750c55f19abbac407ce6c74a2d4dfb517a9881d15fa636d8894095dd93c15dea6dd39b8c2df9f9eed0d230854ff72ff331ee12643d1e9f1938b9896c326d83e4dddaa4ad976345978821c03569c7290b92b406851844201f232b9c32a4099414db8242fbd32da7c9fd4999258afcd4e2410291bcb58639318c15e42a7afc8fd60ac091cb409a8eaf9340bfdf9223e52cc577c5d304cfb3cfc4558a5401faab52944efc4697bae59401b092d94a5e56c2cfe56157c5b27bae66b849cfd621e10c4f8ef5ead101c42ca775cbf29fb8cff0a8821d9bb85f2127fe554841730e79f30701f527e63113899bbaf5b888fb73683a2631bc4b9cc914386e0df2763ae9b46e0eca4085e1676c88dd719a84463f86e3017f90346e8c88006df2867bff1cfea25fd29af1b96249cb4a7c7353658b16d95c3b7f532db1e9455a486a9bf1b805bc3a90c5db07ef27e2461f356093a8814990cf712b97974919b73f13b2f08bfc9d2c4db69c3518b6ade6e7254ae2e6d07677c3c67d00830c041a111eb103a2d68a7bbfab4755abe3dc4a73f1370e75505622f4d479e0caed017160d355299d7246a29f2498f440d5782bd97dbba9f12a053efa458d205abb3b8fc826d3f2afa51ad42fa8df337beefaa411fc7b763599a83f901fcbcea593ccb4b08b4b463ed9e03446672622909940fc111ae391d32e079dd0b7fa5e516f10f849edb35cdc1f3b636a13ed18b902c5a40999f8e8565bf661ae0b17ff4c3f80d381194ecad7dd743eff970128c8c6dd12705b4b91caac2963c3575a96fb1fb48790ee1eac5c93a1cfdd0da49d01c72dd847fa155d34d7a5629e23bf36e56dcf99d07a8d8afa2d8daf826a2cc7d8142fd0f16c61be5206852efd9d5cd31da1f743c47af6a8dd54b411f3e1c076ef53de349f5115d0f6d4b49cefecc9d66ee4ad65a6b66ecae3532b0ac09c47bf78430ed1b6caaa8e2530265d37a778b90373f1046e7d774fcedcac582add6324fa57f4d4a54323a8d4e0a7ac80e52f1864f804dece8cf90b5c305a49fad0ba5a6e38d47c8452af30730441b6074b26d9e264fedb5013058ee4677cf3e47872eff2532fa3d1844c0a2fac049ccb3fc668b72fbb0f63efbbe9e4a5daec5c7f1cec2bf3a54cd610c21ecb805f91caa7e63240c71c1553f369b594d1ae1e9ba9886e1096daaa3029e9921496b9e37c28aa7da13a352bcabe350f11a2e67fb3240516a36e3b313464c0bd11dd3f0d4fc6c8b95fd87222577d5b7eacf45667b9ef46bf1cd8ec63c727e071bfb6b0ff81470f826024be269f2b52cde6a30f5552cae4a90e513abc9b174a174c3ce3ea8bfc23ef0881fa4de569cb368ab25c6413c3ec816fb16ad839a9606e103544701ea7dde6310e6205e36646c68f5f5c5757c83adafc414288d0058b7e5bb2635f2e74b185377fba455fe97c4ca2c9a6d0da904f67bf5a90c8490bccf6b8e9a6774971a8dd9b3dd2e7daa576ebaf3a7034359a633257a1c3cd0bef55f1739cd56afc284db27fe8a865d8216700e8abb495f8e0da86cb91b32d2047853ce39c7f7ed68607e9dd218f2497f386c5b14ffa13f76931538076ee4eb5c3a69b5b0804947acb1351562441bc4a733f988a960c2e9450ef91702cfaf27da31f262ac66819bf147641ded1608d51e5c43d0561768dfd35e411498dfcf610b48897a58c15ad7911f1ca16cdeb0b2718a24444d9ec6644b8c40bf33862fbaa47181d3d1fd14a016096fa3367052f5320523db2d4574861ef2ebd4a1f33016709474d9b33fc4c4421aea9bf99a6e93f4ed07ec176cd33fb662429c84641711ffa77a17cd916de78435952ebb06eff35c05b8bd35541d144aca693258002882b0e5e5bcc56e6f11964a2d83a5c80925a04eaa221ddd6d04bb672bbfb54653cc87", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x1, 0x63a, &(0x7f0000005880)="$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")
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000080)=ANY=[], 0x0)

3m49.484146868s ago: executing program 4 (id=506):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0)
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00')
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41)

3m48.247993889s ago: executing program 4 (id=508):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x214802, &(0x7f0000000300)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@usrquota}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0xc7}}, {@bh}, {@init_itable}]}, 0xff, 0x558, &(0x7f0000000640)="$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")
r0 = open(0x0, 0x66842, 0x1)
pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x1a00, 0x0, 0x3)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359d413bb9386ff7d6a4ae65ddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc9721a0242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x48]})
open(&(0x7f0000000480)='./file2\x00', 0x163042, 0xc5)

3m45.976347535s ago: executing program 4 (id=513):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)

3m45.301323611s ago: executing program 4 (id=516):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000340)={'wlan1\x00'})
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xae, 0x3, 0x7, 0x0, 0xa, 0x7, 0xfe, 0x8, 0x10, 0x7, 0x3, 0x1, 0x0, 0x3, 0x19, 0x4, 0x81, 0x7, 0x7f, '\x00', 0x2, 0x8})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]})

3m44.840944713s ago: executing program 32 (id=516):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000340)={'wlan1\x00'})
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xae, 0x3, 0x7, 0x0, 0xa, 0x7, 0xfe, 0x8, 0x10, 0x7, 0x3, 0x1, 0x0, 0x3, 0x19, 0x4, 0x81, 0x7, 0x7f, '\x00', 0x2, 0x8})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]})

2m16.223135048s ago: executing program 0 (id=732):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

2m15.475962675s ago: executing program 0 (id=736):
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000280), 0x4)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020)

2m14.319143814s ago: executing program 0 (id=740):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-12', 0x15, 0xc30)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r0, &(0x7f0000000100)='1', 0x1, 0x1ffe30)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

2m13.641966621s ago: executing program 0 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)

2m12.142922677s ago: executing program 0 (id=745):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
r0 = socket$inet(0x2, 0x3, 0x8d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)

2m3.648457276s ago: executing program 0 (id=768):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r0 = socket$inet(0x2, 0x3, 0x8d)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)

1m48.441488359s ago: executing program 33 (id=768):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r0 = socket$inet(0x2, 0x3, 0x8d)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)

19.745147475s ago: executing program 1 (id=994):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
semget$private(0x0, 0x4000000009, 0x208)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

17.891641641s ago: executing program 6 (id=998):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)

15.099491379s ago: executing program 1 (id=1003):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffe}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0xffffffffffffffc3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.004047736s ago: executing program 6 (id=1010):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.413427171s ago: executing program 6 (id=1013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfff, 0x1ff, 0x72, 0x8, 0x2, 0x3, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)

12.540175852s ago: executing program 1 (id=1015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000400)=""/241)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

12.21358617s ago: executing program 6 (id=1018):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
readv(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)

11.147576486s ago: executing program 6 (id=1021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

8.97918714s ago: executing program 3 (id=1025):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93eb, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

8.622151528s ago: executing program 1 (id=1027):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
read$FUSE(r1, 0x0, 0x0)

8.298872427s ago: executing program 3 (id=1028):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2d, @remote, 0x3, 0x2}, 0x80, 0x0}}], 0x1, 0x48081)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)

8.16858228s ago: executing program 5 (id=1029):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x841fa2e66efa8cfe)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
syz_open_dev$tty1(0xc, 0x4, 0x1)

8.093304581s ago: executing program 2 (id=1030):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

7.403334878s ago: executing program 5 (id=1031):
msgsnd(0x0, 0x0, 0x0, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800)

6.595242369s ago: executing program 3 (id=1032):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount$9p_fd(0x0, &(0x7f00000000c0)='./sys/bus/pci/rescan\x00', 0x0, 0x2000008, 0x0)

6.438111712s ago: executing program 1 (id=1033):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x57c, &(0x7f00000129c0)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}, {@quota}, {@quota}], [{@fsname={'fsname', 0x3d, '\x8a!'}}, {@flag='rw'}, {@hash}, {@fowner_gt}, {@appraise_type}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)

6.387513123s ago: executing program 5 (id=1034):
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x2b, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x28, {[@window={0x9, 0x3}, @generic={0x4, 0x2}]}}}}}}, 0x3e)

6.195171018s ago: executing program 3 (id=1035):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

6.168591599s ago: executing program 2 (id=1036):
syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)

4.841073621s ago: executing program 3 (id=1037):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000400)=""/241)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

3.986024532s ago: executing program 2 (id=1038):
syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_INPUT2(r3, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a)
write$UHID_INPUT2(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c000000140011ff00000400000000a7c96014f3edab4100006fd1583442f6c3dd76e192144f38b70a4a1953597aba40cf9a30f38dd24943adde4f"], 0x1a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x22020600)
unshare(0x4000400)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_open_dev$vim2m(&(0x7f0000000480), 0xa9d6, 0x2)
ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2)

2.798991491s ago: executing program 2 (id=1039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0xffffffffffffffc3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.389988381s ago: executing program 3 (id=1040):
open(&(0x7f0000000240)='.\x00', 0x12000, 0x95)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf6, &(0x7f0000002b80)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
flock(r3, 0x6)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.927276503s ago: executing program 5 (id=1041):
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x5, [@private1, @private0]}], {0x4e24, 0x0, 0x8}}}}}}, 0x0)

