last executing test programs:

6m59.602299735s ago: executing program 3 (id=4826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000023000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000006c000000060a010400000000000000000100000008000b400000000044000480400001800e000100696d6d6564696174650000002c0002800800014000000000100002800c00028008000180fffffffc10000280090001007aa499be0a0000000900010073797a3000"], 0xe0}}, 0x0)

6m59.347621357s ago: executing program 3 (id=4833):
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00))
socket(0x1a, 0x0, 0x0)

6m59.121163215s ago: executing program 3 (id=4838):
r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x18, 0x3}]}, 0x1}, 0x1)

6m59.070535045s ago: executing program 3 (id=4842):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m58.845951076s ago: executing program 3 (id=4846):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)

6m58.484200092s ago: executing program 3 (id=4851):
r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x597, &(0x7f0000000bc0)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

6m58.28229068s ago: executing program 32 (id=4851):
r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x597, &(0x7f0000000bc0)="$eJzs3c9rHFUcAPDvm/xqm2pSEbT2YKBgC2rSpBVFBFusNw/+KHgSjElaSrdtaCLYWrGF+h/oHyB48yIei0hRD3r1JvgHSLFIzcVbZDYzcdvs5ke7ycTM5wOTzJu3w3uT5Zv35u17swHU1kj+I4vYHxGzKWKoJa83isyRpdf9fffq1MLdq1MpFhff+StFKo6Vr0/F78Hi5F0R8esPKR7rWVnu3OUr5yYbjZlLRXps/vzs2NzlK8+fPT95ZubMzIWJ8RfHXzh2dOLYka5c596I+Gn0ZO+N068d+Gbqq32ffvf1zRTHm8fjvuvolpEYWf6btMr/ri91u7CK9BTX0/oWp/zAzxVWinUr37++iHgihqKniPrcUHz2VqWVAzbVYopYBGoqiX+oqbIfkN//llu1PRJgq9w5sTQAUI7tLSzHf+/S2GDsao4N7FlILSMDS2N93RiZy8uYfSYN5Vts0jgc0N616xHxZLv2PzVjc7g5ip/Hf3ZP/GcR8WbxOz/+9gOWP3JfWvzD1nmY+H+/Jf4/eMDyxT8AAAAAAAB0z60TEfFcu8//suX5P9Fm/s9gRBzvQvlrf/6X3V5xUrtFdcCG3TkR8UpELKyY/5eVLxnuKVKPNOcD9KXTZxszRyLi0Yg4HH0DeXp8lTJGDvzS1zGvZf5fvuXll3MBi3rc7h2495zpyfnJh7lmYMmd6xFP9ebxn+Le+E/L7X9q0/7n/w9m11nG4slXf+yUt3b8A5tl8cuIQ23b//862Wn153OMNfsDY2WvYKWP37v5bafyxT9UJ2//96we/8Op9Xk9cxsv45M/f3+I+G/f/+9Pp5qPnOkvjn00OT9/aTyiP72x8vjExusMO1EZD2W85PF/+GD7+//V+v+7I+LaOss89f3rNzrlaf+hOnn8T2+o/d/4zsF3v/inU/nra/+PNdv0w8UR43+wuvUGaNX1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/oywi9kbKRpf3s2x0NGIwIh6PPVnj4tz8s6cvfnhhOs9rfv9/Vn7T79BSOpXf/z/ckp64L300IvZFxOc9u5vp0amLjemqLx4AAAAAAAAAAAAAAAAAAAC2icEO6/9zf/RUXTtg0/VWXQGgMuIf6kv8Q31tMP77NqsewNbT/kN9iX+oL/EP9SX+ob7y+N9VdSWASmj/AQAAAABgR9n39K3fUkRce3l3c8v1F3nm+cPOllVdAaAyHvED9WXqD9SXe3wgrZHfeXnAWmcCAAAAAAAAAAAAAN1yaL/1/1BX1v9DfVn/D/Vl/T/Ul3t8wPp/AAAAAAAAAAAAANj+5i5fOTfZaMxcqmJnoKhENaVvz52Bqt8UO1uwE9ujGqvtVPyPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWPZvAAAA///B3PO2")
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

5m53.304308499s ago: executing program 1 (id=6176):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x1a0}}], 0x1, 0x4000880)

5m53.050446601s ago: executing program 1 (id=6180):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10)

5m52.88501452s ago: executing program 1 (id=6183):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003e00)=[{{&(0x7f0000000980)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000b40)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}], 0x20}}], 0x2, 0x80)

5m52.736268726s ago: executing program 1 (id=6186):
syz_mount_image$exfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000580)={[{@errors_continue}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@errors_remount}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

5m52.291444372s ago: executing program 1 (id=6196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}}, 0x0)

5m51.706582132s ago: executing program 1 (id=6212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x80, 0x2, 0x2, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

5m51.421970694s ago: executing program 33 (id=6212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x80, 0x2, 0x2, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

3m41.391684709s ago: executing program 6 (id=8928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004)

3m41.209438088s ago: executing program 6 (id=8930):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)

3m41.116329026s ago: executing program 6 (id=8932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x20002010}, 0x0)

3m40.983572627s ago: executing program 6 (id=8935):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3m40.619635107s ago: executing program 6 (id=8941):
futex(0x0, 0x6, 0x80001, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

3m40.537250131s ago: executing program 6 (id=8942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)

3m24.491225698s ago: executing program 34 (id=8942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)

2m37.813199914s ago: executing program 2 (id=10489):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000001c0)='!', 0x1}], 0x2)

2m37.553255889s ago: executing program 2 (id=10494):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0)

2m37.445754297s ago: executing program 2 (id=10497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)

2m37.296989805s ago: executing program 2 (id=10500):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x802e2e, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x401}})

2m37.182549277s ago: executing program 2 (id=10502):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0xa4)

2m36.985120165s ago: executing program 2 (id=10508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14)

2m20.939463066s ago: executing program 35 (id=10508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14)

6.188042759s ago: executing program 4 (id=14011):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x9, 0x9, 0x3, 0x9, 0xfffffffa, 0xd, "98f8b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0x1, 0x5, 0xfd, 0x3, 0x0, 0x6})

6.115531939s ago: executing program 4 (id=14012):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0xc08, &(0x7f00000006c0)={[{@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@discard}, {}, {}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@errors_continue}]}, 0x1, 0x151f, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSR9m+QyrLXezTe5LJIklyS5JEmSJLklJE1yJCEx7pLGJSG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+HvdOr8Tud3Oj/nOfN+nmc/1jt7v2u/e7+z57v3xnzbeWiNRjWrNiAi+JfgxT8SASAWAAYCwHUAEABA2biycZnrs0tM/Nd2wv5cj6Rc7QrY1cT9z9q4/1kb9z9r4/5nbdz/rI37n7Vx/7M27j9jWdnm6fmv5yXrLvz+Pyvjz///Ihklx325tuSNXQBi/mgK9z9r4/7/1wr+yEbc/6yN+59VxV7tAth/AL7+s4Jsf3cN9z9r4/4zlpVd7ffPV3uBSNY+B1f7+48xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWNZwxl+hAODy+GrXxRhjjDHGGGOMsT+Pz3a1K2CMMcYYY4wxxti/H4IACQoCiIFsEAvZIQcIALgWcsF1EIHrIQ5ugNxwI+SBvJAP8kM8FICCoMGABYIQCkFhiMJNUARuhqJQDIpDCXBQEkrBLVAaboUycBuUhduhHNwB5aECVIRKcCdUhrugCtwNVeEeqAbVoQbUhHuhFtwHteF+qAMPQF14EOrBQ1AfHoYG8Ag0hEehETwGjeFxaAJNoRk0hxb/q/yXoDu8DD2gJyRCL+gNfaAvZAOAATAQXoFB8CoMhtcgCYbAUBgGw+F1GAFvwEgYBaPhTRgDb8FYGAfjYQIkw0SYBG9Dn7UXz+ZUmAYpMB1mwHswE2bBbHgf5sAHMBfmwXxYAKnwISyERZAGH8Fi+BjSYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+AR2waewG/bAXvgM9sHn/2T+6b/J74KAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/FMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgffivdgLa2NtrIN1sC7Wvfx6ChtgA2yIDbERNsLG2BibYBNshs2wBbbAltgSW2ErbINtsC22xXbYDhMwAdtje+yAHbAjdsRO2Ak7Y2fsgl2xa8ZL2QBfxpexJ1YTvbA39sa+mJStPw7AAfgKDsJX8VV8DZNwCA7FYTgMX8cReApH4igcjaOxsngLx+I4JDEBkzEZJ+EknIyTcQq+i+/iNEzB6TgDZ+BMnIWz8H2cgx/gBzgP5+ECTMVUXIiLMA3TcDGexnRcgktxGS7HFbgcV+FqXIVrcR2uxQ24ATfhJtyCW3AbbsMduAM/QQWAn+Ie3INJuA/34X7cjwfwAB7Eg5iBGXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Dk8h+fxhfivG35SbE0SiExKKBEjYkSsiBU5RA6RU+QUuUQuERERESfiRG6RW+QReUQ+kU/Ei3hRUBQURhhBIowBABEVUVFEFBFFRVFRXBQXTjhRSpQSpUVpUUaUwUs/bER5UUG0dpVEJVFZtHFVxN2iqqgqqonqooaoKWqKWqKWqC1qizqijqgr6op64iFRX/TC/viIyOxMIzEEG4uh2EQ0FfLSpC3FCGwlWos24ikxCkdiO9HSJYhnRWZhHcRfxDh8XnQSE7CzeFF0EV1FN/GS6C5auR6ip5iCvURvMQ37in6ivxggZmJ18T7OyV5DvCaSxBAxVAwTC/B1MUK8IUaKUWK0eFOMEW+JsWKcGC8miGQxUUwSb4vJ4h0xRbwrpoppIkVMFzPEe2KmmCVmi/fFHPGBmCvmifligUgVH4qFYpFIEx+JxeJjkS6WiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIneITsUt8KnaLPWKv+EzsE5+L/eILcUB8KQ6Kr0SG+FocEt+Iw+JbcUR8J46K78UxcVycED+Ik+JHcUqcFmfEWXFO/CTOi5/FBeEFSJRCSqlkIGNkNhkrs8sc8hqZUwaXzu71Mk7eIHPLG2UemVfmk/llvCwgC0otjbSSZCgLycIyKm+SReTNsqgsJovLEnLONxezS8tbZRl5mywrb5fl5B0yVlaQFWUleaesLO+SELm4VTVZXdaQNeW9MhHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEYmyGdle+kvfYs8LzvJF2Rn+aLsIrvKbvJneUF62UP2lNALZG/ZR/aV/WR/OUAOlK/IQfJVOVi+JpPkEDlUDpPD5etyhHxDjpSj5Gj5phwj35Jj5Tg5Xk6QyXKinCTflpPlO3KKfFdOldNkipwu+1+aabaU/zD/7d/JH/zL3jfJzXKL3Cq3ye1yh9wpP5G75C65W+6We+VeuU/uk/vlfnlAHpAH5UGZITPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL50DUKiEkkqpQMWobCpWZVc51DUqp7pW5VLXqYi6XsWpG1RudaPKo/KqfCq/ilcFVEGllVFWkQpVIVVYRdVNl69xVVyVUE6VVKXULf9MviqiblZFVbFf5V+uL/Hv1NdCtVAtVUvVSrVSbVQb1Va1Ve1UO5WgElR71V51UB1UR9VRdVKdVGfVWXVRXaCb6qa6q+6qh+qhElWi6q36qL6qn+qvBqiB6hU1SA1Sg9VglaSS1FA1VA1Xw9UINUKNVCPVaDVajVFj1Fg1Vo1X41WySlaT1CQ1WU1WU9QUNVVNVSkqRc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WqVLVQLVRpKk0tVotVulqilqhlaplaoVaoVWqVWqPWqHVqndqgNqh0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1UGSpDHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVQn1Sl1Sp1RZ9Q5dU6dV+fVBXUh87YvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3Gp6dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiT53f+1N5n3Q9dE+dqHvp3rqP7qv76f56gB6oX9GD9Kt6sH5NJ+kheqgepofr1/UI/YYeqUfp0fpNPUa/pcfqcXq8nqCT9UQ9Sb+tJ+t39BT9rp6qp+kUPV3P0O/pmXqWnq3f13P0B3qunqfn6wU6VX+oF+pFOk1/pBfrj3W6XqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoXfqT/Qu/anerffovfozvU9/rvfrL/QB/aU+qL/SGfprfUh/ow/rb/UR/Z0+qr/Xx/RxfUL/oE/qH/UpfVqf0Wf1Of2TPq9/1he0z7y5z/x4N8ooE2NiTKyJNTlMDpPT5DS5TC4TMRETZ+JMbpPb5DF5TD6Tz8SbeFPQFDSZyJApZAqZqImaIqaIKWqKmuKmuHHGmVKmlCltSpsypowpa8qacqacKW/Km4qmornT3GnuMneZu83d5h5zj6luqpuapqapZWqZ2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimphmpplpYVqYlqalaWVamTamjWlr2pp2pp1JMAmmvWlvOpgOpqPpaDqZTqaz6Wy6mC6mm+lmupvupofpYRJNoultepu+pq/pb/qbgWagGWQGmcFmsEkySWaoGWqGm+FmhBlhRppRZnTmjap5y4w148x4M8Ekm2QzyUwyk81kM8VMMVPNVJNiUswMM8PMNDPNbDPbzDFzzFwz18w3802qSTULzUKTZtLMYrPYpJt0s9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaaXWaX2W12m71mr9ln9pn9Zr85YA6Yg+agyTAZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmbyXPi+9ibXZbQ57jc1pr7W57HX2b+N8Nr+NtwVsQattHpv3V7Gx1ha1xWxxW8I6W9KWsrf8Ji5vK9iKtpK901a2d9kqv4lr2ftsbXu/rWMfsDXtvb+K69oHbT37mK2PCGCb2oa2uW1kH7ON7eO2iW1qm9nmtq192razz9gE+6xtb5/7TbzQLrKr7Rq71q6zu+0ee8aetYftt/ac/cn2sD3tQPuKHWRftYPtazbJDvlNPNq+acfYt+xYO86OtxN+E0+102yKnW5n2PfsTDvLDtv96zjVfmjn2DQ7186z8+2CX+LMmtLsR3ax/dim2wCW2mV2uV1hV9pV/7/WZXaD3Wg32V32U7vVbrPb7Q678/KNsN1j99rP7D77uT1kv7EH7Jf2oD1iM+zXv8SZx3fEfmeP2u/tMXvcnrA/2JP2R3U5O/PYf7A/2wvWWyAkIEmKAoqhbBRL2SkHXUM56VrKRddRhK6nOLqBctONlIfyUj7KT/FUgAqSJkOWiEIqRIUpSjfR5fKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Qwn0LLWn56gD/YU60vPUiV6gzvQidaGu1I1eou70MvWgnpRIvag39aG+1I/60wAaSK/QIHqVBtNrlERDaCgNo+H0Oo2gN2gkjaLR9CaNobdoLP3kvZ9AyTSRJtHbNJneoSn0Lk2laZRC02kGvUczaRbNpvdpDn1Ac2kezacFlEof0kJaRGn0ES2mjymdltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kT2gXfUq7aQ/tpc9oH31O++kLOkBf0kH6ijLoazpE39Bh+paO0He+J31Px+g4naAf6CT9SKfoNJ2hs3SOfqLz9DNdIE8QYihCGaowCGPCbGFsmD3MEV4T5gyvDXOF14WR8PowLrwhzB3eGOYJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4U1gkvDksGhYLi4clQheWDEuFt4SlwxgoE94Wlg1vD8uFd4TlwwrhYw9UCu8MK4d3hVXCu8Oq4T1htbB6WCOsGd4b1grvC2uH94d1wgfCMuGDYb3wobB++HDYIHwkbBg+GjYKHwsbh4+HTcKmYbOwedgifCJsGT4Ztgpbh23Cp8K24dNhu/CZMCF8NmwfPvfL+gcX/f31iWGvsHfYJ+wTen+/nB9dEE2NfhhdGF0UTYt+FF0c/TiaHl0SXRpdFl0ezbwHWhVdHV0TXRtdF10f3RDdGN0U9b5mNnDohJNOucDFuGwu1mV3Odw1Lqe71uVy17mIu97taXeDy+1udHlcXpfP5XfxroAr6LQzzjpyoSvkCruou8kVcTf3BFfMFXclnHMlXSnX3LVwLVxL96Rr5Vq7Nu4p95R72j3tnnHPuGdde/ec6+D+4jq6510n94J7wb3ouriurpt7yXV3E3NdvCYTXW/X2/V1fV1/198NdAPdIDfIDXaDXZJLckPdUDfcDXcj3Ag30o10o91oN8aNcWPdWDfejXfJLtlNcpPcZDfZTXFT3FQ31aW4FDfDzXAz3UxXedbFvcx1c918N9+lulS30GWerzS32C126S7dLb38ItKtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73C632193aft9br/b7w64A+6g+8pluK/dIfeNO+y+dUfcd+6o+94dc8fdCfeDO+l+dKfcaXfGnXXn3E/uvPvZXXDeJUcmRiZF3o5MjrwTmRJ5NzI1Mi2SEpkemRF5LzIzMisyO/J+ZE7kg8jcyLzI/MiCSGrkw8jCyKJIWuSjyOLIx5H0yJLI0siyyPLIioj3BbaGvpAv7KP+Jl/E3+yL+mK+uC/hnS/pS/lbfGl/qy/jb/Nl/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/xCf5Z394/5zv4v/iO/nnfyb/gO/sXfRff1XfzL/nu/mXfw/f0ib6X7+37+L6+n+/vB/iB/hU/yL/qB/vXfJIf4of6YX64f92P8G/4kX6UHx3zph9z+REZJvhkP9FP8m/7yf4dP8W/66f6aT7FT/cz/Ht+pp/lZ/v3/Rz/gZ/r5/n5foFP9R/6hX6RT/Mf+cX+Y5/ul1zupV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/xu/ynfrff4/f6z/w+/7nf77/wB/yX/qD/ymf4r/0h/40/7L/1R/x3/qj/3h/zx/0J/4M/6X/0p/xpf8af9ef8T/68/9lf4P+zxhhjjDH2h0y8MhS/XnPxdX6v38kRf7VxbwC4dlv+jL9en3lHuT7PxXE/Ed82AgDP9uz8yOWlWrXExMRL26ZLCArPA7j8N0GZYuBKvATawNOQAK2h9O/W3090PUf/YP7o7QA5/ionFq7EV+b/AgATf2f+J54avbBceCbuf5h/HkDRwldyssOVeAm0+eX9Smso83fqz9vyH9Sf/ctkgFZ/lZMTrsRX6i8FT8JzkPCrLRljjDHGGGOMsYv6iYodLz9/Xv4Xn7/3fB6vruRkgyvxP3o+Z4wxxhhjjDHG2NX3fNduzzyRkNC64z8/qPK/yvrDg8bw75r5Txxkg/+IMv6UgfcAl7+iAOBfnBAgcyD/L49iy//JvpIuXTp/u2r5WR/Af0Yr/4zBVf7BxBhjjDHGGPvTXbnp//XX1dUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+jb9FTMCl3yd3tY+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9r+XwAAAP//Jy/7kQ==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5.857275375s ago: executing program 4 (id=14015):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000780))

