last executing test programs:

17.580354706s ago: executing program 3 (id=454):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x4, 0xf82, &(0x7f0000003080)="$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")
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0xb4f, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0)
socket$inet6(0xa, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getegid()
write(0xffffffffffffffff, &(0x7f0000000200)='tag ', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4004)
sendmsg$nl_xfrm(r2, 0x0, 0x2c000010)

16.416087828s ago: executing program 2 (id=457):
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$eJzs3T9rA2UYAPDnkjSNOqSIiyJ4oINTaV1dGqWC2EmJoA4abAuShEILASsYO/UTOPo9/AguLn4DwVVwa4fKyeXumtSmf2hjCvb3m57ee8/zPrkX0inPffX6sL97kMTJ2e/RaiVR24qtOE9iLWpR+SEaAQD8f5xnWfyVPSSzUVt8NwDAMhT//wtP3QsAsByffPb5R52dne2P07QVr7ZPR90kIoano26x3tmPb2IQe7ER7biIyC4V8Qcf7mxHI82txVvD8aibZw6//LWs3/kzYpK/Ge1Ym5+/mRYu81+sukujs79S/dGOV+bnv/Pv/BiOo9uMt9+c6X892vHb13EQg9iNPHea//1mmr6f/Xj23Rf5Nnl+Uovu6uS+qay+pCMBAAAAAAAAAAAAAAAAAAAAAOAZWE/TpBjfM5nfk1+azM8ZdesXk/X1tDI732dczQdKqkLFfKAsyhE94yx+qubrbKRpmpU3TvMb8VrDiwUAAAAAAAAAAAAAAAAAAAAgd/Ttcb83GOwdLiSopgFUP+t/aJ2tmStvxHG/V7+54Or995qdNpD3euvN0WjEgh7LXcELeT8Lr7w6PdxPowiqg1noXi+/VxQ97vfScql6yP1ectderergfp5dasYjG2uWHWRXz7R12erVrOaCnkbzpblLf2dZdr867/5RnFF5JZmM2Ljf7itlMPcD5kHr+ln8cnPBG78y6o/+0gEAAAAAAAAAAAAAAAAAAOaa/uh3zuLJram1/6wpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiy6fv/q6AVEVevXAvGZfJt95RBMw6PnvgjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Az8EwAA//9I2EsX")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

14.711961136s ago: executing program 2 (id=462):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x282, &(0x7f0000000240)="$eJzs3cFqE18Ux/HfneTff2pLHduKIC6kWnAlbd2IG0H6Bm5cidpEKIYKWkHdWF2LD+DeV/AhXIkbN4I7V7pwI9lF7pkbMkkzMzEkThK/H8g4ydwzc27uxDtnQokA/LNu7H59d+Wbfzipooqka1IkqSZVJZ3WmdqTg8P9w2ajnrejikX4h1MS6Y612TtoDAr1cRYRxP5ZVcvp1zAZtS9lZ4BpYJ/+xI/065H0f/h02vZaKdmN31HZCZTMtdTSU62UnQcAoFxh/o/CPL8crt+jSNoM037v/D/jE2ir7ARKlpr/rcpqOz++J21Tt96zEs5vjzpV4ijHWlByZlV6EiiqKi2XaPH+frNxee9hsx7pla4HqWbrtqwnp25HOtuXx3e9MaA2zTF635esD//5Puxk5L823iMWcx/cR3fbxXqruo3/Tz/GbeeHyUYq7hupJP+t7D1aL+OkVUYvT/lF9Ww4QpDby4r60khbCPvsuUEQF+VpUat9UUnvtgui1gZG7RRErfdHdc/m7MhJ+Rz+dW/cLbeh73qv3dT1f+Tf7U0N88n0baxlODNy+1O1lrHNJ+68vXR0bmDLaKRuYTSvdU9XtfL42fMHd5vNxiNWRlh5Ed7MvDaLkqYg1Z6VzkkwLfnM7Yp/kyd1iF95bapDnJn5K6X8r4S/rDvofxjIdzPzwl93uaT+S9UrW1Yi+UWcc53eLtp5ao/bGbXBqi1PZFdwPZzdeliSy/oqYtia68Il6eIwR0zEIc854Xb1SXe4/w8AAAAAAAAAAAAAAAAAADBrxvdnCTVlbSq7jwAAAAAAAAAAAAAAAAAAAAAAzLqp+/3fm0qe8fu/wMT9DgAA//9l7XXM")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e24}, 0x6e)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

12.75959369s ago: executing program 3 (id=464):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

11.062718913s ago: executing program 5 (id=466):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
stat(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)

10.588402059s ago: executing program 1 (id=467):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9)

10.301906772s ago: executing program 2 (id=468):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

9.569431817s ago: executing program 0 (id=469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
creat(0x0, 0xecf86c37d53049cc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
execve(0x0, 0x0, &(0x7f0000000800))

9.429206374s ago: executing program 4 (id=470):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000500)={0x11, 0x3, 0x2}, 0x14)
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

9.202354245s ago: executing program 1 (id=471):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYRES32=r4], 0xb)

9.163820082s ago: executing program 4 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
r4 = syz_open_procfs(0x0, 0x0)
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a00010001000000000000008100000000ffff000000000014000200fc000000000000000000000000000001"], 0x30}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
socket$kcm(0x29, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

8.956645573s ago: executing program 5 (id=473):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

8.137021381s ago: executing program 0 (id=474):
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

7.308230106s ago: executing program 5 (id=475):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x7ff, 0xe, 0xffffffff, 0x10004000008, 0xba4, 0xfffbbfffffffffff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x55e, &(0x7f0000000f40)="$eJzs3c1vHGcZAPBn1l7HSZzaBQ4QqaWiRUkF2Y1r2locSpEQPVVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQTM7G4f1bLxJN15//H7SZN53vp7n3Xhm5+PVbACn1nMR8XpEfJim6YsRMVtMrxRDdLpDttz7995dzoYk0vStvyeRFNOyxdI0TXvbPF+sNh0RX38j4lvJAwGni/HO7o2lZrOxWVTr7fWb9a2d3Str60urjdXGxsLC/CuLry6+vHh1JO28EBGvfeXPP/juz7762q8+/86frv318reztGaK+b12PIbJh83sNr16Zrpvhc3HDHYUZe2pflBUzg63zu0nmRAAAANl5/gfi4jPRMSLMRsTDz+dBQAAAI6h9Esz8UHSfX5XYmrAdAAAAOAYqeR9YJNKregLMBOVSq3W7cP7iThXaba22p+73treWOn2lZ2LauX6WrNxtegrPBfVJKvP5+W9+kt99YWIeDoivj97Nq/XllvNlXHf/AAAAIBT4nzf9f+/ZrvX/w+XHE5yAAAAwOjMjTsBAAAA4Ilz/Q8AAAAnWnXcCQAAAABP3NfefDMb0t7vX6+8vbN9o/X2lZXG1o3a+vZybbm1ebO22mqt5u/sWz9oe81W6+YXYmP7Vr3d2GrXL+zsXltvbW+0r63F9KE0CAAAANjn6U/f+UMSEZ0vns2HzNS4kwIOxeT9Uu+dniV7/x+f6o7fO6SkgEMxMcQy750pn+48AY63yf4JA/Z14OTR/x846Bc9Bnbe+W13VBk20BvD5wQAAIzWpU+VP/8/+Hy+M/QpP3A02Ynh9Op7/p/OjisR4NDlz/+H7cjjZAFOlOpQPQCBk+yjPv8/WJo+UkIAAMDIzeRDUqkVt/dmolKp1SIu5D8LWE2urzUbVyPiqYj4/Wz1TFafz9dMDrxmAAAAAAAAAAAAAAAAAAAAAAAAAAC60jSJFAAAADjRIip/SX7dfZf/pdkXZvrvD0wl/8l/EngqIt758Vs/vLXUbm/OZ9P/cX96+0fF9JfGcQcDAAAA6Ne7Ts/H/x53NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcNO/fe3e5Nwyx+NlRxf3blyNiriz+ZEzn4+moRsS5fyYx+cB6SURMjCB+53ZEfLIsfpKldT9kWfxRfAid20knzZXGj7niUyiLf34E8eE0u5Mdf14v2/8r8Vw+Lt//JiP+r/64Bh//4v7xb2LA/n9hyBgX7/6iPjD+xZm4OFl+/OvFTwbEf36o6NX45jd2dwfNTX8Scan3/ZMf8R6MsFeqt9dv1rd2dq+srS+tNlYbGwsL868svrr48uLV+vW1ZqP4tzTG95755YcD23874lzp919SZDO4/S+UbG+iJP//3r117+O9Smd//MvPl8T/zU+LJfbHrxRxPluUs/mXeuVOt/ygZ3/+u2cf1v6VvfZXH+X///Kgjfbbt6M8M9yfDgDwRGzt7N5YajYbm8ercCYihlw4u0o/Ejk/emEqjkQaR6LQu9ky0i1/JyvcHXLhiThgmTRN0zzF/bPuRMQwiSUx4o+uUp7PXmHgEWC8xyUAAGD09k76x50JAAAAAAAAAAAAAAAAAAAAnF6H8f62/ph7r0BORvEKbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAkfhfAAAA///6TtX6")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
ftruncate(0xffffffffffffffff, 0x6)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

7.268641403s ago: executing program 4 (id=476):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x433b, 0x4)

7.045899301s ago: executing program 0 (id=477):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
r2 = dup2(r1, r0)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0)

6.281691466s ago: executing program 2 (id=478):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
getdents64(0xffffffffffffffff, &(0x7f0000001540)=""/35, 0x23)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xed47, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe35, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f0000001000)="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", 0x4c3}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r2}, 0x38)

6.156743501s ago: executing program 1 (id=479):
add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
shmctl$SHM_UNLOCK(r1, 0xc)

5.311936704s ago: executing program 4 (id=480):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x282, &(0x7f0000000240)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e24}, 0x6e)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

5.074516424s ago: executing program 3 (id=481):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c801)
sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000600)={0x10, 0x30, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000001400)=[@rights={{0x10}}], 0x10, 0x40}, 0x0)

4.876084573s ago: executing program 0 (id=482):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]})

4.666878578s ago: executing program 2 (id=483):
syz_open_dev$usbmon(0x0, 0x8002, 0xa2000)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r0, r1, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='100000', 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1fff, 0xfffffffd, 0x9, 0x0, 0x0)
write(r4, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8801)

3.983539409s ago: executing program 5 (id=484):
lseek(0xffffffffffffffff, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r2, 0xe)

3.980598625s ago: executing program 0 (id=485):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
stat(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)

3.835957813s ago: executing program 4 (id=486):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
creat(0x0, 0xecf86c37d53049cc)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
execve(0x0, 0x0, &(0x7f0000000800))

3.767981895s ago: executing program 3 (id=487):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r0}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00')
r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_mount_image$fuse(0x0, 0x0, 0x3801009, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}}}, 0x1, 0xbe, 0x8, 0x6, 0xa3, 0x6, 0x8}, &(0x7f0000000180)=0x9c)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80600, 0x0)
fsetxattr(r2, &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0)

3.696929253s ago: executing program 1 (id=488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, &(0x7f00000000c0), 0xffffffffffffffff, 0xfe, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
r4 = syz_open_procfs(0x0, 0x0)
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a00010001000000000000008100000000ffff000000000014000200fc000000000000000000000000000001"], 0x30}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
socket$kcm(0x29, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

3.25404098s ago: executing program 5 (id=489):
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2.175059506s ago: executing program 0 (id=490):
syz_clone3(&(0x7f0000000080)={0x23800000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

2.172773256s ago: executing program 4 (id=491):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000", @ANYRES16=r1], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)

1.45702203s ago: executing program 3 (id=492):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194)
r3 = epoll_create1(0x80000)
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
write(r1, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48", 0x9f)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

1.423560526s ago: executing program 1 (id=493):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$kcm(0x21, 0x2, 0xa)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x21, @loopback, 0x400014}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

645.484214ms ago: executing program 5 (id=494):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)={0x10}, 0x10)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)

475.879535ms ago: executing program 2 (id=495):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
getdents64(0xffffffffffffffff, &(0x7f0000001540)=""/35, 0x23)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xed47, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe35, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f0000001000)="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", 0x4c3}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r1}, 0x38)

411.031332ms ago: executing program 1 (id=496):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x4, 0xf82, &(0x7f0000003080)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
syz_emit_ethernet(0xb4f, &(0x7f00000009c0)=ANY=[], 0x0)
socket$inet6(0xa, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
socket$inet(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=@deltclass={0x58, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0x8, 0x3}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xe}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xff}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x408001, 0x0)
write(r1, &(0x7f0000000100), 0x0)
write(r1, &(0x7f0000000200), 0x0)
write(r1, &(0x7f0000000300)='bind\x00', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000001000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff000000000000000000000000100000000300000000000020020000"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)