1.917905913s ago: executing program 2 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x841fa2e66efa8cfe)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.914841613s ago: executing program 1 (id=1043):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@noquota}, {@gqnoenforce}, {@largeio}]}, 0x2, 0xb9ea, &(0x7f0000017b80)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDC22yoGTWn99yuvesa+t/+/zr6+STruefc/s5u77f/cylZ2+65CzqyrCYr6c0q3bD82Ocab2z/wTen3Xf44mur3igdbZtU3N1QbPcttlOy/pO15berS4dqvrP6F9X5TvXg8+5WX1/1nix7X7HbVmxbS5vLm8rv11ehODy5fH/1wMOo+mrpz4D6/M2X50w5b/B58nfMsuzQbT7Qcaq7fd7c4jnJBnWbUNxdtfW+/m1N6c9Rf8yyo9Zm2/38GFP545x8xqovPDnWD2RX0N0+r7Oif1vRuapYjw2Va3A8qvw8P/fMpmXFU1g1+Hq0q+lun3t8NsI6/udfvtHbV7pu1mZZVpdl2cQsyyaNdQ92jvaOlo78ml/eL7KX1//k4T4v7vzv1T/LsuzdxevEYeXXAmDX0t7RcvQw679upPV/13Hrb7L+YdfX2d7Rkq/1ivU/aaT1P+3uYxYWX3S3lqbeGtsPAgAAAAAY1vLLVl64aOnSnkvccMMNNwZujPWVCYht66If60cCpJbiPyfG+mMEAACA8a6zq/2lCVVDDk0YvLP3wz3925mbuy9YefecE8rb4u75w5xyyPf59/X19a0+fek5xe7Eiu+XnVQ5nJ9/yX2LLi12Gyq//6C2/2htdvb5S5b2HJr/VVNrs0vznab8vNNqs6/lO835zvTa7PZ8p6V/pz5bk+8ccu6ypeflBw4IfMbeWTq7erMJQ4plQz4bBvdfcl/vr8rbEU5ZPlv/D5XI+29quuWuivvKttN/4Pz7/h/+fIF3lNH1v+aa8naEU26z/tcvntU03H3b7z9w/in6xzXM9X9Io8rrfsX1v2GYUw7M//q0rz+X95/x03XXFodq3s71f9D5p1b27z/5wPU/P9V+5et//tqy/w49GeNQZ9dVL420/kfuX/Oh4t2qB80OnK2l77bP5P3vua7t8eJQ7Sj77zfS+q9q2OZ6wih1dt3UV7H+R9E/mz7MKQeavGtO5+q8/2tbHnl00H2j6b9/Zf/GFRd9tnH5ZStnLLlo0eKexT0XtzTPam1ubZo9e1Zj/yWh9HbHnpRxZMfWf7ZbxUxVlu0/MD/7imM25P3/fPOptxaHJo2y/7QR1//ZQx8rg0ypzurqsksXrVhxSVPpbXm3ufS29G7D9B/F6//U8hdR9cW2Kss+ODB/4JVvHJz3v3PD67cUh+pG2X/6SP3rtv69BNrB9X9excyQ/g890nNz3n/5QR++sDg02tf/A0Zc/73W/47q7Kr4Hz47Wd7/5E1HbAwcP9DXf3Gl6F+/sXVV4PhH9I8rRf81L7bcHjh+kP5xpeh/7/2NZwSOH6x/XCn6f+7Bg1YGjs/QP64U/Wc8NX3PwPFD9I8rRf9/PDF1ZuB4o/5xpeh/0rMXXh04fqj+caXo/91Xlt0YON6kf1wp+v++79wHA8eb9Y8rRf/dX138cuB4i/5xpei/4pnL9wocn6l/XCn6/3b9lUcGjn9U/7hS9N+4ZvkpgeOz9I8rRf/GdZ+/JHC8Vf+4huu/7W8BDJf3f/GFH/4mcHy2/nGlWP8Nz9/yvcDxw/SPK0X/yzf/5F+B44frH1eK/ne9ecdjgeNH6B9Xiv4Pb/jltMDxI/WPK0X/mid/HvrvND+mf1wp+p/1wL0XBI5/XP+4UvT/1tq7TwwcP2r7/Wt21kMc11L073v2xGcDx9us/7hS9J/1yvzQ3w/brn9cKfpf1Dfvx4HjHfrHlaL/ra8e/ZXA8aO323/LTnuI41qK/k8/c9YVgeNzrP+4UvR/7/qFCwPHj9E/rhT9O9ec1hw4Plf/uFL071234P2B4/P0jytF/7kvfOmvgePH6h9Xiv6rnr/6P4HjnfrHlaL/nzZfe33g+HH6x5Wi/95vrlodOD5f/7hS9D9nw/XtgePH6x9Xiv53PPnt8wPHT9A/rhT9X33ghj0Cx7v0jytF/8PWfj/0h62fqH9cKfpf99qGGwLHT9I/rhT957z12D2B45/QP64U/fd5+ZnHA8dP1j+uFP2f+PvTrweOL9A/rhT9f/TI2omB45/UP64U/c/+3R+G+z0hb8cp+seVov8Rj67rDBw/Vf+4UvR//W8PXRw4fpr+caXoP/Pfe90WON6tf1wp+m/ZtM9VgeOf0j+uFP1v27jnC4Hjn9Y/rhT9l734gXWB4wv1jytF/8n373544Pjp+seVov9TD+6xd+D4GfrHlaL/F5+asCJw/Ez940rRf/4TExcEjp+lPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3J3CXloP/x8+sTalUQkKmPUQqVEKLVrK0qZQW7WlTaaeypMVSEi2W9pIQFSotKFFKqxAiZYkkSWiZ/2uaecY0fWcMfz+T+b7fr9c8Z7vndJ3rc67znJ77OfcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAz2niN9VcdDEZOvHTwE24/cc+17lrqpFVOP3axK1+x/ZHD7p9w7cpjJt48dtwUBo/d2crjbxs+YZORx51/+vDxF4ZPfr+zzTrrsDkHw+bNozpg838y7LmGzky407GDwWDYERP+TDLr+C8r3XHHLf/kvqptvMqaa4yfvAl/JnUbMfHmiddPOj9ywp8VtxgMVtxsMNXnx4y33t23PTCjx/C/YONV1lx7iv6DiZ0f6z7l+m415fP8wht3XnGGhvsP2XiVNdYZ33pq6/jMjVY+fdxjr+sjTxoMRp48GIw8ZTAYeeqM7sF/xiqrLrvq+Nf8ocsTqh889IYgvb4PW3D9TWYbDAajJnyfGHna0PcC4H/LKqsu+5qw/kcP3Z7W/0p3zDm/9Q//+9ZeZdVlB5O9z59w7cFD/38f1/9dI9Y9esaNGAAAAPhXPXrPRZdO3Nc3fDBYYDDZ/t5J5yb+XGDYuZdff/0MG+iTQ9hP9sTfmfgfM77ymLPHDga7bjijh8IMMGxGD4AZSv9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30L/b4/f+TPu8919DpKsds8OqJmy663LwbnT/l3x9/3Zj//rBnlJl1//9gx2ETWo5vvuNgMHjDKuttsMRgMDh/o3mXW2gw6bblx9+24jwjJh4gYInHvi46lTseO/npbJPu49zH7n/tcSePGDbFICbz+tUu3n+HjR986ZSni0/9cUw6vsT5a682+9BnWYZPsdHUnqtD9z/0WKbsPHHsS4wf+1J77bL7Unvut/+Ldtxlq+233X7bXZdd5uXLLbPc0ssv//Kltttx521fMuHrVOZswqwsPD1zNnrKObtnlcnnbMrHNrU5GzutOZv4Sd+7jt7owqE5G/kvztnC056zsTsOjXXsqMGWj03N+AexyKjBvuMvLD3LZK8t843f9pXzDB8Mjnr8ryHNMuk5OOzgHf8Dxy2ZeLrgxNOF4nFLLpjacUsGQ8ctGTpgwgoTTva6ZGi7KT9nPfHq6T5uyT6rPrzQ4Amfy/o/8W99/39Cr+WHTZqooW8iE7eZ0Osfx5kYmraVJzvOxHLpWDL/SU8Y79jhk57XabwTPxc3bIr5n9bn4gbbb3fgohOjLjfhbz36b0fJrx3rPPZ1aut57BSn03rtGPGPs/+4dttrnzvla8frpj7Ex62LoTmaZYqNpvbase9WV+44+WvTVF471tlx4geN//HaMf4/u/DQa8f4sS82anDU+AvLjL+w+KjBWeMvLPvYhVkHl4+/8OKtd9t5m2GPfb96wvNgiWGPO8BNeN6uMcXzdjqOj7PS1YPBSlelxzX16czS83b0NMabP889mObnuS/basHzBoPBHBMf1wpDY/93pPGOnPZ4w/EnBtM6/sTg5Ov3PvU/PN5J6+yx59rEl+klpvJ3HrfO5nrCOjtkxGQrY3rf12wTtp9wfr5J93bKttddMzRHo6a433/2PXrosaT+Q+/5Jjfs4MGwac3N1N6HPW5u5pz23Ezv+5clJr7BmHUac7Pk/Qc9f2huRv+Lc7P4VOZm8vfDkxs9GMz6+LkZOVh9/DuaiXOz2PTMzez/mefNbGH7CecXnXTVrasfuPzQ3IS5iN//h+5/sX9xboZtOel5s8hjty00fDB69GDfrfbaa4+lJ3wdurjMhK/TXoOLTM9cjvnPzOX8E191hj9xciZdtdMZ45b9d9fgIv/qXI4dDB/6f+4dp1ws/zl+/tNN/276d9O/m/7d9O+mfzf9i03l8/9jh34uePiw09af+MOYUVc8OPdeM3q8M9hMvf9/Yt/H7f/fa+4Hrxg+mHTbNPfPTtjmSbl/drkJJwcsPbTdlPsHJ1493ftnHzjyqk0G/539s/+WobU6HT839PrfTf9u+nfTv5v+3fTv9q/2X+n/aBzMGNZ/N/276d9N/276d9O/m/7FprL//yVDvwdww54PnzZxR+ioPTdY8aEZPd4ZbKbe/z+x7+P2/z+04gZ7Dh9Mum2a+/8nbNOx/3/F248/dPAk3v8/tFbt/+ef0L+b/t3076Z/N/276d9N/276d9O/2xT9p3HEP2ZG1n83/bvpX2wq+/9XHvo9gFG7Lrzw0O8D3HTvYSNm9HhnsJl1/79//7+X1/9u+nfTv9u/27/on32aqVn/3fTvpn83/bvp303/bvp307+b/t30LzZx//9gin/28E2eF1HY//+/bSr919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+b9Y/aum/kf5RS/+N9Y9a+m+if9TS/y36Ry39N9U/aum/mf5RS/+36h+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+36R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfR/u/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf879I9a+u+hf9TSf0/9o5b+e+kftfR/p/5RS/+99Y9a+u+jf9TSf1/9o5b+++kftfTfX/+opf8B+kct/Q/UP2rp/y79o5b+79Y/aul/kP5RS/+D9Y9a+h+if9TS/z36Ry3936t/1NL/ffpHLf3fr3/U0v9Q/aOW/h/QP2rpf5j+UUv/w/WPWvofoX/U0v9I/aOW/h/UP2rp/yH9o5b+H9Y/aun/Ef2jlv5HlfUfPZ3btfQ/uqz/9Grp/1H9o5b+x+gftfT/mP5RS/9j9Y9a+n9c/6il/yf0j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/yf1j2bC/rMMnZ28/6f0j2bC/nH9f1r/qKX/Z/SPWvqfpH/U0v9k/aOW/qfoH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/s/pHLf3P1j9q6f85/aOW/ufoH7X0/7z+UUv/L+gftfT/ov5RS/9z9Y9a+n9J/6il/5f1j1r6n6d/1NL/fP2jlv4X6B+19P+K/lFL/6/qH7X0/5r+UUv/C/WPWvpfpH/U0v9i/aOW/l/XP2rpf4n+UUv/S/WPWvpfpn/U0v9y/aOW/t/QP2rp/039o5b+39I/aul/hf5RS/8r9Y9a+n9b/6il/1X6Ry39v6N/1NL/u/pHLf2v1j9q6X+N/lFL/+/pH7X0v1b/qKX/dfpHLf2/r3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/x/oH7X0v1X/qKX/D/WPWvr/SP+opf+P9Y9a+t+mf9TS/yf6Ry39f6p/1NL/Z/pHLf1v1z9q6f9z/aOW/r/QP2rpf4f+UUv/X+oftfS/U/+opf9d+kct/X+lf9TS/9f6Ry39f6N/1NL/t/pHLf3v1j9q6f87/aOW/r/XP2rpf4/+UUv/P+gftfS/V/+opf8f9Y9a+t/X23+Wad3Y0v9Pvf2nqaX//fpHLf3/rH/U0v8B/aOW/n/RP2rp/6D+UUv/v+oftfT/m/5RS/+/6x+V9J91oH9U0n/wsP5RS/9H9I9a+j+qf9TSf5z+UUn/YQP9o5b+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+L/lFL/zH6Ry39Z9U/auk/m/5RS/+n6B+19J9d/6il/xz6Ry3959Q/aun/VP2jlv5z6R+19J9b/6il/zz6Ry39n6Z/1NJ/Xv2jlv5P1z9q6f8M/aOW/s/UP2rpP5/+UUv/Z+kftfSfX/+opf+z9Y9a+j+nuP8h07itpf9zi/tPS0v/BfSPWvo/T/+opf9Y/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv7P1z9q6f8C/aOW/i/UP2rpv6T+UUv/F+kftfR/cXv/h8ZNMMXVLf2Xau8/FS39X6J/1NJ/af2jlv7L6B+19F9W/6il/0v1j1r6v0z/qKX/y/WPWvovp3/U0n95/aOW/ivoH7X0f4X+UUv/FfWPWvq/Uv/JjJ50rqX/q/SPWvq/OvUf+V8c15NUS/+VrP+opf/K+kct/VfRP2rpv6r+UUv/1+gftfRfTf+opf/q+kct/dfQP2rpv6b+UUv/tfSPWvqvrX/U0v+1+kct/V+nf9TSfx39o5b+r9c/aun/Bv2jlv5v1D9q6f8m/aOW/uvqH7X0X0//qKX/+vpHLf030D9q6b+h/lFL/zfrH7X030j/qKX/xvpHLf030T9q6f8W/aOW/pvqH7X030z/qKX/W/WPWvpvrn/U0n8L/aOW/lvqH7X030r/qKX/2/SPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r6v13/qKX/zvpHLf130T9q6b+r/lFL/930j1r67z71/rP+V8b1JNXS/x3Wf9TSfw/9o5b+e+oftfTfS/+opf879Y9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rpf6D+UUv/d+kftfR/t/5RS/+D9I9a+h/c1n86f6uhpf8hbf2nU0v/9+gftfR/r/5RS//36R+19H+//lFL/0P1j1r6f0D/qKX/YfpHLf0P1z9q6X+E/lFL/yP1j1r6f1D/qKX/h/SPWvp/WP+opf9H9I8e63/nYDCYyfsfpX/Usv6P1j9q6f9R/aOW/sfoH7X0/5j+UUv/Y/WPWvp/XP+opf8n9I9a+h+nf9TS/3j9o5b+J+gftfQ/Uf+opf8n9Y9a+n9K/6il/6f1j1r6f0b/qKX/SfpHLf1P1j9q6X+K/lFL/1P1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39P6t/1NL/bP2jlv6f0z9q6X+O/lFL/8/rH7X0/4L+UUv/L+oftfQ/V/+opf+X9I9a+n9Z/6il/3n6Ry39z9c/aul/gf5RS/+v6B+19P+q/lFL/6/pH7X0v1D/qKX/RfpHLf0v1j9q6f91/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1z9q6f8N/aOW/t/UP2rp/y39o5b+V+gftfS/Uv+opf+39Y9a+l+lf9TS/zv6Ry39v6t/1NL/av2jlv7X6B+19P+e/lFL/2v1j1r6X6d/1NL/+/pHLf2v1z9q6X+D/lFL/xv1j1r636R/1NL/Zv2jlv636B+19P+B/lFL/1v1j1r6/3AwGIyeUWN6Emvp/yPrP2rp/2P9o5b+t+kftfT/if5RS/+f6h+19P+Z/lFL/9v1j1r6/1z/qKX/L/SPWvrfoX/U0v+X+kct/e/UP2rpf5f+UUv/X+kftfT/tf5RS//f6B+19P+t/lFL/7v1/4e5/nG2pf/v9I9a+v9e/6il/z36Ry39/6B/1NL/Xv2jlv5/1D9q6X+f/lFL/z/pH7X0v1//qKX/n/WPWvo/oH/U0v8v+kct/R/UP2rp/1f9o5b+f9M/aun/d/2jlv4P6R+19H9Y/6il/yP6Ry39H9U/auk/Tv+opP9jZ/V/opb+w/SPWvoP1z9q6T9C/6il/0j9o5b+o/SPWvqP1j9q6T+L/lFL/zH6Ry39Z9U/auk/m/5RS/+n6B+19J9d/6il/xz6Ry3959Q/aun/VP2jlv5z6R+19J9b/6il/zz6Ry39n6Z/1NJ/Xv2jlv5P1z9q6f8M/aOW/s/UP2rpP5/+UUv/Z+kftfSfX/+opf+z9Y9a+j9H/6il/3P1j1r6L6B/1NL/efpHk/cfNmwwmFn7j9U/aln/C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/s/XP2rp/wL9o5b+L9Q/aum/pP5RS/8X6R+19H+x/lFL/6X0j1r6v0T/qKX/0vpHLf2X0T9q6b+s/lFL/5fqH7X0f5n+UUv/l+sftfRfTv+opf/y+kct/VfQP2rp/wr9o5b+K+oftfR/pf5RS/9X6R+19H+1/lFL/5X0j1r6rzyV/vMs9d8a2JNTS/9VrP+opf+q+kct/V+jf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/1+oftfR/nf5RS/919I9a+r9e/6il/xv0j1r6v1H/qKX/m/SPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/hvpHLf3frH/U0n8j/aOW/hvrH7X030T/qKX/W/SPWvpvqn/U0n8z/aOW/m/VP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/m/TP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6f92/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/3foH7X030P/qKX/nvpHLf330j9q6f9O/aOW/nvrH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/XfpHLf3frX/U0v8g/aOW/gfrH7X0P0T/qKX/e/SPWvq/V/+opf/79I9a+r9f/6il/6H6Ry39P6B/1NL/MP2jlv6H6x+19D9C/6il/5H6Ry39P6h/1NL/Q/pHLf0/rH/U0v8j+kct/Y/SP2rpf7T+UUv/j+oftfQ/Rv+opf/H9I9a+h+rf9TS/+P6Ry39P1HW/+Dp3K6l/3Fl/adXS//j9Y9a+p+gf9TS/0T9o5b+n9Q/aun/Kf2jlv6f1j9q6f8Z/aOW/ifpH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19P+s/lFL/7P1j1r6f07/qKX/OfpHLf0/r3/U0v8L+kct/b+of9TS/1z9o5b+X9I/aun/Zf2jlv7n6R+19D9f/6il/wX6Ry39v6J/1NL/q/pHLf2/pn/U0v9C/aOW/hfpH7X0v1j/qKX/1/WPWvpfMo3+c/43xvUk1dL/Uus/aul/mf5RS//L9X+cBSaetvT/hv5RS/9v6h+19P+W/lFL/yv0j1r6X6l/1NL/2/pHLf2v0j9q6f8d/aOW/t/VP2rpf7X+UUv/a/SPWvp/T/+opf+1+kct/a/TP2rp/339o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvr/QP+opf+tQ/3HzKBxPUm19P+h9R+19P+R/lFL/x/rH7X0v03/qKX/T/SPWvr/VP+opf/P9I9a+t+uf9TS/+f6Ry39f6F/1NL/Dv2jlv6/1D9q6X+n/lFL/7v0j1r6/0r/qKX/r/WPWvr/Rv+opf9v9Y9a+t+tf9TS/3f6Ry39f69/1NL/Hv2jlv5/0D9q6X+v/lFL/z/qH7X0v0//qKX/n/SPWvrfr3/U0v/P+kct/R/QP2rp/xf9o5b+D+oftfT/q/5RS/+/6R+19P+7/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19B+nf1TSf8RA/6il/zD9o5b+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvrPon/U0n+M/lFL/1n1j1r6z6Z/1NL/KfpHLf1n1z9q6T+H/lFL/zn1j1r6P1X/qKX/XPpHLf3n1j9q6T+P/lFL/6fpH7X0n1f/qKX/0/WPWvo/Q/+opf8z9Y9a+s+nf9TS/1n6Ry3959c/aun/bP2jlv7P0T9q6f9c/aOW/gvoH7X0f57+UUv/sfpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/6il/xL6Ry39n69/1NL/BfpHLf1fqH/U0n9J/aOW/i/SP2rp/2L9o5b+S+kftfR/if5RS/+l9Y9a+i+jf9TSf1n9o5b+L9U/aun/Mv2jlv4v1z9q6b+c/lFL/+V7+88yrRtb+q/Q23+aWvq/Qv+opf+K+kct/V+pf9TS/1X6Ry39X61/1NJ/Jf2jlv4r6x+19F9F/6il/6r6Ry39X6N/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aum/tv5RS//X6h+19H+d/lFL/3X0j1r6v17/qKX/G/SPWvq/Uf+opf+b9I9a+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/d+sf9TSfyP9o5b+G+sfTeg/ZjCz999E/6hl/b9F/6il/6b6Ry39N9M/aun/Vv2jlv6b6x+19N9C/6il/5b6Ry39t9I/aun/Nv2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+b9c/aum/s/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfR/h/5RS/899I9a+u+pf9TSfy/9o5b+79Q/aum/t/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/d+lf9TS/936Ry39D9I/aul/sP5RS/9D9I9a+r9H/6il/3v1j1r6v0//qKX/+/WPWvofqv+QceMmu9DS/wP6Ry39D9M/aul/uP5RS/8j9I9a+h+pf9TS/4P6Ry39P6R/1NL/w/pHLf0/on/U0v8o/aOW/kfrH7X0/6j+UUv/Y/SPWvp/TP+opf+x+kct/T+uf9TS/xP6Ry39j9M/aul/vP5RS/8T9I9a+p+of9TS/5P6Ry39P6V/1NL/0/pHLf0/o3/U0v8k/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv6f1T9q6X+2/lFL/8/pH7X0P0f/qKX/5/WPWvp/Qf+opf8X9Y9a+p+rf9TS/0v6Ry39v6x/1NL/PP2jlv7n6x+19L9A/6il/1f0j1r6f1X/qKX/1/SPWvpfqH/U0v8i/aOW/hfrH83M/Vf+x7Ujvq5/NDP3n3z9X6J/1NL/Uv2jlv6X6R+19L9c/6il/zf0j1r6f1P/qKX/t/SPWvpfoX/U0v9K/aOW/t/WP2rpf5X+UUv/7+gftfT/rv5RS/+r9Y9a+l+jf9TS/3v6Ry39r9U/aul/nf5RS//v6x+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/wf6Ry39b9U/aun/Q/2jlv4/0j8a6j964uWZtf+P9Y9a1v9t+kct/X+if9TS/6f6Ry39f6Z/1NL/dv2jlv4/1z9q6f8L/aOW/nfoH7X0/6X+UUv/O/WPWvrfpX/U0v9X+kct/X+tf9TS/zf6Ry39f6t/1NL/bv2jlv6/0z9q6f97/aOW/vfoH7X0/4P+UUv/e/WPWvr/Uf+opf99+kct/f+kf9TS/379o5b+f9Y/aun/gP5RS/+/6B+19H9Q/6il/1/1j1r6/03/qKX/3/WPWvo/pH/U0v9h/aOZt/8dV0527YhH9I9m3v6PX/+P6h+19B+nf1TSf+RA/6il/zD9o5b+w/9p/xH/t+N6kmrpP8L6j1r6j9Q/auk/Sv+opf9o/aOW/rPoHxX0n5Rd/ycq6D/eyFn1j1r6z6Z/1NL/KfpHLf1n1z9q6T+H/lFL/zn1j1r6P1X/qKX/XPpHLf3n1j9q6T+P/lFL/6fpH7X0n1f/qKX/0/WPWvo/Q/+opf8z9Y9a+s+nf9TS/1n6Ry3959c/aun/bP2jlv7P0T9q6f9c/aOW/gvoH7X0f57+UUv/sfpHLf0X1D9q6b+Q/lFL/4X1j1r6L6J/1NJ/Uf2jlv6L6R+19F9c/6il/xL6Ry39n69/1NL/BfpHLf1fqH/U0n9J/aOW/i/SP2rp/2L9o5b+S+kftfR/if5RS/+l9Y9a+i+jf9TSf1n9o5m4/6yTXTvypfpHM3H/x63/l+kfTei/98RLM2//l+sftaz/5fSPWvovr3/U0n8F/aOW/q+o6T/mX9q6pf+KNf3/NS39X6l/1NL/VfpHLf1frX/U0n8l/aOW/ivrH7X0X0X/qKX/qvpHLf1fo3/U0n81/aOW/qvrH7X0X0P/qKX/mvpHLf3X0j9q6b+2/lFL/9fqH7X0f53+UUv/dfSPWvq/Xv+opf8b9I9a+r9R/6il/5v0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry3936x/1NJ/I/2jlv4b6x+19N9E/6il/1v0j1r6b6p/1NJ/M/2jlv5v1T9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jkYPBoKH/2/SPWtb/1vpHLf230T9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/9v1j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3936F/1NJ/D/2jlv576h+19N9L/6il/zv1j1r6761/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/936R+19H+3/lFL/4P0j1r6H6x/1NL/EP2jlv7v0T9q6f/e0H+p/+a4nqRa+r/P+o9a+r9f/6il/6H6Ry39P6B/1NL/MP2jlv6H6x+19D9C/6il/5H6Ry39P6h/1NL/Q/pHLf0/rH/U0v8j+kct/Y/SP2rpf7T+UUv/j+oftfQ/Rv+opf/H9I9a+h+rf9TS/+P6Ry39P6F/1NL/OP2jlv7H6x+19D9B/+ix/nMMBoOZvP+J+kct6/+T+kct/T+lf9TS/9P6Ry39P6N/1NL/JP2jlv4n6x+19D9F/6il/6n6Ry39T9M/aul/uv5RS/8z9I9a+p+pf9TS/yz9o5b+n9U/mpn7j/nHtSPP1j+amftPvv4/p3/U0v8c/aOW/p/XP2rp/wX9o5b+X9Q/aul/rv5RS/8v6R+19P+y/lFL//P0j1r6n69/1NL/Av2jlv5f0T9q6f9V/aOW/l/TP2rpf6H+UUv/i/SPWvpfrH/U0v/r+kct/S/RP2rpf6n+UUv/y/SPWvpfrn/U0v8b+kct/b+pf9TS/1v6Ry39r9A/aul/pf5RS/9v6x+19L9K/6il/3f0j1r6f1f/qKX/1fpHLf2v0T9q6f89/aOW/tfqH7X0v07/qKX/9/WPWvpfr3/U0v8G/aOW/jfqH7X0v6mu/y3jpmerlv431/WfPi39b9E/aun/A/2jlv636h+19P+h/lFL/x/pH7X0/7H+UUv/2/SPWvr/RP+opf9P9Y9a+v9M/6il/+36Ry39f65/1NL/F/pHLf3v0D9q6f9L/aOW/nfqH7X0v0v/qKX/r/SPWvr/Wv+opf9v9I9a+v9W/6il/936Ry39f6d/1NL/9/pHLf3v0T9q6f8H/aOW/vfqH7X0/6P+UUv/+/SPWvr/Sf+opf/9+kct/f+sf9TS/wH9o5b+f9E/aun/oP5RS/+/6h+19P+b/lFL/7/rH7X0f0j/qKX/w/pHLf0f0T9q6f+o/lFL/3H6RyX9Rw30j1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j9I/auk/Wv+opf8s+kct/cfoH7X0n1X/qKX/bPpHLf2fon/U0n92/aNJ/TcdNhjMxP3n0D9qWf9z6h+19H+q/lFL/7n0j1r6z61/1NJ/Hv2jlv5P0z9q6T+v/lFL/6frH7X0f4b+UUv/Z+oftfSfT/+opf+z9I9a+s+vf9TS/9n6Ry39n6N/1NL/ufpHLf0X0D9q6f88/aOW/mP1j1r6L6h/NJP3X2GpCWdHLaR/NJP3HzJqYf2jlv6L6B+19F9U/6il/2L6Ry39F9c/aum/hP5RS//n6x+19H+B/lFL/xfqH7X0X1L/qKX/i/SPWvq/WP+opf9S+kct/V+if9TSf2n9o5b+y+gftfRfVv+opf9L9Y9a+r9M/6il/8v1j1r6L6d/1NJ/ef2jlv4r6B+19H+F/lFL/xX1j1r6v1L/qKX/q/SPWvq/Wv+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvq/Rv+opf9q+kct/VfXP2rpv4b+UUv/NfWPWvqvpX/U0n9t/aOW/q/VP2rp/zr9o5b+6+gftfR/vf5RS/836B+19H+j/lFL/zfpH7X0X1f/aHz/mweDwczefz39o5b1v77+UUv/DfSPWvpvqH/U0v/N+kct/TfSP2rpv7H+UUv/TfSPWvq/Rf+opf+m+kct/TfTP2rp/1b9o5b+m+sftfTfQv+opf+W+kct/bfSP2rp/zb9o5b+W+sftfTfRv+opf+2+kct/bfTP2rpv73+UUv/HfSPWvrvqH/U0n8n/aOW/m/XP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvrH7X0f4f+UUv/PfSPWvrvqX/U0n8v/aOW/u/UP2rpv7f+UUv/ffSPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf3fpX/U0v/d+kct/Q/SP2rpf7D+UUv/Q/SPWvq/R/+opf979Y9a+r9P/6il//v1j1r6H6p/1NL/A/pHLf0P0z9q6X+4/lFL/yP0j1r6H6l/1NL/g/pHLf0/pH/U0v/D+kct/T+if9TS/yj9o5b+R+sftfT/qP5RS/9j+vqPm57H29L/Y339p0tL/2P1j1r6f1z/qKX/J/SPWvofp3/U0v94/aOW/ifoH7X0P1H/qKX/J/WPWvp/Sv+opf+n9Y9a+n9G/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/T+rf9TS/2z9o5b+n6vqv9bh07tlS/9zqvpPv5b+n9c/aun/Bf2jlv5f1D9q6X+u/lFL/y/pH7X0/7L+UUv/8/SPWvqfr3/U0v8C/aOW/l/RP2rp/1X9o5b+X9M/aul/of5RS/+L9I9a+l+sf9TS/+v6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/xv6Ry39v6l/1NL/W/pHLf2v0D9q6X+l/lFL/2/rH7X0v0r/qKX/d/SPWvp/V/+opf/V+kct/a/RP2rp/z39o5b+1+oftfS/Tv+opf/39Y9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rp/wP9o5b+t+oftfT/of5RS/8f6R+19P+x/lFL/9v0j1r6/0T/qKX/T/WPWvr/TP+opf/t+kct/X+uf9TS/xf6Ry3979A/aun/S/2jlv536h+19L9L/6il/6/0j1r6/1r/qKX/b/SPWvr/Vv+opf/d+kct/X+nf9TS//f6Ry3979E/aun/B/2jlv736h+19P+j/lFL//v0j1r6/0n/qKX//fpHLf3/rH/U0v8B/aOW/n/RP2rp/6D+UUv/v+oftfT/m/5RS/+/6x+19H9I/6il/8P6Ry39H9E/aun/qP5RS/9x+kcl/UcP9I9a+g/TP2rpP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/LPpHLf3H6B+19J9V/6il/2z6Ry39n6J/1NJ/dv2jlv5z6B+19J9T/6il/1P1j1r6z6V/1NJ/bv2jlv7z6B+19H+a/lFL/3n1j1r6P13/qKX/M/SPWvo/U/+opf98+kct/Z9V1//g6dqqpf/8df2nT0v/Z+sftfR/jv5RS//n6h+19F9A/6il//P0j1r6j9U/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rp/3z9o5b+L9A/aun/Qv2jlv5L6h+19H+R/lFL/xfrH7X0X0r/qKX/S/SPWvovrX80qf85M3f/ZfSPWtb/svpHLf1fqn/U0v9l+kct/V+uf9TSfzn9o5b+y+sftfRfQf+opf8r9I9a+q+of9TS/5X6Ry39X6V/1NL/1fpHLf1X0j9q6b+y/lFL/1X0j1r6r6p/1NL/NfpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19H+t/lFL/9fpH7X0X0f/qKX/6/WPWvq/Qf+opf8b9Y9a+r9J/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TS/836Ry39N9I/aum/sf5RS/9N9I9a+r9F/6il/6b6Ry39N9M/aun/Vv2jlv6b6x+19N9C/6il/5b6Ry39t9I/aun/Nv2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I/+0X/cuBk9lv+IqfTfUf+oZf3vpH/U0v/t+kct/XfWP2rpv4v+UUv/XfWPWvrvpn/U0n93/aOW/u/QP2rpv4f+UUv/PfWPWvrvpX/U0v+d+kct/ffWP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/u/SPWvq/W/+opf9B+kct/Q/WP2rpf4j+UUv/9+gftfR/r/5RS//36R+19H+//lFL/0P1j1r6f0D/qKX/YfpHLf0P1z9q6X+E/lFL/yP1j1r6f1D/qKX/h/SPWvp/WP+opf9H9I9a+h+lf9TS/2j9o5b+H9U/aul/jP5RS/+P6R+19D9W/6il/8f1j1r6f0L/qKX/cfpHLf2P1z9q6X+C/lFL/xP1j1r6f1L/qKX/p/SPWvp/Wv+opf9n9I9a+p+kf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v+z+kct/c/WP2rp/zn9o5b+5+gftfT/vP5RS/8v6B+19P+i/lFL/3P1j1r6f0n/qKX/l/WPWvqfp3/U0v98/aOW/hfoH7X0/4r+UUv/r+oftfT/mv5RS/8L9Y9a+l+kf9TS/2L9o5b+X9c/aul/if5RS/9L9Y9a+l+mf9TS/3L9o5b+39A/aun/Tf2jlv7f0j9q6X+F/lFL/yv1j1r6f1v/qKX/VfpHLf2/o3/U0v+7+kct/a/WP2rpf43+UUv/7+kftfS/Vv+opf91+kct/b+vf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/H+gftfS/Vf+opf8Pp+y/5H95XE9SLf1/ZP1HLf1/rH/U0v82/aOW/j/RP2rp/1P9o5b+P9M/aul/u/5RS/+f6x+19P+F/lFL/zv0j1r6/1L/qKX/nfpHLf3v0j9q6f8r/aOW/r/WP2rp/xv9o5b+v53Q31NgCi3977b+o5b+v9M/aun/e/2jlv736B+19P+D/lFL/3v1j1r6/1H/qKX/ffpHLf3/pH/U0v9+/aOW/n/WP2rp/4D+UUv/v+gftfR/UP+opf9f9Y9a+v9N/6il/9/1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/zj9o5L+swz0j1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j9I/auk/Wv+opf8s+kct/cfoH7X0n1X/qKX/bPpHLf2fon/U0n92/aOW/nPoH7X0n1P/qKX/U/WPWvrPpX/U0n9u/aOW/vPoH7X0f5r+UUv/efWPWvo/Xf+opf8z9I9a+j9T/6il/3z6Ry39n6V/1NJ/fv2jlv7P1j9q6f8c/aOW/s/VP2rpv4D+UUv/5+kftfQfq3/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NL/+fpHLf1foH/U0v+F+kct/ZfUP2rp/yL9o5b+L9Y/aum/lP5RS/+X6B+19F9a/6il/zL6Ry39l9U/aun/Uv2jlv4v0z9q6f9y/aOW/stNR//75vy/HNiTU0v/5a3/qKX/CvpHLf1foX/U0n9F/aOW/q/UP2rp/yr9o5b+r9Y/aum/kv5RS/+V9Y9a+q+if9TSf1X9o5b+r9E/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+a+kftfRfW/+opf9r9Y9a+r9O/6il/zr6Ry39X69/1NL/DfpHLf3fqH/U0v9N+kct/dfVP2rpv57+UUv/9fWPWvpvoH/U0n9D/aOW/m/WP2rpv5H+UUv/jfWPWvpvon/U0v8t+kct/TfVP2rpv5n+UUv/t+oftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/t+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X0f7v+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/O/SPWvrvoX/U0n9P/aOW/nvpH7X0f6f+UUv/vfWPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6f8u/aOW/u/WP2rpf5D+UUv/g/WPWvofon/U0v89+kct/d+rf9TS/336Ry39369/1NL/UP2jlv4f0D9q6X+Y/lFL/8P1j1r6H6F/1NL/SP2jlv4f1D9q6f8h/aOW/h/WP2rp/xH9o5b+R8X+j4yb4L83vCeblv5HW/9RS/+P6h+19D9G/6il/8f0j1r6H6t/1NL/4/pHLf0/oX/U0v84/aOW/sfrH7X0P0H/qKX/ifpHLf0/qX/U0v9T+kct/T+tf9TS/zP6Ry39T9I/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rp/1n9o5b+Z+sftfT/nP5RS/9z9I9a+n9e/6il/xf0j1r6f1H/qKX/ufpHLf2/pH/U0v/L+kct/c/TP2rpf77+UUv/C/SPWvp/Rf+opf9X9Y9a+n9N/6il/4X6Ry39L9I/aul/sf5RS/+v6x+19L9E/6il/6X6Ry39L9M/aul/uf5RS/9v6B+19P+m/lFL/2/pH7X0v0L/qKX/lfpHLf2/rX/U0v8q/aOW/t/RP2rp/139o5b+V+sftfS/Rv+opf/39I9a+l+rf9TS/zr9o5b+39c/aul/vf5RS/8b9I9a+t+o/yRjJjvf0v8m/aOW/jfrH7X0v0X/qKX/D/SPWvrfqn/U0v+H+kct/X+kf9TS/8f6Ry39b9M/aun/E/2jlv4/1T9q6f8z/aOW/rfrH7X0/7n+UUv/X+gftfS/Q/+opf8v9Y9a+t+pf9TS/y79o5b+v9I/aun/a/2jlv6/0T9q6f9b/aOW/nfrH7X0/53+UUv/3+sftfS/R/+opf8f9I9a+t+rf9TS/4/6Ry3979M/aun/J/2jlv736x+19P+z/lFL/wf0j1r6/0X/qKX/g/pHLf3/qn/U0v9v+kct/f+uf9TS/yH9o5b+D+sftfR/RP+opf+j+kct/cfpH5X0f+yQ1/o/UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19J9F/6il/xj9o5b+s+oftfSfTf+opf9T9I9a+s+uf9TSfw79o5b+c+oftfR/qv5RS/+59I9a+s+tf9TSfx79o5b+T9M/auk/r/5RS/+n6x+19H+G/lFL/2fqH7X0n0//qKX/s/SPWvrPr3/U0v/Z+kct/Z+jf9TS/7n6Ry39F9A/aun/PP2jlv5j9Y9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvo/X/+opf8L9I9a+r9Q/6il/5L6Zwd39H+R/lHL+n+x/lFL/6X0j1r6v0T/qKX/0vpHLf2X0T9q6b+s/lFL/5fG/v/zj/b/W0v/l1n/UUv/l+sftfRfTv+opf/y+kct/VfQP2rp/wr9o5m3/6jH9V9R/2jm7f/49f9K/aOW/q/SP2rp/2r9o5b+K+kftfRfWf+opf8q+kct/VfVP2rp/xr9o5b+q+kftfRfXf+opf8a+kct/dfUP2rpv5b+UUv/tfWPWvq/Vv9oiv5jZvR4/r9Npf/r9I9a1v86+kct/V+vf9TS/w36Ry3936h/1NL/TfpHLf3X1T9q6b+e/lFL//X1j1r6b6B/1NJ/Q/2jlv5v1j9q6b+R/lFL/431j1r6b6J/1NL/LfpHLf031T9q6b+Z/lFL/7fqH7X031z/qKX/FvpHLf231D9q6b+V/lFL/7fpH7X031r/qKX/NvpHLf231T9q6b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19H+7/lFL/50n9J9lRg3ryaql/y7Wf9TSf1f9o5b+u+kftfTfXf+opf879I9a+u+hf9TSf0/9o5b+e+kftfR/p/5RS/+99Y9a+u+jf9TSf1/9o5b+++kftfTfv7f/HiNPmPojb+l/QG//aWrpf6D+UUv/d+kftfR/t/5RS/+D9I9a+h+sfzQz9x83btxBE8+OOUT/aGbuP/n6f4/+UUv/9+oftfR/n/5RS//36x+19D9U/6il/wf0j8b3H1PQ/zD9o5b1f7j+UUv/I/SPWvofqX/U0v+D+kct/T+kf9TS/8P6Ry39P6J/1NL/KP2jlv5H6x+19P+o/lFL/2P0j1r6f0z/qKX/sfpHLf0/rn/U0v8T+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v+T+kct/T+lf9TS/9P6Ry39P6N/1NL/JP2jlv4n6x+19D9F/6il/6n6Ry39T9M/aul/uv5RS/8z9I9a+p+pf9TS/yz9o5b+n9U/aul/tv5RS//P6R+19D9H/6il/+f1j1r6f0H/qKX/F/WPWvqfq3/U0v9L+kct/b+sf9TS/zz9o5b+5+sftfS/QP+opf9X9I9a+n9V/6il/9f0j1r6X6h/1NL/Iv2jlv4X6x+19P+6/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19P+G/lFL/2/qH7X0/5b+UUv/K/SPWvpfqX/U0v/b+kct/a/SP2rp/x39o5b+39U/aul/tf5RS/9r9I9a+n9P/6il/7X6Ry39r9M/aun/ff2jlv7X6x+19L9B/6il/436Ry39b9I/aul/s/5RS/9b9I9a+v9A/6il/636Ry39f6h/1NL/R/pHLf1/rH/U0v82/aOW/j/RP2rp/1P9o5b+P9M/aul/u/5RS/+f6x+19P+F/lFL/zv0f6I1e/r/Uv+opf+d+kct/e/SP2rp/yv9o5b+v9Y/aun/G/2jlv6/1T9q6X+3/lFL/9/pH7X0/73+UUv/e/SPWvr/Qf+opf+9+kct/f+of9TS/z79o5b+f9I/aul/v/5RS/8/6x+19H9A/6il/1/0j1r6P6h/1NL/r/pHLf3/pn/U0v/v+kct/R/SP2rp/7D+UUv/R/SPWvo/qn/U0n+c/lFJ/1kH+kct/YfpH7X0H65/1NJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/Fv2jlv5j9I9a+s+qf9TSfzb9o5b+T9E/auk/u/5RS/859I9a+s+pf9TS/6n6Ry3959I/auk/t/5RS/959I9a+j9N/6il/7z6Ry39n65/1NL/GfpHLf2fqX/U0n8+/aOW/s/SP2rpP7/+UUv/Z+sftfR/jv5RS//n6h+19F9A/6il//P0j1r6j9U/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rp/3z9o5b+L9A/aun/Qv2jlv5L6h+19H+R/lFL/xfrH82s/YdN0X8p/aOZrj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwUAAD//0L6A7c=")
r0 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240)
ftruncate(r0, 0x2007ffc)