5.727292798s ago: executing program 4 (id=14017):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)

5.627102552s ago: executing program 4 (id=14018):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0x4, 0x7])

3.203988867s ago: executing program 8 (id=14055):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x41, 0x75e, &(0x7f0000001100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0xfffffffffffffef3, 0x0, 0x0})

2.846324845s ago: executing program 8 (id=14061):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfeb05178cb0fc998, &(0x7f00000001c0)=ANY=[])

2.352961493s ago: executing program 4 (id=14075):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x1, 0x6, {0x6, 0x7, "ab61c17d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.866654522s ago: executing program 5 (id=14082):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x800400, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYRES8=0x0], 0x23, 0x61c3, &(0x7f000000c9c0)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPz2mfE+k+/uzq5nZp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKHP/jxuSIirvwq3XAi4nPRj+hFrFT1WkSsrJ2or/NCbDfH8xExXIqo1t/+59mI1yPi4+MR9x/cWa9uPn/Afnz/z//4w0+O/ejvfxqe+e9fbvXfmLTc7du//c9f7z769gIAAEAXlWVZFulj/smIGKTP9gDA0y/v/8sk366eu3pzzvqjVqvV6gWs68rx7taLiNisr1O9Z3A4HgAWzGZ80nYXaJH8O20QEcfa7gQw14q2O8CRuP/gznqR8i3q+4O1nfZ8Lsie/DeL3es7Jk2naZ5jMqvH11b047kJ/VmZUR/mSc6/18z/yk77KC131PnPyqT8RzuXPnVOzr/fzL/h6cm/Nzb/rsr5Dw6Vf1/+AAAAAAAwx/Lf/0+0fPx36fE35UD2O/67NqM+AAAAAAAAAMCTdtjx/waN8f92Gf8PAAAA5lb1Wb3yu+MPb5v0XWzV7ZeLiGcaywMdky6WWW27HwAAAAAAAAAAAADQJYOdc3gvFxHDiHhmdbUsy+qnrlkf1uOuv+i6vv3QZW2/yAMAwI6Pjzeu5S8iliPicvquv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87S6bWl0gDfEg1FZ/bLl2np10z4vT2tv/r7qvkZl/wAdm40WAweAiNjZG92ftEf6n/3VYirLZ6PlNzksiH2e/ywoz38Oou3HKQAAAHD0yrIsi/R13ifTMf9e250CAGYi7/+bxwXUarVarVY/fXVdOd7dehERm/V1qvcMhuMHgAWzGZ+03QVaJP9OG0TEC213AphrRdsd4Ejcf3BnvUj5FvX9QRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJY76vxnZVL+1XaeaKE/bcv595v5Nzw9+ffG5t9VOf/BofLvyx8AAAAAAOZY/vv/ibk6/jt61M2Zar/jv2tj1zi6vgAAAAAAAADAk3L/wZ31fN1rPv7/hTHLuf7z6ZTzL+TfSTn/XiP/rzaW69fm7739MP9/P7iz/sdb//p8nh40/6U8U6RHVpEeEUW6p2KQpo+zdZ+1NeyPqnsaFr3+IJ3zUw7fjWtxPTbi7J5le+n/42H7uT3tVU+H2+1lf6f9/J72wW57Xv/CnvZhOruoXMntp2M9fh7X453t9qptacr2L09pL6e05/z7nv+dlPMf1H6q/FdTe9GYVu591PvM874+HXc/b1374m/OHv3mTLUV/d1tq6u276UW+rP9f3JsFL+8uXHj9O2rt27dOBdpsufW85EmT1jOf5h+dl//X95pz6/79efrvY9Gh86/Nf295VYMJub/cm2+2t5XZtG/luX8R+kn5/9Oah///F+g/Bv2e/6/2kJ/AAAAAAAAAAAAAAAAYD9lWW5fIvpWRFxM1/+0dW0mADBbef9fJvn2WdX9Gd+fWr3gdTFn/Zlp/Wk5X/1RqxexrivHe7NeRMTf6utU7xl+Pe6XAQDz7NOI+GfbnaA18u+w/H1/1fRU250BZurmBx/+9Or16xs3brbdEwAAAAAAAADgUeXxP9dq4z+fKsvybmO5PeO/vh1rjzv+5yDP7A4wOmGg6v7ht2k/W71Rv1cbbvzFmDT+93B3br/xvwdT7m84pX00pX1pSvvylPaxF3rU5PxfrI13fioiTjaGX+/C+K/NMe+7IOf/Uu3xXOX/lcZy9fzL3y9y/r09+Z+59f4vztz84MPXrr1/9b2N9zZ+duHcubMXLl68dOnSmXevXd84u/Nviz0+Wjn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X0m1/Lsl5/+1VMu/W3L+r6Za/t2S8/96quXfLTn/11It/27J+Z9Otfy7Jed/JtUHzH/lqPvFbOT88xEuz/9uyfnnMxvk3y05//Opln+35PwvpFr+3ZLzfz3V8u+WnP83Ui3/bsn5X0y1/Lsl5//NVMu/W3L+l1It/27J+X8r1fLvlpz/t1Mt/27J+b+Ravl3S87/O6mWf7fk/L+bavl3S87/e6mWf7fk/N9Mtfy75eH3/5sxY8ZMnmn7lQkAAAAAAAAAAAAAaJrF6cRtbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu7cYue76DuBnr147kBgIqZMaWDvGGGeTXV/iC62LCdeGWwmEQi/YrndtFnyL1y5JGsmOAiUSRkUVbcNDW0BRm5cKP+SBVgHlAbVCqkTaB/qCqFB5iCqDEqRKaQXZas75//87Mzs7s2tP1jPnfD5S/PPOnJlz5syZs/td5zsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Nv0zpkvDmRZVvsv/2N9lr2q9ve14+vzy952vbcQAAAAuFa/yv984aZ0wcFl3KhumX954w+enp+fn88+MfQXI1+dn09XjGfZyJosy6+LLv/kkwP1ywSPZWMDg3VfD3ZY/VCH64c7XD/S4frRDtev6XD9WIfrF+2ARdYWv4/J72xL/tf1xS7Nbs5G8uu2tLjVYwNrBgfj73JyA/lt5keOZbPZiWwmm2pYvlh2IF/+mU21db0vi+sarFvXxtoR8uIjR+M2DIR9vKVhXQv3Gf3sHdn4L1585Ojfnbtya6vZcTc03F+xnds217bz8+GSYlsHsjVpn8TtHKzbzo0tnpOhhu0cyG9X+3vzdr6wzO0cWtjMVdX8nI9lg/nfn8v303D9r/XSftoYLnvp9izLLi5sdvMyi9aVDWbrGi4ZXHh+xoojsnYftUPptdnwio7TTcs4Tmtzekvjcdr8mojP/6Zwu+EltqH+afrZo6N1z/sv56/mOI1qj3qp10rzMdjt10qvHIPxuHguf9CPtzwGt4TH/8jWpY/BlsdOi2MwPe66Y3Bzp2NwcHQo3+b0JAzkt1k4Bnc0LD+Ur2kgn89vbX8MTp47eWZy7qGH75w9eeT4zPGZU7t27JjatWfPvn37Jo/NnpiZKv68yr3d+9Zlg+k1sDnsu/gaeEvTsvWH6vw3Rhedf6/2dTjW5nW4vmnZbr8Oh5sf3MDqvCAXH9PFa+NjtZ0+dmkwW+I1lj8/26/9dZged93rcLjuddjye0qL1+HwMl6HtWXObF/ezyzDdf+12oalvxdc2zG4vu4YbP55pPkY7PbPI71yDI6F4+JH25f+XrAxbO/jEyv9eWRo0TGYHm4499QuST/vj+3LR6vj8rbaFTeMZufnZs7e9eCRc+fO7sjCWBWvqztWmo/XdXWPKVt0vA6u+Hg9OPvGx29rcfn6sK/G7qz9Mbbkc1VbZvdd7Z+r/Ltb6/3ZcOnOLIwuW+392eq7eW1/jmbZ17736H3feeRr71xyf9by5ucnr/1n8ZRL686/I0ucf2Puf7lYX7qrx4ZGhovX71DaOyMN5+PGp2o4P3cN5Ot+YXJ55+OR8N9qn49vbnM+3tC0bLfPxyPNDy6ejwc6/bbj2jQ/n2PhODkx1f58XFtmw86VHpPDbc/Ht4c5EPb/W0NSSLmo7thZ6rhN6xoeHgmPaziuofE43dWw/EjIZrV1PbXzKo7TF7Ns2+3FfQ2lR7dgtY7T8aZlu32cpt99LXWcDnT67dvVaX4+x8JxcfOu9sdpbZlnd1/7uXNt/GvduXO00zE4MjRa2+aRdBDm5/tsfm08Bu/KjmansxPZdH7taH48DeTrmrh7ecfgaPhvtc+VG9ocg9ualu32MZi+jy117A0ML37wXdD8fI6F4+KJu9sfg7Vl3rW3uz+7bguXpGXqfnZt/v3aUr/zuq1pN71Sx8pw2M7v7W3/u9naMif2rTRntt9Pd4RLbmixn5pfv0u9pqaz1dlPG8J2Xtm39H6qbU9tma/uX+bxdDDLsgsP3JP/vjf8+8qF8z98uuHfXVr9m86FB+75+auP/fNKth+A/vdyMdYV3+vq/mVqOf/+DwAAAPSFmPsHw0zkfwAAACiNmPvj/xWeyP8AAABQGjH3D4eZVCT/b3jXldmXL2SpmT8fxOvTbri3WC52XKfC1+PzC2qX3/PkzP/804XlrXswy7Jf3vsnLZffcG/crsJ42M7L7268fJGn71zWug/ffyGtt76//vVw//HxLPcwaFXBncqy7JmbvpyvZ/yTl/L57L2H83nfxccfqy3zwv7i63j7519XLP/Xofx78NiRhts/H/bDT8Ocen/r/RFv961Lb9249+ML64u3G9h8Y/6wn/hUcb/xfXK+8lixfNzPS23/d7701Ldqyz/45tbbf2Gw9fY/Fe73yTD/9w3F8vXPQe3reLsvhO2P64u3u+ub3225/Ze/WCx/5j3FcofDjOvfFr7e8p4rs/X768GBIw2PK3tvsVxc/9QP/yy/Pt5fvP/m7R87dKlhfzQfH8/+e3E/k03Lx8vjeqJ/bFp/7X7qj8+4/qf+9HDDfu60/sv3Pf+G2v02r/+OpuXOPLA9X//C/TW+Y9PffOHLLdcXt+fgP5xpeDwHPxJex2H9T3wqHI/h+v+7XNxf87srHP5I4/knLv/19RcaHk/0vl8U67/89uP5XDO2dt0Nr3r1jRffVNt3WfbcmuL+Oq3/+N+ebtj+b9xS7I94fezoN69/KXH9Zz83cer03PnZ6bRXH7kpf++cDxTbE7f3pnBubf760Olzn545Oz41PpVl4+V9C72r9s0wf16Mi+2Xnl90Bt1+f3g+b/urZ9Zt/bcvxcv/42PF5ZfeX3zfektY7ivh8vXh+VvZ+hd7YtMt+et74NmwhfOL3y/4Wmzc8t/7lrVgePzNPxfE4/3M6z+d74fadfn3jfi6vsbt//F0cT/fDvt1Prwz8+ZbFtZXv3x8b4RLHy1e79e8/8JpLj6vfx+e7w/+tLj/uF3x8f44/Bzz3Q2N57t4fHz7wmDz/efv4nExnE+yi8X1cam4vy+9cEvLzYvvQ5JdvDX/+s/T/dy6ooe5lLmH5iZPzJ46/+DkuZm5c5NzDz186OTp86fOHcrfy/PQZzrdfuH8tC4/P03P7Nmd5Wer08V4hV3v7T9z/9HpvVNbp2eOHTl/7Nz9Z2bOHj86N3d0Znpu65Fjx2Y+1+n2s9MHduzcv2vvzonjs9MH9u3fv2v/xOyp07XNKDaqgz1Tn504dfZQfpO5A7v377j77t1TEydPT88c2Ds1NXG+0+3z700TtVv/8cTZmRNHzs2enJmYm3145sCO/Xv27Oz4boAnzxybG588e/7U5Pm5mbOTxWMZP5dfXPve1+n2lNPcfxY/zzYbKN6IL/vwHXvS+7PWPPnokndVLNL0BqJXwnvRfP81Z/Yt5+uY+0fCTCqS/wEAAKAKYu4fDTOR/wEAAKA0Yu5fE2Yi/wMAAEBpxNw/Fmb6XwIqkv9L1//fcGFZ69f/1/+v31/6/xXr/3+01/r/xflC/787rrV/r/8f6P/r/+v/6//r/9MFvdb/j7l/bZb5938AAAAoqZj714WZyP8AAABQGjH33xBmIv8DAABAacTc/6owk4rkf/1//X/9/1L2/8farV//X/+/zPT/29P/70D/fzKrVv//Yje3X/9f/5/Feq3/H3P/q8NMKpL/AQAAoApi7r8xzET+BwAAgNKIuf+mMBP5HwAAAEoj5v71YSYVyf/6//r/+v+l7P+3Xb/+v/5/men/t6f/34H+v8//1//X/6ereq3/H3P/a8JMKpL/AQAAoApi7n9tmIn8DwAAAL1n+OpuFnP/68JMFuX/q1wBAAAAcN3F3H9z1lQEr8i//+v/6//r/+v/6/+3Xv/y+/9Dmf5/79D/b0//vwP9/xX150eavtb/1//X/6dZr/X/89yfjWWvDzOpSP4HAACAKoi5/5YwE/kfAAAASiPm/l8LM5H/AQAAoDRi7t8QZlKR/K//X5r+/0v1T53+/5XZl19a6OsP6f83rF//3+f/l5n+f3v6/x3o//v8f/1//X+6qtf6/zH33xpmUpH8DwAAAFUQc/9tYSbyPwAAAPSJwY5LxNz/62Em8j8AAACURsz9G8NMKpL/9f97vP8fm6M+/9/n/+v/92T/f0z/v+fo/7en/9+B/r/+v/6//j9d1Wv9/5j73xBmUpH8DwAAAFUQc/8bw0zkfwAAACiNmPvfFGYi/wMAAEBpxNw/HmZSkfyv/9/j/f+iBz+6jM//b6D/r//fbv36/z7/v8z0/9vT/+9A/1//X/9f/5+u6rX+f8z9m8JMKpL/AQAAoApi7t8cZiL/AwAAQGnE3H97mIn8DwAAAKURc/+WMJOK5H/9/77o/2f6//r/+v/6//r/y6P/357+fwf6//r/+v/6/3RVr/X/Y+5/c5hJRfI/AAAAVEHM/VvDTOR/AAAAKI2Y+98SZiL/AwAAQGnE3L8tzKQi+V//X/9f/1//X/+/9fr1//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/61hJhXJ/wAAAFAFMfdvDzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//v/X69f/7k/5/e/r/Hej/6//r/+v/01W91v+Puf/OMJOK5H8AAACogpj77wozkf8BAACgNGLunwwzkf8BAACgNGLunwozqUj+1//X/9f/1/9fUf//TQv3q/9f0P/vLfr/7en/d6D/r/9/3fv/I/r/lEqv9f9j7t8RZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+XWEm8j8AAACURsz9u8NMKpL/9f/1//X/9f99/n/r9ev/9yf9//a63/+PD1H/X/9f/9/n/+v/s1iv9f9j7r87zKQi+R8AAACqIOb+PWEm8j8AAACURsz9e8NM5H8AAAAojZj794WZVCT/6//r/+v/6//r/7dev/5/f9L/b8/n/3eg/6//38f9/9qxpf9Pr+m1/n/M/fvDTCqS/wEAAKAKYu5/W5iJ/A8AAAClEXP/b4SZyP8AAABQGjH3/2aYSUXyv/6//n+v9/+LS0fzP/X/q9n/H9X/1/9fAf3/9vT/O9D/1//v4/6/z/+nF/Va/z/m/gNhJhXJ/wAAAFAFMff/VpiJ/A8AAAClEXP/28NM5H8AAAAojZj7D4aZVCT/6/+vUv8/Xqj/7/P/K9X/X9Nwuc//1/9fDfr/7en/d6D/r/+v/6//T1f1Wv8/5v53hJlUJP8DAABAFcTcf0+YifwPAAAApRFz/zvDTOR/AAAAKI2Y+98VZlKR/K//7/P/r3//f6Rh2/X/F27X//3/7nz+v/6//v9K6P+3p//fgf6//r/+v/4/XdVr/f+Y+98dZlKR/A8AAABVEHP/e8JM5H8AAAAojZj73xtmIv8DAABAacTc/74wk4rkf/1//f/r3//3+f/6/wX9f/3/btD/b0//vwP9f/1//X/9f7pqFfv/a7Nl9P9j7v/tMJOK5H8AAACogpj77w0zkf8BAACgNGLuf3+YifwPAAAApRFz/wfCTCqS//X/9f/1//X/9f9br1//vz/p/7fXZ/3/X90YLtf/L+j/9/b2r7T/P9z09SvS///JUv3/+TXNt9f/55Wwiv3/ln3/5q9j7v9gmElF8j8AAABUQcz9Hwozkf8BAACgNGLu/3CYifwPAAAApRFz/++EmVQk/+v/17Zjob2s/6//n1+g/6//r//ft/T/2+uz/r/P/2+i/9/b2+/z//X/WazX+v8x938kzKQi+R8AAACqIOb++8JM5H8AAAAojZj7PxpmIv8DAABAacTc/7Ewk4rkf/1/n/+v/6//r//fev36//1J/789/f8O9P/1/3ut//9f+v/0t17r/8fcf3+YSUXyPwAAAFRBzP0fDzOR/wEAAKA0Yu7/3TAT+R8AAABKI+b+T4SZVCT/6//3S/9/XP9f/1//v+nx6P/r/7ei/9+e/n8H+v/6/73W//f5//S5Xuv/x9z/yTCT5ef/sWUvCQAAAFwXMff/XphJRf79HwAAAKog5v7fDzOR/wEAAKA0Yu7/gzCTiuR//f9+6f/7/P9M/1//v+nx6P/r/7eyev3/eObR/9f/1/+P9P/1//X/adZr/f+Y+/8wzKQi+R8AAACqIOb+T4WZyP8AAADQF1r9P9nNYu4/FGYi/wMAAEBpxNx/OMykIvlf/1//X/+/R/v/f7n5X3/0gw8d3qH/r/+v/78iq/r5/7UXv8//1//X/0/0/1fe/6//Hqr/Txn1Wv8/5v4jYSYLwe8DPuAfAAAA+lvM/X8UZlKRf/8HAACAKoi5/2iYifwPAAAApRFz/3SYSUXyv/6//r/+f4/2//v48//j/uin/v/Emj7q/8eTrv5/S6va///4Qk9c/3+l/f/RlpdWqP8/kOn/d12L7f9+lmU93f+vp/9PGfVa/z/m/pkwk4rkfwAAAKiCkPsHjxVz4Qr5HwAAAEoj5v7jYSbyPwAAAJRGzP2fDjOpSP7X/9f/1//X//f5/63X37P9f5//35b+f3u90/9vrUL9f5///wq43tuv/6//z2K91v+PuX82zKQi+R8AAACqIOb+z4SZyP8AAABQGjH3fzbMRP4HAACA0oi5/0SYSUXyv/6//r/+v/6//n/r9ev/9yf9//b0/zvQ/9f/1//X/6ereq3/H3P/yTCTiuR/AAD+n737aLKsPu84fgcPxUyx8c4LL+y9XwILe22/AC+88cZVLi9wwDkxOEecowLKQgEFkBBKKAdACQllIQnlHFBGUo1K9PM80z19+tzumdvd5/6fz2ehBzWMzpVqCvjR89UBoIPc/TfGLfY/AAAADCN3/2/GLfY/AAAADCN3/2/FLU32v/5f/z9s///z+v+Dnq//1/+PTP8/T/+/hv5f/6//1/+zUUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+2+KW+x/AAAAGEbu/t+NW5rs/8v6/zOrnv1/Zrz6/5H6f+//P/D5+n/9/8hOtv+/5cd/5tP/6//1/0H/r//X/3O5pfX/uft/L25psv8BAACgg9z9vx+32P8AAAAwjNz9fxC32P8AAAAwjNz9fxi3NNn/3v/v/f/6f/2//n/6+fr/7eT9//M69f83PXT9jY/e/dP3HOX5+n/9v/5f/89mLa3/z93/R3FLk/0PAAAAHeTu/+O4xf4HAACAYeTu/5O4xf4HAACALXR+8qu5+/80bmmy//X/+n/9v/5f/z/9fP3/dtL/z+vU/1/J8/X/+n/9v/6fzVpa/5+7/8/ilib7HwAAADrI3f/ncYv9DwAAAMPI3X9z3GL/AwAAwDBy91+IW5rsf/3/8ff/P9T/6//j6v/1//r/46f/n6f/X0P/r//X/+v/2ail9f+5+2+JW5rsfwAAAOggd/9fxC32PwAAAAwjd/9fxi32PwAAAAwjd/9fxS1N9r/+3/v/9f/6f/3/9PP1/9tJ/z9P/7+G/v9q+/lr9f/6f/0/ux2x/39s5k/bG+n/c/f/ddzSZP8DAABAB7n7/yZusf8BAABgGLn7/zZusf8BAABgGLn7/y5uabL/9f/6f/2//v+K+//9P/Uep/+fpv8/GZvs/3f/uUn/v2Nj/f+Zs5Nf1v9vff/v/f/6f/0/eyzt/f+5+/8+bmmy/wEAAKCD3P3/ELfM7P8j/8N8AAAA4FTl7v/HuMX3/wEAAGDrZXWWu/+f4pYm+1//r//X/+v/vf9/+vlz/f89uz6f/n9ZvP9/3rH0/+dXq5X3/+v/9f/6f/0/E5bW/+fu/+e4pcn+BwAAgA5y998at9j/AAAAMIzc/f8St9j/AAAAMIzc/f8atzTZ/9P9/6Xfr/8/HP3/3s+v/5/++bGp/j//E6+2/19d9vXB+v9f8P7/nvT/8xbz/v8D6P/1/9v8+Qfv/8+v+/H6f6Ysrf/P3f9vcUuT/Q8AAAAd5O7/97jF/gcAAIBh5O7/j7jF/gcAAIBh5O7/z7ilyf73/n/9v/5/+/p/7//fcZrv/1+deP9/Vv9/SPr/efr/NfT/+n/9//z7/2f+XwD0/0xZWv+fu/+/4pYm+x8AAAA6yN3/33GL/Q8AAADbYfevHbj8F5SG3P3/E7fY/wAAADCM3P3/G7c02f/6f/2//l//r/+ffv6y+n/v/z8s/f88/f8a+v/j6OfPDtb/33bQj19C/3/zcff/M/T/TNnT/9976eun1f/n7v+/uKXJ/gcAAIAOcvf/f9xi/wMAAMAwcvc/IW6x/wEAAGAYufufGLc02f/H3v/PvCNU/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9dTqv/z93/pLilyf4HAACADnL3Pzlusf8BAABgGLn7b4ubrjm1TwQAAABsWu7+p8QtTb7/7/3/+n/9v/5f/z/9fP3/dtL/z9P/r6H/1//r//X/bNTS+v/c/U+NW5rsfwAAAOggd//T4hb7HwAAAIaRu//pcYv9DwAAAMPI3f+MuKXJ/tf/H2//n1/X/+v/V/p//b/+/0S07f/PTP2VaL8D+v8Hfv3CL+39iv5f/6//1//r/zmkn5z5fYvo/y9e+rvL3P3PjFua7H8AAADoIHf/s+IW+x8AAACGkbv/2XGL/Q8AAADDyN1/e9xyxP0/1zwsmf7f+//1//p//f/08/X/26lt/39I3v+/hv5f/6//1/+zUYvo/3f9+9z9z4lbfP8fAAAAhpG7/7lxi/0PAAAAw8jd/7y4xf4HAACAYeTuf37c0mT/6//1//p//b/+f/r5+v/tpP+fp/9fY5v6/9v1/1f4+e87rs+v/9f/s9/S+v/c/XfELU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/+v/9f/6f/2//n/6+fr/7aT/nzdA/39u9x9/Rf3/nTMfYKr/v3jdMvt/7/9f3OfX/+v/2W9p/X/u/hfHLU32PwAAAHSQu//OuMX+BwAAgGHk7r8rbrH/AQAAYBi5+18StzTZ//p//b/+X/+v/59+vv5/O+n/5w3Q/3v//0r/v9TPr//X/7Pf0vr/3P0vjVua7H8AAADoIHf/3XGL/Q8AAADDyN3/srjF/gcAAIBh5O6/J25psv/1//p//b/+X/8//Xz9/3Y6vv5/pf/X/+v/19D/6//1/1xuaf1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADDyN3/yrjF/gcAAIBh5O5/VdzSZP/r//X/+n/9v/5/+vn6/+3k/f/z9P9r6P/1//p//T8bNd3/33xq/X/u/lfHLU32PwAAAHSQu//euMX+BwAAgGHk7n9N3GL/AwAAwDBy9782bmmy//X/+v+9/f9qpf/X/+v/d5xA/39upf/fOP3/PP3/Gvr/Mfv/a1YD9f/nD/zx+n+WaGnv/8/d/7q4pcn+BwAAgA5y978+brH/AQAAYBi5+98Qt9j/AAAAMIzc/W+MW5rsf/2//t/7//X/+v/p53v//3bS/8/T/6+h/x+z//f+f/0/p2Zp/X/u/jfFLU32PwAAAHSQu//NcYv9DwAAAMPI3f+WuMX+BwAAgGHk7n9r3NJk/+v/9f/6f/2//n/6+fr/7aT/n6f/X0P/r//X/+v/2ail9f+5+++LW5rsfwAAAOggd//9cYv9DwAAAMPI3f9A3GL/AwAAwDBy978tbmmy//X/+n/9/3b2/+f0//p//f+kpfT/N9zwiw/q//X/+n/9v/5f/9/d0vr/3P1vj1ua7H8AAADoIHf/O+IW+x8AAACGkbv/nXGL/Q8AAADDyN3/rrilyf7f3/9fu9opVHdM9f/RqOn/d9H/7/38+v/pnx/e/6//1/8fv6X0/97/f2WfX/+v/9/mz3+k/v9n9/94/T8jWlr/n7v/wbilyf4HAACADnL3vztusf8BAABgGLn73xO32P8AAAAwjNz9D8UtTfa/9//r//X/+n/9//Tz9f/b6fj6/52/R9D/6//1/wfT/w/y/v+f0P+zOUvr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAGEbu/vfHLfY/AAAADCN3/wfilib7X/+v/9f/6//1/9PP1/9vJ+//n6f/X6NP/39u6oun3c9frdP+/MP0/97/zwYtrf/P3f/BuKXJ/gcAAIAOcvd/KG6x/wEAAGAYufs/HLfY/wAAADCM3P0fiVua7H/9v/5//P7/V/X/lz1f/6//H5n+P/+KPk3/v0af/n/Saffz2/759f/6f/ZbWv+fu//huKXJ/gcAAIAOcvd/NG6x/wEAAGAYufs/FrfY/wAAADCM3P0fj1ua7H/9f6/+/8yqY//v/f/6f/1/J/r/efr/NfT/+n/9v/6fjVpa/5+7/5EzZ1vufwAAANhWv/xzv/HwYf/YRx7/13OrT8Qt9j8AAAAMI3f/J+MW+x8AAACGkbv/U3FLk/2v/+/V//d8/7/+X/+v/+9E/z9P/7+G/l//r//X/7NRS+v/c/d/Om7ZNfzOHvm/JQAAALAkufs/E7c0+f4/AAAAdJC7/7Nxy779f/GQv6odAAAAWJrc/Z+LW5p8/1//v/D+f3VM/X/8cfr/Hfp//f/U8/X/20n/P+8q+/+LZ/T/+v8Z+n/9v/6fyy2t/8/d//m4pcn+BwAAgEHt+ScKufu/ELfY/wAAADCM3P1fjFvsfwAAABhG7v4vxS1N9r/+/8T7/0zVj/H9/+frt7z/v3n/f+u5yefr//X/I9P/z/P+/zX0/6P0/9fp//X/LMPS+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAIaRu/+rcYv9DwAAAMPI3f+1uKXJ/tf/L/z9/1fU/x/i/f/6/x79/wHPH6f//6nrL9z/K7921x36fy45yf4/fy7o//X/+v8dC+r/vf9f/89CbL7/P7vni0ft/3P3fz1uabL/AQAAoIPc/Y/GLfY/AAAADCN3/zfiFvsfAAAAhpG7/5txS5P9r//X/y+l/8//rU+h/7+wff1/NsXd+3/v/9f/7+f9//P0/2vo//X/+n/9Pxu1+f5/7xeP2v/n7v9W3NJk/wMAAEAHufu/Hbfk/j9z5H90DwAAACxM7v7vxC2+/w8AAADDyN3/3bilyf7X/+v/l9L/J+//v/TjvP9/xxj9/8/Ub+n/j9eV9Pe7fw7r/4P+X/+v/9f/6//ZgKX1/7n7vxe3NNn/AAAA0EHu/sfiFvsfAAAAhpG7//txi/0PAAAAw8jd/4O4pcn+1/+P2v9nEa//1//r/5fR/3v//0nx/v95+v819P/6f/2//p+NWlr/n7v/RwEAAP//auBn+g==")
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000003fc0)=""/4133, 0x1025)