0s ago: executing program 3 (id=497):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x1, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0, 0x80000})
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xffd0, 0x2, 0x1004, 0x1bc}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x44, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
socket$inet6(0xa, 0x3, 0x3a)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$COMEDI_UNLOCK(r2, 0x6406)
pselect6(0x40, &(0x7f0000000240)={0x401, 0x0, 0x202, 0x10081, 0x9, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0xf, 0x44, 0x7f}, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

eturn_thunk+0x5/0xfbef5
[  116.600366][ T5908]  ? __fget_files+0x21f/0x3d0
[  116.600426][ T5908]  ? do_preadv+0x1ac/0x270
[  116.600485][ T5908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  116.600532][ T5908]  do_preadv+0x1ac/0x270
[  116.600596][ T5908]  ? __pfx_do_preadv+0x10/0x10
[  116.600656][ T5908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  116.600708][ T5908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  116.600763][ T5908]  do_syscall_64+0x123/0x790
[  116.600831][ T5908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.600871][ T5908] RIP: 0033:0x7f6492f9e0d9
[  116.600901][ T5908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.600937][ T5908] RSP: 002b:00007f6493e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  116.600973][ T5908] RAX: ffffffffffffffda RBX: 00007f6493226090 RCX: 00007f6492f9e0d9
[  116.600998][ T5908] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005
[  116.601021][ T5908] RBP: 00007f6493035024 R08: 00000000fffffff9 R09: 0000000000000000
[  116.601051][ T5908] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  116.601074][ T5908] R13: 00007f6493226128 R14: 00007f6493226090 R15: 00007ffd3c91d848
[  116.601122][ T5908]  </TASK>
[  116.627100][ T5907] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  116.670241][ T5781] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  116.670292][ T5781] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  116.697012][ T5912] loop1: detected capacity change from 0 to 1024
[  116.816060][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  116.852761][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.036748][ T5912] hfsplus: invalid catalog max_key_len 0
[  117.063665][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read
[  117.081301][ T5912] hfsplus: failed to load catalog file
[  117.105571][ T5902] loop4: detected capacity change from 0 to 4096
[  117.329361][ T5888] ldm_validate_partition_table(): Disk read failed.
[  118.207735][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.304197][ T5888] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.346348][ T5888] Dev loop6: unable to read RDB block 0
[  118.385312][ T5888]  loop6: unable to read partition table
[  118.408591][ T5888] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  118.448725][ T5902] ntfs3(loop4): Failed to read $UpCase (-4).
[  118.461737][ T5623] ocfs2: Unmounting device (7,2) on (node local)
[  118.536709][ T5339] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  118.763184][ T5339] usb 2-1: Using ep0 maxpacket: 8
[  118.786615][ T5339] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  118.853230][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.891847][ T5339] usb 2-1: Product: syz
[  118.906889][ T5339] usb 2-1: Manufacturer: syz
[  118.925716][ T5339] usb 2-1: SerialNumber: syz
[  118.937578][ T5925] loop5: detected capacity change from 0 to 64
[  118.962161][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'.
[  119.047011][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'.
[  119.311775][ T5926] Zero length message leads to an empty skb
[  119.332755][ T5339] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  119.424890][ T5768] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  119.724415][ T5339] usb 2-1: USB disconnect, device number 2
[  119.853149][ T5768] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  119.867401][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.894954][ T5768] usb 3-1: Product: syz
[  120.724811][   T29] audit: type=1400 audit(1787395737.039:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  120.752988][ T5768] usb 3-1: Manufacturer: syz
[  121.245448][ T5941] trusted_key: encrypted_key: key user:syz not found
[  121.846037][ T5768] usb 3-1: SerialNumber: syz
[  122.560786][ T5768] usb 3-1: config 0 descriptor??
[  122.611441][ T5768] usb 3-1: can't set config #0, error -71
[  122.663119][ T5768] usb 3-1: USB disconnect, device number 2
[  123.479622][ T5957] ip6t_rpfilter: unknown options
[  123.592396][ T5740] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.612800][ T5767] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  123.925380][ T5740] usb 5-1: Using ep0 maxpacket: 16
[  123.927145][ T5767] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  123.950943][ T5740] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  123.975965][ T5767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.983547][ T5740] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.015136][ T5767] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  124.077330][ T5767] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  124.100691][ T5620] Bluetooth: hci5: Malformed Event: 0x02
[  124.132945][ T5767] usb 6-1: Product: syz
[  124.255156][ T5767] usb 6-1: config 0 descriptor??
[  124.276003][ T5965] loop1: detected capacity change from 0 to 32768
[  124.287462][ T5740] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.312349][ T5740] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.322403][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.342574][ T5768] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.353854][ T5740] usb 5-1: config 0 descriptor??
[  124.399637][ T5965] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.415906][ T5767] hub 6-1:0.0: bad descriptor, ignoring hub
[  124.479233][ T5767] hub 6-1:0.0: probe with driver hub failed with error -5
[  124.602117][ T5767] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  124.752875][ T5768] usb 3-1: Using ep0 maxpacket: 32
[  125.231403][ T5768] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  125.283110][ T5740] usbhid 5-1:0.0: can't add hid device: -71
[  125.435466][ T5740] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  125.592057][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.610822][ T5740] usb 5-1: USB disconnect, device number 2
[  125.641487][ T5768] usb 3-1: config 0 descriptor??
[  125.715550][ T5613] ocfs2: Unmounting device (7,1) on (node local)
[  125.753740][ T5977] loop0: detected capacity change from 0 to 4096
[  125.898412][ T5983] loop3: detected capacity change from 0 to 64
[  125.899360][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.935339][ T5977] ntfs3(loop0): ino=b, Correct links count -> 1.
[  125.970105][ T5977] ntfs3(loop0): ino=18, mi_enum_attr
[  125.982693][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.005532][ T5977] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  126.026683][ T5767] usb 6-1: USB disconnect, device number 2
[  126.103477][ T5768] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  129.352608][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.39'.
[  129.429277][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.39'.
[  129.645262][ T5992] loop4: detected capacity change from 0 to 32768
[  129.927373][ T6004] trusted_key: encrypted_key: key user:syz not found
[  131.114409][ T5992] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  131.149300][ T5992] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.276191][   T29] audit: type=1400 audit(1787395747.509:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  131.380939][ T5992] XFS (loop4): Ending clean mount
[  131.542316][ T5992] XFS (loop4): Quotacheck needed: Please wait.
[  132.037138][ T5992] XFS (loop4): Quotacheck: Done.
[  132.171503][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.182125][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  132.234843][ T6023] loop2: detected capacity change from 0 to 1024
[  132.270612][ T6023] hfsplus: invalid catalog max_key_len 0
[  132.309449][ T6023] hfsplus: failed to load catalog file
[  132.353862][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.528523][ T5773] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  135.279771][ T5773] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  135.299981][ T5773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.318452][ T5773] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  135.333759][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  135.349731][ T5773] usb 6-1: Product: syz
[  135.364904][ T5773] usb 6-1: config 0 descriptor??
[  135.401739][ T5773] hub 6-1:0.0: bad descriptor, ignoring hub
[  135.429613][ T5773] hub 6-1:0.0: probe with driver hub failed with error -5
[  135.485866][ T5773] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  135.940975][ T6046] loop2: detected capacity change from 0 to 4096
[  135.940986][ T6052] loop0: detected capacity change from 0 to 32768
[  135.956952][   T29] audit: type=1400 audit(1787395752.289:4): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  135.957802][ T6048] loop4: detected capacity change from 0 to 32768
[  136.104453][ T6052] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  136.114426][ T6052] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.143520][ T6048] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  137.391153][ T6052] XFS (loop0): Ending clean mount
[  137.413564][ T6052] XFS (loop0): Quotacheck needed: Please wait.
[  137.478832][ T6046] ntfs3(loop2): ino=b, Correct links count -> 1.
[  138.758514][ T6046] ntfs3(loop2): ino=18, mi_enum_attr
[  138.950896][ T6046] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  139.010080][ T6052] XFS (loop0): Quotacheck: Done.
[  139.043646][ T5614] ocfs2: Unmounting device (7,4) on (node local)
[  139.110640][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.205557][ T5339] usb 6-1: USB disconnect, device number 3
[  139.573729][ T6081] loop1: detected capacity change from 0 to 32768
[  139.947436][ T6090] loop3: detected capacity change from 0 to 32768
[  140.181730][ T6081] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  140.197847][ T6081] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.209071][ T6090] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  140.226720][ T6090] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.544122][ T6081] XFS (loop1): Ending clean mount
[  140.553482][ T6090] XFS (loop3): Ending clean mount
[  140.564578][ T6081] XFS (loop1): Quotacheck needed: Please wait.
[  140.581997][ T6090] XFS (loop3): Quotacheck needed: Please wait.
[  140.729548][ T6081] XFS (loop1): Quotacheck: Done.
[  140.818740][ T6090] XFS (loop3): Quotacheck: Done.
[  141.243464][   T29] audit: type=1800 audit(1787395757.579:5): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.66" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  141.523674][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.607637][ T6117] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  141.614744][ T6117] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  141.694403][ T6117] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  142.544091][ T6107] loop2: detected capacity change from 0 to 131072
[  142.551477][ T6107] xfs: Deprecated parameter 'ikeep'
[  142.556751][ T6107] XFS: ikeep mount option is deprecated.
[  142.625280][ T6117] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  142.632697][ T6117] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  142.807855][ T6117] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  142.840304][ T6107] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  142.909982][ T6107] XFS (loop2): Starting recovery (logdev: internal)
[  142.942225][ T6107] XFS (loop2): Ending recovery (logdev: internal)
[  142.998502][ T6117] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  143.004608][ T6117] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.038215][ T6117] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.070337][ T6117] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  143.076501][ T6117] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  143.098132][ T6117] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  143.137727][ T6117] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  143.144353][ T6117] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.187408][ T6117] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.225672][ T6117] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  143.231658][ T6117] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  143.254555][ T6117] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  143.345838][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.395444][ T5623] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  143.653626][ T6136] loop5: detected capacity change from 0 to 1024
[  143.686491][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  143.735070][ T6136] hfsplus: invalid catalog max_key_len 0
[  143.785270][ T6136] hfsplus: failed to load catalog file
[  143.821936][   T29] audit: type=1400 audit(1787395760.149:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  144.144337][ T6142] loop1: detected capacity change from 0 to 32768
[  144.292410][ T5733] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  144.292993][ T6142] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  144.313066][ T6142] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.440764][ T6156] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  144.456895][ T5733] usb 6-1: Using ep0 maxpacket: 8
[  144.470068][ T5733] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  144.486525][ T6142] XFS (loop1): Ending clean mount
[  144.487962][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.503575][ T6142] XFS (loop1): Quotacheck needed: Please wait.
[  144.510003][ T5733] usb 6-1: Product: syz
[  144.518316][ T5733] usb 6-1: Manufacturer: syz
[  144.538906][ T5733] usb 6-1: SerialNumber: syz
[  144.637887][ T6142] XFS (loop1): Quotacheck: Done.
[  144.723370][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.874817][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.013839][ T5733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  145.044246][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.122448][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.203919][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  145.284163][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  145.381390][ T5733] usb 6-1: USB disconnect, device number 4
[  145.801784][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  146.432408][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.592746][ T6157] loop3: detected capacity change from 0 to 32768
[  146.658893][ T6157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.69 (6157)
[  146.802601][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.103697][ T6176] loop0: detected capacity change from 0 to 32768
[  147.122584][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  147.151664][ T6176] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  147.161521][ T6176] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.202695][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.305744][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  147.379363][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  147.417815][ T6176] XFS (loop0): Ending clean mount
[  147.426143][ T6176] XFS (loop0): Quotacheck needed: Please wait.
[  147.846019][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  148.025268][ T6176] XFS (loop0): Quotacheck: Done.
[  148.222659][ T6157] BTRFS error (device loop3): open_ctree failed: -EINTR
[  148.443010][ T6191] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.449227][ T6191] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  148.455743][ T6191] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.461847][ T6191] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  148.468069][ T6191] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  148.474214][ T6191] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  148.566357][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.483407][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  150.483456][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout
[  150.489556][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  150.495657][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  150.502185][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.507702][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout
[  150.668966][ T6212] kAFS: Invalid Command on /proc/fs/afs/cells file
[  151.524167][ T6219] loop5: detected capacity change from 0 to 32768
[  151.708774][ T6219] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  151.761967][ T6219] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.574783][ T6219] XFS (loop5): Ending clean mount
[  152.582772][ T6219] XFS (loop5): Quotacheck needed: Please wait.
[  152.823031][ T6219] XFS (loop5): Quotacheck: Done.
[  153.048384][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.140975][ T6262] loop3: detected capacity change from 0 to 32768
[  156.547665][ T6262] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  156.647599][ T6262] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.739312][ T6262] XFS (loop3): Ending clean mount
[  156.749705][ T6262] XFS (loop3): Quotacheck needed: Please wait.
[  156.862764][ T6262] XFS (loop3): Quotacheck: Done.
[  157.203108][ T6278] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  157.209207][ T6278] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  157.215365][ T6278] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.223063][ T6278] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.229085][ T6278] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  157.235160][ T6278] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  157.360578][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.890215][ T6293] loop0: detected capacity change from 0 to 32768
[  159.122668][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  159.213794][ T6293] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  159.225340][ T6293] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.282505][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout
[  159.282542][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  159.288633][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  159.294740][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout
[  159.300670][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  159.319436][ T6293] XFS (loop0): Ending clean mount
[  159.327673][ T6293] XFS (loop0): Quotacheck needed: Please wait.
[  159.353497][ T6293] XFS (loop0): Quotacheck: Done.
[  159.606272][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.784461][ T5268] veth1_vlan: left promiscuous mode
[  159.922698][ T6314] Illegal XDP return value 4294967274 on prog  (id 2) dev syz_tun, expect packet loss!
[  159.956122][ T5616] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  160.027842][ T6317] loop5: detected capacity change from 0 to 1024
[  160.097397][ T6317] hfsplus: invalid catalog max_key_len 0
[  160.137622][ T6317] hfsplus: failed to load catalog file
[  160.163524][ T5616] usb 2-1: Using ep0 maxpacket: 32
[  160.202245][ T5616] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  160.280448][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.370070][ T5616] usb 2-1: config 0 descriptor??
[  160.605743][ T5733] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  160.826072][ T5733] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.883212][ T5733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.934041][ T5733] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.997462][ T6329] loop5: detected capacity change from 0 to 32768
[  161.014714][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.034785][ T6318] syz.0.109 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  161.048319][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.059797][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.0.109 Not tainted syzkaller #0 PREEMPT(full) 
[  161.059846][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  161.059869][ T6318] Call Trace:
[  161.059881][ T6318]  <TASK>
[  161.059896][ T6318]  dump_stack_lvl+0x100/0x190
[  161.059955][ T6318]  dump_header+0xfb/0x606
[  161.060003][ T6318]  oom_kill_process.cold+0xd/0x380
[  161.060060][ T6318]  out_of_memory+0x340/0x14f0
[  161.060131][ T6318]  ? __pfx_out_of_memory+0x10/0x10
[  161.060187][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.060250][ T6318]  mem_cgroup_out_of_memory+0xc6/0x130
[  161.060303][ T6318]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  161.060346][ T6318]  ? find_held_lock+0x2b/0x80
[  161.060400][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.060447][ T6318]  ? do_raw_spin_unlock+0x145/0x1e0
[  161.060487][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.060534][ T6318]  ? _raw_spin_unlock+0x28/0x50
[  161.060596][ T6318]  try_charge_memcg+0x6e1/0xdf0
[  161.060670][ T6318]  ? __pfx_try_charge_memcg+0x10/0x10
[  161.060730][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.060778][ T6318]  ? find_held_lock+0x2b/0x80
[  161.060820][ T6318]  ? rcu_read_unlock+0x17/0x60
[  161.060881][ T6318]  ? rcu_read_unlock+0x17/0x60
[  161.060940][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.061005][ T6318]  __memcg_slab_post_alloc_hook+0x470/0x1150
[  161.061094][ T6318]  ? kasan_unpoison+0x27/0x60
[  161.061141][ T6318]  __kmalloc_noprof+0x642/0x820
[  161.061186][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.061236][ T6318]  ? fib_default_rule_add+0x4f/0x420
[  161.061294][ T6318]  fib_default_rule_add+0x4f/0x420
[  161.061343][ T6318]  ? __pfx_fib6_rules_net_init+0x10/0x10
[  161.061395][ T6318]  fib6_rules_net_init+0x52/0x140
[  161.061444][ T6318]  ops_init+0x1e2/0x5f0
[  161.061514][ T6318]  setup_net+0x118/0x3a0
[  161.061580][ T6318]  ? __pfx_setup_net+0x10/0x10
[  161.061645][ T6318]  ? mutex_init_lockdep+0xf1/0x120
[  161.061716][ T6318]  copy_net_ns+0x46f/0x7c0
[  161.061762][ T6318]  create_new_namespaces+0x3ea/0xac0
[  161.061838][ T6318]  unshare_nsproxy_namespaces+0xf2/0x220
[  161.061907][ T6318]  ksys_unshare+0x4a2/0xa70
[  161.061974][ T6318]  ? __pfx_ksys_unshare+0x10/0x10
[  161.062043][ T6318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.062111][ T6318]  __x64_sys_unshare+0x31/0x40
[  161.062177][ T6318]  do_syscall_64+0x123/0x790
[  161.062249][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.062288][ T6318] RIP: 0033:0x7f6492f9e0d9
[  161.062319][ T6318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.062357][ T6318] RSP: 002b:00007f6493e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  161.062394][ T6318] RAX: ffffffffffffffda RBX: 00007f6493225fa0 RCX: 00007f6492f9e0d9
[  161.062420][ T6318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000
[  161.062444][ T6318] RBP: 00007f6493035024 R08: 0000000000000000 R09: 0000000000000000
[  161.062468][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.062491][ T6318] R13: 00007f6493226038 R14: 00007f6493225fa0 R15: 00007ffd3c91d848
[  161.062543][ T6318]  </TASK>
[  161.681626][ T6318] memory: usage 96kB, limit 96kB, failcnt 37
[  161.688106][ T6318] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0
[  161.696180][ T6318] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  161.703475][ T6318] Memory cgroup stats for /syz0/test:
[  161.703926][ T6318] cache 0
[  161.712224][ T6318] rss 0
[  161.716763][ T6318] rss_huge 0
[  161.719977][ T6318] shmem 0
[  161.725315][ T6318] mapped_file 0
[  161.728812][ T6318] dirty 0
[  161.731754][ T6318] writeback 0
[  161.766957][ T6329] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  161.777314][ T6329] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.818945][ T5616] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  161.859165][ T6318] workingset_refault_anon 0
[  161.891713][ T6318] workingset_refault_file 0
[  162.076744][ T6318] swap 8192
[  162.108728][ T6318] swapcached 8192
[  162.189012][ T6318] pgpgin 2
[  162.192136][ T6318] pgpgout 2
[  162.219153][ T6329] XFS (loop5): Ending clean mount
[  162.293001][ T6329] XFS (loop5): Quotacheck needed: Please wait.
[  162.316371][ T6318] pgfault 21
[  162.359747][ T6318] pgmajfault 0
[  162.455379][ T6318] inactive_anon 0
[  162.530995][ T6318] active_anon 0
[  162.680936][ T6318] inactive_file 0
[  162.778963][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  162.799067][ T5733] usb 5-1: Product: syz
[  162.821115][ T5733] usb 5-1: config 0 descriptor??
[  162.831205][ T5733] hub 5-1:0.0: bad descriptor, ignoring hub
[  162.837781][ T5733] hub 5-1:0.0: probe with driver hub failed with error -5
[  162.850568][ T5733] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  162.893786][ T6318] active_file 0
[  162.897288][ T6318] unevictable 0
[  162.900736][ T6318] hierarchical_memory_limit 98304
[  162.974041][ T6318] hierarchical_memsw_limit 9223372036854771712
[  163.022055][ T6318] total_cache 0
[  163.559721][ T6318] total_rss 0
[  163.638973][ T6329] XFS (loop5): Quotacheck: Done.
[  163.694256][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.703868][ T6318] total_rss_huge 0
[  163.707665][ T6318] total_shmem 0
[  163.711114][ T6318] total_mapped_file 0
[  163.764613][ T6318] total_dirty 0
[  163.779695][ T6318] total_writeback 0
[  163.895274][ T5733] usb 5-1: USB disconnect, device number 3
[  164.330152][ T6318] total_workingset_refault_anon 0
[  164.440858][ T6318] total_workingset_refault_file 0
[  164.518655][ T6318] total_swap 8192
[  164.602645][ T6318] total_swapcached 8192
[  164.606857][ T6318] total_pgpgin 2
[  164.610455][ T6318] total_pgpgout 2
[  164.635067][ T6318] total_pgfault 21
[  164.672000][ T6318] total_pgmajfault 0
[  164.758277][ T6318] total_inactive_anon 0
[  164.829222][ T6318] total_active_anon 0
[  164.833315][ T6318] total_inactive_file 0
[  164.854370][ T6318] total_active_file 0
[  164.872060][ T6318] total_unevictable 0
[  164.911935][ T6318] anon_cost 0
[  164.928158][ T6318] file_cost 0
[  164.978706][ T6318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.109,pid=6315,uid=0
[  165.054430][ T6318] Memory cgroup out of memory: Killed process 6318 (syz.0.109) total-vm:104432kB, anon-rss:1424kB, file-rss:23804kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  166.016399][ T6365] loop3: detected capacity change from 0 to 32768
[  166.177250][ T6375] loop2: detected capacity change from 0 to 32768
[  166.191993][ T6365] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  166.207761][ T6365] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.238949][ T6375] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  166.252345][ T6375] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.399102][ T6365] XFS (loop3): Ending clean mount
[  166.410466][ T6365] XFS (loop3): Quotacheck needed: Please wait.
[  166.478845][ T6375] XFS (loop2): Ending clean mount
[  166.490330][ T6375] XFS (loop2): Quotacheck needed: Please wait.
[  166.532344][ T6365] XFS (loop3): Quotacheck: Done.
[  166.612122][ T6375] XFS (loop2): Quotacheck: Done.
[  166.851525][ T5623] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.882323][ T6399] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  166.888506][ T6399] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  166.901443][ T6399] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  166.907592][ T6399] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  166.913719][ T6399] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  166.919779][ T6399] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  168.812552][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  168.962709][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.964282][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout
[  168.975033][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  168.975082][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  168.975121][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.475122][ T6422] loop1: detected capacity change from 0 to 32768
[  169.692893][ T6422] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  169.703605][ T6422] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.834964][ T6419] input: syz0 as /devices/virtual/input/input5
[  170.201726][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.251062][ T6422] XFS (loop1): Ending clean mount
[  170.259340][ T6422] XFS (loop1): Quotacheck needed: Please wait.
[  170.314802][ T6422] XFS (loop1): Quotacheck: Done.
[  170.579725][ T5339] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  170.667026][ T6438] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  170.673441][ T6438] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  170.679521][ T6438] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  170.685675][ T6438] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  170.691748][ T6438] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  170.697872][ T6438] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  170.783215][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.793069][ T5339] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  170.812394][ T5339] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  170.828773][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  170.839010][ T5339] usb 5-1: Product: syz
[  170.867751][ T5339] usb 5-1: config 0 descriptor??
[  171.109290][ T5339] hub 5-1:0.0: bad descriptor, ignoring hub
[  171.134165][ T5339] hub 5-1:0.0: probe with driver hub failed with error -5
[  171.229965][ T6445] trusted_key: encrypted_key: insufficient parameters specified
[  171.995147][ T5339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  172.722610][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  172.722757][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  172.728734][ T4923] Bluetooth: hci0: command 0x0c1a tx timeout
[  172.734933][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  172.740728][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.740838][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout
[  172.928539][   T29] audit: type=1400 audit(1787395789.249:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  173.642777][ T5733] usb 5-1: USB disconnect, device number 4
[  173.746315][ T6467] loop5: detected capacity change from 0 to 32768
[  173.847174][ T6467] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  173.857868][ T6467] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.371048][ T6467] XFS (loop5): Ending clean mount
[  174.405429][ T6467] XFS (loop5): Quotacheck needed: Please wait.
[  175.736022][ T6467] XFS (loop5): Quotacheck: Done.
[  176.139964][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.291605][ T5768] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  179.319172][ T5616] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  179.605501][ T6498] loop1: detected capacity change from 0 to 32768
[  179.614710][ T5616] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  179.624172][ T5768] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  179.630175][ T5781] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  179.694665][ T6498] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  179.727054][ T5616] usb 2-1: USB disconnect, device number 3
[  179.738451][ T5768] usb 3-1: USB disconnect, device number 3
[  179.770261][ T6498] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.780496][ T5781] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  179.930699][ T5781] usb 1-1: USB disconnect, device number 2
[  179.964464][ T6498] XFS (loop1): Ending clean mount
[  179.973569][ T6498] XFS (loop1): Quotacheck needed: Please wait.
[  180.028537][ T6498] XFS (loop1): Quotacheck: Done.
[  180.354422][ T6511] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  180.362829][ T6511] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  180.370020][ T6511] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  180.376324][ T6511] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  180.382498][ T6511] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  180.388587][ T6511] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  180.505074][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.286025][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout
[  182.413840][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout
[  182.413985][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.419924][ T4923] Bluetooth: hci0: command 0x0c1a tx timeout
[  182.426046][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout
[  182.438203][ T5620] Bluetooth: hci5: command 0x0c1a tx timeout
[  182.471817][ T6530] jffs2: notice: (6530) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  182.646210][   T29] audit: type=1400 audit(1787395798.959:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  182.843449][ T5767] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  182.998107][ T6537] loop5: detected capacity change from 0 to 32768