694.467193ms ago: executing program 2 (id=1044):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000040)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@flushoncommit}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0c0000000000000005"])

635.156405ms ago: executing program 6 (id=1045):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r3, &(0x7f0000000a00)='rd_pages=8', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000c00), 0x0)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')

528.188277ms ago: executing program 5 (id=1046):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

0s ago: executing program 5 (id=1047):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

kernel console output (not intermixed with test programs):

038-01-19 (0x7fffffff)
[  130.452338][   T26] audit: type=1326 audit(1787295983.712:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5ee639e0d9 code=0x7ffc0000
[  130.489808][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  130.590010][   T26] audit: type=1326 audit(1787295983.712:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.2.213" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ee639e0d9 code=0x7ffc0000
[  130.642850][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  131.309514][ T5094] siw: device registration error -23
[  131.823310][ T5104] loop0: detected capacity change from 0 to 512
[  131.846859][ T5106] loop2: detected capacity change from 0 to 128
[  131.904792][ T5104] EXT4-fs (loop0): Test dummy encryption mode enabled
[  131.954135][ T5106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  131.972700][ T5104] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.228: inode has both inline data and extents flags
[  131.986187][ T5106] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.002532][ T5110] rtc_cmos 00:00: Alarms can be up to one day in the future
[  132.047913][ T5104] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.228: couldn't read orphan inode 15 (err -117)
[  132.103448][ T5104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.133305][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  132.348827][ T5093] loop3: detected capacity change from 0 to 32768
[  132.468738][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.501332][ T5093] JBD2: Ignoring recovery information on journal
[  132.652394][ T5116] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  132.711281][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.718051][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.772402][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  132.845476][ T5093] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  133.203664][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  133.612188][ T5147] loop3: detected capacity change from 0 to 128
[  133.698897][ T5147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  133.717851][ T5147] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.949543][ T5152] siw: device registration error -23
[  134.514045][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  134.543830][ T5154] loop1: detected capacity change from 0 to 2048
[  134.628165][ T5154] NILFS (loop1): invalid segment: Inconsistency found
[  134.635490][ T5154] NILFS (loop1): trying rollback from an earlier position
[  134.721637][ T5156] rtc_cmos 00:00: Alarms can be up to one day in the future
[  134.793869][ T5154] NILFS (loop1): recovery complete
[  134.840426][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.878113][ T5160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.134375][ T5162] loop3: detected capacity change from 0 to 512
[  135.193705][ T5162] EXT4-fs (loop3): Test dummy encryption mode enabled
[  135.229251][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.248: inode has both inline data and extents flags
[  135.248134][ T5162] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.248: couldn't read orphan inode 15 (err -117)
[  135.336103][ T5162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  135.868767][ T5169] netlink: 64 bytes leftover after parsing attributes in process `syz.1.250'.
[  136.327561][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.337527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.347522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.357523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.367523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.377524][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.387520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.397516][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.407552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  136.417538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  137.190374][ T5172] loop0: detected capacity change from 0 to 16
[  137.262817][ T5172] erofs: (device loop0): mounted with root inode @ nid 36.
[  137.609229][ T5173] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  137.764257][ T5184] Bluetooth: MGMT ver 1.22
[  137.804917][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  138.001744][ T5189] loop3: detected capacity change from 0 to 128
[  138.060674][ T5189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  138.126840][ T5189] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  138.372551][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  138.404141][ T5197] netlink: 'syz.4.259': attribute type 5 has an invalid length.
[  138.467738][ T5199] rtc_cmos 00:00: Alarms can be up to one day in the future
[  138.529921][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.212216][ T5214] lo speed is unknown, defaulting to 1000
[  140.283348][ T5220] loop3: detected capacity change from 0 to 40427
[  140.301307][ T5220] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  140.310081][ T5220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  140.367426][ T5220] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.450585][ T5207] loop0: detected capacity change from 0 to 32768
[  140.472530][ T5220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  140.479915][ T5220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.487152][ T5207] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  140.554989][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  140.555004][   T26] audit: type=1804 audit(1787295994.242:60): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.264" name="/newroot/56/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  140.614661][ T5212] loop1: detected capacity change from 0 to 32768
[  140.634634][ T4409] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  140.659632][ T5226] loop4: detected capacity change from 0 to 512
[  140.716750][ T5212] JBD2: Ignoring recovery information on journal
[  140.760096][ T5226] EXT4-fs (loop4): Test dummy encryption mode enabled
[  140.869038][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.265: inode has both inline data and extents flags
[  140.889420][ T5227] syz.3.264: attempt to access beyond end of device
[  140.889420][ T5227] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.933205][ T5212] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  140.993646][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.265: couldn't read orphan inode 15 (err -117)
[  141.009959][   T26] audit: type=1800 audit(1787295994.702:61): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.251" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  141.057756][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  141.478772][ T4286] ocfs2: Unmounting device (7,1) on (node local)
[  141.512403][ T5234] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  141.679081][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  142.739117][ T5264] jffs2: notice: (5264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  142.767766][   T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  142.918026][ T5266] lo speed is unknown, defaulting to 1000
[  143.667007][ T5270] overlayfs: conflicting lowerdir path
[  143.732566][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  143.759063][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  143.769503][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  143.779416][   T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 24435, setting to 1024
[  143.790611][   T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  143.801293][   T27] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  143.811170][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.828166][ T5260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  143.835728][ T5260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  143.843209][ T5260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  143.851629][ T5260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  143.869825][   T27] mos7720 4-1:1.0: Moschip 2 port adapter converter detected
[  145.566293][ T5272] tty tty29: ldisc open failed (-12), clearing slot 28
[  145.616396][   T27] usb 4-1: mos7720: usb_control_msg() failed: -71
[  145.694391][   T27] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  145.772005][   T27] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  145.814342][   T27] usb 4-1: USB disconnect, device number 2
[  145.820303][    C1] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  145.857718][ T4317] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  145.888381][   T27] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  145.931794][   T27] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  145.958409][   T27] mos7720 4-1:1.0: device disconnected
[  145.976745][ T5283] loop4: detected capacity change from 0 to 1764
[  146.069725][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.099166][ T4317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.109055][ T4317] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.119678][ T4317] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.133356][ T4317] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  146.142558][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.594344][ T5281] loop3: detected capacity change from 0 to 32768
[  146.695728][ T5281] JBD2: Ignoring recovery information on journal
[  146.782479][ T5281] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  146.853384][   T26] audit: type=1800 audit(1787296000.542:62): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  147.169598][ T4317] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71)
[  147.193936][ T4317] gud 2-1:1.0: Failed to get connectors (error=-71)
[  147.202508][ T5293] siw: device registration error -23
[  147.212392][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  147.219944][ T4317] gud: probe of 2-1:1.0 failed with error -71
[  147.287899][ T4317] usb 2-1: USB disconnect, device number 2
[  147.458519][ T5296] loop2: detected capacity change from 0 to 512
[  147.498741][ T5296] EXT4-fs (loop2): Test dummy encryption mode enabled
[  147.534815][ T5296] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.279: inode has both inline data and extents flags
[  147.580299][ T5296] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.279: couldn't read orphan inode 15 (err -117)
[  147.638186][ T5296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  148.014444][ T5306] loop1: detected capacity change from 0 to 4096
[  148.103078][ T5306] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  148.175865][   T26] audit: type=1800 audit(1787296001.862:63): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.287" name="file0" dev="loop1" ino=0 res=0 errno=0
[  148.258595][ T5309] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  148.409783][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  148.436956][ T5316] jffs2: notice: (5316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  148.770913][ T5324] lo speed is unknown, defaulting to 1000
[  149.761513][ T5333] loop3: detected capacity change from 0 to 128
[  149.973710][ T5333] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  150.051966][ T5337] loop4: detected capacity change from 0 to 512
[  150.059563][ T5333] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  150.085521][ T5337] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  150.100671][ T5337] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  150.258617][ T5337] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  150.361903][ T5337] EXT4-fs (loop4): 1 truncate cleaned up
[  150.377792][ T5337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  150.643849][ T5325] loop2: detected capacity change from 0 to 32768
[  150.667923][ T5325] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  150.696476][ T5333] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  151.642279][ T5344] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  152.049536][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  152.125763][ T4409] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  152.201880][ T5358] syz.2.297 uses obsolete (PF_INET,SOCK_PACKET)
[  152.222685][ T5342] loop1: detected capacity change from 0 to 32768
[  152.355085][ T5342] JBD2: Ignoring recovery information on journal
[  152.479125][ T5342] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  152.521679][ T5364] loop3: detected capacity change from 0 to 512
[  152.550410][   T26] audit: type=1800 audit(1787296006.242:64): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.295" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  152.583346][ T5364] EXT4-fs (loop3): Test dummy encryption mode enabled
[  152.643663][ T5364] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.300: inode has both inline data and extents flags
[  152.778415][ T5364] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.300: couldn't read orphan inode 15 (err -117)
[  152.791357][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  153.053669][ T4286] ocfs2: Unmounting device (7,1) on (node local)
[  153.505930][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  153.560316][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  153.634539][ T5371] loop1: detected capacity change from 0 to 64
[  153.692332][ T5373] loop3: detected capacity change from 0 to 512
[  153.774778][ T5373] EXT4-fs (loop3): Test dummy encryption mode enabled
[  153.801149][ T5377] jffs2: notice: (5377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  153.980411][ T5381] lo speed is unknown, defaulting to 1000
[  154.755504][ T5373] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.313: inode has both inline data and extents flags
[  154.769101][ T5373] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.313: couldn't read orphan inode 15 (err -117)
[  154.804065][ T5373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  155.542706][ T5394] loop2: detected capacity change from 0 to 128
[  155.639860][ T5394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  155.706005][ T5394] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  155.927555][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  155.997324][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  156.364218][ T5397] siw: device registration error -23
[  156.379680][ T5392] loop4: detected capacity change from 0 to 32768
[  156.454289][ T5392] JBD2: Ignoring recovery information on journal
[  156.599518][ T5392] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  156.846523][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  157.043709][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  157.127701][ T4316] usb 1-1: device not accepting address 3, error -71
[  157.762488][ T5418] loop4: detected capacity change from 0 to 64
[  158.104498][ T5412] loop3: detected capacity change from 0 to 32768
[  158.179156][ T5412] JBD2: Ignoring recovery information on journal
[  158.216866][ T5412] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  158.265649][   T26] audit: type=1800 audit(1787296011.952:65): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  158.549100][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  158.671222][ T5427] jffs2: notice: (5427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  159.028237][ T5438] lo speed is unknown, defaulting to 1000
[  159.198736][ T5440] siw: device registration error -23
[  160.325066][ T5445] loop0: detected capacity change from 0 to 512
[  160.395416][ T5445] EXT4-fs (loop0): Test dummy encryption mode enabled
[  160.407198][ T5449] loop3: detected capacity change from 0 to 128
[  160.469070][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  160.489681][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.322: inode has both inline data and extents flags
[  160.523513][ T5449] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  160.568405][ T5445] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.322: couldn't read orphan inode 15 (err -117)
[  160.603020][ T5445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  160.637770][   T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  161.777676][   T22] usb 3-1: Using ep0 maxpacket: 32
[  161.945334][   T22] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  161.961448][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  161.968611][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.970332][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  162.036526][   T22] usb 3-1: Product: syz
[  162.049959][   T22] usb 3-1: Manufacturer: syz
[  162.057794][   T22] usb 3-1: SerialNumber: syz
[  162.084562][   T22] usb 3-1: config 0 descriptor??
[  162.513784][   T22] airspy 3-1:0.0: Board ID: 00
[  162.519096][   T22] airspy 3-1:0.0: Firmware version: 
[  162.832319][ T5459] loop1: detected capacity change from 0 to 32768
[  162.893999][ T5459] JBD2: Ignoring recovery information on journal
[  163.008074][ T5459] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  163.122802][   T26] audit: type=1800 audit(1787296016.812:66): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.330" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  163.345796][   T22] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f
[  163.353487][ T5474] loop0: detected capacity change from 0 to 64
[  163.363571][   T22] airspy 3-1:0.0: Registered as swradio24
[  163.369809][   T22] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  163.381910][   T22] usb 3-1: USB disconnect, device number 2
[  163.559474][ T4286] ocfs2: Unmounting device (7,1) on (node local)
[  164.013906][ T5482] loop1: detected capacity change from 0 to 128
[  164.080733][ T5484] jffs2: notice: (5484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  164.166617][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[  164.178596][ T5482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  164.257935][ T5491] siw: device registration error -23
[  164.399761][ T5482] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  165.061618][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  165.095306][ T5496] loop2: detected capacity change from 0 to 512
[  165.139491][ T5498] loop0: detected capacity change from 0 to 128
[  165.177501][ T5496] EXT4-fs (loop2): Test dummy encryption mode enabled
[  165.221722][ T5496] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.339: inode has both inline data and extents flags
[  165.304591][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  165.330846][ T5496] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.339: couldn't read orphan inode 15 (err -117)
[  165.370388][ T5498] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  165.437673][ T5496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  167.056135][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  168.509246][ T5522] siw: device registration error -23
[  168.793559][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  168.910796][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'.
[  169.288450][ T5535] loop2: detected capacity change from 0 to 512
[  169.329299][ T5535] EXT4-fs (loop2): Test dummy encryption mode enabled
[  169.404142][ T5535] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.362: inode has both inline data and extents flags
[  169.487445][ T5535] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.362: couldn't read orphan inode 15 (err -117)
[  169.520845][ T5535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.880737][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  172.190489][ T5551] loop4: detected capacity change from 0 to 32768
[  172.226184][ T5551] JBD2: Ignoring recovery information on journal
[  172.349204][ T5551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  172.498528][   T26] audit: type=1800 audit(1787296026.172:67): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.344" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  173.277668][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[  173.448963][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  173.568893][ T5579] loop1: detected capacity change from 0 to 128
[  173.654155][ T5579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  173.665551][ T5579] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  173.696060][ T5583] loop0: detected capacity change from 0 to 512
[  173.750551][ T5583] EXT4-fs (loop0): Test dummy encryption mode enabled
[  173.780957][ T5583] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.367: inode has both inline data and extents flags
[  173.797760][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  173.820450][ T5583] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.367: couldn't read orphan inode 15 (err -117)
[  173.842409][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  173.884639][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  175.584419][ T4317] usb 4-1: Using ep0 maxpacket: 32
[  175.598839][ T4317] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  175.609595][ T4317] usb 4-1: config 0 has no interface number 0
[  175.628997][ T4317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  175.640312][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  175.653583][ T5594] loop1: detected capacity change from 0 to 128
[  175.668805][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.702779][ T4317] usb 4-1: Product: syz
[  175.707004][ T4317] usb 4-1: Manufacturer: syz
[  175.714792][ T4317] usb 4-1: SerialNumber: syz
[  175.729418][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  175.745746][ T4317] usb 4-1: config 0 descriptor??
[  175.762821][ T5594] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  175.798246][ T4317] smsc95xx v2.0.0
[  176.032909][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  176.082026][ T5599] siw: device registration error -23
[  176.212085][ T4317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  176.235318][ T4317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  176.879512][ T4317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  176.897935][ T4317] smsc95xx: probe of 4-1:0.67 failed with error -71
[  176.913494][ T4317] usb 4-1: USB disconnect, device number 3
[  177.202197][ T5617] loop0: detected capacity change from 0 to 128
[  177.241049][ T5615] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  177.241049][ T5615] The task syz.2.374 (5615) triggered the difference, watch for misbehavior.