1.568402797s ago: executing program 5 (id=14085):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffe9, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000)

1.468069344s ago: executing program 5 (id=14087):
r0 = gettid()
timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.363697554s ago: executing program 5 (id=14089):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x38, 0x4040001}}], 0x1, 0x0)

1.30057283s ago: executing program 5 (id=14092):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0)
close(0x3)

1.245158478s ago: executing program 5 (id=14094):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0], 0x0)

868.288712ms ago: executing program 8 (id=14105):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)

803.208903ms ago: executing program 8 (id=14107):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e00010200"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\a'], 0x1c}}, 0x0)

769.137344ms ago: executing program 8 (id=14108):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x3, '\x00', @d})

637.013138ms ago: executing program 0 (id=14110):
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
setreuid(0xee01, 0xee01)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)

621.203789ms ago: executing program 7 (id=14111):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8, 0x9, 0x0, 0xb0ffffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)

567.782178ms ago: executing program 8 (id=14112):
syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000040), 0x4, 0x9863, &(0x7f00000133c0)="$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")
setuid(0xee00)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)

556.383239ms ago: executing program 0 (id=14113):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
dup2(r1, r0)

400.788096ms ago: executing program 0 (id=14114):
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}})

361.565968ms ago: executing program 7 (id=14115):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000400)={0x3}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fc00000000000000000000000000000114000200ff02000000000000000000000000000108000800080400001400060005000000070000000080000036000000080009"], 0x64}}, 0x24008818)

284.920676ms ago: executing program 7 (id=14116):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

284.57167ms ago: executing program 0 (id=14117):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev(r0, 0x0, 0x0, 0x8, 0x365)

271.542816ms ago: executing program 7 (id=14118):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf1, 0xba9f, &(0x7f0000000440))
r0 = epoll_create(0x9)
fstat(r0, &(0x7f0000000040))

170.327434ms ago: executing program 0 (id=14119):
unshare(0x8040400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20)

118.968066ms ago: executing program 7 (id=14120):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

394.045µs ago: executing program 0 (id=14121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

0s ago: executing program 7 (id=14122):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x200)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x2000000000}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