[  183.281746][ T5767] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  183.406486][ T6537] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  183.422652][ T6537] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.550483][ T5767] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  183.801025][ T6537] XFS (loop5): Ending clean mount
[  183.809840][ T6537] XFS (loop5): Quotacheck needed: Please wait.
[  183.819074][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  183.894021][ T5767] usb 4-1: Product: syz
[  183.964197][ T6537] XFS (loop5): Quotacheck: Done.
[  184.017852][ T5767] usb 4-1: config 0 descriptor??
[  184.063887][ T5767] hub 4-1:0.0: bad descriptor, ignoring hub
[  184.111776][ T5767] hub 4-1:0.0: probe with driver hub failed with error -5
[  184.135805][ T5767] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  184.172952][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  184.179164][ T6556] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  184.185731][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  184.191890][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  184.198120][ T6556] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  184.204555][ T6556] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  184.263190][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.043663][ T6576] loop5: detected capacity change from 0 to 32768
[  186.051631][  T186] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  186.060470][ T5616] usb 4-1: USB disconnect, device number 2
[  186.082047][ T6576] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  186.104699][ T6576] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.233503][  T186] usb 3-1: Using ep0 maxpacket: 32
[  186.243701][ T5620] Bluetooth: hci5: command 0x0c1a tx timeout
[  186.249956][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.250013][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout
[  186.256182][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  186.262009][ T4923] Bluetooth: hci4: command 0x0c1a tx timeout
[  186.268168][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  186.287532][  T186] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  186.323139][  T186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.375413][  T186] usb 3-1: config 0 descriptor??
[  186.421694][ T6576] XFS (loop5): Ending clean mount
[  186.435895][ T6576] XFS (loop5): Quotacheck needed: Please wait.
[  186.456610][ T6588] loop3: detected capacity change from 0 to 256
[  186.600448][ T6576] XFS (loop5): Quotacheck: Done.
[  186.690447][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.782181][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.829179][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.458063][  T186] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  187.470672][  T186] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  187.479631][  T186] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  188.155339][ T6597] loop1: detected capacity change from 0 to 32768
[  188.197554][ T6597] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  188.206673][ T6597] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.331863][ T6597] XFS (loop1): Ending clean mount
[  188.344280][ T6597] XFS (loop1): Quotacheck needed: Please wait.
[  188.446824][ T6597] XFS (loop1): Quotacheck: Done.
[  189.873792][ T6617] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  189.879994][ T6617] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  189.887716][ T6617] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  189.894024][ T6617] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  189.900308][ T6617] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  189.906578][ T6617] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  190.277265][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.620964][ T6634] loop2: detected capacity change from 0 to 512
[  190.692774][ T6634] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  191.117658][ T6639] loop1: detected capacity change from 0 to 32768
[  191.130494][ T6644] trusted_key: encrypted_key: insufficient parameters specified
[  191.816400][ T6631] loop5: detected capacity change from 0 to 4096
[  191.922728][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout
[  191.928806][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  191.936465][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  191.942578][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  191.942633][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.948581][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  191.973647][ T6639] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  191.982696][ T6639] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.040784][ T6639] XFS (loop1): Ending clean mount
[  192.053680][ T6639] XFS (loop1): Quotacheck needed: Please wait.
[  192.095984][ T6634] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.172: Allocating blocks 41-42 which overlap fs metadata
[  192.110695][ T6639] XFS (loop1): Quotacheck: Done.
[  192.192658][ T6634] loop2: lost filesystem error report for type 5 error -117
[  192.202337][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  192.216673][    C0] EXT4-fs (loop2): initial error at time 1787395808: ext4_mb_mark_diskspace_used:4222
[  192.226291][    C0] EXT4-fs (loop2): last error at time 1787395808: ext4_mb_mark_diskspace_used:4222
[  192.244064][ T6634] EXT4-fs (loop2): Remounting filesystem read-only
[  192.252236][ T6634] Quota error (device loop2): write_blk: dquota write failed
[  192.256154][ T6631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.261525][ T6634] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  192.293138][ T6634] Quota error (device loop2): write_blk: dquota write failed
[  192.318504][ T6634] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  192.382762][ T6634] EXT4-fs (loop2): 1 truncate cleaned up
[  192.407058][ T6634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.422052][ T6658] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  192.428264][ T6658] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  192.434570][ T6658] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  192.440627][ T6658] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  192.448540][ T6658] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  192.455164][ T6658] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  192.520508][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.624372][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  193.650108][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  194.082393][ T5616] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  194.377052][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.438241][ T5616] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  194.492699][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  194.493954][ T4923] Bluetooth: hci4: command 0x0c1a tx timeout
[  194.498754][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  194.498798][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  194.504920][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  194.510878][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  194.560326][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  194.644011][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.712980][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  194.740490][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.745136][ T5616] usb 4-1: Product: syz
[  194.784630][ T5616] usb 4-1: config 0 descriptor??
[  196.124274][ T5616] hub 4-1:0.0: USB hub found
[  197.972456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  198.122937][ T6687] loop2: detected capacity change from 0 to 32768
[  198.135941][ T5616] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  198.203036][ T5616] usbhid 4-1:0.0: can't add hid device: -71
[  198.220390][ T5616] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  198.285424][ T5616] usb 4-1: USB disconnect, device number 3
[  198.292649][ T6687] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  198.317242][ T6687] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.223251][ T6687] XFS (loop2): Ending clean mount
[  199.231204][ T6687] XFS (loop2): Quotacheck needed: Please wait.
[  199.268935][ T6700] loop0: detected capacity change from 0 to 256
[  199.363539][ T6687] XFS (loop2): Quotacheck: Done.
[  199.642524][ T5616] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  199.766827][ T5623] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.095504][ T5339] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  200.553432][ T5616] usb 4-1: Using ep0 maxpacket: 32
[  200.624717][ T5616] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  200.660108][ T6700] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  200.718573][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.727472][ T6700] FAT-fs (loop0): Filesystem has been set read-only
[  200.746659][ T6700] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  200.856120][ T5339] usb 5-1: Using ep0 maxpacket: 16
[  200.908662][ T5339] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  201.126701][ T5339] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.176231][ T5616] usb 4-1: config 0 descriptor??
[  201.357024][ T5339] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.545376][ T5339] usb 5-1: config 0 interface 0 has no altsetting 0
[  201.569613][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.709002][ T5339] usb 5-1: config 0 descriptor??
[  201.739237][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.812520][   T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  202.222110][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.307306][   T43] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  202.350650][ T5616] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  202.367352][   T43] usb 1-1: Dual-Role OTG device on HNP port
[  202.458525][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.569313][ T5339] hkems 0003:2006:0118.0001: no output reports found
[  202.613976][   T43] gspca_main: spca501-2.14.0 probing 0000:0000
[  202.651331][   T43] gspca_spca501: reg write: error -32
[  202.679715][   T43] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  202.710038][   T43] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  202.735030][ T5339] hkems 0003:2006:0118.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0
[  202.754194][   T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  202.846620][ T5339] usb 5-1: USB disconnect, device number 5
[  205.312067][ T6737] fido_id[6737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  205.521708][ T6753] loop4: detected capacity change from 0 to 512
[  205.551480][ T6753] EXT4-fs: Ignoring removed bh option
[  205.599822][ T6753] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.194: corrupted in-inode xattr: e_value size too large
[  205.616480][ T6753] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  205.618265][ T6753] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.194: couldn't read orphan inode 15 (err -117)
[  205.627474][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  205.627509][    C0] EXT4-fs (loop4): initial error at time 1787395821: ext4_iget_extra_inode:5209: inode 15
[  205.627550][    C0] EXT4-fs (loop4): last error at time 1787395821: ext4_iget_extra_inode:5209: inode 15
[  205.668292][ T6753] loop4: lost filesystem error report for type 5 error -117
[  205.689444][ T6753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.884541][ T6755] syz.3.195 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  205.992975][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.3.195 Not tainted syzkaller #0 PREEMPT(full) 
[  205.993022][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  205.993043][ T6755] Call Trace:
[  205.993054][ T6755]  <TASK>
[  205.993067][ T6755]  dump_stack_lvl+0x100/0x190
[  205.993123][ T6755]  dump_header+0xfb/0x606
[  205.993167][ T6755]  oom_kill_process.cold+0xd/0x380
[  205.993215][ T6755]  out_of_memory+0x340/0x14f0
[  205.993278][ T6755]  ? __pfx_out_of_memory+0x10/0x10
[  205.993328][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.993384][ T6755]  mem_cgroup_out_of_memory+0xc6/0x130
[  205.993426][ T6755]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  205.993465][ T6755]  ? find_held_lock+0x2b/0x80
[  205.993513][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.993557][ T6755]  ? do_raw_spin_unlock+0x145/0x1e0
[  205.993592][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.993641][ T6755]  ? _raw_spin_unlock+0x28/0x50
[  205.993697][ T6755]  try_charge_memcg+0x6e1/0xdf0
[  205.993760][ T6755]  ? __pfx_try_charge_memcg+0x10/0x10
[  205.993814][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.993857][ T6755]  ? find_held_lock+0x2b/0x80
[  205.993895][ T6755]  ? rcu_read_unlock+0x17/0x60
[  205.993950][ T6755]  ? rcu_read_unlock+0x17/0x60
[  205.994003][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.994062][ T6755]  __memcg_slab_post_alloc_hook+0x470/0x1150
[  205.994134][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.994177][ T6755]  ? kasan_save_track+0x14/0x30
[  205.994225][ T6755]  kmem_cache_alloc_noprof+0x583/0x6a0
[  205.994270][ T6755]  ? sk_prot_alloc+0x60/0x2a0
[  205.994317][ T6755]  sk_prot_alloc+0x60/0x2a0
[  205.994358][ T6755]  sk_alloc+0x36/0xe80
[  205.994412][ T6755]  inet6_create+0x385/0x12b0
[  205.994458][ T6755]  ? inet6_create+0x7f/0x12b0
[  205.994506][ T6755]  __sock_create+0x339/0x860
[  205.994557][ T6755]  inet_ctl_sock_create+0x94/0x230
[  205.994594][ T6755]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  205.994638][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.994681][ T6755]  ? ip6mr_net_init+0x3a2/0x5e0
[  205.994746][ T6755]  ndisc_net_init+0x86/0x230
[  205.994800][ T6755]  ? __pfx_ndisc_net_init+0x10/0x10
[  205.994853][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.994896][ T6755]  ? ac6_proc_init+0x5f/0x80
[  205.994940][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.994983][ T6755]  ? inet6_net_init+0x76d/0xa20
[  205.995028][ T6755]  ? __pfx_ndisc_net_init+0x10/0x10
[  205.995079][ T6755]  ops_init+0x1e2/0x5f0
[  205.995142][ T6755]  setup_net+0x118/0x3a0
[  205.995202][ T6755]  ? __pfx_setup_net+0x10/0x10
[  205.995259][ T6755]  ? mutex_init_lockdep+0xf1/0x120
[  205.995323][ T6755]  copy_net_ns+0x46f/0x7c0
[  205.995365][ T6755]  create_new_namespaces+0x3ea/0xac0
[  205.995433][ T6755]  unshare_nsproxy_namespaces+0xf2/0x220
[  205.995495][ T6755]  ksys_unshare+0x4a2/0xa70
[  205.995555][ T6755]  ? __pfx_ksys_unshare+0x10/0x10
[  205.995617][ T6755]  ? srso_alias_return_thunk+0x5/0xfbef5
[  205.995679][ T6755]  __x64_sys_unshare+0x31/0x40
[  205.995738][ T6755]  do_syscall_64+0x123/0x790
[  205.995802][ T6755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.995839][ T6755] RIP: 0033:0x7f715f19e0d9
[  205.995868][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.995902][ T6755] RSP: 002b:00007f71600b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  205.995935][ T6755] RAX: ffffffffffffffda RBX: 00007f715f425fa0 RCX: 00007f715f19e0d9
[  205.995959][ T6755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000
[  205.995981][ T6755] RBP: 00007f715f235024 R08: 0000000000000000 R09: 0000000000000000
[  205.996003][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.996024][ T6755] R13: 00007f715f426038 R14: 00007f715f425fa0 R15: 00007ffd6ac29f78
[  205.996073][ T6755]  </TASK>
[  205.996115][ T6755] memory: usage 96kB, limit 96kB, failcnt 32
[  206.234869][ T6760] loop2: detected capacity change from 0 to 4096
[  206.262434][ T6755] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0
[  206.714655][ T6755] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  206.829428][ T6755] Memory cgroup stats for /syz3/test:
[  206.829680][ T6755] cache 0
[  206.840600][ T6755] rss 0
[  206.843711][ T6755] rss_huge 0
[  206.846960][ T6755] shmem 0
[  206.851234][ T6755] mapped_file 0
[  206.855641][ T6755] dirty 0
[  206.860409][ T6755] writeback 0
[  206.893017][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.912684][ T6755] workingset_refault_anon 0
[  206.961032][ T6755] workingset_refault_file 0
[  207.007516][ T6755] swap 0
[  207.025506][ T6755] swapcached 0
[  207.049574][ T6755] pgpgin 0
[  207.053536][ T6760] ntfs3(loop2): Failed to load $Extend (-22).
[  207.073502][ T6755] pgpgout 0
[  207.093488][ T6755] pgfault 2
[  207.097800][ T6760] ntfs3(loop2): Failed to initialize $Extend.
[  207.123982][ T6755] pgmajfault 0