[  177.259340][ T5617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  177.282160][ T5617] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  177.384766][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  177.593257][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'.
[  177.797217][ T5616] loop4: detected capacity change from 0 to 32768
[  177.807558][ T4449] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  177.877001][ T5616] JBD2: Ignoring recovery information on journal
[  177.991971][ T5616] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  178.001145][ T4449] usb 1-1: Using ep0 maxpacket: 8
[  178.015564][ T4449] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  178.025492][ T4449] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  178.035362][ T4449] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  178.045513][ T4449] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.060671][ T4449] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  178.070149][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.102484][   T26] audit: type=1800 audit(1787296031.792:68): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.376" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  178.146127][ T5633] loop2: detected capacity change from 0 to 512
[  178.186175][ T5633] EXT4-fs (loop2): Test dummy encryption mode enabled
[  178.292413][ T4449] usb 1-1: GET_CAPABILITIES returned 0
[  178.299330][ T4449] usbtmc 1-1:16.0: can't read capabilities
[  178.318446][ T5633] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.381: inode has both inline data and extents flags
[  178.389890][ T5633] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.381: couldn't read orphan inode 15 (err -117)
[  178.402043][ T5633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  178.504419][ T4438] usb 1-1: USB disconnect, device number 5
[  178.623587][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  178.741976][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  180.146872][ T5648] loop2: detected capacity change from 0 to 64
[  180.176299][ T5650] loop1: detected capacity change from 0 to 128
[  180.272408][ T5650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  180.297815][ T5650] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.620660][ T5660] binder: 5657:5660 ioctl 40046205 0 returned -22
[  180.632079][ T5660] binder: 5657:5660 ioctl c0306201 0 returned -14
[  181.327503][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  182.808547][ T5672] loop3: detected capacity change from 0 to 512
[  182.843397][ T5672] EXT4-fs (loop3): Test dummy encryption mode enabled
[  182.894095][ T5672] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.393: inode has both inline data and extents flags
[  182.996398][ T5672] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.393: couldn't read orphan inode 15 (err -117)
[  183.050412][ T5677] loop0: detected capacity change from 0 to 512
[  183.087063][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  183.144990][ T5677] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  183.186308][ T5677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  183.216799][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  183.269096][ T5677] EXT4-fs (loop0): orphan cleanup on readonly fs
[  183.315039][ T5677] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.395: iget: bad i_size value: 12154761577498
[  183.339232][ T5677] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.395: couldn't read orphan inode 13 (err -117)
[  183.357584][ T5675] loop1: detected capacity change from 0 to 32768
[  183.366814][ T5677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  183.403081][ T5677] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.395: dx entry: limit 65535 != root limit 120
[  183.431856][ T5675] JBD2: Ignoring recovery information on journal
[  183.471076][ T5677] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.395: Corrupt directory, running e2fsck is recommended
[  183.579649][ T5675] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  183.613068][   T26] audit: type=1800 audit(1787296037.302:69): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.394" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  183.638714][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  183.800929][ T5692] loop2: detected capacity change from 0 to 64
[  183.923252][ T4286] ocfs2: Unmounting device (7,1) on (node local)
[  184.573415][ T5700] loop4: detected capacity change from 0 to 128
[  184.589216][ T5702] loop2: detected capacity change from 0 to 64
[  184.633847][ T5700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  184.709011][ T5700] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  185.005435][ T5710] binder: 5708:5710 ioctl 40046205 0 returned -22
[  185.016799][ T5710] binder: 5708:5710 ioctl c0306201 0 returned -14
[  185.035827][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  185.994898][ T5699] loop1: detected capacity change from 0 to 32768
[  186.045141][ T5699] JBD2: Ignoring recovery information on journal
[  186.075472][ T5717] loop3: detected capacity change from 0 to 512
[  186.083408][ T5717] EXT4-fs (loop3): Test dummy encryption mode enabled
[  186.193270][ T5717] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.408: inode has both inline data and extents flags
[  186.218035][ T5699] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  186.258201][ T5717] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.408: couldn't read orphan inode 15 (err -117)
[  186.300769][   T26] audit: type=1800 audit(1787296039.992:70): pid=5699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.411" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  186.342037][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  186.493194][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  186.706130][ T4286] ocfs2: Unmounting device (7,1) on (node local)
[  188.427712][ T5744] device syzkaller0 entered promiscuous mode
[  188.543873][ T5747] siw: device registration error -23
[  188.782477][ T5749] loop2: detected capacity change from 0 to 128
[  188.844162][ T5749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  188.861596][ T5749] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.055822][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  189.645724][ T5753] loop3: detected capacity change from 0 to 64
[  189.896519][ T5758] binder: 5754:5758 ioctl 40046205 0 returned -22
[  189.907425][ T5758] binder: 5754:5758 ioctl c0306201 0 returned -14
[  190.766218][ T5762] loop4: detected capacity change from 0 to 512
[  190.779417][ T5762] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.806513][ T5762] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.423: inode has both inline data and extents flags
[  190.828307][ T5762] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.423: couldn't read orphan inode 15 (err -117)
[  190.840539][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  190.900068][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  191.821373][ T5782] siw: device registration error -23
[  191.859528][ T5783] loop4: detected capacity change from 0 to 128
[  191.984469][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  192.027137][ T5783] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.132817][ T5771] loop3: detected capacity change from 0 to 32768
[  192.236604][ T5771] JBD2: Ignoring recovery information on journal
[  192.381955][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  192.479516][ T5784] loop1: detected capacity change from 0 to 32768
[  192.509491][ T5771] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  192.528075][ T5784] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  192.597166][   T26] audit: type=1800 audit(1787296046.282:71): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.426" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  192.854149][ T4278] ocfs2: Unmounting device (7,3) on (node local)
[  192.964435][ T4363] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  193.335964][ T5803] loop3: detected capacity change from 0 to 512
[  193.397800][ T5803] EXT4-fs (loop3): Test dummy encryption mode enabled
[  193.481763][ T5803] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.435: inode has both inline data and extents flags
[  193.508627][ T5812] binder: 5805:5812 ioctl 40046205 0 returned -22
[  193.517872][ T5812] binder: 5805:5812 ioctl c0306201 0 returned -14
[  193.693292][ T5803] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.435: couldn't read orphan inode 15 (err -117)
[  193.873140][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  194.160284][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.166745][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.741902][ T5819] usb usb8: usbfs: process 5819 (syz.2.440) did not claim interface 0 before use
[  194.888665][ T5821] tipc: Started in network mode
[  194.901267][ T5821] tipc: Node identity 2007ff, cluster identity 4711
[  194.948108][ T5821] tipc: Node number set to 2099199
[  195.189756][ T5830] loop0: detected capacity change from 0 to 128
[  195.253117][ T5830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  195.311360][ T5830] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.587204][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  195.854680][ T5835] loop1: detected capacity change from 0 to 64
[  196.123384][ T5837] loop4: detected capacity change from 0 to 2048
[  196.196566][ T5837] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129
[  196.264422][ T5837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.946028][ T5839] loop0: detected capacity change from 0 to 32768
[  198.005554][ T5852] siw: device registration error -23
[  198.053723][ T5839] JBD2: Ignoring recovery information on journal
[  198.323925][ T5839] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  198.439362][   T26] audit: type=1800 audit(1787296052.132:72): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.445" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  198.650155][ T4272] ocfs2: Unmounting device (7,0) on (node local)
[  199.003658][ T5865] loop1: detected capacity change from 0 to 128
[  199.053976][ T5864] loop0: detected capacity change from 0 to 2048
[  199.070737][ T5865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  199.108171][ T5865] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  199.152756][ T5864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.968110][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  200.212972][ T5878] loop2: detected capacity change from 0 to 64
[  200.598085][ T5886] Mass Storage Function, version: 2009/09/11
[  200.621807][ T5886] LUN: removable file: (no medium)
[  202.041380][ T4290] Bluetooth: hci0: command 0x0406 tx timeout
[  202.048001][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[  202.054051][ T4282] Bluetooth: hci2: command 0x0406 tx timeout
[  202.060318][ T4289] Bluetooth: hci1: command 0x0406 tx timeout
[  202.060497][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[  202.093402][   T26] audit: type=1800 audit(1787296055.782:73): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.462" name="file" dev="configfs" ino=39070 res=0 errno=0
[  202.375640][   T26] audit: type=1326 audit(1787296056.062:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ee639e0d9 code=0x0
[  203.013032][ T5893] loop4: detected capacity change from 0 to 32768
[  203.064265][ T5893] JBD2: Ignoring recovery information on journal
[  203.154242][ T5893] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  203.179093][   T26] audit: type=1800 audit(1787296056.872:75): pid=5893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.465" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  203.331137][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  203.844393][   T26] audit: type=1800 audit(1787296057.532:76): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.470" name="power" dev="configfs" ino=38523 res=0 errno=0
[  204.064496][ T5907] debugfs: out of free dentries, can not create file 'active'
[  204.178060][ T5913] siw: device registration error -23
[  204.270515][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  205.786123][ T5919] loop3: detected capacity change from 0 to 64
[  205.905429][ T5907] ldm_validate_partition_table(): Disk read failed.
[  206.060821][ T5907] Dev nullb1: unable to read RDB block 0
[  206.076026][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.187631][ T5907]  nullb1: unable to read partition table
[  206.194328][ T5907] null_blk: disk nullb1 created
[  206.236921][ T5921] bond1: (slave geneve2): making interface the new active one
[  206.260809][ T5921] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  206.307643][ T2948] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  206.350559][   T26] audit: type=1800 audit(1787296060.042:77): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.476" name="file" dev="configfs" ino=39243 res=0 errno=0
[  207.208662][ T5943] loop2: detected capacity change from 0 to 128
[  207.271538][ T5943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  207.295762][ T5943] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  207.375344][ T5939] loop4: detected capacity change from 0 to 32768
[  207.392778][ T5939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.480 (5939)
[  207.417396][ T5939] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.477747][ T5939] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  207.486470][ T5939] BTRFS info (device loop4): turning on sync discard
[  207.516356][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  207.545223][ T5939] BTRFS info (device loop4): using free space tree
[  207.706814][ T5953] loop3: detected capacity change from 0 to 512
[  207.725496][ T5961] loop1: detected capacity change from 0 to 64
[  207.750925][ T5953] EXT4-fs (loop3): Test dummy encryption mode enabled
[  207.802499][ T5953] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.483: inode has both inline data and extents flags
[  207.837839][ T5953] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.483: couldn't read orphan inode 15 (err -117)
[  207.890222][ T5953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  207.923408][ T5939] BTRFS info (device loop4): enabling ssd optimizations
[  208.067747][ T5945] loop0: detected capacity change from 0 to 32768
[  208.178130][ T5945] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.482 (5945)
[  208.363265][   T26] audit: type=1800 audit(1787296062.052:78): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="power" dev="configfs" ino=39370 res=0 errno=0
[  208.612342][ T4283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.633776][ T4408] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4408)
[  208.734609][   T26] audit: type=1800 audit(1787296062.422:79): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.489" name="file" dev="configfs" ino=39383 res=0 errno=0
[  208.868511][   T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  210.546576][   T22] usb 1-1: Using ep0 maxpacket: 32
[  210.557872][   T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.629078][   T22] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  210.666032][   T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  210.695759][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.725617][   T22] usb 1-1: Product: syz
[  210.740221][   T22] usb 1-1: Manufacturer: syz
[  210.755088][   T22] usb 1-1: SerialNumber: syz
[  211.117216][ T6005] loop4: detected capacity change from 0 to 164
[  211.217890][   T22] usb 1-1: USB disconnect, device number 6
[  211.229041][ T6007] loop2: detected capacity change from 0 to 128
[  211.344407][ T6007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  211.354656][ T6007] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.630590][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  212.033940][ T6013] loop0: detected capacity change from 0 to 64
[  213.357734][ T6025] siw: device registration error -23
[  213.549135][   T26] audit: type=1800 audit(1787296067.242:80): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.501" name="power" dev="configfs" ino=38610 res=0 errno=0
[  213.790278][ T6018] loop0: detected capacity change from 0 to 32768
[  213.815577][ T6018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.498 (6018)
[  213.930040][ T6018] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.966610][ T6018] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  214.009511][ T6018] BTRFS info (device loop0): turning on sync discard
[  214.016296][ T6018] BTRFS info (device loop0): using free space tree
[  214.238896][ T6018] BTRFS info (device loop0): enabling ssd optimizations
[  214.515766][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.201944][ T6053] loop4: detected capacity change from 0 to 128
[  215.237019][   T26] audit: type=1800 audit(1787296068.922:81): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.503" name="file" dev="configfs" ino=38703 res=0 errno=0
[  215.288794][ T6053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  215.306477][ T6053] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  215.465430][ T4290] Bluetooth: Wrong link type (-22)
[  216.455188][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  218.194640][ T6069] loop4: detected capacity change from 0 to 1024
[  218.202331][ T6069] EXT4-fs: Ignoring removed bh option
[  218.268476][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  218.346134][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  218.427585][ T6069] loop4: detected capacity change from 1024 to 64
[  218.734160][ T6085] loop1: detected capacity change from 0 to 512
[  218.810384][ T6085] EXT4-fs (loop1): Test dummy encryption mode enabled
[  218.820531][   T26] audit: type=1800 audit(1787296072.512:82): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="power" dev="configfs" ino=38741 res=0 errno=0
[  218.857205][ T6085] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.522: inode has both inline data and extents flags
[  218.906996][ T6085] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.522: couldn't read orphan inode 15 (err -117)
[  218.936243][ T6085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  219.119776][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  219.218859][ T6070] kmmpd-loop4: attempt to access beyond end of device
[  219.218859][ T6070] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64
[  219.224956][ T5661] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.255286][ T6070] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  219.361102][ T5661] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.507504][ T5661] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.635653][ T5661] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.720855][ T6084] loop2: detected capacity change from 0 to 32768
[  219.785570][ T6084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.514 (6084)
[  219.822609][ T6084] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.874167][ T6084] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  219.911222][ T6084] BTRFS info (device loop2): turning on sync discard
[  219.932720][ T6102] loop0: detected capacity change from 0 to 128
[  219.967393][ T6084] BTRFS info (device loop2): using free space tree
[  220.013091][ T6102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  220.050121][ T6102] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.218926][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  220.393700][ T6084] BTRFS info (device loop2): enabling ssd optimizations
[  220.708811][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.728254][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.736322][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.744877][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.752513][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.777600][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.810280][ T6129] loop0: detected capacity change from 0 to 128
[  220.830953][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.934745][ T6129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  220.968598][ T6129] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.057953][ T6126] lo speed is unknown, defaulting to 1000
[  221.268442][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  221.574283][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'.
[  222.210711][ T6126] chnl_net:caif_netlink_parms(): no params data found
[  222.679931][ T6163] Bluetooth: MGMT ver 1.22
[  222.974845][ T4290] Bluetooth: hci3: command 0x0409 tx timeout
[  223.949542][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.956858][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.016828][ T6126] device bridge_slave_0 entered promiscuous mode
[  224.051711][ T5661] device hsr_slave_0 left promiscuous mode
[  224.078313][ T5661] device hsr_slave_1 left promiscuous mode
[  224.108237][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.146294][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.175176][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.213182][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.231324][ T5661] device bridge_slave_1 left promiscuous mode
[  224.239285][ T6185] loop0: detected capacity change from 0 to 128
[  224.256209][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.399517][ T5661] device bridge_slave_0 left promiscuous mode
[  224.405763][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.457273][ T6185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  224.485998][ T6185] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  224.581050][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  224.719036][ T5661] device veth1_macvtap left promiscuous mode
[  224.725536][ T5661] device veth0_macvtap left promiscuous mode
[  224.777809][ T5661] device veth1_vlan left promiscuous mode
[  224.800001][ T5661] device veth0_vlan left promiscuous mode
[  225.027641][ T4290] Bluetooth: hci3: command 0x041b tx timeout
[  225.356615][ T6183] loop3: detected capacity change from 0 to 32768
[  225.381389][ T6183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.532 (6183)
[  225.478712][ T6183] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.537114][ T6183] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  225.580764][ T6183] BTRFS info (device loop3): turning on sync discard
[  225.609278][ T6183] BTRFS info (device loop3): using free space tree
[  225.784990][ T6183] BTRFS info (device loop3): enabling ssd optimizations
[  226.092488][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.963362][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  227.107621][ T4290] Bluetooth: hci3: command 0x040f tx timeout
[  227.527087][ T6221] siw: device registration error -23
[  227.826341][ T5661] team0 (unregistering): Port device team_slave_1 removed
[  227.946938][ T5661] team0 (unregistering): Port device team_slave_0 removed