8][  T122] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  812.927634][  T122] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  812.961287][  T122] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  812.980697][  T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  813.007877][T12020] netlink: 'syz.0.12625': attribute type 7 has an invalid length.
[  813.009193][  T122] usb 9-1: SerialNumber: syz
[  813.042586][T12020] netlink: 'syz.0.12625': attribute type 5 has an invalid length.
[  813.061170][  T122] usb 9-1: 0:2 : does not exist
[  813.067535][T12020] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12625'.
[  813.298681][  T122] usb 9-1: USB disconnect, device number 9
[  813.368569][T12006] loop7: detected capacity change from 0 to 32768
[  813.713513][T12086] netlink: 23 bytes leftover after parsing attributes in process `syz.5.12642'.
[  813.779587][T12094] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  814.080591][T12121] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12654'.
[  814.253218][T12127] loop7: detected capacity change from 0 to 4096
[  814.285585][T12127] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  814.323299][T12147] netlink: 4388 bytes leftover after parsing attributes in process `syz.8.12662'.
[  814.365341][T12127] ntfs3(loop7): ino=19, mi_enum_attr
[  814.394736][T12127] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  814.519259][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12667'.
[  814.711567][T12168] loop7: detected capacity change from 0 to 256
[  814.732505][T12168] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  814.843390][T12141] loop4: detected capacity change from 0 to 32768
[  814.882809][T12141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12661 (12141)
[  814.917462][   T30] audit: type=1326 audit(2000000237.189:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  814.940273][T12141] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  814.951578][T12151] loop5: detected capacity change from 0 to 32768
[  814.975596][T12141] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  815.024302][   T30] audit: type=1326 audit(2000000237.189:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  815.030639][T12151] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  815.047019][   T30] audit: type=1326 audit(2000000237.226:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  815.085379][   T30] audit: type=1326 audit(2000000237.226:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  815.108275][   T30] audit: type=1326 audit(2000000237.226:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.12677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  815.225490][T17466] (syz-executor,17466,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  815.238092][T17466] ocfs2: Unmounting device (7,5) on (node local)
[  815.277414][T12141] BTRFS info (device loop4): enabling ssd optimizations
[  815.284405][T12141] BTRFS info (device loop4): using spread ssd allocation scheme
[  815.338972][T12221] loop7: detected capacity change from 0 to 512
[  815.366999][T12141] BTRFS info (device loop4): enabling free space tree
[  815.378620][T12221] EXT4-fs: Ignoring removed orlov option
[  815.412101][T12141] BTRFS info (device loop4): force zlib compression, level 3
[  815.430965][T12221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  815.507324][T12221] EXT4-fs (loop7): orphan cleanup on readonly fs
[  815.588704][T12221] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12683: bg 0: block 248: padding at end of block bitmap is not set
[  815.604008][ T5871] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  815.637187][T12240] program syz.5.12689 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  815.651555][T12221] Quota error (device loop7): write_blk: dquota write failed
[  815.659003][T12221] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  815.713820][T12221] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.12683: Failed to acquire dquot type 1
[  815.747988][T12221] EXT4-fs (loop7): 1 truncate cleaned up
[  815.751405][T12254] ieee802154 phy1 wpan1: encryption failed: -22
[  815.793093][T12221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  815.861836][T12221] EXT4-fs: Ignoring removed orlov option
[  815.873824][T12221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  815.894827][T12221] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  815.924494][T12260] loop5: detected capacity change from 0 to 4096
[  815.935931][T12260] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  815.945198][  T122] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  815.952873][T12221] EXT4-fs error (device loop7): __ext4_remount:6740: comm syz.7.12683: Abort forced by user
[  815.978068][T12221] EXT4-fs (loop7): Remounting filesystem read-only
[  816.020171][T12221] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  816.050868][T12260] ntfs3(loop5): ino=0, attr_set_size
[  816.061221][T12221] ext4 filesystem being remounted at /623/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  816.076289][T12260] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  816.135808][  T122] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  816.153736][  T122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.180340][  T122] usb 9-1: Product: syz
[  816.195517][  T122] usb 9-1: Manufacturer: syz
[  816.199098][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.206524][  T122] usb 9-1: SerialNumber: syz
[  816.225417][  T122] usb 9-1: config 0 descriptor??
[  816.465938][  T122] usb 9-1: ignoring: probably an ADSL modem
[  816.688789][  T122] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19!
[  816.708468][  T122] usb 9-1: USB disconnect, device number 10
[  816.890743][T12321] loop4: detected capacity change from 0 to 40427
[  816.898749][T12321] F2FS-fs: heap/no_heap options were deprecated
[  816.921079][T12321] F2FS-fs (loop4): Image doesn't support compression
[  816.937346][T12321] F2FS-fs (loop4): invalid crc value
[  817.017451][T12340] loop5: detected capacity change from 0 to 32768
[  817.037819][T12340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12714 (12340)
[  817.059750][T12321] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  817.080576][T12340] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  817.092221][T12321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  817.100716][T12340] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  817.109842][T12340] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  817.171778][T12340] BTRFS info (device loop5): rebuilding free space tree
[  817.191647][T12340] BTRFS info (device loop5): disabling free space tree
[  817.198687][T12340] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  817.212935][T12340] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  817.247827][T12340] BTRFS info (device loop5): enabling ssd optimizations
[  817.277639][T12340] BTRFS info (device loop5): enabling disk space caching
[  817.292012][T12340] BTRFS info (device loop5): force clearing of disk cache
[  817.309732][T12340] BTRFS info (device loop5): enabling auto defrag
[  817.318133][T12340] BTRFS info (device loop5): max_inline set to 0
[  817.427524][T17466] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  817.457628][T12318] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  817.573993][ T5918] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  817.747101][ T5918] usb 9-1: unable to get BOS descriptor or descriptor too short
[  817.778509][ T5918] usb 9-1: config 3 has an invalid interface number: 8 but max is 3
[  817.786553][ T5918] usb 9-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config
[  817.830785][ T5918] usb 9-1: config 3 has 1 interface, different from the descriptor's value: 4
[  817.851176][ T5918] usb 9-1: config 3 has no interface number 0
[  817.858701][ T5918] usb 9-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11
[  817.880847][ T5918] usb 9-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  817.905471][ T5918] usb 9-1: config 3 interface 8 has no altsetting 0
[  817.924695][ T5918] usb 9-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  817.937472][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.958872][ T5918] usb 9-1: Product: syz
[  817.963089][ T5918] usb 9-1: Manufacturer: syz
[  817.978620][ T5918] usb 9-1: SerialNumber: syz
[  818.064581][T12386] loop7: detected capacity change from 0 to 32768
[  818.188216][T12395] loop5: detected capacity change from 0 to 32768
[  818.202099][T12395] XFS: attr2 mount option is deprecated.
[  818.219071][ T5918] appledisplay 9-1:3.8: Error while getting initial brightness: -71
[  818.260541][ T5918] appledisplay 9-1:3.8: probe with driver appledisplay failed with error -71
[  818.282772][ T5918] usbhid 9-1:3.8: can't add hid device: -22
[  818.288782][ T5918] usbhid 9-1:3.8: probe with driver usbhid failed with error -22
[  818.305031][ T5918] usb 9-1: USB disconnect, device number 11
[  818.313001][T12395] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  818.415374][T12395] XFS (loop5): Ending clean mount
[  818.425809][T12438] bridge0: entered promiscuous mode
[  818.435567][T12438] bridge0: entered allmulticast mode
[  818.437601][T12395] XFS (loop5): Quotacheck needed: Please wait.
[  818.461898][T12395] XFS (loop5): Quotacheck: Done.
[  818.512987][T17466] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  818.747880][T12468] libceph: resolve '4.' (ret=-3): failed
[  819.239111][T12520] netlink: 'syz.0.12755': attribute type 21 has an invalid length.
[  819.249824][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12755'.
[  819.368015][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12758'.
[  819.736700][ T5918] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  819.888087][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12777'.
[  819.897677][T12582] loop5: detected capacity change from 0 to 4096
[  819.914889][T12582] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  819.924248][ T5918] usb 9-1: Using ep0 maxpacket: 16
[  819.942213][ T5918] usb 9-1: config index 0 descriptor too short (expected 65, got 36)
[  819.962878][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.988736][ T5918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.999703][ T5918] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  820.014019][ T5918] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  820.024786][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.035883][ T5918] usb 9-1: config 0 descriptor??
[  820.057034][ T5918] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input76
[  820.101783][ T5218] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.139961][ T5218] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.161892][ T5218] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.180256][   T30] audit: type=1400 audit(2000000242.109:322): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=12604 comm="syz.5.12781"
[  820.206489][ T6040] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.227923][ T5873] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  820.251799][ T5218] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.272611][T12545] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  820.315732][ T5918] usb 9-1: USB disconnect, device number 12
[  820.323072][ T5218] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  820.420545][T12634] netlink: 'syz.5.12786': attribute type 10 has an invalid length.
[  820.434150][T12634] 8021q: adding VLAN 0 to HW filter on device bond0
[  820.442936][ T5873] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.455617][ T5873] usb 8-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  820.465022][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  820.474077][T12634] team0: Port device bond0 added
[  820.481916][ T5873] usb 8-1: Product: syz
[  820.489944][ T5873] usb 8-1: Manufacturer: syz
[  820.500727][ T5873] usb 8-1: SerialNumber: syz
[  820.513136][ T5873] usb 8-1: config 0 descriptor??
[  820.516033][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12788'.
[  820.537603][ T5873] gspca_main: conex-2.14.0 probing 0572:0041
[  820.833282][ T5873] usb 8-1: USB disconnect, device number 18
[  820.989010][T12689] openvswitch: netlink: IP tunnel dst address not specified
[  821.608909][T12765] netlink: 'syz.0.12831': attribute type 3 has an invalid length.
[  821.703814][T12769] loop4: detected capacity change from 0 to 512
[  821.758782][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12834'.
[  821.788946][T12769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  821.833948][T12769] ext4 filesystem being mounted at /2572/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  821.853449][T12788] loop5: detected capacity change from 0 to 16
[  821.883221][T12788] erofs (device loop5): mounted with root inode @ nid 36.
[  821.895842][T12792] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  821.938473][T12788] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  821.960586][T12788] erofs (device loop5): failed to decompress -46 in[60, 4036] out[1851]
[  821.970123][T12788] erofs (device loop5): read error -117 @ 43 of nid 36
[  821.980568][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.989306][T12795] loop8: detected capacity change from 0 to 4096
[  822.017532][T12795] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  822.151195][T12795] ntfs3(loop8): ino=19, mi_enum_attr
[  822.173599][T12795] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  822.224546][T12795] ntfs3(loop8): failed to convert "c46c" to cp850
[  822.241901][T12795] ntfs3(loop8): ino=20, mi_enum_attr
[  822.301922][ T5873] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  822.479527][   T30] audit: type=1326 audit(2000000244.261:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.8.12854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56d38ebe9 code=0x0
[  822.526465][ T5873] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  822.538439][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.572263][ T5873] usb 8-1: config 0 descriptor??
[  822.633862][T12856] netlink: 'syz.0.12858': attribute type 10 has an invalid length.
[  822.659538][T12856] macvlan0: entered allmulticast mode
[  822.670564][T12856] veth1_vlan: entered allmulticast mode
[  822.692734][T12856] team0: Port device macvlan0 added
[  822.734295][T12866] loop4: detected capacity change from 0 to 512
[  822.816383][T12866] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  822.836661][T12876] netlink: 'syz.8.12865': attribute type 6 has an invalid length.
[  822.844901][T12866] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  822.878589][T12866] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  822.881673][T12876] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.12865'.
[  822.912524][T12866] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  822.929454][T12866] System zones: 0-2, 18-18, 34-34
[  822.983793][T12866] EXT4-fs (loop4): 1 truncate cleaned up
[  823.014537][T12866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  823.036632][ T5873] usb 8-1: Cannot set MAC address
[  823.046365][ T5873] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  823.046973][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12866'.
[  823.108075][T12866] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.12861: path /2577/file1: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  823.138344][ T5873] usb 8-1: USB disconnect, device number 19
[  823.216039][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.496653][T12940] netlink: 'syz.0.12883': attribute type 8 has an invalid length.
[  823.556512][T12947] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  823.646964][   T30] audit: type=1326 audit(2000000245.364:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.7.12888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225f38ebe9 code=0x7ffc0000
[  823.691754][   T30] audit: type=1326 audit(2000000245.364:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.7.12888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225f38ebe9 code=0x7ffc0000
[  823.722331][T12963] netlink: 'syz.8.12891': attribute type 3 has an invalid length.
[  823.730299][T12963] netlink: 666 bytes leftover after parsing attributes in process `syz.8.12891'.
[  823.732243][   T30] audit: type=1326 audit(2000000245.392:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.7.12888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f225f38ebe9 code=0x7ffc0000
[  823.740050][T12962] binfmt_misc: register: failed to install interpreter file ./file0
[  823.777074][   T30] audit: type=1326 audit(2000000245.392:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.7.12888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225f38ebe9 code=0x7ffc0000
[  823.819020][T12966] loop7: detected capacity change from 0 to 256
[  823.837868][   T30] audit: type=1326 audit(2000000245.392:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.7.12888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225f38ebe9 code=0x7ffc0000
[  823.925960][T12966] FAT-fs (loop7): Directory bread(block 64) failed
[  823.932535][T12966] FAT-fs (loop7): Directory bread(block 65) failed
[  823.963406][T12966] FAT-fs (loop7): Directory bread(block 66) failed
[  823.971074][T12966] FAT-fs (loop7): Directory bread(block 67) failed
[  823.978026][T12966] FAT-fs (loop7): Directory bread(block 68) failed
[  823.984564][T12966] FAT-fs (loop7): Directory bread(block 69) failed
[  823.991562][T12966] FAT-fs (loop7): Directory bread(block 70) failed
[  824.017244][T12966] FAT-fs (loop7): Directory bread(block 71) failed
[  824.027176][T12966] FAT-fs (loop7): Directory bread(block 72) failed
[  824.034747][T12966] FAT-fs (loop7): Directory bread(block 73) failed
[  824.098641][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12898'.
[  824.152728][T12985] xfrm1: entered promiscuous mode
[  824.179976][T12985] xfrm1: entered allmulticast mode
[  824.295752][T13007] netlink: 'syz.7.12905': attribute type 30 has an invalid length.
[  824.346742][T13005] loop8: detected capacity change from 0 to 2048
[  824.356651][T13005] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  824.395384][T13005] syz.8.12903: attempt to access beyond end of device
[  824.395384][T13005] loop8: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  824.416739][T13018] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  824.476875][T13005] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[  824.525317][T13005] Remounting filesystem read-only
[  824.679465][T13046] loop8: detected capacity change from 0 to 1024
[  824.688731][T13046] EXT4-fs: Ignoring removed bh option
[  824.721533][T13046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  824.802564][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  824.834799][ T5873] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  824.904826][T13069] loop4: detected capacity change from 0 to 2048
[  824.936367][T13069] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  824.960206][T13075] No source specified
[  824.967439][T13076] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  824.967634][T13069] syz.4.12923: attempt to access beyond end of device
[  824.967634][T13069] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  825.016073][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  825.028388][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 238, changing to 7
[  825.048880][T13069] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 16777227
[  825.057104][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50512, setting to 1024
[  825.068345][T13069] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[  825.084494][ T5873] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  825.094455][T13069] Remounting filesystem read-only
[  825.102086][T13069] NILFS (loop4): error -5 truncating bmap (ino=16)
[  825.106819][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.127558][ T5873] usb 8-1: Product: syz
[  825.135096][ T5873] usb 8-1: Manufacturer: syz
[  825.141358][ T5871] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  825.168046][ T5873] usb 8-1: SerialNumber: syz
[  825.191862][ T5873] usb 8-1: config 0 descriptor??
[  825.223055][ T5873] usb 8-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress d7
[  825.242363][T13095] loop4: detected capacity change from 0 to 64
[  825.405359][T13109] RDS: rds_bind could not find a transport for fe88::109, load rds_tcp or rds_rdma?
[  825.476939][ T5873] usb 8-1: USB disconnect, device number 20
[  825.578712][T13142] netlink: 'syz.0.12940': attribute type 2 has an invalid length.
[  825.616004][T13142] netlink: 'syz.0.12940': attribute type 1 has an invalid length.
[  825.708717][T13156] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12945'.
[  826.240248][T13216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12966'.
[  826.290330][T13216] netlink: 'syz.0.12966': attribute type 1 has an invalid length.
[  826.302913][T13216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12966'.
[  826.484435][T13240] netlink: ct family unspecified
[  826.489457][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.834852][T13278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  826.900969][T13286] loop4: detected capacity change from 0 to 512
[  826.985625][T13286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  827.026007][T13286] ext4 filesystem being mounted at /2613/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  827.125014][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.275336][T13326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  827.541321][T13358] netlink: 216 bytes leftover after parsing attributes in process `syz.0.13013'.
[  827.664659][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13016'.
[  827.698701][T13368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13016'.
[  827.900469][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13022'.
[  827.958058][T13390] xfrm0: entered promiscuous mode
[  827.974099][T13390] xfrm0: entered allmulticast mode
[  828.037441][T13365] loop4: detected capacity change from 0 to 32768
[  828.062531][T13365] XFS: ikeep mount option is deprecated.
[  828.071941][T13365] XFS: ikeep mount option is deprecated.
[  828.100854][T13365] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  828.144618][T13373] loop7: detected capacity change from 0 to 32768
[  828.193754][   T30] audit: type=1800 audit(2000000249.602:329): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13018" name="bus" dev="loop7" ino=7 res=0 errno=0
[  828.313110][T13365] XFS (loop4): Ending clean mount
[  828.355227][T13365] XFS (loop4): Quotacheck needed: Please wait.
[  828.387988][T13365] XFS (loop4): Quotacheck: Done.
[  828.550745][ T5871] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  828.570565][T13438] netlink: 'syz.7.13036': attribute type 1 has an invalid length.
[  828.960219][T13433] loop8: detected capacity change from 0 to 32768
[  828.990026][T13433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13034 (13433)
[  829.045976][T13433] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  829.063491][T13470] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13047'.
[  829.074234][T13433] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  829.112213][T13470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  829.191406][T13433] BTRFS info (device loop8): enabling ssd optimizations
[  829.209349][T13433] BTRFS info (device loop8): enabling free space tree
[  829.309204][T13499] netdevsim0: mtu less than device minimum
[  829.377436][ T5339] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  830.003788][T13563] loop7: detected capacity change from 0 to 256
[  830.014658][T13563] exfat: Deprecated parameter 'utf8'
[  830.053704][T13563] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  830.294155][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13079'.
[  830.319917][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13079'.
[  830.339871][T13588] netlink: 'syz.7.13079': attribute type 6 has an invalid length.
[  830.366693][ T5099] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  830.655020][T13611] QAT: Invalid ioctl 1075883590