[  207.141632][ T6755] inactive_anon 0
[  207.156879][ T6755] active_anon 0
[  207.165759][ T6755] inactive_file 0
[  207.177637][ T6755] active_file 0
[  207.212001][ T6755] unevictable 0
[  207.224689][ T6755] hierarchical_memory_limit 98304
[  207.418542][ T6755] hierarchical_memsw_limit 9223372036854771712
[  207.425080][ T6755] total_cache 0
[  207.428584][ T6755] total_rss 0
[  207.431870][ T6755] total_rss_huge 0
[  207.436252][ T6755] total_shmem 0
[  207.439765][ T6755] total_mapped_file 0
[  207.446454][ T6755] total_dirty 0
[  207.449955][ T6755] total_writeback 0
[  207.476465][ T6755] total_workingset_refault_anon 0
[  207.499031][ T6755] total_workingset_refault_file 0
[  207.564636][ T6755] total_swap 0
[  209.066146][ T6755] total_swapcached 0
[  209.703881][   T29] audit: type=1800 audit(1787395825.959:9): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.197" name="file0" dev="loop2" ino=0 res=0 errno=0
[  210.100109][ T6755] total_pgpgin 0
[  210.104181][ T6755] total_pgpgout 0
[  210.108626][ T6755] total_pgfault 2
[  210.115529][ T6755] total_pgmajfault 0
[  210.122539][ T6755] total_inactive_anon 0
[  210.129860][ T6755] total_active_anon 0
[  210.143340][ T6755] total_inactive_file 0
[  210.147527][ T6755] total_active_file 0
[  210.151525][ T6755] total_unevictable 0
[  210.158659][ T6755] anon_cost 0
[  210.167824][ T6755] file_cost 0
[  210.172645][ T6755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.195,pid=6754,uid=0
[  210.188606][ T6755] Memory cgroup out of memory: Killed process 6755 (syz.3.195) total-vm:102252kB, anon-rss:1428kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  210.224496][ T6755] ICMPv6: NDISC: Failed to initialize the control socket (err -105)
[  210.381013][ T6774] loop5: detected capacity change from 0 to 4096
[  210.416516][ T6774] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  210.604080][ T6774] ntfs3(loop5): ino=19, mi_enum_attr
[  210.648475][ T6774] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  210.693089][ T6774] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  212.667893][   T29] audit: type=1400 audit(1787395829.009:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6DAB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36FD3578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041321635
[  213.512353][ T5733] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  213.812434][ T6808] netlink: zone id is out of range
[  213.907791][ T5733] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  213.958885][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.991309][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  214.016161][ T5733] usb 5-1: Product: syz
[  214.057401][ T5733] usb 5-1: config 0 descriptor??
[  214.090785][ T5733] hub 5-1:0.0: bad descriptor, ignoring hub
[  214.428180][ T6813] loop1: detected capacity change from 0 to 32768
[  214.888149][ T6813] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  214.897363][ T6813] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.019570][ T6813] XFS (loop1): Ending clean mount
[  215.027730][ T6813] XFS (loop1): Quotacheck needed: Please wait.
[  215.066756][ T5733] hub 5-1:0.0: probe with driver hub failed with error -5
[  215.078530][ T5733] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  215.195598][ T6813] XFS (loop1): Quotacheck: Done.
[  215.440571][ T6831] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  215.448774][ T6831] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  215.449146][ T6832] loop0: detected capacity change from 0 to 128
[  215.454976][ T6831] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  215.467256][ T6831] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  215.473477][ T6831] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  215.479662][ T6831] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  215.551592][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.597595][ T6832] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  215.661255][ T6832] hpfs: filesystem error: improperly stopped
[  215.711902][ T6832] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  215.756130][ T6832] hpfs: You really don't want any checks? You are crazy...
[  215.786114][ T6832] hpfs: hpfs_map_sector(): read error
[  215.819437][ T6832] hpfs: code page support is disabled
[  215.841905][ T6832] hpfs: hpfs_map_4sectors(): unaligned read
[  215.859743][ T6832] hpfs: hpfs_map_4sectors(): unaligned read
[  215.872720][ T6832] hpfs: filesystem error: unable to find root dir
[  217.037444][ T5781] usb 5-1: USB disconnect, device number 6
[  217.730664][ T6854] loop1: detected capacity change from 0 to 32768
[  217.752820][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  217.762563][ T5634] Bluetooth: hci5: command 0x0c1a tx timeout
[  217.768820][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout
[  217.775046][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  217.781152][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout
[  217.787682][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  218.139856][ T6854] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  218.154165][ T6854] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.471413][ T6868] loop2: detected capacity change from 0 to 64
[  219.178976][ T6874] loop4: detected capacity change from 0 to 64
[  219.190023][ T6854] XFS (loop1): Ending clean mount
[  219.198862][ T6854] XFS (loop1): Quotacheck needed: Please wait.
[  219.279064][ T6854] XFS (loop1): Quotacheck: Done.
[  219.491094][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.351000][ T6887] loop3: detected capacity change from 0 to 128
[  220.369716][ T6885] loop5: detected capacity change from 0 to 32768
[  220.380049][ T6887] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  220.435346][ T6887] hpfs: filesystem error: improperly stopped
[  220.441658][ T6887] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  220.450243][ T6885] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  220.467078][ T6885] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.493655][ T6887] hpfs: You really don't want any checks? You are crazy...
[  220.533588][ T6887] hpfs: hpfs_map_sector(): read error
[  220.549193][ T6887] hpfs: code page support is disabled
[  220.567146][ T6887] hpfs: hpfs_map_4sectors(): unaligned read
[  220.582351][ T6887] hpfs: hpfs_map_4sectors(): unaligned read
[  220.591106][ T6887] hpfs: filesystem error: unable to find root dir
[  220.616827][ T6885] XFS (loop5): Ending clean mount
[  220.631147][ T6885] XFS (loop5): Quotacheck needed: Please wait.
[  220.823377][ T6885] XFS (loop5): Quotacheck: Done.
[  220.994722][ T6899] loop2: detected capacity change from 0 to 32768
[  221.031303][ T6899] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  221.059061][ T6899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.306920][ T6902] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  221.314457][ T6902] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  221.323910][ T6902] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  221.331239][ T6902] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  221.339623][ T6902] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  221.347810][ T6902] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  221.617113][ T6899] XFS (loop2): Ending clean mount
[  221.636676][ T6899] XFS (loop2): Quotacheck needed: Please wait.
[  221.669385][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.822060][ T6899] XFS (loop2): Quotacheck: Done.
[  222.019062][ T6917] netlink: 'syz.1.231': attribute type 17 has an invalid length.
[  222.029021][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[  222.083564][ T6919] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  222.089711][ T6919] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  222.096036][ T6919] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  222.102127][ T6919] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  222.108291][ T6919] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  222.114430][ T6919] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  222.202161][ T5623] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.230593][ T5733] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  222.434901][ T5733] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  222.501228][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.546487][ T6930] syz.4.241 uses obsolete (PF_INET,SOCK_PACKET)
[  222.546505][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  222.590913][ T5733] usb 6-1: Product: syz
[  222.625709][ T5733] usb 6-1: config 0 descriptor??
[  222.657501][ T6934] loop1: detected capacity change from 0 to 64
[  222.717000][ T5733] hub 6-1:0.0: bad descriptor, ignoring hub
[  223.002519][ T5733] hub 6-1:0.0: probe with driver hub failed with error -5
[  223.417430][ T6938] loop3: detected capacity change from 0 to 32768
[  223.424377][ T5733] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  223.472295][ T6938] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  223.484677][ T6938] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.822649][ T6938] XFS (loop3): Ending clean mount
[  223.839536][ T6938] XFS (loop3): Quotacheck needed: Please wait.
[  223.918929][ T6950] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  224.232427][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  224.232592][ T4923] Bluetooth: hci4: command 0x0c1a tx timeout
[  224.238723][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  224.245456][ T4923] Bluetooth: hci2: command 0x0c1a tx timeout
[  224.250746][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  224.256776][ T4923] Bluetooth: hci1: command 0x0c1a tx timeout
[  224.561637][ T6938] XFS (loop3): Quotacheck: Done.
[  224.562042][ T6953] loop2: detected capacity change from 0 to 64
[  224.810126][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.292870][   T10] usb 6-1: USB disconnect, device number 5
[  225.461545][ T6964] loop5: detected capacity change from 0 to 128
[  225.542300][ T6964] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  225.579005][ T6964] hpfs: filesystem error: improperly stopped
[  225.607399][ T6964] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  225.665292][ T6964] hpfs: You really don't want any checks? You are crazy...
[  225.705442][ T6964] hpfs: hpfs_map_sector(): read error
[  225.750668][ T6964] hpfs: code page support is disabled
[  225.795149][ T6964] hpfs: hpfs_map_4sectors(): unaligned read
[  225.839596][ T6964] hpfs: hpfs_map_4sectors(): unaligned read
[  225.871083][ T6964] hpfs: filesystem error: unable to find root dir
[  226.207365][ T6970] loop4: detected capacity change from 0 to 32768
[  226.475137][ T6970] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  226.628246][ T6970] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.823185][ T6970] XFS (loop4): Ending clean mount
[  227.845293][ T6970] XFS (loop4): Quotacheck needed: Please wait.
[  227.896172][ T6970] XFS (loop4): Quotacheck: Done.
[  229.069138][ T6993] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  229.075566][ T6993] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  229.081662][ T6993] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  229.087841][ T6993] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  229.094151][ T6993] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  229.100248][ T6993] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  229.129722][ T7000] loop3: detected capacity change from 0 to 64
[  229.179478][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.501854][ T7006] loop5: detected capacity change from 0 to 32768
[  230.597041][ T5339] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  230.874209][ T5339] usb 5-1: Using ep0 maxpacket: 8
[  230.940031][ T5339] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  231.014597][ T7006] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  231.027372][ T7006] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.085360][ T5339] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  231.102520][ T5339] usb 5-1: config 0 has no interface number 0
[  231.108824][ T5339] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  231.121583][ T5339] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  231.131953][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  231.132000][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout
[  231.138096][ T4923] Bluetooth: hci3: command 0x0c1a tx timeout
[  231.138143][ T4923] Bluetooth: hci2: command 0x0c1a tx timeout
[  231.144281][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout
[  231.151198][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  231.291514][ T5339] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  231.504675][ T5339] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  231.541504][ T7006] XFS (loop5): Ending clean mount
[  231.550499][ T7006] XFS (loop5): Quotacheck needed: Please wait.
[  231.591541][ T5339] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  231.684474][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.693705][ T7006] XFS (loop5): Quotacheck: Done.
[  231.740371][ T5339] usb 5-1: Product: syz
[  231.755291][ T5339] usb 5-1: Manufacturer: syz
[  231.778211][ T5339] usb 5-1: SerialNumber: syz
[  231.813020][ T5339] usb 5-1: config 0 descriptor??
[  231.938344][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.949792][ T7031] loop2: detected capacity change from 0 to 256
[  232.040292][ T7031] FAT-fs (loop2): error, clusters badly computed (0 != 128)
[  232.065660][ T7031] FAT-fs (loop2): Filesystem has been set read-only
[  232.104654][ T5339] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  232.118368][ T7029] syz.1.266 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  232.140421][ T7031] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  232.231571][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.1.266 Not tainted syzkaller #0 PREEMPT(full) 
[  232.231628][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  232.231650][ T7029] Call Trace:
[  232.231663][ T7029]  <TASK>
[  232.231677][ T7029]  dump_stack_lvl+0x100/0x190
[  232.231735][ T7029]  dump_header+0xfb/0x606
[  232.231780][ T7029]  oom_kill_process.cold+0xd/0x380
[  232.231831][ T7029]  out_of_memory+0x340/0x14f0
[  232.231895][ T7029]  ? __pfx_out_of_memory+0x10/0x10
[  232.231947][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232007][ T7029]  mem_cgroup_out_of_memory+0xc6/0x130
[  232.232051][ T7029]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  232.232092][ T7029]  ? find_held_lock+0x2b/0x80
[  232.232142][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232188][ T7029]  ? do_raw_spin_unlock+0x145/0x1e0
[  232.232225][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232270][ T7029]  ? _raw_spin_unlock+0x28/0x50
[  232.232329][ T7029]  try_charge_memcg+0x6e1/0xdf0
[  232.232396][ T7029]  ? __pfx_try_charge_memcg+0x10/0x10
[  232.232451][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232495][ T7029]  ? find_held_lock+0x2b/0x80
[  232.232535][ T7029]  ? rcu_read_unlock+0x17/0x60
[  232.232592][ T7029]  ? rcu_read_unlock+0x17/0x60
[  232.232654][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232716][ T7029]  __memcg_slab_post_alloc_hook+0x470/0x1150
[  232.232791][ T7029]  ? kasan_unpoison+0x27/0x60
[  232.232835][ T7029]  __kmalloc_noprof+0x642/0x820
[  232.232876][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.232923][ T7029]  ? fib_default_rule_add+0x4f/0x420
[  232.232978][ T7029]  fib_default_rule_add+0x4f/0x420
[  232.233024][ T7029]  ? __pfx_fib6_rules_net_init+0x10/0x10
[  232.233071][ T7029]  fib6_rules_net_init+0x52/0x140
[  232.233121][ T7029]  ops_init+0x1e2/0x5f0
[  232.233186][ T7029]  setup_net+0x118/0x3a0
[  232.233248][ T7029]  ? __pfx_setup_net+0x10/0x10
[  232.233308][ T7029]  ? mutex_init_lockdep+0xf1/0x120
[  232.233375][ T7029]  copy_net_ns+0x46f/0x7c0
[  232.233418][ T7029]  create_new_namespaces+0x3ea/0xac0
[  232.233488][ T7029]  unshare_nsproxy_namespaces+0xf2/0x220
[  232.233545][ T7029]  ksys_unshare+0x4a2/0xa70
[  232.233615][ T7029]  ? __pfx_ksys_unshare+0x10/0x10
[  232.233675][ T7029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.233739][ T7029]  __x64_sys_unshare+0x31/0x40
[  232.233799][ T7029]  do_syscall_64+0x123/0x790
[  232.233866][ T7029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.233908][ T7029] RIP: 0033:0x7fe38899e0d9
[  232.233937][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.233972][ T7029] RSP: 002b:00007fe389896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  232.234007][ T7029] RAX: ffffffffffffffda RBX: 00007fe388c25fa0 RCX: 00007fe38899e0d9