[  228.029409][ T5661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.071668][ T4449] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  228.100493][ T5661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.291272][ T4449] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.322963][ T4449] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.354568][ T4449] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  228.367521][ T4449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.385944][ T4449] usb 2-1: SerialNumber: syz
[  228.610646][ T4449] usb 2-1: 0:2 : does not exist
[  228.710870][ T4449] usb 2-1: USB disconnect, device number 3
[  228.958721][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.094425][ T5661] bond0 (unregistering): Released all slaves
[  229.197779][ T4290] Bluetooth: hci3: command 0x0419 tx timeout
[  229.523052][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.549914][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.592084][ T6126] device bridge_slave_1 entered promiscuous mode
[  229.731535][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.905463][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.336968][ T6126] team0: Port device team_slave_0 added
[  230.345450][ T6126] team0: Port device team_slave_1 added
[  230.353935][ T6238] loop0: detected capacity change from 0 to 128
[  230.402823][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.431623][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.458696][ T6238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  230.459939][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.481854][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.488874][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.515728][ T6238] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  230.517506][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.705983][ T6126] device hsr_slave_0 entered promiscuous mode
[  230.746742][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  230.795627][ T6126] device hsr_slave_1 entered promiscuous mode
[  230.822936][ T6126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.837327][ T6126] Cannot create hsr debugfs directory
[  231.130775][ T6126] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  231.161445][ T6253] loop0: detected capacity change from 0 to 128
[  231.175973][ T6126] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  231.208338][ T6255] loop2: detected capacity change from 0 to 512
[  231.216862][ T6126] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  231.248200][ T6253] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  231.264014][ T6126] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.285348][ T6253] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  231.285565][ T6255] EXT4-fs (loop2): Test dummy encryption mode enabled
[  231.363206][ T6255] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.549: inode has both inline data and extents flags
[  231.436535][ T6255] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.549: couldn't read orphan inode 15 (err -117)
[  231.493659][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  231.554262][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  231.834740][ T6264] jffs2: notice: (6264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  233.071668][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.075903][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  233.094256][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  233.132951][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  233.175556][ T6126] 8021q: adding VLAN 0 to HW filter on device team0
[  233.214997][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.245001][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  233.266369][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.273593][ T5661] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.413493][ T6126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.424078][ T6126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.499366][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  233.561022][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  233.595480][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  233.633180][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.640440][ T5661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.707431][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  233.760923][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  233.781402][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.815621][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.836881][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  233.862382][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  233.883890][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.909520][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.942040][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.970992][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.993200][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.022516][ T6066] Bluetooth: hci5: Frame reassembly failed (-84)
[  234.029373][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.047878][ T6287] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  234.943688][ T6305] loop3: detected capacity change from 0 to 128
[  234.965232][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  234.978215][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.988286][ T6305] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  235.010561][ T6305] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  235.035861][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.854545][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  235.990708][ T6310] loop0: detected capacity change from 0 to 512
[  236.067720][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  236.082138][ T6310] EXT4-fs (loop0): Test dummy encryption mode enabled
[  236.164431][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'.
[  236.173682][ T6315] device bridge_slave_1 left promiscuous mode
[  236.182315][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.329684][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.562: inode has both inline data and extents flags
[  236.381131][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.562: couldn't read orphan inode 15 (err -117)
[  236.470441][ T1046] block nbd3: Attempted send on invalid socket
[  236.477199][ T1046] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  236.488566][ T6319] efs: cannot read volume header
[  236.932157][ T6310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  237.031013][ T6315] device bridge_slave_0 left promiscuous mode
[  237.660771][ T6322] siw: device registration error -23
[  238.391975][ T6326] jffs2: notice: (6326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  238.897886][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.918838][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  239.960603][ T6351] loop3: detected capacity change from 0 to 128
[  240.134229][ T6351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  240.196021][ T6351] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  240.844014][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  241.091537][ T6368] loop3: detected capacity change from 0 to 512
[  241.172329][ T6368] EXT4-fs (loop3): Test dummy encryption mode enabled
[  241.345375][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'.
[  241.354534][ T6372] device bridge_slave_1 left promiscuous mode
[  241.361176][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.511277][ T1046] block nbd0: Attempted send on invalid socket
[  241.517672][ T1046] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.526858][ T6374] efs: cannot read volume header
[  242.188838][ T6368] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.576: inode has both inline data and extents flags
[  242.214893][ T6376] jffs2: notice: (6376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  242.251770][ T6368] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.576: couldn't read orphan inode 15 (err -117)
[  242.273304][ T6372] device bridge_slave_0 left promiscuous mode
[  242.279739][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.336487][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  243.820050][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  243.894589][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.926818][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.995222][ T6388] loop3: detected capacity change from 0 to 128
[  244.018495][ T6388] EXT4-fs: Ignoring removed i_version option
[  244.036123][ T6388] EXT4-fs: Ignoring removed oldalloc option
[  244.073084][ T6388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  244.092050][ T6388] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.110584][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  244.160369][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  244.353957][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  244.392423][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  244.406427][ T6394] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 33: comm syz.3.582: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  244.429904][ T6394] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem
[  245.064563][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  245.073801][ T6126] device veth0_vlan entered promiscuous mode
[  245.093934][ T6126] device veth1_vlan entered promiscuous mode
[  245.139539][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.218601][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  245.241752][ T6126] device veth0_macvtap entered promiscuous mode
[  245.273259][ T6398] loop3: detected capacity change from 0 to 128
[  245.308820][ T6126] device veth1_macvtap entered promiscuous mode
[  245.405452][ T6398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  245.525488][ T6398] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  245.589921][ T6404] loop2: detected capacity change from 0 to 512
[  245.647881][ T6406] siw: device registration error -23
[  245.928661][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.982958][ T6404] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.586: Unimplemented hash flags: 0x0001
[  246.002084][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.059695][ T6404] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.586: Corrupt directory, running e2fsck is recommended
[  246.063827][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.136976][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.144192][ T6404] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  246.179765][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.207737][ T6404] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.586: corrupted in-inode xattr
[  246.210817][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.274223][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.279653][ T6404] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.586: couldn't read orphan inode 15 (err -117)
[  246.303067][ T6404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  246.341495][ T6404] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.586: Unimplemented hash flags: 0x0001
[  246.376870][ T6404] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.586: Corrupt directory, running e2fsck is recommended
[  246.389370][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.405702][ T6404] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.586: path /124/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  246.443320][ T6404] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 2: comm syz.2.586: path /124/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0
[  246.511602][ T6414] EXT4-fs error (device loop2): ext4_xattr_set_entry:1619: inode #2: comm syz.2.586: corrupted xattr entries
[  246.530584][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  246.539043][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.549205][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  246.558653][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  246.651637][ T6404] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz.2.586: path /124/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0
[  246.700556][ T6419] jffs2: notice: (6419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  246.767713][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.884315][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.894224][ T6422] loop3: detected capacity change from 0 to 512
[  246.933360][ T6422] EXT4-fs (loop3): Test dummy encryption mode enabled
[  246.948290][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.984363][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.006613][ T6422] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.591: inode has both inline data and extents flags
[  247.052981][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.107596][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.152013][ T6422] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.591: couldn't read orphan inode 15 (err -117)
[  247.174329][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.186093][ T6422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  247.205515][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.427468][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.490819][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.524615][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  247.524637][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.667161][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  247.708341][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  247.747825][ T6126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.787713][ T6126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.796472][ T6126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.923206][ T6126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.173797][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  248.182894][ T6441] device bridge_slave_1 left promiscuous mode
[  248.189832][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.232142][ T6441] device bridge_slave_0 left promiscuous mode
[  248.262949][   T53] block nbd1: Attempted send on invalid socket
[  248.270264][   T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  248.279525][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.287417][ T6444] efs: cannot read volume header
[  248.843295][ T6426] loop0: detected capacity change from 0 to 32768
[  248.912390][   T26] audit: type=1800 audit(1787296102.602:83): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.589" name="file1" dev="loop0" ino=4 res=0 errno=0
[  249.532689][ T5218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.571703][ T5218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.623408][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  249.658359][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.676428][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.723604][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.273839][ T6471] siw: device registration error -23
[  250.589006][ T6475] loop2: detected capacity change from 0 to 128
[  250.669954][ T6475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  250.698615][ T6475] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  250.809439][ T6485] jffs2: notice: (6485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  251.084907][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  252.040351][ T6500] loop2: detected capacity change from 0 to 32768
[  252.123394][ T6500] JBD2: Ignoring recovery information on journal
[  252.355360][ T6500] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  252.530215][   T26] audit: type=1800 audit(1787296106.222:84): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="control" dev="loop2" ino=17058 res=0 errno=0
[  252.609058][ T6500] (syz.2.605,6500,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -14
[  252.673185][ T6505] loop5: detected capacity change from 0 to 32768
[  252.810415][ T4273] ocfs2: Unmounting device (7,2) on (node local)
[  253.111092][   T26] audit: type=1800 audit(1787296106.802:85): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.606" name="file1" dev="loop5" ino=4 res=0 errno=0
[  253.134268][ T6526] loop0: detected capacity change from 0 to 1024
[  253.162899][ T6526] EXT4-fs: Ignoring removed mblk_io_submit option
[  253.301909][ T6526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  253.431328][ T6526] EXT4-fs error (device loop0): __ext4_iget:5102: inode #12: block 13: comm syz.0.610: invalid block
[  253.497691][ T6526] EXT4-fs (loop0): Remounting filesystem read-only
[  253.602308][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'.
[  253.611760][ T6538] device bridge_slave_1 left promiscuous mode
[  253.619809][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.641862][ T6538] device bridge_slave_0 left promiscuous mode
[  253.648568][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.889064][   T53] block nbd2: Attempted send on invalid socket
[  253.895674][   T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.909734][ T6540] efs: cannot read volume header
[  254.633605][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  254.904714][ T6549] tipc: Started in network mode
[  254.914488][ T6549] tipc: Node identity 1, cluster identity 4711
[  254.923573][ T6549] tipc: Node number set to 1
[  254.942509][ T6549] tipc: New replicast peer: 127.0.0.1
[  254.995373][ T6549] tipc: Enabled bearer <udp:syz0>, priority 10
[  255.010053][ T6552] tipc: Disabling bearer <udp:syz0>
[  255.208016][ T6554] jffs2: notice: (6554) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  255.286233][ T6558] loop0: detected capacity change from 0 to 128
[  255.375051][ T6558] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  255.562666][ T6558] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  255.606986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.614171][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.674814][ T6565] siw: device registration error -23
[  255.694214][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  256.146443][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  256.512144][ T6582] input: syz1 as /devices/virtual/input/input9
[  256.894990][ T6570] loop0: detected capacity change from 0 to 32768
[  256.953672][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'.
[  256.962878][ T6594] device bridge_slave_1 left promiscuous mode
[  256.969683][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.996025][ T6594] device bridge_slave_0 left promiscuous mode
[  257.051304][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.133193][ T1046] block nbd5: Attempted send on invalid socket
[  257.139949][ T1046] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.149879][ T6596] efs: cannot read volume header
[  257.656614][ T6570] JBD2: Ignoring recovery information on journal
[  257.924079][ T6570] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  259.101260][   T26] audit: type=1800 audit(1787296112.792:86): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.620" name="control" dev="loop0" ino=17058 res=0 errno=0
[  259.287177][ T6570] (syz.0.620,6570,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -14
[  259.321070][ T6613] loop2: detected capacity change from 0 to 128
[  259.625879][ T6613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  259.664638][ T6619] jffs2: notice: (6619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  259.698019][ T4272] ocfs2: Unmounting device (7,0) on (node local)
[  259.705125][ T6613] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.770841][ T6623] loop5: detected capacity change from 0 to 512
[  259.823679][ T6623] EXT4-fs (loop5): Test dummy encryption mode enabled
[  259.866094][ T6623] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.634: inode has both inline data and extents flags
[  259.937591][ T6623] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.634: couldn't read orphan inode 15 (err -117)
[  260.077901][ T6623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  260.108557][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  260.468984][ T6630] tipc: Started in network mode
[  260.494123][ T6630] tipc: Node identity 1, cluster identity 4711
[  260.546484][ T6630] tipc: Node number set to 1
[  260.573164][ T6631] tipc: New replicast peer: 127.0.0.1
[  260.670805][ T6631] tipc: Enabled bearer <udp:syz0>, priority 10
[  260.708040][ T6633] tipc: Disabling bearer <udp:syz0>
[  262.630831][ T6650] input: syz1 as /devices/virtual/input/input10
[  267.352241][ T6681] loop2: detected capacity change from 0 to 128
[  267.641587][ T6681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  267.764111][ T6681] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  268.063472][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  268.101841][ T6692] jffs2: notice: (6692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  269.480034][ T6704] tipc: New replicast peer: 127.0.0.1
[  269.485802][ T6704] tipc: Enabled bearer <udp:syz0>, priority 10
[  269.589426][ T6704] tipc: Disabling bearer <udp:syz0>
[  269.792019][ T6707] siw: device registration error -23
[  270.603914][ T6698] loop2: detected capacity change from 0 to 32768
[  270.656234][ T6724] input: syz1 as /devices/virtual/input/input11
[  274.101411][ T6126] EXT4-fs (loop5): unmounting filesystem.
[  275.742261][ T6763] tipc: Started in network mode
[  275.767869][ T6763] tipc: Node identity 1, cluster identity 4711
[  275.774093][ T6763] tipc: Node number set to 1
[  275.849426][ T6764] tipc: New replicast peer: 127.0.0.1
[  275.855257][ T6764] tipc: Enabled bearer <udp:syz0>, priority 10
[  276.033498][ T6769] jffs2: notice: (6769) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  276.077588][ T6763] tipc: Disabling bearer <udp:syz0>
[  276.166119][ T6772] loop1: detected capacity change from 0 to 128
[  276.265861][ T6772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  276.277668][ T6772] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.326078][ T6772] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  276.534363][ T6778] siw: device registration error -23
[  276.743920][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  276.793532][ T6787] input: syz1 as /devices/virtual/input/input12
[  277.132751][ T6791] loop1: detected capacity change from 0 to 128
[  278.765558][ T6791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  278.799738][ T6791] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  279.163472][ T6791] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  279.359580][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  279.505914][ T6810] loop1: detected capacity change from 0 to 512
[  279.571043][ T6810] EXT4-fs (loop1): Test dummy encryption mode enabled
[  279.622005][ T6810] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.672: inode has both inline data and extents flags
[  279.662743][ T6810] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.672: couldn't read orphan inode 15 (err -117)
[  279.720967][ T6810] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  282.587087][   T26] audit: type=1326 audit(1787296136.272:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.2.676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ee639e0d9 code=0x0