[  830.663266][T13611] QAT: Invalid ioctl 1075883590
[  830.669730][T13611] QAT: Invalid ioctl 1075883590
[  830.688814][T13611] QAT: Invalid ioctl 1075883590
[  830.702627][T13611] QAT: Invalid ioctl 1075883590
[  830.707592][T13611] QAT: Invalid ioctl 1075883590
[  830.725393][T13611] QAT: Invalid ioctl 1075883590
[  830.730349][T13611] QAT: Invalid ioctl 1075883590
[  830.752405][T13611] QAT: Invalid ioctl 1075883590
[  830.765416][T13611] QAT: Invalid ioctl 1075883590
[  831.099275][T13655] __nla_validate_parse: 1 callbacks suppressed
[  831.099298][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13100'.
[  831.233155][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13103'.
[  831.286469][T13629] loop4: detected capacity change from 0 to 32768
[  831.300305][T13629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13092 (13629)
[  831.350335][T13629] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  831.365047][T13629] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  831.378395][T13676] netlink: 'syz.5.13106': attribute type 1 has an invalid length.
[  831.413042][T13676] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13106'.
[  831.551733][T13629] BTRFS info (device loop4): enabling ssd optimizations
[  831.567995][T13629] BTRFS info (device loop4): enabling free space tree
[  831.620652][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13113'.
[  831.698514][ T5871] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  831.835796][T13731] loop5: detected capacity change from 0 to 8
[  831.838154][T13729] loop7: detected capacity change from 0 to 1024
[  832.072124][T13746] libceph: resolve '+ælc' (ret=-3): failed
[  832.137208][T13722] loop8: detected capacity change from 0 to 32768
[  832.147673][T13722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13117 (13722)
[  832.166720][T13747] loop7: detected capacity change from 0 to 4096
[  832.184217][T13747] EXT4-fs: Ignoring removed mblk_io_submit option
[  832.197153][T13722] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  832.206038][T13755] loop5: detected capacity change from 0 to 512
[  832.212565][T13722] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  832.223244][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13124'.
[  832.237302][T13747] EXT4-fs (loop7): Test dummy encryption mode enabled
[  832.259351][T13747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  832.262959][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13124'.
[  832.283984][T13755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  832.376664][T13755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  832.382143][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.399014][T13755] ext4 filesystem being mounted at /1774/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  832.450561][T13722] BTRFS info (device loop8): rebuilding free space tree
[  832.467644][T13755] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  832.478555][T13755] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  832.489397][T13722] BTRFS info (device loop8): setting nodatasum
[  832.495601][T13722] BTRFS info (device loop8): allowing degraded mounts
[  832.508769][T13755] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.13123: Failed to acquire dquot type 0
[  832.523694][T13722] BTRFS info (device loop8): enabling free space tree
[  832.542231][T13722] BTRFS info (device loop8): force clearing of disk cache
[  832.549615][T13722] BTRFS info (device loop8): force zlib compression, level 3
[  832.603205][T17466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  832.656633][T13722] BTRFS info (device loop8): balance: start -susage=34359738372,drange=7..526332,limit=51875..0
[  832.698564][T13722] BTRFS info (device loop8): balance: ended with status: 0
[  832.755782][ T5339] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  832.903854][T13819] netlink: 220 bytes leftover after parsing attributes in process `syz.7.13133'.
[  832.991791][T13829] loop8: detected capacity change from 0 to 8
[  833.158792][T13848] loop5: detected capacity change from 0 to 16
[  833.191902][T13848] erofs (device loop5): mounted with root inode @ nid 36.
[  833.235964][T13848] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  833.265468][T13848] erofs (device loop5): failed to decompress -43 in[46, 4050] out[1851]
[  833.311881][T13848] erofs (device loop5): read error -117 @ 43 of nid 36
[  833.476840][T13877] tmpfs: Bad value for 'mpol'
[  833.482740][T13879] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ	'
[  833.898525][ T6054] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  834.048013][T13898] loop8: detected capacity change from 0 to 40427
[  834.066024][T13898] F2FS-fs (loop8): Image doesn't support compression
[  834.077157][ T6054] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  834.078052][T13898] F2FS-fs (loop8): invalid crc value
[  834.093876][ T6054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  834.127120][ T6054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  834.171624][ T6054] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  834.190861][T13898] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  834.209379][T13898] F2FS-fs (loop8): Start checkpoint disabled!
[  834.213975][ T6054] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  834.235828][ T6054] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  834.249186][T13898] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  834.260756][ T6054] usb 8-1: Manufacturer: syz
[  834.266638][T13898] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  834.279927][ T6054] usb 8-1: config 0 descriptor??
[  834.299656][T13941] program syz.0.13169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  834.310413][T13941] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  834.411550][T13950] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13)
[  834.566170][T13961] bond0: option all_slaves_active: invalid value (250)
[  834.593461][ T6054] rc_core: IR keymap rc-hauppauge not found
[  834.599404][ T6054] Registered IR keymap rc-empty
[  834.607102][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.625987][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.647480][ T6054] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  834.667747][ T6054] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input78
[  834.684164][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.722083][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.743967][ T2344] pvrusb2: request_firmware fatal error with code=-110
[  834.750918][ T2344] pvrusb2: Failure uploading firmware1
[  834.761310][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.786463][ T2344] pvrusb2: Device initialization was not successful.
[  834.796358][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  834.800556][T13983] (unnamed net_device) (uninitialized): down delay (262144) is not a multiple of miimon (5), value rounded to 262140 ms
[  834.819145][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.821098][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  834.835936][ T5929] pvrusb2: Device being rendered inoperable
[  834.846171][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.871834][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.893141][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.925097][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.946562][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  834.968728][ T6054] mceusb 8-1:0.0: Error: mce write urb status = -71
[  835.009625][ T6054] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[  835.021489][ T6054] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  835.035878][ T6054] usb 8-1: USB disconnect, device number 21
[  835.162887][ T5929] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  835.245938][T14063] netlink: 'syz.7.13191': attribute type 15 has an invalid length.
[  835.331283][ T5929] usb 6-1: Using ep0 maxpacket: 8
[  835.350639][ T5929] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  835.387404][ T5929] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  835.405669][ T5929] usb 6-1: config 6 has no interface number 0
[  835.428041][ T5929] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  835.459374][ T5929] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  835.470126][ T5929] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  835.513224][ T5929] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  835.533720][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.562233][ T5929] usb 6-1: Product: syz
[  835.567875][ T5929] usb 6-1: Manufacturer: syz
[  835.572496][ T5929] usb 6-1: SerialNumber: syz
[  835.596364][T14089] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  835.611601][ T5929] hso 6-1:6.2: Failed to find INT IN ep
[  835.854470][    T9] usb 6-1: USB disconnect, device number 27
[  835.876429][  T122] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  836.048906][  T122] usb 9-1: Using ep0 maxpacket: 8
[  836.062282][  T122] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[  836.089808][  T122] usb 9-1: config 0 has no interface number 0
[  836.108529][  T122] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  836.121669][  T122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.130602][  T122] usb 9-1: Product: syz
[  836.135260][  T122] usb 9-1: Manufacturer: syz
[  836.139878][  T122] usb 9-1: SerialNumber: syz
[  836.150578][  T122] usb 9-1: config 0 descriptor??
[  836.239356][T14163] netlink: 'syz.4.13224': attribute type 1 has an invalid length.
[  836.391681][  T122] usb 9-1: Found UVC 0.04 device syz (046d:08c3)
[  836.398107][  T122] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized!
[  836.402580][T14178] netlink: 'syz.4.13230': attribute type 21 has an invalid length.
[  836.429210][  T122] usb 9-1: Failed to create links for entity 5
[  836.443592][T14178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13230'.
[  836.453458][  T122] usb 9-1: Failed to register entities (-22).
[  836.496907][  T122] usb 9-1: USB disconnect, device number 13
[  836.559920][T14199] netlink: 'syz.7.13234': attribute type 6 has an invalid length.
[  836.707227][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13239'.
[  836.742955][T14215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  836.771977][T14220] loop5: detected capacity change from 0 to 4096
[  836.806621][T14220] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  836.872108][T14230] loop4: detected capacity change from 0 to 256
[  836.888369][T14220] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  836.896353][T14230] exfat: Deprecated parameter 'namecase'
[  836.928292][T14220] ntfs3(loop5): Failed to load $Extend (-22).
[  836.934485][T14220] ntfs3(loop5): Failed to initialize $Extend.
[  837.012927][T14230] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011fc0, chksum : 0xea22d69b, utbl_chksum : 0xe619d30d)
[  837.022931][T14239] netlink: 'syz.7.13246': attribute type 3 has an invalid length.
[  837.037323][T14239] netlink: 'syz.7.13246': attribute type 1 has an invalid length.
[  837.048620][T14230] overlay: filesystem on . not supported
[  837.078739][T14239] netlink: 216 bytes leftover after parsing attributes in process `syz.7.13246'.
[  837.116417][T14239] NCSI netlink: No device for ifindex 33022
[  837.383761][T14278] loop8: detected capacity change from 0 to 128
[  837.426732][T14278] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  837.476314][T14278] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  837.544184][ T5339] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  838.052840][T14358] openvswitch: netlink: IP tunnel dst address not specified
[  838.196281][ T5929] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  838.223188][T14369] loop8: detected capacity change from 0 to 1024
[  838.224700][T14371] loop7: detected capacity change from 0 to 512
[  838.246489][T14369] hfsplus: Filesystem is marked locked, mounting read-only.
[  838.273327][T14371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  838.309665][T14371] ext4 filesystem being mounted at /750/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  838.344579][T14371] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  838.356554][ T5929] usb 6-1: Using ep0 maxpacket: 16
[  838.368901][T14371] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  838.378813][T14371] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.13284: Failed to acquire dquot type 1
[  838.391801][ T5929] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  838.404588][ T5929] usb 6-1: config 0 has no interface number 0
[  838.411160][ T5929] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  838.424550][ T5929] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  838.435518][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.443883][ T5929] usb 6-1: Product: syz
[  838.444779][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.448273][ T5929] usb 6-1: Manufacturer: syz
[  838.461964][ T5929] usb 6-1: SerialNumber: syz
[  838.463420][T14384] loop8: detected capacity change from 0 to 128
[  838.468653][ T5929] usb 6-1: config 0 descriptor??
[  838.497113][T14384] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  838.531878][T14393] openvswitch: netlink: Actions may not be safe on all matching packets
[  838.558263][ T5339] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  838.916500][ T5929] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  838.957281][ T5929] usb 6-1: USB disconnect, device number 28
[  839.223401][T14456] loop8: detected capacity change from 0 to 32768
[  839.231353][T14456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13303 (14456)
[  839.248091][T14456] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  839.258766][T14456] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  839.265191][  T122] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  839.267510][T14456] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  839.315192][T14456] BTRFS info (device loop8): rebuilding free space tree
[  839.332390][T14456] BTRFS info (device loop8): disabling free space tree
[  839.339593][T14456] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  839.353990][T14456] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  839.370348][T14456] BTRFS info (device loop8): enabling ssd optimizations
[  839.380441][T14456] BTRFS info (device loop8): enabling disk space caching
[  839.388045][T14456] BTRFS info (device loop8): force clearing of disk cache
[  839.398485][T14456] BTRFS info (device loop8): enabling auto defrag
[  839.406016][T14456] BTRFS info (device loop8): max_inline set to 0
[  839.447267][  T122] usb 8-1: Using ep0 maxpacket: 16
[  839.460849][  T122] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.479621][  T122] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  839.496214][ T5339] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  839.510964][  T122] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  839.520491][  T122] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.536687][  T122] usb 8-1: Product: syz
[  839.540877][  T122] usb 8-1: Manufacturer: syz
[  839.554554][  T122] usb 8-1: SerialNumber: syz
[  839.801939][  T122] usb 8-1: 0:2 : does not exist
[  839.819533][  T122] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  839.853411][  T122] usb 8-1: USB disconnect, device number 22
[  839.893720][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  840.002440][T14487] loop5: detected capacity change from 0 to 40427
[  840.022778][T14487] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9)
[  840.028687][T14520] binder: 14517:14520 ioctl c018620c 200000000380 returned -22
[  840.032701][T14487] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  840.061772][T14487] F2FS-fs (loop5): invalid crc value
[  840.123751][T14487] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  840.133525][T14487] F2FS-fs (loop5): Start checkpoint disabled!
[  840.140384][T14487] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  840.151692][T14487] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  840.166431][T14529] netlink: 'syz.8.13313': attribute type 21 has an invalid length.
[  840.174022][T14487] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  840.221005][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  840.272701][T14533] loop8: detected capacity change from 0 to 1024
[  840.299110][T14533] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  840.314070][T14533] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  840.326887][T14533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  840.344013][T14533] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.13314: corrupted in-inode xattr: bad e_name length
[  840.359971][T14533] EXT4-fs (loop8): Remounting filesystem read-only
[  840.459721][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.610923][   T30] audit: type=1326 audit(2000000261.219:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.0.13321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  840.697828][   T30] audit: type=1326 audit(2000000261.219:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.0.13321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  840.738994][T14572] loop4: detected capacity change from 0 to 8
[  840.801935][   T30] audit: type=1326 audit(2000000261.247:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.0.13321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  840.824418][    C1] vkms_vblank_simulate: vblank timer overrun
[  840.894607][   T30] audit: type=1326 audit(2000000261.247:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.0.13321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  841.009560][   T30] audit: type=1326 audit(2000000261.247:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14559 comm="syz.0.13321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  841.206059][T14620] netlink: 148 bytes leftover after parsing attributes in process `syz.4.13339'.
[  841.264437][T14620] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  841.370508][T14633] loop7: detected capacity change from 0 to 4096
[  841.420440][T14641] loop4: detected capacity change from 0 to 64
[  841.639740][T14653] delete_channel: no stack
[  841.717962][T14663] loop7: detected capacity change from 0 to 64
[  841.804894][T14672] loop5: detected capacity change from 0 to 1024
[  841.905140][T14685] netlink: 'syz.8.13357': attribute type 1 has an invalid length.
[  842.902626][   T30] audit: type=1326 audit(2000000263.371:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14795 comm="syz.8.13397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff56d38ebe9 code=0x0
[  842.995562][T14806] loop5: detected capacity change from 0 to 512
[  843.070519][T14806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  843.108366][T14806] ext4 filesystem being mounted at /1825/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  843.138996][T14806] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  843.172556][T14806] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  843.182359][T14806] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.13400: Failed to acquire dquot type 1
[  843.218608][T17466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  843.261272][T14822] loop4: detected capacity change from 0 to 8
[  843.426043][T14796] loop7: detected capacity change from 0 to 32768
[  843.452255][T14796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.13396 (14796)
[  843.536171][T14796] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  843.568202][T14796] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  843.719991][T14796] BTRFS info (device loop7): allowing degraded mounts
[  843.741728][T14796] BTRFS info (device loop7): enabling ssd optimizations
[  843.749806][T14796] BTRFS info (device loop7): enabling free space tree
[  843.765985][T14796] BTRFS info (device loop7): force zlib compression, level 3
[  843.976326][T31690] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  844.006314][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13424'.
[  844.052219][T14895] loop8: detected capacity change from 0 to 1764
[  844.100458][T14895] iso9660: Corrupted directory entry in block 1 of inode 1920
[  844.604385][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13437'.
[  844.721935][T14912] loop4: detected capacity change from 0 to 32768
[  844.778371][T14912] JBD2: Ignoring recovery information on journal
[  844.822479][   T30] audit: type=1326 audit(2000000265.157:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.5.13440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff518ebe9 code=0x7ffc0000
[  844.874545][T14954] loop7: detected capacity change from 0 to 2048
[  844.877862][   T30] audit: type=1326 audit(2000000265.157:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.5.13440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff518ebe9 code=0x7ffc0000
[  844.903474][   T30] audit: type=1326 audit(2000000265.157:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.5.13440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f3ff518ebe9 code=0x7ffc0000
[  844.916735][T14926] loop8: detected capacity change from 0 to 32768
[  844.925813][    C1] vkms_vblank_simulate: vblank timer overrun
[  844.941992][   T30] audit: type=1326 audit(2000000265.157:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.5.13440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff518ebe9 code=0x7ffc0000
[  844.944132][T14912] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  844.980166][T14954] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2361, location=2361
[  845.036748][T14926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13429 (14926)
[  845.056966][T14954] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  845.081277][T14912] (syz.4.13427,14912,0):ocfs2_mknod:505 ERROR: status = -31
[  845.089981][T14912] (syz.4.13427,14912,0):ocfs2_mkdir:661 ERROR: status = -31
[  845.098581][T14926] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  845.113421][T14954] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  845.134509][T14926] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  845.166590][T14954] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 2016: 0x5c != 0x1b
[  845.227520][T14954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.236884][ T5871] ocfs2: Unmounting device (7,4) on (node local)
[  845.319163][T14926] BTRFS info (device loop8): enabling ssd optimizations
[  845.364613][T14926] BTRFS info (device loop8): enabling free space tree
[  845.477573][T14989] loop5: detected capacity change from 0 to 4096
[  845.510969][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13445'.
[  845.521568][ T5339] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  845.870273][T15025] loop8: detected capacity change from 0 to 2048
[  845.926688][T15025] NILFS (loop8): invalid segment: Magic number mismatch
[  845.933704][T15025] NILFS (loop8): trying rollback from an earlier position
[  845.989455][T15037] netlink: 666 bytes leftover after parsing attributes in process `syz.7.13454'.
[  846.077759][T15025] NILFS (loop8): recovery complete
[  846.123558][T15080] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  846.143396][T15082] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  846.320367][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13463'.
[  846.331173][T15097] tmpfs: Cannot change global quota limit on remount
[  846.361265][T15095] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  846.371521][T15095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  846.480379][T15113] loop7: detected capacity change from 0 to 256
[  846.571684][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13472'.
[  846.604696][T15113] FAT-fs (loop7): Directory bread(block 64) failed
[  846.615630][T15113] FAT-fs (loop7): Directory bread(block 65) failed
[  846.622766][T15113] FAT-fs (loop7): Directory bread(block 66) failed
[  846.629332][T15113] FAT-fs (loop7): Directory bread(block 67) failed
[  846.646899][T15113] FAT-fs (loop7): Directory bread(block 68) failed
[  846.673631][T15131] loop8: detected capacity change from 0 to 4096