[  232.234032][ T7029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000
[  232.234055][ T7029] RBP: 00007fe388a35024 R08: 0000000000000000 R09: 0000000000000000
[  232.234077][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.234099][ T7029] R13: 00007fe388c26038 R14: 00007fe388c25fa0 R15: 00007ffd915b35b8
[  232.234149][ T7029]  </TASK>
[  232.977306][ T7029] memory: usage 96kB, limit 96kB, failcnt 34
[  232.984270][ T7029] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0
[  233.082786][ T7029] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0
[  233.089829][ T7029] Memory cgroup stats for /syz1/test:
[  233.090063][ T7029] cache 0
[  233.178162][ T7004] netlink: 312 bytes leftover after parsing attributes in process `syz.4.259'.
[  233.358656][ T7029] rss 0
[  233.363123][ T7029] rss_huge 0
[  233.372473][ T7029] shmem 0
[  233.375439][ T7029] mapped_file 0
[  233.378912][ T7029] dirty 0
[  233.381849][ T7029] writeback 0
[  234.362306][ T7004] netlink: 'syz.4.259': attribute type 1 has an invalid length.
[  234.432407][ T7029] workingset_refault_anon 0
[  234.450578][ T7029] workingset_refault_file 0
[  234.470472][ T7029] swap 0
[  234.480651][ T7029] swapcached 0
[  234.499375][ T7029] pgpgin 0
[  234.526618][ T7029] pgpgout 0
[  234.532045][ T7029] pgfault 0
[  234.551962][ T7029] pgmajfault 0
[  234.588849][ T7029] inactive_anon 0
[  234.614370][ T7029] active_anon 0
[  234.635303][ T7029] inactive_file 0
[  234.649670][ T7029] active_file 0
[  234.662859][ T7029] unevictable 0
[  234.666436][ T7029] hierarchical_memory_limit 98304
[  234.702144][ T7029] hierarchical_memsw_limit 9223372036854771712
[  234.751444][ T7029] total_cache 0
[  234.762391][ T7029] total_rss 0
[  234.803400][ T7029] total_rss_huge 0
[  234.811784][ T7029] total_shmem 0
[  234.825114][ T7029] total_mapped_file 0
[  234.850657][ T7029] total_dirty 0
[  234.872769][ T7029] total_writeback 0
[  234.956493][   T29] audit: type=1400 audit(1787395851.279:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  234.972290][ T7029] total_workingset_refault_anon 0
[  235.085748][ T7029] total_workingset_refault_file 0
[  235.090966][ T7029] total_swap 0
[  235.095105][ T7029] total_swapcached 0
[  235.099348][ T7029] total_pgpgin 0
[  235.103018][ T7029] total_pgpgout 0
[  235.110085][ T7029] total_pgfault 0
[  235.116064][ T7029] total_pgmajfault 0
[  235.121742][ T7029] total_inactive_anon 0
[  235.200291][   T10] usb 5-1: USB disconnect, device number 7
[  235.668485][ T7029] total_active_anon 0
[  235.672994][ T7029] total_inactive_file 0
[  235.677843][ T7029] total_active_file 0
[  235.697349][ T7029] total_unevictable 0
[  235.741310][ T7029] anon_cost 0
[  235.759049][ T7029] file_cost 0
[  235.777980][ T7029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.266,pid=7028,uid=0
[  236.082121][ T7054] loop0: detected capacity change from 0 to 32768
[  236.113262][ T7029] Memory cgroup out of memory: Killed process 7029 (syz.1.266) total-vm:102252kB, anon-rss:1420kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  236.145681][ T7054] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  236.154939][ T7054] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.819457][ T7054] XFS (loop0): Ending clean mount
[  236.829908][ T7054] XFS (loop0): Quotacheck needed: Please wait.
[  237.052474][ T7054] XFS (loop0): Quotacheck: Done.
[  237.368526][ T7070] loop5: detected capacity change from 0 to 32768
[  237.418099][ T7070] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  237.426932][ T7070] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.483468][ T7073] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  237.489701][ T7073] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  237.495919][ T7073] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  237.503999][ T7073] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  237.510194][ T7073] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  237.516435][ T7073] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  237.586372][ T7070] XFS (loop5): Ending clean mount
[  237.594750][ T7070] XFS (loop5): Quotacheck needed: Please wait.
[  237.616827][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.648759][ T7070] XFS (loop5): Quotacheck: Done.
[  237.915026][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.631082][ T7093] loop5: detected capacity change from 0 to 32768
[  238.671205][ T5624] Bluetooth: hci1: ISO packet for unknown connection handle 150
[  238.671430][ T7093] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  238.689405][ T7093] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.885803][ T7093] XFS (loop5): Ending clean mount
[  238.904684][ T7093] XFS (loop5): Quotacheck needed: Please wait.
[  239.626661][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  239.632790][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout
[  239.638852][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout
[  239.644941][ T4923] Bluetooth: hci2: command 0x0c1a tx timeout
[  239.651933][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  239.658646][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  239.999688][ T7093] XFS (loop5): Quotacheck: Done.
[  240.651394][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.959201][ T7120] loop1: detected capacity change from 0 to 256
[  242.001261][ T7120] FAT-fs (loop1): error, clusters badly computed (0 != 128)
[  242.099581][ T7120] FAT-fs (loop1): Filesystem has been set read-only
[  242.108522][ T7120] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  242.910644][   T29] audit: type=1400 audit(1787395859.249:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6DAB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36FD3578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041321635
[  243.343626][ T6124] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  243.448990][ T7136] loop3: detected capacity change from 0 to 32768
[  243.732353][ T6124] usb 2-1: Using ep0 maxpacket: 16
[  243.760073][ T6124] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  243.791372][ T7145] loop0: detected capacity change from 0 to 32768
[  243.831643][ T6124] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.885075][ T7145] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  243.885139][ T7136] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  243.894171][ T7145] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.902090][ T7136] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.939082][ T6124] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.028601][ T7136] XFS (loop3): Ending clean mount
[  244.040486][ T7136] XFS (loop3): Quotacheck needed: Please wait.
[  244.079469][ T7145] XFS (loop0): Ending clean mount
[  244.088665][ T6124] usb 2-1: config 0 interface 0 has no altsetting 0
[  244.098368][ T7145] XFS (loop0): Quotacheck needed: Please wait.
[  244.146257][ T6124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.272576][ T7145] XFS (loop0): Quotacheck: Done.
[  244.285657][ T7136] XFS (loop3): Quotacheck: Done.
[  244.366318][ T6124] usb 2-1: config 0 descriptor??
[  244.557796][ T7173] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  244.566593][ T7173] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  244.572930][ T7173] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  244.579063][ T7173] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  244.585257][ T7173] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  244.591378][ T7173] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  244.603976][ T5626] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.642268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  244.718968][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.989868][ T6124] usbhid 2-1:0.0: can't add hid device: -71
[  245.101177][ T6124] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  245.597671][ T6124] usb 2-1: USB disconnect, device number 4
[  246.682483][ T5621] Bluetooth: hci5: command 0x0c1a tx timeout
[  246.688624][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout
[  246.694800][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout
[  246.700824][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  246.707486][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  246.713660][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  249.292264][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  249.599364][ T5781] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  249.924525][ T5616] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  250.019765][ T5781] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  250.059717][  T186] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  250.327629][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  250.601273][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.861710][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  251.077400][ T5781] usb 6-1: Product: syz
[  251.483767][  T186] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  251.494546][ T5616] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  251.507543][ T5781] usb 6-1: config 0 descriptor??
[  251.508095][  T186] usb 3-1: USB disconnect, device number 4
[  251.530462][ T5616] usb 4-1: USB disconnect, device number 4
[  251.559247][ T7219] loop2: detected capacity change from 0 to 256
[  251.567457][ T5781] hub 6-1:0.0: USB hub found
[  251.580709][ T7221] loop4: detected capacity change from 0 to 256
[  251.698244][ T7221] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  251.772510][ T7221] FAT-fs (loop4): Filesystem has been set read-only
[  251.793379][ T7221] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  252.512948][ T5781] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  252.622170][ T5781] usbhid 6-1:0.0: can't add hid device: -71
[  252.661036][ T5781] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  253.168615][ T5781] usb 6-1: USB disconnect, device number 6
[  253.416040][ T7236] loop2: detected capacity change from 0 to 512
[  253.655198][ T7237] loop1: detected capacity change from 0 to 32768
[  253.694419][ T7237] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  253.703569][ T7237] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.225749][ T7237] XFS (loop1): Ending clean mount
[  254.239681][ T7237] XFS (loop1): Quotacheck needed: Please wait.
[  254.611316][ T7248] loop4: detected capacity change from 0 to 32768
[  254.665475][ T7248] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  254.676804][ T7248] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.078050][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  255.097948][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  255.549268][ T7237] XFS (loop1): Quotacheck: Done.
[  255.936264][ T7263] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  255.943362][ T7263] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  255.950519][ T7263] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  255.959145][ T7263] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  255.969457][ T7263] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  255.975804][ T7263] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  256.044984][ T7248] XFS (loop4): Ending clean mount
[  256.052864][ T7248] XFS (loop4): Quotacheck needed: Please wait.
[  256.129946][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.268522][ T7248] XFS (loop4): Quotacheck: Done.
[  256.536442][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  257.834939][ T7294] loop2: detected capacity change from 0 to 256
[  258.003366][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout
[  258.009868][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  258.009898][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout
[  258.016204][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout
[  258.022734][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  258.028042][ T5634] Bluetooth: hci1: command 0x0c1a tx timeout
[  258.092498][ T5781] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  258.234146][ T7300] loop5: detected capacity change from 0 to 256
[  258.303339][ T5781] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  258.314873][ T7297] loop0: detected capacity change from 0 to 32768
[  258.326582][ T7297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.322 (7297)
[  258.402271][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  258.413796][ T7297] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.424630][ T7297] BTRFS info (device loop0): using crc32c checksum algorithm
[  258.450819][ T7300] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  258.537925][ T7300] FAT-fs (loop5): Filesystem has been set read-only
[  258.551553][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.782654][ T7300] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  259.108927][ T7297] BTRFS info (device loop0): enabling ssd optimizations
[  259.115980][ T7297] BTRFS info (device loop0): turning on async discard
[  259.122849][ T7297] BTRFS info (device loop0): enabling free space tree
[  259.129623][ T7297] BTRFS info (device loop0): use lzo compression, level 1
[  259.200409][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  259.259832][ T7306] loop2: detected capacity change from 0 to 2048
[  259.280835][ T5781] usb 2-1: Product: syz
[  259.327057][ T5781] usb 2-1: config 0 descriptor??
[  259.435714][ T7297] BTRFS critical (device loop0 state E): emergency shutdown
[  259.464057][ T5781] hub 2-1:0.0: USB hub found
[  259.601715][ T7306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.695780][ T5781] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  259.843585][ T5626] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.897118][ T5781] usbhid 2-1:0.0: can't add hid device: -71
[  259.952779][ T5781] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  260.264488][ T5781] usb 2-1: USB disconnect, device number 5
[  261.622902][ T7341] loop5: detected capacity change from 0 to 32768
[  261.741932][ T7341] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  261.814749][ T7341] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.893336][ T7347] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  261.899536][ T7347] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  261.905779][ T7347] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  261.911888][ T7347] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  261.918072][ T7347] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  261.924586][ T7347] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  261.995671][ T7341] XFS (loop5): Ending clean mount
[  262.004648][ T7341] XFS (loop5): Quotacheck needed: Please wait.
[  262.048609][ T7341] XFS (loop5): Quotacheck: Done.
[  262.270815][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  264.123062][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  264.532601][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  264.589052][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout
[  264.589064][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout
[  264.589111][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout
[  264.595159][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  264.601358][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout
[  264.607154][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  265.234700][ T5768] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  265.469064][ T5768] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  265.499050][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  265.531839][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.566035][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  265.588207][ T5768] usb 3-1: Product: syz
[  265.635481][ T5768] usb 3-1: config 0 descriptor??
[  265.674458][ T5768] hub 3-1:0.0: USB hub found
[  265.885747][ T5768] hub 3-1:0.0: 1 port detected
[  266.161514][ T7380] loop0: detected capacity change from 0 to 256
[  266.281527][ T7380] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  266.333889][ T7380] FAT-fs (loop0): Filesystem has been set read-only
[  266.343843][ T7380] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  266.903928][ T5768] hub 3-1:0.0: activate --> -90
[  267.441482][  T944] usb 3-1: USB disconnect, device number 5
[  267.493561][ T5781] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  267.734294][ T5781] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  267.750909][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  267.779906][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.803041][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  267.826509][ T5781] usb 4-1: Product: syz