[  282.777297][ T6838] jffs2: notice: (6838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  282.845311][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'.
[  283.464007][ T6833] loop5: detected capacity change from 0 to 32768
[  283.563515][ T6833] JBD2: Ignoring recovery information on journal
[  283.789071][ T6833] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  284.112666][   T26] audit: type=1800 audit(1787296137.802:88): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.670" name="control" dev="loop5" ino=17058 res=0 errno=0
[  284.462544][ T6833] (syz.5.670,6833,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -14
[  284.494091][ T6860] siw: device registration error -23
[  285.002738][ T6126] ocfs2: Unmounting device (7,5) on (node local)
[  290.189226][ T6903] jffs2: notice: (6903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  290.473137][ T6906] loop5: detected capacity change from 0 to 32768
[  290.482914][ T6906] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.691 (6906)
[  290.529249][ T6906] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  290.539490][ T6906] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  290.548289][ T6906] BTRFS info (device loop5): use zlib compression, level 3
[  290.555543][ T6906] BTRFS info (device loop5): turning on sync discard
[  290.562320][ T6906] BTRFS info (device loop5): using free space tree
[  290.817809][ T6906] BTRFS info (device loop5): enabling ssd optimizations
[  291.086394][   T26] audit: type=1800 audit(1787296144.772:89): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.691" name="file1" dev="loop5" ino=260 res=0 errno=0
[  291.106815][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.377173][ T6126] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.542118][ T6935] loop2: detected capacity change from 0 to 128
[  291.857242][ T6935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  291.898098][ T6935] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  292.092763][ T6935] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  292.241368][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  292.811351][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  295.657874][ T6976] Illegal XDP return value 3923321125 on prog  (id 10) dev syz_tun, expect packet loss!
[  295.759519][ T6979] loop5: detected capacity change from 0 to 7
[  295.809300][ T6979] Dev loop5: unable to read RDB block 7
[  295.825667][ T6979]  loop5: unable to read partition table
[  295.867767][ T6979] loop5: partition table beyond EOD, truncated
[  296.628623][ T6979] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  297.924006][ T6997] loop3: detected capacity change from 0 to 512
[  297.990993][ T6997] EXT4-fs (loop3): Test dummy encryption mode enabled
[  298.027264][ T7003] jffs2: notice: (7003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  298.092673][ T6997] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.704: inode has both inline data and extents flags
[  298.237601][ T6997] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.704: couldn't read orphan inode 15 (err -117)
[  298.364360][ T6997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  298.397637][ T4261] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  298.599229][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.906800][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.937799][ T4261] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  298.947004][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.598796][ T4261] usb 1-1: config 0 descriptor??
[  300.074097][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.292667][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.639644][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.691698][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.730478][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.781834][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.808238][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  300.875699][ T4261] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  301.025352][ T4261] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[  301.258785][ T4261] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71
[  301.315753][ T4261] usb 1-1: USB disconnect, device number 7
[  301.371064][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  302.567133][ T7041] fido_id[7041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  305.143917][ T7094] loop1: detected capacity change from 0 to 164
[  305.268164][ T7096] loop2: detected capacity change from 0 to 512
[  305.284829][ T7094] iso9660: Corrupted directory entry in block 2 of inode 1792
[  305.327099][ T7096] EXT4-fs (loop2): Test dummy encryption mode enabled
[  305.408160][ T7096] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.727: inode has both inline data and extents flags
[  305.447236][ T7096] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.727: couldn't read orphan inode 15 (err -117)
[  305.546357][ T7096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  308.838650][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  308.878598][ T7115] loop5: detected capacity change from 0 to 2048
[  308.949561][ T7115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  310.280684][ T7133] loop2: detected capacity change from 0 to 512
[  310.424052][ T7140] loop0: detected capacity change from 0 to 4095
[  310.531071][ T7140] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  310.554323][ T7140] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  310.575889][ T7140] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  310.593599][ T7140]  loop0:
[  314.367663][ T5989] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  315.347727][ T5989] usb 3-1: Using ep0 maxpacket: 16
[  315.391560][ T5989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.443679][ T5989] usb 3-1: config 0 has no interfaces?
[  315.463964][ T5989] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  315.518365][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.577857][ T5989] usb 3-1: config 0 descriptor??
[  316.427684][ T5989] usb 3-1: USB disconnect, device number 3
[  316.983246][ T7195] loop0: detected capacity change from 0 to 512
[  317.029445][ T7195] EXT4-fs (loop0): Test dummy encryption mode enabled
[  317.039885][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.046576][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.100471][ T7195] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.745: inode has both inline data and extents flags
[  317.209986][ T7195] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.745: couldn't read orphan inode 15 (err -117)
[  317.270742][ T7195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  320.749790][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  321.088061][ T7230] loop0: detected capacity change from 0 to 512
[  321.161310][ T7230] EXT4-fs (loop0): Test dummy encryption mode enabled
[  321.204285][ T7230] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.768: inode has both inline data and extents flags
[  321.337709][ T7230] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.768: couldn't read orphan inode 15 (err -117)
[  321.528393][ T7230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  323.140214][ T7267] loop5: detected capacity change from 0 to 24
[  323.168248][ T7267] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  323.220262][ T7267] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  324.412091][ T7282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.403408][ T7336] syz.1.790 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  331.479918][ T7336] CPU: 1 PID: 7336 Comm: syz.1.790 Not tainted syzkaller #0
[  331.487268][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  331.497374][ T7336] Call Trace:
[  331.500689][ T7336]  <TASK>
[  331.503642][ T7336]  dump_stack_lvl+0x188/0x24e
[  331.508399][ T7336]  ? ___ratelimit+0x14e/0x610
[  331.513101][ T7336]  ? show_regs_print_info+0x12/0x12
[  331.518342][ T7336]  ? load_image+0x410/0x410
[  331.522864][ T7336]  ? ___ratelimit+0x474/0x610
[  331.527558][ T7336]  ? radix_tree_cpu_dead+0x160/0x160
[  331.532863][ T7336]  dump_header+0xd8/0x820
[  331.537216][ T7336]  oom_kill_process+0x361/0x550
[  331.542086][ T7336]  out_of_memory+0xe25/0x1220
[  331.546795][ T7336]  ? print_unlock_imbalance_bug+0x160/0x160
[  331.552723][ T7336]  ? mutex_lock_nested+0x10/0x10
[  331.557699][ T7336]  ? unregister_oom_notifier+0x20/0x20
[  331.563205][ T7336]  mem_cgroup_out_of_memory+0x2c0/0x390
[  331.568814][ T7336]  ? mem_cgroup_oom_trylock+0x210/0x210
[  331.574396][ T7336]  ? do_raw_spin_unlock+0x11d/0x230
[  331.579615][ T7336]  try_charge_memcg+0xc9d/0x17c0
[  331.584634][ T7336]  ? percpu_ref_put+0x180/0x180
[  331.589528][ T7336]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  331.595291][ T7336]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  331.601295][ T7336]  ? percpu_ref_tryget+0x15/0x180
[  331.606368][ T7336]  ? percpu_ref_tryget+0x15/0x180
[  331.611426][ T7336]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  331.617180][ T7336]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  331.622932][ T7336]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  331.628771][ T7336]  obj_cgroup_charge+0x36a/0x620
[  331.633739][ T7336]  ? obj_cgroup_charge+0xe9/0x620
[  331.638798][ T7336]  ? mod_objcg_mlstate+0x320/0x320
[  331.643955][ T7336]  ? percpu_ref_put+0x12/0x100
[  331.648772][ T7336]  ? percpu_ref_put+0x12/0x100
[  331.653578][ T7336]  slab_pre_alloc_hook+0x2e2/0x300
[  331.658712][ T7336]  ? slab_pre_alloc_hook+0xb1/0x300
[  331.663948][ T7336]  kmem_cache_alloc_lru+0x49/0x2e0
[  331.669074][ T7336]  ? sock_alloc_inode+0x24/0xc0
[  331.673952][ T7336]  sock_alloc_inode+0x24/0xc0
[  331.678693][ T7336]  ? sockfs_init_fs_context+0xa0/0xa0
[  331.684099][ T7336]  new_inode_pseudo+0x5f/0x1c0
[  331.688888][ T7336]  __sock_create+0x129/0x940
[  331.693515][ T7336]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  331.699537][ T7336]  __sys_socket+0xc4/0x190
[  331.704089][ T7336]  __x64_sys_socket+0x76/0x80
[  331.708801][ T7336]  do_syscall_64+0x4c/0xa0
[  331.713255][ T7336]  ? clear_bhb_loop+0x60/0xb0
[  331.718018][ T7336]  ? clear_bhb_loop+0x60/0xb0
[  331.722751][ T7336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  331.728719][ T7336] RIP: 0033:0x7f647979e0d9
[  331.733191][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.752847][ T7336] RSP: 002b:00007f647a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  331.761307][ T7336] RAX: ffffffffffffffda RBX: 00007f6479a25fa0 RCX: 00007f647979e0d9
[  331.769307][ T7336] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[  331.777302][ T7336] RBP: 00007f6479835024 R08: 0000000000000000 R09: 0000000000000000
[  331.785295][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.793389][ T7336] R13: 00007f6479a26038 R14: 00007f6479a25fa0 R15: 00007ffd28026ef8
[  331.801416][ T7336]  </TASK>
[  331.897482][ T7336] memory: usage 0kB, limit 0kB, failcnt 38
[  331.925800][ T7336] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  331.970420][ T7336] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  331.977363][ T7336] Memory cgroup stats for /syz1/test:
[  332.001779][ T7336] anon 0
[  332.001779][ T7336] file 0
[  332.001779][ T7336] kernel 0
[  332.001779][ T7336] kernel_stack 0
[  332.001779][ T7336] pagetables 0
[  332.001779][ T7336] sec_pagetables 0
[  332.001779][ T7336] percpu 0
[  332.001779][ T7336] sock 0
[  332.001779][ T7336] vmalloc 0
[  332.001779][ T7336] shmem 0
[  332.001779][ T7336] zswap 0
[  332.001779][ T7336] zswapped 0
[  332.001779][ T7336] file_mapped 0
[  332.001779][ T7336] file_dirty 0
[  332.001779][ T7336] file_writeback 0
[  332.001779][ T7336] swapcached 0
[  332.001779][ T7336] anon_thp 0
[  332.001779][ T7336] file_thp 0
[  332.001779][ T7336] shmem_thp 0
[  332.001779][ T7336] inactive_anon 0
[  332.001779][ T7336] active_anon 0
[  332.001779][ T7336] inactive_file 0
[  332.001779][ T7336] active_file 0
[  332.001779][ T7336] unevictable 0
[  332.001779][ T7336] slab_reclaimable 0
[  332.001779][ T7336] slab_unreclaimable 0
[  332.001779][ T7336] slab 0
[  332.001779][ T7336] workingset_refault_anon 0
[  332.402004][ T7336] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.790,pid=7335,uid=0
[  332.423610][ T7336] Memory cgroup out of memory: Killed process 7335 (syz.1.790) total-vm:102376kB, anon-rss:1408kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  332.468328][ T7336] socket: no more sockets
[  334.415854][ T7356] loop2: detected capacity change from 0 to 128
[  334.461111][ T7358] nvmet: adding nsid 1 to subsystem testsubsys
[  334.559571][ T7356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  334.589819][ T7356] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  334.777634][ T7356] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  336.253975][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  337.798612][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  337.827901][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  337.835921][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  337.845889][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  337.853631][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  337.861001][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  337.952245][ T7383] lo speed is unknown, defaulting to 1000
[  338.459992][ T7390] loop3: detected capacity change from 0 to 32768
[  338.479682][ T7390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.804 (7390)
[  338.495257][ T7390] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  338.505512][ T7390] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  338.514650][ T7390] BTRFS info (device loop3): turning on sync discard
[  338.521448][ T7390] BTRFS info (device loop3): using free space tree
[  338.561165][ T7268] EXT4-fs (loop0): unmounting filesystem.
[  338.641870][ T7383] chnl_net:caif_netlink_parms(): no params data found
[  340.231822][ T4290] Bluetooth: hci5: command 0x0409 tx timeout
[  340.309626][ T7390] BTRFS info (device loop3): enabling ssd optimizations
[  340.487154][ T7383] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.494647][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.509147][ T7383] device bridge_slave_0 entered promiscuous mode
[  342.000027][ T4278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.286725][ T7383] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.294089][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.315234][ T4290] Bluetooth: hci5: command 0x041b tx timeout
[  342.366713][ T7383] device bridge_slave_1 entered promiscuous mode
[  342.386680][ T7442] loop5: detected capacity change from 0 to 2048
[  342.399974][ T7442] NILFS: invalid option "cp=0x0000000000000000": invalid checkpoint number 0
[  342.452315][ T4409] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  343.962081][ T5218] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.101186][ T7383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.119873][ T7383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.330555][ T5218] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.425627][ T4282] Bluetooth: hci5: command 0x040f tx timeout
[  345.232677][ T5218] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.283583][ T7383] team0: Port device team_slave_0 added
[  345.298272][ T7383] team0: Port device team_slave_1 added
[  345.332876][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.346171][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.427025][ T7383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.611596][ T5218] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.251109][ T7383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.271843][ T7383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.351452][ T4282] Bluetooth: hci3: command 0x0406 tx timeout
[  346.389803][ T7383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.473625][ T4282] Bluetooth: hci5: command 0x0419 tx timeout
[  346.475934][ T7383] device hsr_slave_0 entered promiscuous mode
[  346.490753][ T7383] device hsr_slave_1 entered promiscuous mode
[  346.500382][ T7383] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.517639][ T7383] Cannot create hsr debugfs directory
[  346.690858][ T5218] tipc: Left network mode
[  346.924509][ T7383] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  346.940717][ T7383] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  346.986284][ T7383] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  347.005809][ T7383] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  347.273222][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.327278][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  347.358085][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  347.369841][ T7383] 8021q: adding VLAN 0 to HW filter on device team0
[  347.414031][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  347.448552][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  347.475076][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.482269][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.507861][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  347.522334][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  347.542278][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  347.557900][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.565063][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.623863][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  347.739000][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  347.788927][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  347.820496][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  347.839490][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  347.849698][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  347.858872][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  347.867626][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  347.876174][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  347.885428][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  347.986568][ T7383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  348.001179][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  348.223531][ T7491] No source specified
[  348.334748][ T5218] device hsr_slave_0 left promiscuous mode
[  348.343200][ T5218] device hsr_slave_1 left promiscuous mode
[  348.618631][ T5218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.846564][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.207703][ T5218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.215210][ T5218] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.468043][ T5218] device veth1_macvtap left promiscuous mode
[  349.515265][ T5218] device veth0_macvtap left promiscuous mode
[  349.557565][ T5218] device veth1_vlan left promiscuous mode
[  349.557715][ T5218] device veth0_vlan left promiscuous mode
[  354.304866][ T7556] No source specified
[  354.649433][ T5218] team0 (unregistering): Port device team_slave_1 removed
[  354.712015][ T5218] team0 (unregistering): Port device team_slave_0 removed
[  354.803991][ T5218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.806488][ T5218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.981402][ T7436] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  356.213759][ T7436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.263967][ T7436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.293961][ T7436] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  356.347575][ T7436] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  356.357818][ T7436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.394821][ T7436] usb 2-1: config 0 descriptor??
[  356.846832][ T7436] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  356.916642][ T7578] input: syz1 as /devices/virtual/input/input13
[  356.938742][ T7436] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  357.014397][ T5218] bond0 (unregistering): Released all slaves
[  357.571254][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  357.582632][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  357.617139][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.482072][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.505401][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.566952][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.579000][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.594628][ T7383] device veth0_vlan entered promiscuous mode
[  358.606123][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.623973][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.645680][ T7383] device veth1_vlan entered promiscuous mode
[  358.693094][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  358.726836][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  358.757543][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  358.768349][ T4316] usb 2-1: USB disconnect, device number 4
[  358.862451][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  358.873649][ T7608] No source specified
[  358.900810][ T7383] device veth0_macvtap entered promiscuous mode
[  358.935019][ T7383] device veth1_macvtap entered promiscuous mode
[  359.489151][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  359.809281][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  359.888041][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  359.992311][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.057489][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.067768][ T4316] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  360.107429][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.133315][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.156786][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.176921][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.218504][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.251551][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.436544][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  360.450705][ T4316] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  360.495781][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.499174][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  361.069041][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.103008][ T4316] usb 4-1: Product: syz
[  361.107238][ T4316] usb 4-1: Manufacturer: syz
[  361.137642][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.157426][ T4316] usb 4-1: SerialNumber: syz