[  846.680764][T15113] FAT-fs (loop7): Directory bread(block 69) failed
[  846.690474][T15113] FAT-fs (loop7): Directory bread(block 70) failed
[  846.702956][T15113] FAT-fs (loop7): Directory bread(block 71) failed
[  846.712313][T15131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  846.715924][T15113] FAT-fs (loop7): Directory bread(block 72) failed
[  846.732401][T15113] FAT-fs (loop7): Directory bread(block 73) failed
[  846.802192][T15143] CUSE: unknown device info ""
[  846.807087][T15143] CUSE: unknown device info "`"
[  846.812108][T15143] CUSE: unknown device info ""
[  846.817486][T15143] CUSE: unknown device info "€"
[  846.822371][T15143] CUSE: DEVNAME unspecified
[  846.942995][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.075487][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13483'.
[  847.172462][T15175] netlink: 'syz.4.13486': attribute type 1 has an invalid length.
[  847.231730][T15182] netlink: 'syz.5.13489': attribute type 6 has an invalid length.
[  847.413575][T15204] loop8: detected capacity change from 0 to 8
[  847.420148][T15202] smc: net device bond0 applied user defined pnetid SYZ2
[  847.531821][T15215] Bluetooth: MGMT ver 1.23
[  847.558081][T15217] loop5: detected capacity change from 0 to 64
[  847.585894][T15224] loop9: detected capacity change from 0 to 7
[  847.611149][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.641755][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.686240][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.709011][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.715748][T15234] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  847.723135][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.736414][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.747950][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.756434][T15224] ldm_validate_partition_table(): Disk read failed.
[  847.763097][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.785678][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.793628][T15224] Buffer I/O error on dev loop9, logical block 0, async page read
[  847.892660][T15224] Dev loop9: unable to read RDB block 0
[  847.898473][T15224]  loop9: unable to read partition table
[  847.954639][T15253] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13509'.
[  847.965144][T15224] loop9: partition table beyond EOD, truncated
[  847.980718][T15224] loop_reread_partitions: partition scan of loop9 (þ被x½d|¤´à–‘) failed (rc=-5)
[  848.068292][T15258] loop6: detected capacity change from 0 to 7
[  848.113220][ T6042] Dev loop6: unable to read RDB block 7
[  848.123462][ T6042]  loop6: unable to read partition table
[  848.137567][T15270] debugfs: Bad value for 'gid'
[  848.142348][ T6042] loop6: partition table beyond EOD, truncated
[  848.175561][T15258] Dev loop6: unable to read RDB block 7
[  848.181197][T15270] debugfs: Bad value for 'gid'
[  848.227409][T15258]  loop6: unable to read partition table
[  848.234726][T15258] loop6: partition table beyond EOD, truncated
[  848.241225][T15258] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  848.279618][T15278] loop4: detected capacity change from 0 to 2048
[  848.343779][T15278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.385458][T15288] tipc: Started in network mode
[  848.390485][T15288] tipc: Node identity 2, cluster identity 4711
[  848.405749][T15288] tipc: Node number set to 2
[  848.439482][T15291] loop5: detected capacity change from 0 to 2048
[  848.485775][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  848.498085][T15291] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  848.518869][T15291] NILFS (loop5): mounting unchecked fs
[  848.532824][T15291] NILFS (loop5): recovery complete
[  848.539750][ T6042] udevd[6042]: incorrect nilfs2 checksum on /dev/loop5
[  848.584760][T15300] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  848.605123][T15275] loop8: detected capacity change from 0 to 32768
[  848.677568][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13522'.
[  849.071420][T15336] loop8: detected capacity change from 0 to 4096
[  849.104460][T15352] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  849.143531][T15336] syz.8.13530: attempt to access beyond end of device
[  849.143531][T15336] loop8: rw=524288, sector=2097320, nr_sectors = 8 limit=4096
[  849.174520][T15336] syz.8.13530: attempt to access beyond end of device
[  849.174520][T15336] loop8: rw=0, sector=2097320, nr_sectors = 8 limit=4096
[  849.209632][   T30] audit: type=1800 audit(2000000269.264:340): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.13530" name="file1" dev="loop8" ino=16 res=0 errno=0
[  849.360966][T15357] loop7: detected capacity change from 0 to 4096
[  849.462009][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13538'.
[  849.471386][T15377] loop5: detected capacity change from 0 to 128
[  849.492097][T15377] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  849.543644][T15377] ext4 filesystem being mounted at /1865/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  849.617831][T17466] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  849.623744][T15387] loop4: detected capacity change from 0 to 256
[  849.672638][T15387] FAT-fs (loop4): Directory bread(block 64) failed
[  849.725788][T15387] FAT-fs (loop4): Directory bread(block 65) failed
[  849.755784][T15387] FAT-fs (loop4): Directory bread(block 66) failed
[  849.795099][T15387] FAT-fs (loop4): Directory bread(block 67) failed
[  849.821182][T15387] FAT-fs (loop4): Directory bread(block 68) failed
[  849.842962][T15387] FAT-fs (loop4): Directory bread(block 69) failed
[  849.876397][T15387] FAT-fs (loop4): Directory bread(block 70) failed
[  849.912745][T15387] FAT-fs (loop4): Directory bread(block 71) failed
[  849.922181][T15387] FAT-fs (loop4): Directory bread(block 72) failed
[  849.943727][T15418] loop7: detected capacity change from 0 to 512
[  849.951292][T15387] FAT-fs (loop4): Directory bread(block 73) failed
[  850.010127][T15423] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  850.039344][T15418] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  850.061089][T15423] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  850.076857][T15418] EXT4-fs (loop7): invalid journal inode
[  850.093172][T15427] netlink: 88 bytes leftover after parsing attributes in process `syz.8.13551'.
[  850.108205][T15418] EXT4-fs (loop7): can't get journal size
[  850.134143][T15418] EXT4-fs (loop7): 1 truncate cleaned up
[  850.142379][T15435] loop5: detected capacity change from 0 to 64
[  850.149823][T15418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  850.298473][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  850.605951][T15466] loop7: detected capacity change from 0 to 4096
[  850.618353][T15438] loop4: detected capacity change from 0 to 32768
[  850.683236][T15488] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  850.694568][T15438] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  850.754440][T15490] loop5: detected capacity change from 0 to 2048
[  850.800237][T15490] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  850.817118][T15438] XFS (loop4): Ending clean mount
[  850.834333][T15438] XFS (loop4): Quotacheck needed: Please wait.
[  850.875372][ T5873] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  850.898441][T15438] XFS (loop4): Quotacheck: Done.
[  850.921096][T15490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  851.013881][ T5871] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  851.047833][ T5873] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  851.072875][ T5873] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  851.098539][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0
[  851.127833][ T5873] usb 9-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  851.152877][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.167103][T15521] loop7: detected capacity change from 0 to 256
[  851.178561][T15523] loop5: detected capacity change from 0 to 512
[  851.188349][ T5873] usb 9-1: config 0 descriptor??
[  851.196462][T15523] EXT4-fs: Ignoring removed orlov option
[  851.245541][T15523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  851.289064][T15523] EXT4-fs (loop5): orphan cleanup on readonly fs
[  851.309122][T15523] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13574: bg 0: block 248: padding at end of block bitmap is not set
[  851.352675][T15523] Quota error (device loop5): write_blk: dquota write failed
[  851.361410][T15523] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  851.372387][T15523] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.13574: Failed to acquire dquot type 1
[  851.392121][T15523] EXT4-fs (loop5): 1 truncate cleaned up
[  851.408299][T15523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  851.439822][T15523] EXT4-fs: Ignoring removed orlov option
[  851.447261][T15523] EXT4-fs: can't change dax mount option while remounting
[  851.478275][T17466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.553032][T15552] loop5: detected capacity change from 0 to 64
[  851.862531][    T9] usb 9-1: USB disconnect, device number 14
[  851.914609][T15547] loop4: detected capacity change from 0 to 32768
[  851.932961][T15547] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  851.953661][T15547] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  851.974672][T15597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  852.058360][T15547] XFS (loop4): Ending clean mount
[  852.144856][ T5871] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  852.543539][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  852.722929][T15633] loop4: detected capacity change from 0 to 32768
[  852.734300][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.747810][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  852.772323][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  852.790592][    T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  852.799852][T15633] JBD2: Ignoring recovery information on journal
[  852.806646][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.814945][    T9] usb 6-1: Product: syz
[  852.819388][    T9] usb 6-1: Manufacturer: syz
[  852.824217][    T9] usb 6-1: SerialNumber: syz
[  852.837507][    T9] usb 6-1: config 0 descriptor??
[  852.852039][    T9] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22
[  852.881338][T15633] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  852.942311][T15643] loop8: detected capacity change from 0 to 32768
[  852.953740][T15643] XFS: attr2 mount option is deprecated.
[  852.964476][T15643] XFS: attr2 mount option is deprecated.
[  852.988156][T15633] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  853.041240][T15643] XFS (loop8): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  853.043124][T15633] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  853.077783][T15633] OCFS2: File system is now read-only.
[  853.083411][T15633] (syz.4.13599,15633,1):ocfs2_search_chain:1852 ERROR: status = -30
[  853.091295][    T9] usb 6-1: USB disconnect, device number 29
[  853.091874][T15633] (syz.4.13599,15633,1):ocfs2_search_chain:1940 ERROR: status = -30
[  853.105592][T15633] (syz.4.13599,15633,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  853.114349][T15633] (syz.4.13599,15633,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  853.123308][T15633] (syz.4.13599,15633,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  853.132447][T15633] (syz.4.13599,15633,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  853.140853][T15633] (syz.4.13599,15633,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  853.149236][T15633] (syz.4.13599,15633,1):ocfs2_mknod:388 ERROR: status = -30
[  853.157001][T15633] (syz.4.13599,15633,1):ocfs2_mknod:505 ERROR: status = -30
[  853.193181][T15633] (syz.4.13599,15633,0):ocfs2_mkdir:661 ERROR: status = -30
[  853.234691][ T5339] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  853.332803][T15648] loop7: detected capacity change from 0 to 32768
[  853.335540][ T5871] ocfs2: Unmounting device (7,4) on (node local)
[  853.352659][T15648] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.13605 (15648)
[  853.409609][T15648] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  853.431364][T15648] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  853.531219][T15699] loop8: detected capacity change from 0 to 1024
[  853.590501][T15648] BTRFS info (device loop7): enabling ssd optimizations
[  853.601319][T15648] BTRFS info (device loop7): enabling free space tree
[  853.659708][ T1339] hfsplus: b-tree write err: -5, ino 4
[  853.826593][T31690] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  854.116535][T15747] loop5: detected capacity change from 0 to 256
[  854.212234][T15747] FAT-fs (loop5): Directory bread(block 64) failed
[  854.218910][T15747] FAT-fs (loop5): Directory bread(block 65) failed
[  854.292628][T15747] FAT-fs (loop5): Directory bread(block 66) failed
[  854.303361][T15747] FAT-fs (loop5): Directory bread(block 67) failed
[  854.322458][T15747] FAT-fs (loop5): Directory bread(block 68) failed
[  854.339088][T15747] FAT-fs (loop5): Directory bread(block 69) failed
[  854.349955][T15747] FAT-fs (loop5): Directory bread(block 70) failed
[  854.367944][T15747] FAT-fs (loop5): Directory bread(block 71) failed
[  854.407401][T15747] FAT-fs (loop5): Directory bread(block 72) failed
[  854.424250][T15747] FAT-fs (loop5): Directory bread(block 73) failed
[  854.458329][T15757] loop7: detected capacity change from 0 to 512
[  854.495262][T15757] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.13625: iget: bad extended attribute block 1
[  854.540046][T15734] loop8: detected capacity change from 0 to 40427
[  854.557203][T15757] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.13625: couldn't read orphan inode 15 (err -117)
[  854.574753][T15734] F2FS-fs (loop8): invalid crc value
[  854.581076][T15757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  854.655512][T15734] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  854.670058][T15761] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  854.685550][T15734] F2FS-fs (loop8): Start checkpoint disabled!
[  854.693288][T15734] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  854.744798][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.756755][T15734] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  854.806805][T15751] loop4: detected capacity change from 0 to 32768
[  854.844991][T15751] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  854.887154][T15751] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  854.977051][T15789] random: crng reseeded on system resumption
[  854.987601][ T5871] ocfs2: Unmounting device (7,4) on (node local)
[  854.994471][  T122] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  855.029441][T15791] nicvf0: renamed from team0
[  855.068874][T15791] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  855.183498][  T122] usb 6-1: Using ep0 maxpacket: 32
[  855.215748][  T122] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  855.226315][  T122] usb 6-1: config 0 has no interface number 0
[  855.239623][  T122] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  855.264972][  T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.301154][  T122] usb 6-1: Product: syz
[  855.305430][  T122] usb 6-1: Manufacturer: syz
[  855.344699][  T122] usb 6-1: SerialNumber: syz
[  855.370644][  T122] usb 6-1: config 0 descriptor??
[  855.388335][  T122] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  855.408025][  T122] usb 6-1: selecting invalid altsetting 1
[  855.422398][  T122] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  855.446688][  T122] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  855.483444][  T122] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  855.504759][  T122] usb 6-1: media controller created
[  855.540564][  T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  855.632732][  T122] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  855.639765][  T122] zl10353_read_register: readreg error (reg=127, ret==-71)
[  855.681134][  T122] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  855.742030][  T122] usb 6-1: USB disconnect, device number 30
[  855.883671][T15815] loop7: detected capacity change from 0 to 32768
[  855.909484][T15815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.13639 (15815)
[  855.939573][T15815] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  855.969526][T15815] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  856.005435][T15818] loop4: detected capacity change from 0 to 32768
[  856.154952][T15815] BTRFS info (device loop7): setting nodatasum
[  856.176711][T15880] netlink: 'syz.8.13647': attribute type 2 has an invalid length.
[  856.177735][T15815] BTRFS info (device loop7): setting nodatacow
[  856.220618][T15815] BTRFS info (device loop7): enabling free space tree
[  856.228435][T15815] BTRFS info (device loop7): enabling auto defrag
[  856.261765][T15815] BTRFS info (device loop7): max_inline set to 0
[  856.497144][  T122] IPVS: starting estimator thread 0...
[  856.552126][T31690] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  856.616935][T15896] IPVS: using max 38 ests per chain, 91200 per kthread
[  857.200044][T15932] loop8: detected capacity change from 0 to 4096
[  857.347771][T15949] netlink: zone id is out of range
[  857.353257][T15949] netlink: zone id is out of range
[  857.391141][T15949] netlink: zone id is out of range
[  857.403714][T15949] netlink: zone id is out of range
[  857.413981][T15949] netlink: zone id is out of range
[  857.420290][T15949] netlink: zone id is out of range
[  857.426162][T15949] netlink: zone id is out of range
[  857.433080][T15949] netlink: zone id is out of range
[  857.439147][T15949] netlink: zone id is out of range
[  857.479185][T15949] netlink: zone id is out of range
[  857.499608][T15904] loop4: detected capacity change from 0 to 40427
[  857.567605][T15904] F2FS-fs (loop4): invalid crc value
[  857.609375][T15961] sp0: Synchronizing with TNC
[  857.775495][T15904] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  857.814864][T15904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  857.941271][ T5871] syz-executor: attempt to access beyond end of device
[  857.941271][ T5871] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  857.975510][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  857.975539][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  857.975553][ T5871] Call Trace:
[  857.975561][ T5871]  <TASK>
[  857.975570][ T5871]  dump_stack_lvl+0x189/0x250
[  857.975601][ T5871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  857.975625][ T5871]  ? __pfx_queue_work_on+0x10/0x10
[  857.975644][ T5871]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  857.975666][ T5871]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  857.975694][ T5871]  f2fs_handle_critical_error+0x37c/0x540
[  857.975726][ T5871]  f2fs_write_end_io+0x886/0xb60
[  857.975754][ T5871]  __submit_merged_bio+0x27a/0x6a0
[  857.975785][ T5871]  __submit_merged_write_cond+0x255/0x530
[  857.975816][ T5871]  f2fs_write_data_pages+0x261d/0x3000
[  857.975865][ T5871]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.975919][ T5871]  ? __mod_zone_page_state+0xd7/0x140
[  857.975952][ T5871]  ? folios_put_refs+0x560/0x640
[  857.975980][ T5871]  ? __pfx_folios_put_refs+0x10/0x10
[  857.976001][ T5871]  ? rcu_is_watching+0x15/0xb0
[  857.976020][ T5871]  ? lru_add+0xa2f/0xd80
[  857.976040][ T5871]  ? lru_add+0x198/0xd80
[  857.976061][ T5871]  ? do_raw_spin_lock+0x121/0x290
[  857.976091][ T5871]  ? do_raw_spin_unlock+0x122/0x240
[  857.976115][ T5871]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  857.976146][ T5871]  do_writepages+0x32b/0x550
[  857.976174][ T5871]  ? rcu_is_watching+0x15/0xb0
[  857.976195][ T5871]  ? do_raw_spin_unlock+0x122/0x240
[  857.976221][ T5871]  filemap_fdatawrite+0x199/0x240
[  857.976249][ T5871]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  857.976296][ T5871]  ? rcu_is_watching+0x15/0xb0
[  857.976318][ T5871]  ? do_raw_spin_unlock+0x122/0x240
[  857.976344][ T5871]  f2fs_sync_dirty_inodes+0x31f/0x830
[  857.976377][ T5871]  f2fs_write_checkpoint+0x93e/0x2440
[  857.976414][ T5871]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  857.976465][ T5871]  kill_f2fs_super+0x2cc/0x6d0
[  857.976489][ T5871]  ? __pfx_kill_f2fs_super+0x10/0x10
[  857.976522][ T5871]  ? shrinker_free+0x2ce/0x3e0
[  857.976546][ T5871]  deactivate_locked_super+0xb9/0x130
[  857.976571][ T5871]  cleanup_mnt+0x425/0x4c0
[  857.976595][ T5871]  task_work_run+0x1d1/0x260
[  857.976623][ T5871]  ? __pfx_task_work_run+0x10/0x10
[  857.976648][ T5871]  ? __x64_sys_umount+0x122/0x160
[  857.976674][ T5871]  ? __pfx___x64_sys_umount+0x10/0x10
[  857.976702][ T5871]  ? rcu_is_watching+0x15/0xb0
[  857.976724][ T5871]  exit_to_user_mode_loop+0xec/0x130
[  857.976752][ T5871]  do_syscall_64+0x2bd/0x3b0
[  857.976779][ T5871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.976799][ T5871]  ? clear_bhb_loop+0x60/0xb0
[  857.976821][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.976840][ T5871] RIP: 0033:0x7f0f1458ff17
[  857.976859][ T5871] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  857.976876][ T5871] RSP: 002b:00007fffaa4b8948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  857.976898][ T5871] RAX: 0000000000000000 RBX: 00007f0f14611c05 RCX: 00007f0f1458ff17
[  857.976912][ T5871] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaa4b8a00
[  857.976925][ T5871] RBP: 00007fffaa4b8a00 R08: 0000000000000000 R09: 0000000000000000
[  857.976938][ T5871] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaa4b9a90
[  857.976952][ T5871] R13: 00007f0f14611c05 R14: 00000000000c97bc R15: 00007fffaa4b9ad0
[  857.976976][ T5871]  </TASK>
[  857.977182][ T5871] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  858.082852][T16002] netlink: 'syz.0.13686': attribute type 1 has an invalid length.
[  858.337672][T16002] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13686'.
[  858.346828][T16002] netlink: 'syz.0.13686': attribute type 1 has an invalid length.
[  858.360499][T16002] netlink: 'syz.0.13686': attribute type 2 has an invalid length.
[  858.384030][T16002] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13686'.
[  858.503627][T16017] loop7: detected capacity change from 0 to 512
[  858.522119][T16017] EXT4-fs: Ignoring removed i_version option
[  858.528170][T16017] EXT4-fs: Ignoring removed mblk_io_submit option
[  858.549770][T16017] EXT4-fs (loop7): Test dummy encryption mode enabled
[  858.583540][T16017] EXT4-fs error (device loop7): ext4_orphan_get:1392: comm syz.7.13690: inode #13: comm syz.7.13690: iget: illegal inode #
[  858.607386][T16017] EXT4-fs (loop7): Remounting filesystem read-only
[  858.614730][T16017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  858.776671][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.879658][T16046] loop7: detected capacity change from 0 to 512
[  858.880410][T16046] EXT4-fs: Ignoring removed nomblk_io_submit option
[  858.967820][T16046] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  859.010899][T16046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  859.026260][T16046] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  859.049465][T16046] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  859.059569][T16046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  859.111470][T16046] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  859.270766][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.375644][T16075] loop5: detected capacity change from 0 to 4096
[  859.417107][T16075] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  859.483279][T16075] ntfs3(loop5): Failed to load $Extend (-22).
[  859.502541][T16075] ntfs3(loop5): Failed to initialize $Extend.
[  859.609566][  T122] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[  859.720754][T16060] loop8: detected capacity change from 0 to 32768