[  267.854174][ T5781] usb 4-1: config 0 descriptor??
[  267.872705][ T5768] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  267.878246][ T5781] hub 4-1:0.0: USB hub found
[  268.182383][ T5768] usb 5-1: Using ep0 maxpacket: 16
[  268.187380][ T5781] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  268.225825][ T5768] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  268.246583][ T5781] usbhid 4-1:0.0: can't add hid device: -71
[  268.272470][ T5781] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  268.313444][ T5781] usb 4-1: USB disconnect, device number 5
[  268.495505][ T7403] loop5: detected capacity change from 0 to 32768
[  268.515436][ T5768] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.577057][ T5768] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.604537][ T5768] usb 5-1: config 0 interface 0 has no altsetting 0
[  268.635648][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.655587][ T7403] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  268.706770][ T7403] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  269.030829][ T7403] XFS (loop5): Ending clean mount
[  269.047567][ T5768] usb 5-1: config 0 descriptor??
[  269.053527][ T7403] XFS (loop5): Quotacheck needed: Please wait.
[  269.192990][ T7403] XFS (loop5): Quotacheck: Done.
[  269.543321][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  269.603033][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  269.626530][ T5768] usbhid 5-1:0.0: can't add hid device: -71
[  269.657535][ T5768] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  269.684736][ T5768] usb 5-1: USB disconnect, device number 8
[  270.503549][ T5781] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  270.682326][ T5781] usb 4-1: Using ep0 maxpacket: 8
[  270.692502][ T6124] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  270.721059][ T5781] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  270.765053][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.810491][   T29] audit: type=1400 audit(1787395887.149:13): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  270.827254][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.923756][ T6124] usb 2-1: Using ep0 maxpacket: 32
[  271.147699][ T5781] usb 4-1: config 0 descriptor??
[  271.208815][ T6124] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  271.286245][ T6124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.397258][ T6124] usb 2-1: config 0 descriptor??
[  271.491357][ T5781] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  271.680650][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.723825][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.813388][ T6124] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  271.847611][ T6124] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  271.864499][ T6124] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  271.890211][   T10] usb 4-1: USB disconnect, device number 6
[  271.921641][ T7434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.340650][ T7439] loop4: detected capacity change from 0 to 256
[  272.546720][ T7439] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  272.605278][ T7439] FAT-fs (loop4): Filesystem has been set read-only
[  272.679087][ T7439] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.492829][ T7457] loop2: detected capacity change from 0 to 64
[  274.882476][ T5768] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  274.908943][ T7459] loop1: detected capacity change from 0 to 32768
[  274.934612][ T7459] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  274.943647][ T7459] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.320027][ T5768] usb 5-1: Using ep0 maxpacket: 16
[  275.446708][ T5768] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  275.468677][ T5768] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.499593][ T5768] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.526480][ T7459] XFS (loop1): Ending clean mount
[  275.535489][ T7459] XFS (loop1): Quotacheck needed: Please wait.
[  275.580042][ T5768] usb 5-1: config 0 interface 0 has no altsetting 0
[  275.599732][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.614745][ T7459] XFS (loop1): Quotacheck: Done.
[  275.620706][ T5768] usb 5-1: config 0 descriptor??
[  275.896512][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  276.077726][   T29] audit: type=1800 audit(1787395892.419:14): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.361" name="file1" dev="loop2" ino=5 res=0 errno=0
[  276.149398][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  276.157560][ T5768] usbhid 5-1:0.0: can't add hid device: -71
[  276.164313][ T5768] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  276.246343][ T5768] usb 5-1: USB disconnect, device number 9
[  276.872492][ T7485] loop1: detected capacity change from 0 to 32768
[  276.895624][ T7485] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  276.907671][ T7485] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.001331][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.066485][ T7485] XFS (loop1): Ending clean mount
[  277.069189][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.076344][ T7485] XFS (loop1): Quotacheck needed: Please wait.
[  277.140244][ T7494] loop5: detected capacity change from 0 to 2048
[  277.216410][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.240022][ T7485] XFS (loop1): Quotacheck: Done.
[  277.279260][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.445472][ T5613] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.458414][ T7503] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.387746][ T5768] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  278.546805][ T7508] loop1: detected capacity change from 0 to 256
[  278.619685][ T5768] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  278.678921][ T5768] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.726777][ T5768] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  278.748610][ T7508] FAT-fs (loop1): error, clusters badly computed (0 != 128)
[  278.786900][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  278.806656][ T7508] FAT-fs (loop1): Filesystem has been set read-only
[  278.817157][ T7508] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  278.827154][ T5768] usb 5-1: SerialNumber: syz
[  279.236526][ T5768] usb 5-1: 0:2 : does not exist
[  280.085311][ T5768] usb 5-1: USB disconnect, device number 10
[  280.342617][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  281.903231][   T12] tipc: Subscription rejected, illegal request
[  282.024682][ T7535] loop3: detected capacity change from 0 to 64
[  282.083801][   T29] audit: type=1400 audit(1787395898.429:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  282.474286][ T7538] loop4: detected capacity change from 0 to 32768
[  282.599062][ T7538] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  282.608969][ T7538] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  282.783942][ T7538] XFS (loop4): Ending clean mount
[  282.795353][ T7538] XFS (loop4): Quotacheck needed: Please wait.
[  282.925464][ T7538] XFS (loop4): Quotacheck: Done.
[  283.053052][ T7556] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  283.059293][ T7556] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  283.065527][ T7556] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  283.073449][ T7556] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  283.079638][ T7556] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  283.085950][ T7556] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  283.161373][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.060896][ T7564] loop0: detected capacity change from 0 to 256
[  284.173381][ T7564] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  284.215669][ T7564] FAT-fs (loop0): Filesystem has been set read-only
[  284.260145][ T7564] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  285.088620][ T7568] loop4: detected capacity change from 0 to 32768
[  285.122501][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  285.128714][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout
[  285.134787][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  285.140980][ T4923] Bluetooth: hci2: command 0x0c1a tx timeout
[  285.141055][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout
[  285.147100][ T4923] Bluetooth: hci1: command 0x0c1a tx timeout
[  285.181019][ T7568] 
[  285.181019][ T7568]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.181019][ T7568] 
[  285.205326][ T7568] ERROR: (device loop4): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  285.205326][ T7568] 
[  285.219158][ T7568] ERROR: (device loop4): txAbort: 
[  285.219158][ T7568] 
[  285.362242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  285.415014][ T5614] ERROR: (device loop4): xtTruncate: xt_getpage: xtree page corrupt
[  285.415014][ T5614] 
[  285.563805][ T5905] ERROR: (device loop4): diWrite: ixpxd invalid
[  285.563805][ T5905] 
[  285.695034][ T5905] ERROR: (device loop4): txAbort: 
[  285.695034][ T5905] 
[  285.748051][ T5905] jfs_write_inode: jfs_commit_inode failed!
[  285.795055][ T5614] 
[  285.795055][ T5614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.795055][ T5614] 
[  285.817394][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'.
[  285.877583][ T5614] 
[  285.877583][ T5614]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  285.877583][ T5614] 
[  287.333006][ T7577] loop2: detected capacity change from 0 to 512
[  287.407095][ T7577] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  287.456474][ T7579] loop1: detected capacity change from 0 to 512
[  287.465072][ T7579] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  287.516387][ T7579] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  287.532408][ T7579] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.393: corrupted inode contents
[  287.544830][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.552239][    C0] EXT4-fs (loop1): error count since last fsck: 2
[  287.567935][    C0] EXT4-fs (loop1): initial error at time 1787395903: mb_free_blocks:2046: inode 11: block 64
[  287.578284][    C0] EXT4-fs (loop1): last error at time 1787395903: ext4_do_update_inode:5801: inode 11
[  287.610860][ T7579] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #11: comm syz.1.393: mark_inode_dirty error
[  287.622350][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.638993][ T7577] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  287.675449][ T7577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm syz.2.392: bg 0: block 248: padding at end of block bitmap is not set
[  287.690754][ T7577] loop2: lost filesystem error report for type 5 error -117
[  287.692366][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  287.706091][    C0] EXT4-fs (loop2): last error at time 1787395904: ext4_validate_block_bitmap:444
[  287.753983][ T7577] Quota error (device loop2): write_blk: dquota write failed
[  287.761793][ T7577] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  287.772151][ T7577] EXT4-fs error (device loop2): ext4_acquire_dquot:7067: comm syz.2.392: Failed to acquire dquot type 1
[  287.784567][ T7577] loop2: lost filesystem error report for type 5 error -28
[  287.811857][ T7579] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.393: invalid indirect mapped block 1 (level 1)
[  287.832463][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.839424][ T7579] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.393: corrupted inode contents
[  287.861241][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.889765][ T7579] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[  287.907737][ T7579] loop1: lost filesystem error report for type 5 error -117
[  287.920797][ T7579] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.393: corrupted inode contents
[  287.940071][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.945789][ T7579] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.393: mark_inode_dirty error
[  287.966393][ T7579] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  287.967876][ T7579] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  287.987735][ T7579] loop1: lost filesystem error report for type 5 error -117
[  287.993802][ T7579] EXT4-fs (loop1): 1 truncate cleaned up
[  288.008792][ T7579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.123104][ T7577] EXT4-fs (loop2): 1 truncate cleaned up
[  288.264560][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  290.761563][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.035392][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  291.047939][   T49] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  291.110412][   T49] EXT4-fs error (device loop2): ext4_release_dquot:7103: comm kworker/u8:3: Failed to release dquot type 1
[  291.154895][   T49] loop2: lost filesystem error report for type 5 error -117
[  291.479045][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.673803][ T7605] loop2: detected capacity change from 0 to 64
[  291.889661][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.144095][ T7617] loop4: detected capacity change from 0 to 256
[  294.219523][ T7617] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  294.373442][ T7617] FAT-fs (loop4): Filesystem has been set read-only
[  294.384546][ T7617] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  296.189215][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'.
[  298.925379][ T7652] loop3: detected capacity change from 0 to 32768
[  298.970679][ T7652] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  298.996026][ T7652] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.121078][ T7652] XFS (loop3): Ending clean mount
[  299.131870][ T7652] XFS (loop3): Quotacheck needed: Please wait.
[  299.266208][ T7652] XFS (loop3): Quotacheck: Done.
[  299.375460][ T7652] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  299.383024][ T7652] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  299.389880][ T7652] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  299.396940][ T7652] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  299.403667][ T7652] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  299.410226][ T7652] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  299.421376][ T7667] loop0: detected capacity change from 0 to 256
[  299.440390][ T7667] exfat: Deprecated parameter 'utf8'
[  299.446787][ T7667] exfat: Deprecated parameter 'utf8'
[  300.214957][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.226056][ T7667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  301.076455][ T7671] loop5: detected capacity change from 0 to 32768
[  301.162001][ T7671] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  301.181641][ T7671] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.192431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  301.442355][ T5621] Bluetooth: hci5: command 0x0c1a tx timeout
[  301.443203][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  301.454894][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout
[  301.455029][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout
[  301.468357][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout
[  301.474720][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout
[  302.463055][ T7671] XFS (loop5): Ending clean mount
[  302.486045][ T7671] XFS (loop5): Quotacheck needed: Please wait.
[  303.173553][ T7671] XFS (loop5): Quotacheck: Done.
[  303.255472][ T5612] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  304.132241][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  308.105239][ T7716] loop4: detected capacity change from 0 to 32768
[  308.121087][ T7716] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  308.132037][ T7716] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  308.173394][ T5733] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  308.373663][ T5733] usb 4-1: Using ep0 maxpacket: 32
[  308.393433][ T7716] XFS (loop4): Ending clean mount
[  308.403243][ T7716] XFS (loop4): Quotacheck needed: Please wait.
[  308.432771][ T5733] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  308.470943][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.542287][ T5733] usb 4-1: config 0 descriptor??
[  308.726001][ T7716] XFS (loop4): Quotacheck: Done.