[  361.217565][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.238414][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.249307][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.260118][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.270346][ T7383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.287769][ T7383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.329770][ T7383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.359491][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  361.378501][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.401663][ T7383] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.423140][ T7383] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.442718][ T7383] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.459117][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  361.478206][ T7383] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.508184][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  361.558814][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  361.575240][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  361.589634][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  361.646454][ T4316] lan78xx: probe of 4-1:1.0 failed with error -71
[  361.698741][ T4316] usb 4-1: USB disconnect, device number 4
[  361.707319][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.717646][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.728485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  361.808389][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.828270][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.844267][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  362.936885][ T4316] logitech-hidpp-device 0005:046D:B012.0004: Device not connected
[  368.716478][  T954] logitech-hidpp-device 0005:046D:B012.0005: Device not connected
[  374.512881][ T4357] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  375.373543][ T4357] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  375.397818][ T4316] logitech-hidpp-device 0005:046D:B012.0006: Device not connected
[  375.450878][ T4357] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  375.556142][ T4357] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  375.623931][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.652986][ T4357] usb 2-1: Product: syz
[  376.433574][ T4357] usb 2-1: Manufacturer: syz
[  376.438598][ T4357] usb 2-1: SerialNumber: syz
[  376.463081][ T4357] ti_usb_3410_5052 2-1:2.0: required endpoints missing
[  378.124549][ T4261] usb 2-1: USB disconnect, device number 5
[  378.478054][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.484414][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  384.140691][ T7437] logitech-hidpp-device 0005:046D:B012.0007: Device not connected
[  389.151822][ T7865] loop2: detected capacity change from 0 to 8
[  389.758143][ T7843] loop6: detected capacity change from 0 to 32768
[  389.820718][ T7843] 
[  389.820718][ T7843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.820718][ T7843] 
[  389.930097][ T7843] 
[  389.930097][ T7843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  389.930097][ T7843] 
[  390.027445][ T7843] 
[  390.027445][ T7843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.027445][ T7843] 
[  390.191955][  T108] 
[  390.191955][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.191955][  T108] 
[  390.338064][ T6064] 
[  390.338064][ T6064]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.338064][ T6064] 
[  390.415146][ T6064] 
[  390.415146][ T6064]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.415146][ T6064] 
[  390.511188][ T7383] 
[  390.511188][ T7383]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.511188][ T7383] 
[  390.564604][  T107] 
[  390.564604][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.564604][  T107] 
[  390.608786][ T7383] 
[  390.608786][ T7383]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  390.608786][ T7383] 
[  390.635176][ T7865] loop2: detected capacity change from 0 to 32768
[  390.749547][ T7865] JBD2: Ignoring recovery information on journal
[  390.779555][ T7867] loop1: detected capacity change from 0 to 32768
[  391.033866][ T7865] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  391.958288][ T7867] XFS (loop1): Mounting V5 Filesystem
[  392.189501][ T4273] ocfs2: Unmounting device (7,2) on (node local)
[  392.256898][ T7867] XFS (loop1): Starting recovery (logdev: internal)
[  392.438101][ T7867] XFS (loop1): Ending recovery (logdev: internal)
[  392.606607][ T4286] XFS (loop1): Unmounting Filesystem
[  395.947523][ T4357] logitech-hidpp-device 0005:046D:B012.0008: Device not connected
[  396.199439][ T7923] loop5: detected capacity change from 0 to 128
[  396.220669][ T7923] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  396.904684][ T7939] loop2: detected capacity change from 0 to 1024
[  397.088127][ T7939] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  397.260987][ T7939] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  397.475907][ T7939] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.926: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  397.751083][ T7939] EXT4-fs (loop2): no journal found
[  397.756609][ T7939] EXT4-fs (loop2): can't get journal size
[  397.823186][ T7939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  398.500005][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  398.897667][ T7959] loop3: detected capacity change from 0 to 128
[  400.150441][ T7959] syz.3.930: attempt to access beyond end of device
[  400.150441][ T7959] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  400.292419][ T7966] syz.3.930: attempt to access beyond end of device
[  400.292419][ T7966] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128
[  402.027540][ T4316] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  402.838241][ T4316] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  402.848183][ T4316] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  403.467492][ T4316] usb 3-1: config 220 has no interface number 2
[  403.496217][ T4316] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  403.527029][ T7993] jffs2: notice: (7993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  403.548348][ T4316] usb 3-1: config 220 interface 0 has no altsetting 0
[  403.566879][ T4316] usb 3-1: config 220 interface 76 has no altsetting 0
[  403.587145][ T4316] usb 3-1: config 220 interface 1 has no altsetting 0
[  403.636284][ T4316] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  404.011645][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.021066][ T4316] usb 3-1: Product: syz
[  404.025358][ T4316] usb 3-1: Manufacturer: syz
[  404.030504][ T4316] usb 3-1: SerialNumber: syz
[  404.199991][ T4316] usb 3-1: can't set config #220, error -71
[  404.208055][ T4316] usb 3-1: USB disconnect, device number 4
[  404.364682][ T4261] logitech-hidpp-device 0005:046D:B012.0009: Device not connected
[  407.575358][ T8029] loop2: detected capacity change from 0 to 40427
[  407.607536][ T8029] F2FS-fs (loop2): invalid crc_offset: 4177530876
[  407.681643][ T8029] F2FS-fs (loop2): Wrong journal entry on segno 65538
[  407.689400][ T8029] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  407.966137][ T8038] xt_connbytes: Forcing CT accounting to be enabled
[  407.973296][ T8038] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  410.858355][ T8059] jffs2: notice: (8059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  414.593928][ T8086] loop6: detected capacity change from 0 to 128
[  414.658480][ T8086] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  414.678365][ T8086] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  414.779097][ T8086] syz.6.957 (pid 8086) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  414.958939][ T4448] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  414.967181][ T7383] EXT4-fs (loop6): unmounting filesystem.
[  415.174050][ T4448] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  415.193282][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.221726][ T4448] usb 2-1: Product: syz
[  415.234988][ T4448] usb 2-1: Manufacturer: syz
[  415.254062][ T4448] usb 2-1: SerialNumber: syz
[  415.433321][ T8105] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  415.704787][ T4448] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71
[  415.724114][ T8111] jffs2: notice: (8111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  415.742586][ T4448] kalmia: probe of 2-1:1.0 failed with error -71
[  415.796110][ T4448] usb 2-1: USB disconnect, device number 6
[  418.733289][ T4316] logitech-hidpp-device 0005:046D:B012.000A: Device not connected
[  419.350258][ T8137] loop1: detected capacity change from 0 to 764
[  421.694023][ T8161] program syz.3.979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  422.501396][ T8161] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  422.928704][ T7436] logitech-hidpp-device 0005:046D:B012.000B: Device not connected
[  423.446587][ T8175] loop2: detected capacity change from 0 to 2048
[  423.539316][ T8156] loop1: detected capacity change from 0 to 40427
[  423.573863][ T8156] F2FS-fs (loop1): invalid crc value
[  423.594960][ T8175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  423.645051][ T8156] F2FS-fs (loop1): Found nat_bits in checkpoint
[  423.697516][ T4448] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  423.929788][ T4448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.961160][ T4448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.983424][ T4448] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  424.008143][ T4448] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  424.019840][ T4448] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.084855][ T4448] usb 7-1: config 0 descriptor??
[  424.170139][ T7437] logitech-hidpp-device 0005:046D:B012.000C: Device not connected
[  424.187446][ T7436] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  424.231386][ T8191] jffs2: notice: (8191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  424.398859][ T7436] usb 6-1: not running at top speed; connect to a high speed hub
[  424.428282][ T7436] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.462211][ T7436] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  424.487545][ T7436] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  424.510272][ T7436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.569980][ T7436] gspca_main: spca501-2.14.0 probing 0000:0000
[  424.596937][ T8204] loop5: detected capacity change from 0 to 7
[  424.650373][ T8204] Dev loop5: unable to read RDB block 7
[  424.678895][ T8204]  loop5: AHDI p1
[  424.682601][ T8204] loop5: partition table partially beyond EOD, truncated
[  424.716880][ T4448] usbhid 7-1:0.0: can't add hid device: -71
[  424.748038][ T4448] usbhid: probe of 7-1:0.0 failed with error -71
[  424.786483][ T7436] gspca_spca501: reg write: error -71
[  424.792331][ T7436] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  424.804353][ T4448] usb 7-1: USB disconnect, device number 2
[  424.831160][ T7436] spca501: probe of 6-1:1.0 failed with error -22
[  424.850346][ T7436] usb 6-1: Found UVC 49.30 device <unnamed> (0000:0000)
[  424.861999][ T8207] futex_wake_op: syz.3.992 tries to shift op by 144; fix this program
[  424.878777][ T7436] usb 6-1: No valid video chain found.
[  424.929079][ T7436] usb 6-1: USB disconnect, device number 2
[  425.197670][ T4316] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  426.086234][ T4316] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  426.637281][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.125223][ T4316] usb 3-1: Product: syz
[  428.164507][ T4316] usb 3-1: Manufacturer: syz
[  428.197967][ T4316] usb 3-1: SerialNumber: syz
[  428.276690][ T4316] usb 3-1: config 0 descriptor??
[  428.389561][ T4316] usb 3-1: can't set config #0, error -71
[  428.424844][ T4316] usb 3-1: USB disconnect, device number 5
[  429.318692][ T8241] jffs2: notice: (8241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  429.689060][ T8241] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  429.957582][ T8253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1005'.
[  430.046238][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'.
[  430.133057][ T4282] Bluetooth: hci3: unexpected subevent 0x0c length: 30 > 5
[  430.277507][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  430.477426][ T4316] usb 4-1: Using ep0 maxpacket: 16
[  430.556055][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.657669][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.700693][ T4316] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  430.737431][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.759355][ T4316] usb 4-1: config 0 descriptor??
[  431.117583][ T4261] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  431.174891][ T4316] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  431.334883][ T4261] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08
[  431.529428][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.821189][ T4261] usb 3-1: Product: syz
[  431.825443][ T4261] usb 3-1: Manufacturer: syz
[  431.832409][ T4316] usb 4-1: USB disconnect, device number 5
[  431.997119][ T4261] usb 3-1: SerialNumber: syz
[  432.287618][ T4261] usb 3-1: reset high-speed USB device number 6 using dummy_hcd
[  432.442183][ T8294] jffs2: notice: (8294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  432.823307][ T4261] usb 3-1: driver   API: 1.9.9 2016-02-15 [1-1]
[  432.848264][ T4261] usb 3-1: firmware API: 1.9.6 2012-07-07
[  433.778826][ T8313] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1021'.
[  433.907764][ T4261] usb 3-1: firmware upload failed (-110).
[  435.765031][ T4261] logitech-hidpp-device 0005:046D:B012.000E: Device not connected
[  438.094814][ T8362] jffs2: notice: (8362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  438.476871][ T8374] loop1: detected capacity change from 0 to 1024
[  438.522416][ T4357] usb 3-1: USB disconnect, device number 6
[  439.912179][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.918799][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.423393][ T4357] logitech-hidpp-device 0005:046D:B012.000F: Device not connected
[  440.605640][ T8374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  441.785057][ T4442] logitech-hidpp-device 0005:046D:B012.0010: Device not connected
[  442.734457][ T8407] loop3: detected capacity change from 0 to 2048
[  442.749679][ T4286] EXT4-fs (loop1): unmounting filesystem.
[  444.049201][ T8423] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  444.299814][ T8427] jffs2: notice: (8427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  444.619372][ T8429] 
[  444.621762][ T8429] ======================================================
[  444.628802][ T8429] WARNING: possible circular locking dependency detected
[  444.635851][ T8429] syzkaller #0 Not tainted
[  444.640275][ T8429] ------------------------------------------------------
[  444.647282][ T8429] syz.6.1045/8429 is trying to acquire lock:
[  444.653257][ T8429] ffff888140d53900 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430
[  444.664906][ T8429] 
[  444.664906][ T8429] but task is already holding lock:
[  444.672263][ T8429] ffff888055198120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580
[  444.681395][ T8429] 
[  444.681395][ T8429] which lock already depends on the new lock.
[  444.681395][ T8429] 
[  444.691819][ T8429] 
[  444.691819][ T8429] the existing dependency chain (in reverse order) is:
[  444.700838][ T8429] 
[  444.700838][ T8429] -> #2 (&opts->dep_lock){+.+.}-{3:3}:
[  444.708490][ T8429]        __mutex_lock+0x12d/0xae0
[  444.713579][ T8429]        tcm_set_name+0x26/0x90
[  444.718467][ T8429]        function_make+0x195/0x350
[  444.723662][ T8429]        configfs_mkdir+0x511/0x9e0
[  444.728885][ T8429]        vfs_mkdir+0x386/0x570
[  444.733719][ T8429]        do_mkdirat+0x1d8/0x440
[  444.738579][ T8429]        __x64_sys_mkdir+0x6a/0x80
[  444.743695][ T8429]        do_syscall_64+0x4c/0xa0
[  444.748691][ T8429]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.755168][ T8429] 
[  444.755168][ T8429] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  444.763425][ T8429]        __mutex_lock+0x12d/0xae0
[  444.768458][ T8429]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[  444.775242][ T8429]        configfs_symlink+0x5a4/0x13c0
[  444.780733][ T8429]        vfs_symlink+0x245/0x3d0
[  444.785702][ T8429]        do_symlinkat+0x1b6/0x400
[  444.790736][ T8429]        __x64_sys_symlinkat+0x95/0xa0
[  444.796202][ T8429]        do_syscall_64+0x4c/0xa0
[  444.801149][ T8429]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.807581][ T8429] 
[  444.807581][ T8429] -> #0 (&sb->s_type->i_mutex_key#34){++++}-{3:3}:
[  444.816277][ T8429]        __lock_acquire+0x2d18/0x7c40
[  444.821728][ T8429]        lock_acquire+0x1bb/0x4a0
[  444.826789][ T8429]        down_write+0x36/0x60
[  444.831474][ T8429]        configfs_depend_item_unlocked+0x14f/0x430
[  444.837986][ T8429]        usbg_make_tpg+0x1f3/0x580
[  444.843113][ T8429]        target_fabric_make_tpg+0xa0/0x6d0
[  444.849001][ T8429]        configfs_mkdir+0x511/0x9e0
[  444.854210][ T8429]        vfs_mkdir+0x386/0x570
[  444.858975][ T8429]        do_mkdirat+0x1d8/0x440
[  444.863831][ T8429]        __x64_sys_mkdir+0x6a/0x80
[  444.868945][ T8429]        do_syscall_64+0x4c/0xa0
[  444.873893][ T8429]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  444.880318][ T8429] 
[  444.880318][ T8429] other info that might help us debug this:
[  444.880318][ T8429] 
[  444.890572][ T8429] Chain exists of:
[  444.890572][ T8429]   &sb->s_type->i_mutex_key#34 --> gadget_subsys.su_mutex --> &opts->dep_lock
[  444.890572][ T8429] 
[  444.905270][ T8429]  Possible unsafe locking scenario:
[  444.905270][ T8429] 
[  444.912715][ T8429]        CPU0                    CPU1
[  444.918070][ T8429]        ----                    ----
[  444.923441][ T8429]   lock(&opts->dep_lock);
[  444.927871][ T8429]                                lock(gadget_subsys.su_mutex);
[  444.935416][ T8429]                                lock(&opts->dep_lock);
[  444.942409][ T8429]   lock(&sb->s_type->i_mutex_key#34);
[  444.947899][ T8429] 
[  444.947899][ T8429]  *** DEADLOCK ***
[  444.947899][ T8429] 
[  444.956066][ T8429] 5 locks held by syz.6.1045/8429:
[  444.961177][ T8429]  #0: ffff888147a90460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  444.970443][ T8429]  #1: ffff8880681d24c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  444.981253][ T8429]  #2: ffffffff8d4e9850 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0
[  444.991013][ T8429]  #3: ffffffff8d808e28 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580
[  445.000681][ T8429]  #4: ffff888055198120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580
[  445.010228][ T8429] 
[  445.010228][ T8429] stack backtrace:
[  445.016134][ T8429] CPU: 0 PID: 8429 Comm: syz.6.1045 Not tainted syzkaller #0
[  445.023497][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  445.033552][ T8429] Call Trace:
[  445.036832][ T8429]  <TASK>
[  445.039771][ T8429]  dump_stack_lvl+0x188/0x24e
[  445.044462][ T8429]  ? load_image+0x410/0x410
[  445.049001][ T8429]  ? show_regs_print_info+0x12/0x12
[  445.054206][ T8429]  ? print_circular_bug+0x12b/0x1a0
[  445.059419][ T8429]  check_noncircular+0x296/0x330
[  445.064376][ T8429]  ? look_up_lock_class+0x75/0x140
[  445.069489][ T8429]  ? add_chain_block+0x9b0/0x9b0
[  445.074431][ T8429]  ? lockdep_lock+0xf1/0x1f0
[  445.079031][ T8429]  ? _find_first_zero_bit+0xd2/0x100
[  445.084406][ T8429]  __lock_acquire+0x2d18/0x7c40
[  445.089266][ T8429]  ? __kernel_text_address+0x9/0x30
[  445.094552][ T8429]  ? verify_lock_unused+0x140/0x140
[  445.099762][ T8429]  ? __mutex_trylock_common+0x15c/0x260
[  445.105328][ T8429]  lock_acquire+0x1bb/0x4a0
[  445.109836][ T8429]  ? configfs_depend_item_unlocked+0x14f/0x430
[  445.116020][ T8429]  ? __might_sleep+0xd0/0xd0
[  445.120644][ T8429]  ? read_lock_is_recursive+0x10/0x10
[  445.126029][ T8429]  ? __mutex_trylock_common+0x15c/0x260
[  445.131589][ T8429]  ? usbg_make_tpg+0x144/0x580
[  445.136375][ T8429]  ? mutex_lock_nested+0x10/0x10
[  445.141314][ T8429]  down_write+0x36/0x60
[  445.145474][ T8429]  ? configfs_depend_item_unlocked+0x14f/0x430
[  445.151639][ T8429]  configfs_depend_item_unlocked+0x14f/0x430
[  445.157639][ T8429]  usbg_make_tpg+0x1f3/0x580
[  445.162239][ T8429]  ? configfs_mkdir+0x4b5/0x9e0
[  445.167096][ T8429]  ? usbg_drop_tport+0x20/0x20
[  445.171882][ T8429]  ? vscnprintf+0x80/0x80
[  445.176230][ T8429]  ? __kmem_cache_alloc_node+0x19d/0x270
[  445.181898][ T8429]  target_fabric_make_tpg+0xa0/0x6d0
[  445.187183][ T8429]  ? target_fabric_release_wwn+0xa0/0xa0
[  445.192819][ T8429]  configfs_mkdir+0x511/0x9e0
[  445.197507][ T8429]  vfs_mkdir+0x386/0x570
[  445.201752][ T8429]  do_mkdirat+0x1d8/0x440
[  445.206106][ T8429]  ? vfs_mkdir+0x570/0x570
[  445.210545][ T8429]  ? getname_flags+0x206/0x500
[  445.215311][ T8429]  __x64_sys_mkdir+0x6a/0x80
[  445.219906][ T8429]  do_syscall_64+0x4c/0xa0
[  445.224340][ T8429]  ? clear_bhb_loop+0x60/0xb0
[  445.229038][ T8429]  ? clear_bhb_loop+0x60/0xb0
[  445.233772][ T8429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  445.239715][ T8429] RIP: 0033:0x7fa356f9e0d9
[  445.244175][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.263810][ T8429] RSP: 002b:00007fa357de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  445.272238][ T8429] RAX: ffffffffffffffda RBX: 00007fa357225fa0 RCX: 00007fa356f9e0d9
[  445.280226][ T8429] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[  445.288214][ T8429] RBP: 00007fa357035024 R08: 0000000000000000 R09: 0000000000000000
[  445.296208][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.304204][ T8429] R13: 00007fa357226038 R14: 00007fa357225fa0 R15: 00007ffed3a5de58
[  445.312189][ T8429]  </TASK>
[  445.439804][ T8423] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  445.463013][ T8423] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  446.387058][ T8423] Remounting filesystem read-only
[  446.474915][ T4278] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  447.966882][ T8448] loop2: detected capacity change from 0 to 32768
[  447.979797][ T8448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1044 (8448)
[  448.036459][ T8448] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  448.073706][ T8448] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  448.103253][ T8448] BTRFS info (device loop2): setting nodatacow, compression disabled
[  448.122923][ T8448] BTRFS info (device loop2): force clearing of disk cache
[  448.137016][ T8448] BTRFS info (device loop2): turning off barriers
[  448.153233][ T8448] BTRFS info (device loop2): use no compression
[  448.169773][ T8448] BTRFS info (device loop2): disabling free space tree
[  448.197060][ T8448] BTRFS info (device loop2): enabling ssd optimizations
[  448.226109][ T8448] BTRFS info (device loop2): using spread ssd allocation scheme
[  448.255504][ T8448] BTRFS info (device loop2): turning on flush-on-commit
[  448.420752][ T8448] BTRFS info (device loop2): rebuilding free space tree
[  448.609062][ T8448] BTRFS info (device loop2): disabling free space tree
[  448.616031][ T8448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  448.648970][ T8448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  448.680559][ T8448] BTRFS info (device loop2): checking UUID tree
[  448.750300][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  448.885296][ T8208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (8208)