[  859.790694][T16060] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  859.808414][  T122] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  859.843654][  T122] usb 8-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  859.874879][  T122] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.894416][T16060] XFS (loop8): Ending clean mount
[  859.907627][T16060] XFS (loop8): Quotacheck needed: Please wait.
[  859.915089][  T122] usb 8-1: config 0 descriptor??
[  859.939693][T16060] XFS (loop8): Quotacheck: Done.
[  859.977777][T16146] loop5: detected capacity change from 0 to 256
[  859.989449][T16146] exfat: Deprecated parameter 'namecase'
[  859.995672][T16146] exfat: Deprecated parameter 'utf8'
[  860.019245][T16146] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  860.032461][ T5339] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  860.308889][   T44] IPVS: starting estimator thread 0...
[  860.316651][T16166] loop5: detected capacity change from 0 to 4096
[  860.347840][T16166] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  860.364373][  T122] hid_parser_main: 73 callbacks suppressed
[  860.364395][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.381197][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.388349][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.397738][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.405433][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.412587][T16170] IPVS: using max 38 ests per chain, 91200 per kthread
[  860.420155][  T122] kye 0003:0458:0087.0003: unknown main item tag 0x0
[  860.435696][  T122] kye 0003:0458:0087.0003: hidraw0: USB HID vff.fc Device [HID 0458:0087] on usb-dummy_hcd.7-1/input0
[  860.580050][  T122] usb 8-1: USB disconnect, device number 23
[  860.713694][T16174] loop8: detected capacity change from 0 to 32768
[  860.739302][T16174] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  860.803506][ T5339] ocfs2: Unmounting device (7,8) on (node local)
[  860.856869][T16183] loop5: detected capacity change from 0 to 32768
[  860.899632][T16183] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  860.909135][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  860.937210][T16183] (syz.5.13728,16183,0):ocfs2_verify_group_and_input:430 ERROR: input chain exceeds the limit.
[  860.949179][T16183] (syz.5.13728,16183,1):ocfs2_group_add:511 ERROR: status = -22
[  860.983977][T17466] ocfs2: Unmounting device (7,5) on (node local)
[  861.326831][T16206] loop8: detected capacity change from 0 to 40427
[  861.346909][T16206] F2FS-fs: heap/no_heap options were deprecated
[  861.360589][T16206] F2FS-fs (loop8): invalid crc value
[  861.486048][T16230] loop7: detected capacity change from 0 to 2048
[  861.508073][T16206] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  861.515924][T16230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  861.529718][T16206] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  861.536629][T16230] [syz.7.13735/16230] FS: loop7 File: /file0/#1318 would truncate fibmap result
[  861.553704][T16211] loop5: detected capacity change from 0 to 32768
[  861.576115][T16211] XFS: noikeep mount option is deprecated.
[  861.595007][T16222] f2fs_ckpt-7:8: attempt to access beyond end of device
[  861.595007][T16222] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  861.617855][T16222] CPU: 0 UID: 0 PID: 16222 Comm: f2fs_ckpt-7:8 Not tainted syzkaller #0 PREEMPT(full) 
[  861.617894][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  861.617907][T16222] Call Trace:
[  861.617915][T16222]  <TASK>
[  861.617924][T16222]  dump_stack_lvl+0x189/0x250
[  861.617954][T16222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  861.617978][T16222]  ? __pfx_queue_work_on+0x10/0x10
[  861.617998][T16222]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  861.618021][T16222]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  861.618049][T16222]  f2fs_handle_critical_error+0x37c/0x540
[  861.618082][T16222]  f2fs_write_end_io+0x886/0xb60
[  861.618111][T16222]  __submit_merged_bio+0x27a/0x6a0
[  861.618142][T16222]  __submit_merged_write_cond+0x255/0x530
[  861.618173][T16222]  f2fs_write_data_pages+0x261d/0x3000
[  861.618221][T16222]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  861.618276][T16222]  ? __mod_zone_page_state+0xd7/0x140
[  861.618310][T16222]  ? folios_put_refs+0x560/0x640
[  861.618337][T16222]  ? __pfx_folios_put_refs+0x10/0x10
[  861.618358][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.618377][T16222]  ? lru_add+0xa2f/0xd80
[  861.618397][T16222]  ? lru_add+0x198/0xd80
[  861.618417][T16222]  ? folio_batch_move_lru+0x319/0x3a0
[  861.618448][T16222]  ? filemap_get_folios_tag+0xed/0x630
[  861.618467][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.618488][T16222]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  861.618518][T16222]  do_writepages+0x32b/0x550
[  861.618545][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.618567][T16222]  ? do_raw_spin_unlock+0x122/0x240
[  861.618594][T16222]  filemap_fdatawrite+0x199/0x240
[  861.618622][T16222]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  861.618669][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.618692][T16222]  ? do_raw_spin_unlock+0x122/0x240
[  861.618718][T16222]  f2fs_sync_dirty_inodes+0x31f/0x830
[  861.618746][T16222]  f2fs_write_checkpoint+0x93e/0x2440
[  861.618783][T16222]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  861.618824][T16222]  ? down_write+0x162/0x1f0
[  861.618850][T16222]  ? __pfx_down_write+0x10/0x10
[  861.618876][T16222]  ? do_raw_spin_lock+0x121/0x290
[  861.618911][T16222]  __checkpoint_and_complete_reqs+0xdf/0x3d0
[  861.618932][T16222]  ? __pfx___schedule+0x10/0x10
[  861.618951][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.618973][T16222]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  861.618994][T16222]  ? schedule+0x91/0x360
[  861.619027][T16222]  issue_checkpoint_thread+0xd9/0x260
[  861.619049][T16222]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  861.619071][T16222]  ? __pfx_autoremove_wake_function+0x10/0x10
[  861.619095][T16222]  ? __kthread_parkme+0x7b/0x200
[  861.619117][T16222]  ? __kthread_parkme+0x1a1/0x200
[  861.619142][T16222]  kthread+0x70e/0x8a0
[  861.619168][T16222]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  861.619188][T16222]  ? __pfx_kthread+0x10/0x10
[  861.619212][T16222]  ? rcu_is_watching+0x15/0xb0
[  861.619230][T16222]  ? __pfx_kthread+0x10/0x10
[  861.619254][T16222]  ret_from_fork+0x3f9/0x770
[  861.619276][T16222]  ? __pfx_ret_from_fork+0x10/0x10
[  861.619299][T16222]  ? __switch_to_asm+0x39/0x70
[  861.619325][T16222]  ? __switch_to_asm+0x33/0x70
[  861.619349][T16222]  ? __pfx_kthread+0x10/0x10
[  861.619373][T16222]  ret_from_fork_asm+0x1a/0x30
[  861.619409][T16222]  </TASK>
[  861.979634][T16222] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  861.995996][T16211] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  862.108841][T16211] XFS (loop5): Ending clean mount
[  862.117243][T16211] XFS (loop5): Quotacheck needed: Please wait.
[  862.135034][T16211] XFS (loop5): Quotacheck: Done.
[  862.969291][T17466] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  863.046223][T16268] net_ratelimit: 3 callbacks suppressed
[  863.046243][T16268] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  863.664762][T16326] loop5: detected capacity change from 0 to 256
[  863.712639][T16326] FAT-fs (loop5): Directory bread(block 64) failed
[  863.736505][T16326] FAT-fs (loop5): Directory bread(block 65) failed
[  863.758954][T16326] FAT-fs (loop5): Directory bread(block 66) failed
[  863.788237][T16326] FAT-fs (loop5): Directory bread(block 67) failed
[  863.818884][T16326] FAT-fs (loop5): Directory bread(block 68) failed
[  863.843481][T16326] FAT-fs (loop5): Directory bread(block 69) failed
[  863.850192][T16326] FAT-fs (loop5): Directory bread(block 70) failed
[  863.861206][T16326] FAT-fs (loop5): Directory bread(block 71) failed
[  863.876358][T16326] FAT-fs (loop5): Directory bread(block 72) failed
[  863.897780][T16326] FAT-fs (loop5): Directory bread(block 73) failed
[  864.051582][T16291] loop7: detected capacity change from 0 to 32768
[  864.230944][   T30] audit: type=1326 audit(2000000283.313:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16370 comm="syz.7.13766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f225f38ebe9 code=0x0
[  864.493095][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13772'.
[  864.736413][T16405] loop8: detected capacity change from 0 to 8192
[  864.826609][ T6054] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  864.838449][T16410] loop8: detected capacity change from 0 to 1024
[  864.919383][   T13] hfsplus: b-tree write err: -5, ino 4
[  865.008539][ T6054] usb 6-1: Using ep0 maxpacket: 8
[  865.023625][ T6054] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  865.033705][ T6054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.044317][ T6054] usb 6-1: Product: syz
[  865.048693][ T6054] usb 6-1: Manufacturer: syz
[  865.053818][ T6054] usb 6-1: SerialNumber: syz
[  865.060973][ T6054] usb 6-1: config 0 descriptor??
[  865.070175][ T6054] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  865.605768][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13792'.
[  865.626968][T16458] usb usb8: usbfs: process 16458 (syz.0.13793) did not claim interface 7 before use
[  865.744276][ T6054] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  865.754869][T16447] loop8: detected capacity change from 0 to 32768
[  865.776598][ T6054] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  865.800590][ T6054] usb 6-1: USB disconnect, device number 31
[  865.829230][T16447] JBD2: Ignoring recovery information on journal
[  865.932362][T16447] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  865.964574][T16447] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  865.997637][T16447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  866.007845][T16447] OCFS2: File system is now read-only.
[  866.013800][T16447] (syz.8.13789,16447,1):ocfs2_search_one_group:1738 ERROR: status = -30
[  866.022216][T16447] (syz.8.13789,16447,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[  866.033678][T16447] (syz.8.13789,16447,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  866.043174][T16447] (syz.8.13789,16447,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  866.052343][T16447] (syz.8.13789,16447,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  866.086661][T16447] (syz.8.13789,16447,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  866.136496][T16497] loop7: detected capacity change from 0 to 512
[  866.144870][T16447] (syz.8.13789,16447,1):ocfs2_mknod:388 ERROR: status = -30
[  866.152897][T16447] (syz.8.13789,16447,1):ocfs2_mknod:505 ERROR: status = -30
[  866.160211][T16447] (syz.8.13789,16447,1):ocfs2_mkdir:661 ERROR: status = -30
[  866.202386][T16497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.218047][ T5339] ocfs2: Unmounting device (7,8) on (node local)
[  866.229919][T16497] ext4 filesystem being mounted at /858/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  866.294807][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.433920][T16517] loop7: detected capacity change from 0 to 16
[  866.455367][T16517] erofs (device loop7): mounted with root inode @ nid 36.
[  866.487805][   T30] audit: type=1800 audit(2000000285.427:342): pid=16517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13817" name="file1" dev="loop7" ino=86 res=0 errno=0
[  866.764423][T16512] loop5: detected capacity change from 0 to 32768
[  866.782452][T16512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13807 (16512)
[  866.835524][T16512] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  866.851377][T16549] loop7: detected capacity change from 0 to 2048
[  866.857957][T16512] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  866.862508][T16549] EXT4-fs: Ignoring removed bh option
[  866.932724][T16512] BTRFS info (device loop5): setting nodatasum
[  866.938950][T16512] BTRFS info (device loop5): setting nodatacow
[  866.948205][T16549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  867.031877][T16512] BTRFS info (device loop5): enabling free space tree
[  867.038720][T16512] BTRFS info (device loop5): enabling auto defrag
[  867.082293][T16512] BTRFS info (device loop5): max_inline set to 0
[  867.090061][T16549] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  867.145882][T16578] loop8: detected capacity change from 0 to 512
[  867.218697][T16578] EXT4-fs (loop8): 1 orphan inode deleted
[  867.232019][   T13] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  867.241870][   T13] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1
[  867.285931][T16578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  867.331870][T16578] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  867.346435][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.399088][T17466] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  867.402265][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13826'.
[  867.455302][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.814512][T16637] netlink: 176 bytes leftover after parsing attributes in process `syz.5.13825'.
[  867.815034][T16638] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.13835'.
[  867.881910][T16642] loop7: detected capacity change from 0 to 1024
[  867.949913][ T1339] hfsplus: b-tree write err: -5, ino 8
[  868.093806][T16656] vlan2: entered allmulticast mode
[  868.100943][T16656] macsec0: entered allmulticast mode
[  868.106457][T16656] veth1_macvtap: entered allmulticast mode
[  868.737344][T16729] loop7: detected capacity change from 0 to 256
[  868.867811][ T6054] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  868.899841][    T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  869.042966][ T6054] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  869.062114][ T6054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.070183][ T6054] usb 6-1: Product: syz
[  869.078705][ T6054] usb 6-1: Manufacturer: syz
[  869.083760][ T6054] usb 6-1: SerialNumber: syz
[  869.092212][    T9] usb 9-1: Using ep0 maxpacket: 32
[  869.092526][ T6054] usb 6-1: config 0 descriptor??
[  869.104410][    T9] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  869.106501][ T6054] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  869.113766][    T9] usb 9-1: config 0 has no interface number 0
[  869.132364][    T9] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  869.152479][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.171442][    T9] usb 9-1: Product: syz
[  869.182230][    T9] usb 9-1: Manufacturer: syz
[  869.193221][    T9] usb 9-1: SerialNumber: syz
[  869.231817][    T9] usb 9-1: config 0 descriptor??
[  869.248541][    T9] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  869.493340][T16758] loop7: detected capacity change from 0 to 65536
[  869.508379][T16758] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  869.535494][T16758] XFS (loop7): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x20 xfs_inode_buf_verify
[  869.548612][T16758] XFS (loop7): Unmount and run xfs_repair
[  869.554419][T16758] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  869.561993][T16758] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  869.570997][T16758] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.579947][T16758] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.589106][T16758] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.598051][T16758] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.606986][T16758] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.616335][T16758] 00000060: 02 00 ff ff 2f cf 77 72 00 00 00 00 00 00 00 00  ..../.wr........
[  869.625228][T16758] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  869.634886][T16758] XFS (loop7): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x20 len 32 error 117
[  869.645651][T16758] XFS (loop7): Failed to read root inode 0x20, error 117
[  869.652829][T16758] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  869.685600][    T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  869.734699][    T9] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  869.897240][    C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  869.909889][    T9] usb 9-1: USB disconnect, device number 15
[  869.923909][ T6054] gspca_sunplus: reg_r err -71
[  869.928797][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  869.937174][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  869.965872][ T6054] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  869.971730][    T9] quatech2 9-1:0.51: device disconnected
[  869.987162][ T6054] usb 6-1: USB disconnect, device number 32
[  870.017041][T16808] loop7: detected capacity change from 0 to 1024
[  870.063178][ T3557] hfsplus: b-tree write err: -5, ino 4
[  870.218961][T16832] netlink: 'syz.7.13880': attribute type 28 has an invalid length.
[  870.227266][T16832] netlink: 'syz.7.13880': attribute type 25 has an invalid length.
[  870.363507][T16844] loop7: detected capacity change from 0 to 512
[  870.373515][T16844] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  870.402213][T16844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  870.437906][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.532614][T16856] overlayfs: workdir and upperdir must be separate subtrees
[  870.692762][T16875] loop5: detected capacity change from 0 to 64
[  870.716711][T16875] hfs: request for non-existent node -129 in B*Tree
[  870.723895][T16875] hfs: request for non-existent node -129 in B*Tree
[  870.866879][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13894'.
[  871.131947][T16868] loop8: detected capacity change from 0 to 32768
[  871.158409][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13900'.
[  871.181401][T16868] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  871.209113][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13900'.
[  871.239264][T16868] XFS (loop8): Ending clean mount
[  871.255097][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13900'.
[  871.303752][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13900'.
[  871.446626][ T5339] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  871.473191][T16949] netlink: 'syz.4.13912': attribute type 25 has an invalid length.
[  871.570601][T16956] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13911'.
[  871.643753][T16959] loop7: detected capacity change from 0 to 2048
[  871.755258][T16959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  872.032035][ T5099] Bluetooth: hci6: command tx timeout
[  872.042276][T17004] loop4: detected capacity change from 0 to 512
[  872.067724][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13929'.
[  872.178186][T17014] loop5: detected capacity change from 0 to 2048
[  872.252509][T17024] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  872.305336][T17028] loop4: detected capacity change from 0 to 64
[  872.339570][T17028] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  872.387608][   T30] audit: type=1800 audit(2000000290.946:343): pid=17028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13935" name="bus" dev="loop4" ino=2 res=0 errno=0
[  872.491988][T17044] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13938'.
[  872.686171][   T30] audit: type=1326 audit(2000000291.227:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1458ebe9 code=0x7ffc0000
[  872.703577][T17060] loop4: detected capacity change from 0 to 512
[  872.715931][T17053] loop7: detected capacity change from 0 to 4096
[  872.744572][   T30] audit: type=1326 audit(2000000291.227:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1458ebe9 code=0x7ffc0000
[  872.767486][T17060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  872.769566][   T30] audit: type=1326 audit(2000000291.227:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0f1458ebe9 code=0x7ffc0000
[  872.835773][   T30] audit: type=1326 audit(2000000291.227:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f1458ec23 code=0x7ffc0000
[  872.847706][T17060] EXT4-fs (loop4): 1 truncate cleaned up
[  872.894759][T17060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.962040][   T30] audit: type=1326 audit(2000000291.227:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f1458d69f code=0x7ffc0000
[  872.988084][   T30] audit: type=1326 audit(2000000291.227:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0f1458ec77 code=0x7ffc0000
[  873.033137][ T5871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.134113][   T30] audit: type=1326 audit(2000000291.227:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f1458d550 code=0x7ffc0000
[  873.196610][   T30] audit: type=1326 audit(2000000291.227:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f1458e7eb code=0x7ffc0000
[  873.220593][   T30] audit: type=1326 audit(2000000291.283:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17059 comm="syz.4.13944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f1458d84a code=0x7ffc0000
[  873.247021][T17095] loop7: detected capacity change from 0 to 1024
[  873.324754][T17102] netlink: 688 bytes leftover after parsing attributes in process `syz.5.13955'.
[  873.350097][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13955'.
[  873.369705][T17102] tipc: Started in network mode
[  873.381078][T17102] tipc: Node identity 917f, cluster identity 183
[  873.391612][ T1159] hfsplus: b-tree write err: -5, ino 4
[  873.406494][T17102] tipc: Node number set to 37247
[  873.417416][T17102] tipc: Cannot configure node identity twice
[  873.514560][T17078] loop8: detected capacity change from 0 to 32768
[  873.566630][T17078] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  873.627325][T17078] XFS (loop8): Ending clean mount
[  873.638093][T17078] XFS (loop8): Quotacheck needed: Please wait.
[  873.662162][T17078] XFS (loop8): Quotacheck: Done.
[  873.721661][ T5339] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  874.041089][T17165] netlink: 'syz.8.13970': attribute type 1 has an invalid length.
[  874.174972][T17179] ALSA: mixer_oss: invalid index -324355931
[  874.403435][T17201] loop7: detected capacity change from 0 to 1024
[  874.454813][T17201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  874.501296][T17214] vlan2: entered promiscuous mode
[  874.619269][    T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  874.637098][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.835303][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  874.848373][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  874.862836][    T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  874.876696][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.889570][    T9] usb 9-1: config 0 descriptor??
[  874.969801][T17258] loop7: detected capacity change from 0 to 1024
[  874.983280][T17258] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  875.008054][T17258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  875.025022][T17258] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.13995: missing EA_INODE flag
[  875.037889][T17258] EXT4-fs (loop7): Remounting filesystem read-only
[  875.064025][T31690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.078792][ T6054] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  875.241106][ T6054] usb 6-1: Using ep0 maxpacket: 16
[  875.247549][ T6054] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.259007][ T6054] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.270744][ T6054] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  875.287864][ T6054] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  875.301678][ T6054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.322191][ T6054] usb 6-1: config 0 descriptor??
[  875.333429][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.362914][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.389579][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.389608][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.389633][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.389658][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.389684][    T9] logitech 0003:046D:C29C.0004: unknown main item tag 0x0
[  875.398469][    T9] logitech 0003:046D:C29C.0004: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0
[  875.545947][    T9] logitech 0003:046D:C29C.0004: no inputs found
[  875.590982][    T9] usb 9-1: USB disconnect, device number 16
[  875.769035][ T6054] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max
[  875.791879][ T6054] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  875.817842][ T6054] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  875.834913][ T6054] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  875.861502][ T6054] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input84
[  875.920952][T17349] loop4: detected capacity change from 0 to 256
[  875.931951][T17349] exfat: Deprecated parameter 'utf8'
[  875.939616][T17349] exfat: Deprecated parameter 'utf8'
[  875.992791][T17349] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011fde, chksum : 0x26f39415, utbl_chksum : 0xe619d30d)
[  876.008401][ T6054] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  876.043281][ T6054] usb 6-1: USB disconnect, device number 33
[  876.178500][T17376] fido_id[17376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  876.610012][T17384] loop7: detected capacity change from 0 to 32768
[  876.629887][T17384] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  876.648992][T17384] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  876.769901][T31690] ocfs2: Unmounting device (7,7) on (node local)
[  876.792213][T17453] loop5: detected capacity change from 0 to 64
[  876.988612][T17467] loop5: detected capacity change from 0 to 512
[  877.027456][T17467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  877.046396][T17467] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.14030: invalid block
[  877.059823][T17467] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.14030: invalid indirect mapped block 4294967295 (level 1)
[  877.089529][T17467] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.14030: invalid indirect mapped block 4294967295 (level 1)
[  877.143414][T17467] EXT4-fs (loop5): 2 truncates cleaned up
[  877.150201][T17467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  877.276991][T17466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.349199][T17485] loop8: detected capacity change from 0 to 512
[  877.380731][T17485] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  877.455778][T17485] EXT4-fs (loop8): 1 truncate cleaned up
[  877.462373][T17485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  877.562185][T17464] loop7: detected capacity change from 0 to 32768
[  877.589751][T17464] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  877.602774][T17464] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  877.611576][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  877.637301][T17464] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  877.700330][T17502] hugetlbfs: Bad value 'k' for mount option 'size'
[  877.700330][T17502] 
[  877.724750][  T122] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  877.732358][  T122] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  877.821604][  T122] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms
[  877.848108][  T122] gfs2: fsid=syz:syz.0: jid=0: Done
[  877.853747][T17464] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  877.960918][T17464] gfs2: fsid=syz:syz.0: found 1 quota changes
[  877.986336][T17486] loop5: detected capacity change from 0 to 32768
[  878.013522][T17486] 
[  878.013522][T17486]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  878.013522][T17486] 
[  878.044951][T17486] JFS: metapage_get_blocks failed
[  878.052793][T17486] ERROR: (device loop5): release_metapage: metapage_write_one() failed
[  878.052793][T17486] 
[  878.073801][T17486] ERROR: (device loop5): diWrite: ixpxd invalid
[  878.073801][T17486] 
[  878.082323][T17486] ERROR: (device loop5): txCommit: 
[  878.082323][T17486] 
[  878.096412][T31690] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  878.111686][T17486] ERROR: (device loop5): diWrite: ixpxd invalid
[  878.111686][T17486] 
[  878.120254][T31690] CPU: 0 UID: 0 PID: 31690 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  878.120282][T31690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  878.120295][T31690] Call Trace:
[  878.120304][T31690]  <TASK>
[  878.120313][T31690]  dump_stack_lvl+0x189/0x250
[  878.120345][T31690]  ? __pfx_dump_stack_lvl+0x10/0x10
[  878.120370][T31690]  ? __pfx__printk+0x10/0x10
[  878.120397][T31690]  ? rcu_is_watching+0x15/0xb0
[  878.120422][T31690]  ? do_raw_spin_unlock+0x122/0x240
[  878.120451][T31690]  gfs2_assert_warn_i+0x194/0x2c0
[  878.120484][T31690]  gfs2_qd_dispose+0x4aa/0x5b0
[  878.120511][T31690]  gfs2_quota_cleanup+0x42b/0x6f0
[  878.120537][T31690]  ? __pfx_gfs2_quota_cleanup+0x10/0x10
[  878.120559][T31690]  ? __pfx___might_resched+0x10/0x10
[  878.120580][T31690]  ? __pfx_gfs2_log_flush+0x10/0x10
[  878.120610][T31690]  ? gfs2_quota_sync+0x443/0x460
[  878.120637][T31690]  gfs2_make_fs_ro+0x27a/0x300
[  878.120671][T31690]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  878.120701][T31690]  ? do_raw_spin_lock+0x121/0x290
[  878.120727][T31690]  ? rcu_is_watching+0x15/0xb0
[  878.120750][T31690]  ? do_raw_spin_unlock+0x122/0x240
[  878.120779][T31690]  gfs2_put_super+0x224/0x950
[  878.120802][T31690]  ? __pfx_gfs2_put_super+0x10/0x10
[  878.120821][T31690]  generic_shutdown_super+0x135/0x2c0
[  878.120849][T31690]  kill_block_super+0x44/0x90
[  878.120878][T31690]  deactivate_locked_super+0xb9/0x130
[  878.120904][T31690]  cleanup_mnt+0x425/0x4c0
[  878.120930][T31690]  task_work_run+0x1d1/0x260
[  878.120961][T31690]  ? __pfx_task_work_run+0x10/0x10
[  878.120988][T31690]  ? __x64_sys_umount+0x122/0x160
[  878.121016][T31690]  ? __pfx___x64_sys_umount+0x10/0x10
[  878.121046][T31690]  ? rcu_is_watching+0x15/0xb0
[  878.121067][T31690]  exit_to_user_mode_loop+0xec/0x130
[  878.121099][T31690]  do_syscall_64+0x2bd/0x3b0
[  878.121127][T31690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.121148][T31690]  ? clear_bhb_loop+0x60/0xb0
[  878.121182][T31690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.121203][T31690] RIP: 0033:0x7f225f38ff17
[  878.121222][T31690] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  878.121254][T31690] RSP: 002b:00007fff550a5518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  878.121276][T31690] RAX: 0000000000000000 RBX: 00007f225f411c05 RCX: 00007f225f38ff17
[  878.121291][T31690] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff550a55d0
[  878.121318][T31690] RBP: 00007fff550a55d0 R08: 0000000000000000 R09: 0000000000000000
[  878.121330][T31690] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff550a6660
[  878.121344][T31690] R13: 00007f225f411c05 R14: 00000000000ce13a R15: 00007fff550a66a0
[  878.121365][T31690]  </TASK>
[  878.121423][T17486] ERROR: (device loop5): txCommit: 
[  878.121423][T17486] 
[  878.424633][T17466] 
[  878.424633][T17466]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  878.424633][T17466] 
[  878.452403][T17466] 
[  878.452403][T17466]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  878.452403][T17466] 
[  878.913785][T17562] loop8: detected capacity change from 0 to 2048
[  878.947021][T17562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  879.028369][T17562] ext4 filesystem being mounted at /621/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  879.169182][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.254926][T17589] loop5: detected capacity change from 0 to 256
[  879.279197][T17589] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  879.380368][T17605] netlink: 'syz.0.14065': attribute type 3 has an invalid length.
[  879.405597][T17606] netlink: 'syz.7.14066': attribute type 27 has an invalid length.
[  879.504777][  T122] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  879.677270][  T122] usb 9-1: Using ep0 maxpacket: 32
[  879.696617][  T122] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  879.726317][  T122] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  879.752703][  T122] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  879.774573][  T122] usb 9-1: config 1 has no interface number 0
[  879.780712][  T122] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  879.814761][  T122] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  879.840634][T17655] loop5: detected capacity change from 0 to 1024
[  879.848319][  T122] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  879.860834][  T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.876301][  T122] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  879.883084][   T76] hfsplus: b-tree write err: -5, ino 4
[  879.895663][T17655] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  880.093506][  T122] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  880.406517][T17674] loop5: detected capacity change from 0 to 32768
[  880.490235][T17684] __nla_validate_parse: 4 callbacks suppressed
[  880.490255][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14085'.
[  880.551548][  T122] usb 9-1: USB disconnect, device number 17
[  880.563273][  T122] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  880.965718][T17736] loop7: detected capacity change from 0 to 1024
[  880.983438][T17739] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  881.065524][  T122] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  881.094555][T17749] loop7: detected capacity change from 0 to 128
[  881.104363][T17750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14102'.
[  881.109467][T17749] EXT4-fs (loop7): Test dummy encryption mode enabled
[  881.125846][T17743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14102'.
[  881.164799][T17749] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  881.212153][T17749] ext4 filesystem being mounted at /942/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  881.257443][  T122] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  881.264665][T17771] loop8: detected capacity change from 0 to 512
[  881.268564][  T122] usb 6-1: config 0 has no interface number 0
[  881.304447][T17771] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.14108: corrupted in-inode xattr: invalid ea_ino
[  881.325472][T17771] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.14108: couldn't read orphan inode 15 (err -117)
[  881.328123][  T122] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  881.339201][T17771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  881.376765][T17771] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 3: comm syz.8.14108: lblock 0 mapped to illegal pblock 3 (length 1)
[  881.393948][T31690] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  881.395256][T17771] EXT4-fs warning (device loop8): ext4_empty_dir:3080: inode #2: lblock 0: comm syz.8.14108: error -117 reading directory block
[  881.409238][  T122] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  881.447336][ T5339] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.454028][  T122] usb 6-1: config 0 interface 255 has no altsetting 0
[  881.467063][  T122] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  881.519543][  T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.558579][  T122] usb 6-1: config 0 descriptor??
[  881.570014][  T122] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  881.768819][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  881.768838][   T30] audit: type=1326 audit(2000000299.720:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  881.817423][   T30] audit: type=1326 audit(2000000299.758:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  881.842988][   T30] audit: type=1326 audit(2000000299.758:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  881.849406][  T122] usb 6-1: USB disconnect, device number 34
[  881.928873][   T30] audit: type=1326 audit(2000000299.758:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  881.952664][   T30] audit: type=1326 audit(2000000299.758:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  881.989807][   T30] audit: type=1326 audit(2000000299.758:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  882.001135][   T31] INFO: task syz.2.10508:3950 blocked for more than 143 seconds.
[  882.026051][   T30] audit: type=1326 audit(2000000299.758:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  882.058105][   T30] audit: type=1326 audit(2000000299.758:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.0.14117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492058ebe9 code=0x7ffc0000
[  882.088728][   T31]       Not tainted syzkaller #0
[  882.094099][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  882.096098][T17789] loop8: detected capacity change from 0 to 32768
[  882.112284][   T31] task:syz.2.10508     state:D stack:27480 pid:3950  tgid:3947  ppid:5866   task_flags:0x400040 flags:0x00004004
[  882.125522][   T31] Call Trace:
[  882.128899][   T31]  <TASK>
[  882.131926][   T31]  __schedule+0x1798/0x4cc0
[  882.137150][   T31]  ? stack_depot_save_flags+0x41b/0x860
[  882.142800][   T31]  ? __pfx___schedule+0x10/0x10
[  882.148094][   T31]  ? schedule+0x91/0x360
[  882.152430][   T31]  ? rcu_is_watching+0x15/0xb0
[  882.157829][   T31]  ? lock_release+0x4b/0x3e0
[  882.162539][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  882.168873][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  882.175354][   T31]  schedule+0x165/0x360
[  882.180056][   T31]  schedule_preempt_disabled+0x13/0x30
[  882.185652][   T31]  __mutex_lock+0x7e6/0x1350
[  882.190733][   T31]  ? __mutex_lock+0x5bb/0x1350
[  882.195600][   T31]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  882.206441][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  882.215785][T17789] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  882.221270][   T31]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  882.231170][   T31]  ? __nlmsg_put+0xef/0x1b0
[  882.235721][   T31]  ? genlmsg_put+0x137/0x2e0
[  882.239797][T17789] XFS (loop8): Ending clean mount
[  882.240369][   T31]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  882.251077][   T31]  ? lock_release+0x4b/0x3e0
[  882.255852][   T31]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  882.262211][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  882.268114][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  882.277399][   T31]  ? stack_trace_save+0x9c/0xe0
[  882.282362][   T31]  genl_rcv_msg+0x60e/0x790
[  882.287002][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  882.292102][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  882.299355][   T31]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  882.305592][   T31]  ? __netlink_lookup+0xbd/0x810
[  882.310735][   T31]  ? rcu_is_watching+0x15/0xb0
[  882.315531][   T31]  netlink_rcv_skb+0x205/0x470
[  882.320477][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  882.325541][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  882.330977][   T31]  ? lock_release+0x4b/0x3e0
[  882.335609][   T31]  ? down_read+0x1ad/0x2e0
[  882.340306][   T31]  genl_rcv+0x28/0x40
[  882.344332][   T31]  netlink_unicast+0x82f/0x9e0
[  882.349189][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  882.354490][   T31]  ? netlink_sendmsg+0x642/0xb30
[  882.359477][   T31]  ? skb_put+0x11b/0x210
[  882.363756][   T31]  netlink_sendmsg+0x805/0xb30
[  882.368541][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  882.374240][   T31]  ? futex_unqueue+0x22/0x240
[  882.378967][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  882.383973][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  882.389281][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  882.394608][   T31]  __sock_sendmsg+0x21c/0x270
[  882.399309][   T31]  ____sys_sendmsg+0x505/0x830
[  882.404160][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  882.409480][   T31]  ? import_iovec+0x74/0xa0
[  882.414079][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  882.418989][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  882.424273][   T31]  ? futex_wait+0x285/0x360
[  882.428830][   T31]  ? __fget_files+0x2a/0x420
[  882.433455][   T31]  ? __fget_files+0x3a0/0x420
[  882.438209][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  882.443170][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  882.448773][   T31]  ? rcu_is_watching+0x15/0xb0
[  882.453573][   T31]  ? rcu_is_watching+0x15/0xb0
[  882.458437][   T31]  do_syscall_64+0xfa/0x3b0
[  882.462965][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.471151][   T31]  ? clear_bhb_loop+0x60/0xb0
[  882.475873][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.481844][   T31] RIP: 0033:0x7f77a498ebe9
[  882.486284][   T31] RSP: 002b:00007f77a571d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  882.494993][   T31] RAX: ffffffffffffffda RBX: 00007f77a4bb5fa0 RCX: 00007f77a498ebe9
[  882.503108][   T31] RDX: 0000000000000014 RSI: 0000200000000180 RDI: 0000000000000003
[  882.512550][   T31] RBP: 00007f77a4a11e19 R08: 0000000000000000 R09: 0000000000000000
[  882.520583][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  882.528753][   T31] R13: 00007f77a4bb6038 R14: 00007f77a4bb5fa0 R15: 00007ffc0c4e23d8
[  882.536870][   T31]  </TASK>
[  882.539955][   T31] INFO: lockdep is turned off.
[  882.544988][   T31] NMI backtrace for cpu 0
[  882.545004][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  882.545027][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  882.545039][   T31] Call Trace:
[  882.545045][   T31]  <TASK>
[  882.545050][   T31]  dump_stack_lvl+0x189/0x250
[  882.545072][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  882.545087][   T31]  ? __pfx__printk+0x10/0x10
[  882.545110][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  882.545124][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  882.545142][   T31]  ? __pfx__printk+0x10/0x10
[  882.545170][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  882.545203][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  882.545221][   T31]  watchdog+0xf60/0xfa0
[  882.545241][   T31]  ? watchdog+0x1e2/0xfa0
[  882.545261][   T31]  kthread+0x70e/0x8a0
[  882.545279][   T31]  ? __pfx_watchdog+0x10/0x10
[  882.545297][   T31]  ? __pfx_kthread+0x10/0x10
[  882.545313][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  882.545327][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  882.545341][   T31]  ? __pfx_kthread+0x10/0x10
[  882.545357][   T31]  ret_from_fork+0x3f9/0x770
[  882.545372][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  882.545387][   T31]  ? __switch_to_asm+0x39/0x70
[  882.545404][   T31]  ? __switch_to_asm+0x33/0x70
[  882.545420][   T31]  ? __pfx_kthread+0x10/0x10
[  882.545437][   T31]  ret_from_fork_asm+0x1a/0x30
[  882.545459][   T31]  </TASK>
[  882.545468][   T31] Sending NMI from CPU 0 to CPUs 1:
[  882.692297][    C1] NMI backtrace for cpu 1
[  882.692314][    C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  882.692345][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  882.692357][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  882.692382][    C1] RIP: 0010:__asan_memset+0x26/0x50
[  882.692404][    C1] Code: 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 7e e4 ff ff 84 c0 74 11 <4c> 89 f7 89 ee 48 89 da 5b 41 5e 5d e9 a9 07 5a 09 31 c0 5b 41 5e
[  882.692419][    C1] RSP: 0018:ffffc90000ad7418 EFLAGS: 00000202
[  882.692433][    C1] RAX: 1ffff9200015ae01 RBX: 0000000000000010 RCX: ffffffff8172cd88
[  882.692445][    C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000ad7558
[  882.692456][    C1] RBP: 0000000000000000 R08: ffffc90000ad7567 R09: 1ffff9200015aeac
[  882.692467][    C1] R10: dffffc0000000000 R11: fffff5200015aead R12: ffffc90000ad7da0
[  882.692480][    C1] R13: ffffc90000ad7558 R14: ffffc90000ad7558 R15: ffffc90000ad7550
[  882.692493][    C1] FS:  0000000000000000(0000) GS:ffff888125b08000(0000) knlGS:0000000000000000
[  882.692506][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  882.692517][    C1] CR2: 0000001b3331fff8 CR3: 000000002405a000 CR4: 00000000003526f0
[  882.692532][    C1] Call Trace:
[  882.692538][    C1]  <TASK>
[  882.692547][    C1]  unwind_next_frame+0xc98/0x2390
[  882.692569][    C1]  ? unwind_next_frame+0xa5/0x2390
[  882.692587][    C1]  ? worker_thread+0x8a0/0xda0
[  882.692605][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  882.692626][    C1]  arch_stack_walk+0x11c/0x150
[  882.692648][    C1]  ? kthread+0x70e/0x8a0
[  882.692671][    C1]  stack_trace_save+0x9c/0xe0
[  882.692689][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  882.692708][    C1]  ? chacha_block_generic+0x53/0xc80
[  882.692732][    C1]  kasan_save_track+0x3e/0x80
[  882.692752][    C1]  ? kasan_save_track+0x3e/0x80
[  882.692771][    C1]  ? kasan_save_free_info+0x46/0x50
[  882.692787][    C1]  ? __kasan_slab_free+0x5b/0x80
[  882.692808][    C1]  ? kfree+0x18e/0x440
[  882.692827][    C1]  ? skb_release_data+0x62d/0x7c0
[  882.692849][    C1]  ? consume_skb+0x9e/0xf0
[  882.692869][    C1]  ? nsim_dev_trap_report_work+0x7cf/0xb80
[  882.692888][    C1]  ? process_scheduled_works+0xae1/0x17b0
[  882.692908][    C1]  ? worker_thread+0x8a0/0xda0
[  882.692958][    C1]  kasan_save_free_info+0x46/0x50
[  882.692976][    C1]  __kasan_slab_free+0x5b/0x80
[  882.692998][    C1]  ? skb_release_data+0x62d/0x7c0
[  882.693021][    C1]  kfree+0x18e/0x440
[  882.693044][    C1]  skb_release_data+0x62d/0x7c0
[  882.693072][    C1]  consume_skb+0x9e/0xf0
[  882.693094][    C1]  nsim_dev_trap_report_work+0x7cf/0xb80
[  882.693121][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  882.693139][    C1]  process_scheduled_works+0xae1/0x17b0
[  882.693167][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  882.693191][    C1]  worker_thread+0x8a0/0xda0
[  882.693219][    C1]  kthread+0x70e/0x8a0
[  882.693241][    C1]  ? __pfx_worker_thread+0x10/0x10
[  882.693259][    C1]  ? __pfx_kthread+0x10/0x10
[  882.693280][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  882.693299][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  882.693318][    C1]  ? __pfx_kthread+0x10/0x10
[  882.693339][    C1]  ret_from_fork+0x3f9/0x770
[  882.693358][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  882.693378][    C1]  ? __switch_to_asm+0x39/0x70
[  882.693401][    C1]  ? __switch_to_asm+0x33/0x70
[  882.693423][    C1]  ? __pfx_kthread+0x10/0x10
[  882.693444][    C1]  ret_from_fork_asm+0x1a/0x30
[  882.693474][    C1]  </TASK>
[  882.694469][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  883.041915][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  883.051025][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  883.061086][   T31] Call Trace:
[  883.064369][   T31]  <TASK>
[  883.067299][   T31]  dump_stack_lvl+0x99/0x250
[  883.071951][   T31]  ? __asan_memcpy+0x40/0x70
[  883.076548][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  883.081755][   T31]  ? __pfx__printk+0x10/0x10
[  883.086363][   T31]  vpanic+0x281/0x750
[  883.090347][   T31]  ? __pfx_vpanic+0x10/0x10
[  883.094857][   T31]  ? rcu_is_watching+0x15/0xb0
[  883.099623][   T31]  ? preempt_schedule+0xae/0xc0
[  883.104482][   T31]  ? preempt_schedule_common+0x83/0xd0
[  883.109956][   T31]  panic+0xb9/0xc0
[  883.113681][   T31]  ? __pfx_panic+0x10/0x10
[  883.118101][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  883.123493][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  883.129651][   T31]  watchdog+0xf9f/0xfa0
[  883.133835][   T31]  ? watchdog+0x1e2/0xfa0
[  883.138175][   T31]  kthread+0x70e/0x8a0
[  883.142245][   T31]  ? __pfx_watchdog+0x10/0x10
[  883.146929][   T31]  ? __pfx_kthread+0x10/0x10
[  883.151522][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  883.156722][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  883.161916][   T31]  ? __pfx_kthread+0x10/0x10
[  883.166524][   T31]  ret_from_fork+0x3f9/0x770
[  883.171118][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  883.176236][   T31]  ? __switch_to_asm+0x39/0x70
[  883.181010][   T31]  ? __switch_to_asm+0x33/0x70
[  883.185780][   T31]  ? __pfx_kthread+0x10/0x10
[  883.190385][   T31]  ret_from_fork_asm+0x1a/0x30
[  883.195175][   T31]  </TASK>
[  883.198608][   T31] Kernel Offset: disabled
[  883.202935][   T31] Rebooting in 86400 seconds..