[  308.793323][ T7716] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  308.799675][ T7716] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  308.806464][ T7716] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  308.812756][ T7716] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  308.818954][ T7716] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  308.825166][ T7716] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  308.899222][ T5614] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  308.969957][ T5733] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  310.374692][ T7740] loop2: detected capacity change from 0 to 32768
[  310.416531][ T7740] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  310.432456][ T7740] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.648366][ T7740] XFS (loop2): Ending clean mount
[  310.671533][ T7740] XFS (loop2): Quotacheck needed: Please wait.
[  310.802293][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout
[  310.808436][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  310.865390][ T7740] XFS (loop2): Quotacheck: Done.
[  310.885840][ T7755] loop1: detected capacity change from 0 to 256
[  310.892854][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout
[  310.900283][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout
[  310.906953][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  310.912312][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout
[  311.030698][ T5623] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.067520][ T7755] FAT-fs (loop1): error, clusters badly computed (0 != 128)
[  311.150475][ T7755] FAT-fs (loop1): Filesystem has been set read-only
[  311.223678][ T7755] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  312.882631][ T7773] loop1: detected capacity change from 0 to 64
[  313.349793][ T7778] loop2: detected capacity change from 0 to 32768
[  313.358239][  T186] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  313.395272][ T7778] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  313.404324][ T7778] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.533254][  T186] usb 5-1: Using ep0 maxpacket: 16
[  313.543215][ T7778] XFS (loop2): Ending clean mount
[  313.554751][ T7778] XFS (loop2): Quotacheck needed: Please wait.
[  313.601045][  T186] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  313.656357][  T186] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.705899][  T186] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  313.721508][  T186] usb 5-1: config 0 interface 0 has no altsetting 0
[  313.735584][ T7778] XFS (loop2): Quotacheck: Done.
[  313.776645][  T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.835230][  T186] usb 5-1: config 0 descriptor??
[  313.867606][ T5623] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.317396][  T186] usbhid 5-1:0.0: can't add hid device: -71
[  314.344076][  T186] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  314.394993][  T186] usb 5-1: USB disconnect, device number 11
[  315.931691][ T7805] loop3: detected capacity change from 0 to 4096
[  316.170619][ T7815] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.486265][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  316.554407][ T7819] loop2: detected capacity change from 0 to 256
[  316.573230][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  316.735013][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'.
[  317.179961][ T7819] FAT-fs (loop2): error, clusters badly computed (0 != 128)
[  317.274606][ T7819] FAT-fs (loop2): Filesystem has been set read-only
[  317.374733][ T7819] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  319.651681][ T7834] loop2: detected capacity change from 0 to 64
[  321.606106][ T7846] loop0: detected capacity change from 0 to 512
[  325.028777][ T7875] loop0: detected capacity change from 0 to 256
[  325.106841][ T7875] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  325.135291][ T7875] FAT-fs (loop0): Filesystem has been set read-only
[  325.180859][ T7875] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  326.149742][ T7884] loop5: detected capacity change from 0 to 512
[  326.228484][ T7884] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  326.321804][ T7884] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.475: bad orphan inode 13
[  326.332348][ T7884] loop5: lost filesystem error report for type 5 error -117
[  326.342236][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  326.356201][    C0] EXT4-fs (loop5): last error at time 1787395942: ext4_orphan_get:1429
[  326.377880][ T7884] ext4_test_bit(bit=12, block=18) = 1
[  326.441231][ T7884] is_bad_inode(inode)=0
[  326.584401][ T7884] NEXT_ORPHAN(inode)=0
[  326.636559][ T7884] max_ino=32
[  326.660387][ T7884] i_nlink=1
[  327.029239][ T7884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  327.333463][ T7883] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  327.375681][ T7883] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.475: bg 0: block 248: padding at end of block bitmap is not set
[  327.494419][ T7883] Quota error (device loop5): write_blk: dquota write failed
[  327.504158][ T7883] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  327.516315][ T7883] EXT4-fs error (device loop5): ext4_acquire_dquot:7067: comm syz.5.475: Failed to acquire dquot type 1
[  327.542917][ T7884] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  328.014158][ T7899] loop4: detected capacity change from 0 to 64
[  328.402630][ T7884] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  328.412801][ T7884] EXT4-fs error (device loop5): ext4_acquire_dquot:7067: comm syz.5.475: Failed to acquire dquot type 1
[  328.553005][   T33] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5
[  328.578954][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  328.619677][   T33] EXT4-fs error (device loop5): ext4_release_dquot:7103: comm kworker/u8:2: Failed to release dquot type 1
[  328.677761][   T33] loop5: lost filesystem error report for type 5 error -117
[  329.036989][ T7911] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  329.052961][ T7911] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  329.059113][ T7911] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  329.065315][ T7911] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  329.071504][ T7911] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  329.077765][ T7911] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  330.936766][ T7937] loop5: detected capacity change from 0 to 256
[  330.958910][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'.
[  331.066298][ T7937] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  331.078726][ T7941] netlink: 'syz.4.491': attribute type 10 has an invalid length.
[  331.098351][ T7937] FAT-fs (loop5): Filesystem has been set read-only
[  331.115637][ T7937] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  331.123481][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout
[  331.130555][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout
[  331.136684][ T5629] Bluetooth: hci4: command 0x0c1a tx timeout
[  331.142964][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout
[  331.143357][ T4923] Bluetooth: hci1: command 0x0c1a tx timeout
[  331.155534][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout
[  331.166124][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.491'.
[  331.871359][ T7938] 8021q: adding VLAN 0 to HW filter on device bond1
[  331.984121][ T7941] dummy0: entered promiscuous mode
[  332.333854][ T7951] loop5: detected capacity change from 0 to 32768
[  332.354900][ T7951] (syz.5.494,7951,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  332.368507][ T7951] (syz.5.494,7951,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  332.401894][ T7951] JBD2: Ignoring recovery information on journal
[  332.470311][ T7951] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  332.676235][ T7951] 
[  332.678591][ T7951] ======================================================
[  332.685624][ T7951] WARNING: possible circular locking dependency detected
[  332.692663][ T7951] syzkaller #0 Not tainted
[  332.697073][ T7951] ------------------------------------------------------
[  332.704080][ T7951] syz.5.494/7951 is trying to acquire lock:
[  332.709969][ T7951] ffff8880529be8e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x35b/0x840
[  332.719336][ T7951] 
[  332.719336][ T7951] but task is already holding lock:
[  332.727301][ T7951] ffff888069e524e0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5cc/0x8f0
[  332.737634][ T7951] 
[  332.737634][ T7951] which lock already depends on the new lock.
[  332.737634][ T7951] 
[  332.748034][ T7951] 
[  332.748034][ T7951] the existing dependency chain (in reverse order) is:
[  332.757035][ T7951] 
[  332.757035][ T7951] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  332.765600][ T7951]        lock_acquire+0x1b9/0x370
[  332.770680][ T7951]        down_read+0x99/0x4c0
[  332.775355][ T7951]        ocfs2_start_trans+0x5cc/0x8f0
[  332.780866][ T7951]        ocfs2_mknod+0x160d/0x2770
[  332.785997][ T7951]        ocfs2_create+0xf4/0x430
[  332.790946][ T7951]        lookup_open+0x1255/0x1990
[  332.796081][ T7951]        path_openat+0xa2c/0x2440
[  332.801230][ T7951]        do_file_open+0x20e/0x430
[  332.806277][ T7951]        do_sys_openat2+0x10f/0x1e0
[  332.811508][ T7951]        __x64_sys_openat+0x12d/0x210
[  332.816914][ T7951]        do_syscall_64+0x123/0x790
[  332.822060][ T7951]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.828477][ T7951] 
[  332.828477][ T7951] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  332.835986][ T7951]        lock_acquire+0x1b9/0x370
[  332.841037][ T7951]        ocfs2_start_trans+0x4bb/0x8f0
[  332.846526][ T7951]        ocfs2_truncate_file+0x503/0x17d0
[  332.852261][ T7951]        ocfs2_setattr+0x14a0/0x2680
[  332.857565][ T7951]        notify_change+0xb25/0x1330
[  332.862781][ T7951]        do_truncate+0x1df/0x240
[  332.867731][ T7951]        path_openat+0x1e6d/0x2440
[  332.872857][ T7951]        do_file_open+0x20e/0x430
[  332.877894][ T7951]        do_sys_openat2+0x10f/0x1e0
[  332.883117][ T7951]        __x64_sys_openat+0x12d/0x210
[  332.888531][ T7951]        do_syscall_64+0x123/0x790
[  332.893676][ T7951]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.900103][ T7951] 
[  332.900103][ T7951] -> #1 (&oi->ip_alloc_sem){+.+.}-{4:4}:
[  332.907957][ T7951]        lock_acquire+0x1b9/0x370
[  332.913001][ T7951]        down_write+0x8b/0x1f0
[  332.917771][ T7951]        ocfs2_try_remove_refcount_tree+0xa7/0x2f0
[  332.924301][ T7951]        ocfs2_truncate_file+0xb57/0x17d0
[  332.930026][ T7951]        ocfs2_setattr+0x14a0/0x2680
[  332.935326][ T7951]        notify_change+0xb25/0x1330
[  332.940550][ T7951]        do_truncate+0x1df/0x240
[  332.945511][ T7951]        path_openat+0x1e6d/0x2440
[  332.950631][ T7951]        do_file_open+0x20e/0x430
[  332.955678][ T7951]        do_sys_openat2+0x10f/0x1e0
[  332.960927][ T7951]        __x64_sys_openat+0x12d/0x210
[  332.966320][ T7951]        do_syscall_64+0x123/0x790
[  332.971462][ T7951]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.977882][ T7951] 
[  332.977882][ T7951] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  332.985753][ T7951]        check_prev_add+0xeb/0xe60
[  332.990892][ T7951]        __lock_acquire+0x1492/0x1ec0
[  332.996283][ T7951]        lock_acquire+0x1b9/0x370
[  333.001326][ T7951]        down_read+0x99/0x4c0
[  333.006006][ T7951]        ocfs2_init_acl+0x35b/0x840
[  333.011219][ T7951]        ocfs2_mknod+0x173c/0x2770
[  333.016341][ T7951]        ocfs2_create+0xf4/0x430
[  333.021288][ T7951]        lookup_open+0x1255/0x1990
[  333.026424][ T7951]        path_openat+0xa2c/0x2440
[  333.031456][ T7951]        do_file_open+0x20e/0x430
[  333.036502][ T7951]        do_sys_openat2+0x10f/0x1e0
[  333.041717][ T7951]        __x64_sys_creat+0xcc/0x120
[  333.046935][ T7951]        do_syscall_64+0x123/0x790
[  333.052071][ T7951]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.058484][ T7951] 
[  333.058484][ T7951] other info that might help us debug this:
[  333.058484][ T7951] 
[  333.068718][ T7951] Chain exists of:
[  333.068718][ T7951]   &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier
[  333.068718][ T7951] 
[  333.082668][ T7951]  Possible unsafe locking scenario:
[  333.082668][ T7951] 
[  333.090126][ T7951]        CPU0                    CPU1
[  333.095484][ T7951]        ----                    ----
[  333.100841][ T7951]   rlock(&journal->j_trans_barrier);
[  333.106216][ T7951]                                lock(sb_internal#2);
[  333.112988][ T7951]                                lock(&journal->j_trans_barrier);
[  333.120795][ T7951]   rlock(&oi->ip_xattr_sem);
[  333.125486][ T7951] 
[  333.125486][ T7951]  *** DEADLOCK ***
[  333.125486][ T7951] 
[  333.133619][ T7951] locks held by syz.5.494/7951: 8, last CPU#0:
[  333.139772][ T7951]  #0: ffff88802a1fa460 (sb_writers#13){.+.+}-{0:0}, at: lookup_open+0x150/0x1990
[  333.149107][ T7951]  #1: ffff8880529beba0 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: lookup_open+0xb13/0x1990
[  333.159367][ T7951]  #2: ffff888076ecdda0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4b00
[  333.173169][ T7951]  #3: ffff888076eceba0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4b00
[  333.187062][ T7951]  #4: ffff888076eccfa0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0xea/0xbe0
[  333.200942][ T7951]  #5: ffff88802a1fa650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0x160d/0x2770
[  333.210317][ T7951]  #6: ffff888069e524e0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5cc/0x8f0
[  333.221077][ T7951]  #7: ffff888029d7e938 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0xfa7/0x1390
[  333.230879][ T7951] 
[  333.230879][ T7951] stack backtrace:
[  333.236762][ T7951] CPU: 0 UID: 0 PID: 7951 Comm: syz.5.494 Not tainted syzkaller #0 PREEMPT(full) 
[  333.236805][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  333.236826][ T7951] Call Trace:
[  333.236837][ T7951]  <TASK>
[  333.236849][ T7951]  dump_stack_lvl+0x100/0x190
[  333.236887][ T7951]  print_circular_bug.cold+0x178/0x1be
[  333.236949][ T7951]  check_noncircular+0x146/0x160
[  333.237000][ T7951]  check_prev_add+0xeb/0xe60
[  333.237041][ T7951]  __lock_acquire+0x1492/0x1ec0
[  333.237098][ T7951]  ? __ocfs2_mknod_locked.isra.0+0xb71/0x1f40
[  333.237147][ T7951]  lock_acquire+0x1b9/0x370
[  333.237185][ T7951]  ? ocfs2_init_acl+0x35b/0x840
[  333.237236][ T7951]  ? __pfx___might_resched+0x10/0x10
[  333.237288][ T7951]  down_read+0x99/0x4c0
[  333.237316][ T7951]  ? ocfs2_init_acl+0x35b/0x840
[  333.237357][ T7951]  ? __pfx_down_read+0x10/0x10
[  333.237394][ T7951]  ? dquot_alloc_inode+0x448/0xb10
[  333.237444][ T7951]  ? dquot_alloc_inode+0x448/0xb10
[  333.237484][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.237534][ T7951]  ocfs2_init_acl+0x35b/0x840
[  333.237584][ T7951]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  333.237625][ T7951]  ? ocfs2_block_signals+0x88/0xc0
[  333.237661][ T7951]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  333.237708][ T7951]  ocfs2_mknod+0x173c/0x2770
[  333.237755][ T7951]  ? __pfx_ocfs2_mknod+0x10/0x10
[  333.237797][ T7951]  ? __lock_acquire+0x4c5/0x1ec0
[  333.237849][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.237890][ T7951]  ? find_held_lock+0x2b/0x80
[  333.237919][ T7951]  ? d_splice_alias_ops+0x5f4/0x15b0
[  333.237955][ T7951]  ? d_splice_alias_ops+0x5f4/0x15b0
[  333.237999][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238039][ T7951]  ? do_raw_spin_lock+0x128/0x260
[  333.238064][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238101][ T7951]  ? find_held_lock+0x2b/0x80
[  333.238144][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238185][ T7951]  ? do_raw_spin_unlock+0x145/0x1e0
[  333.238213][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238249][ T7951]  ? _raw_spin_unlock+0x28/0x50
[  333.238297][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238339][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238375][ T7951]  ocfs2_create+0xf4/0x430
[  333.238418][ T7951]  ? __pfx_ocfs2_lookup+0x10/0x10
[  333.238461][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238499][ T7951]  ? __pfx_ocfs2_create+0x10/0x10
[  333.238534][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238578][ T7951]  ? security_inode_create+0xc4/0x280
[  333.238632][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.238665][ T7951]  ? may_o_create+0x46/0x3a0
[  333.238722][ T7951]  ? __pfx_ocfs2_create+0x10/0x10
[  333.238768][ T7951]  lookup_open+0x1255/0x1990
[  333.238823][ T7951]  path_openat+0xa2c/0x2440
[  333.238870][ T7951]  ? __pfx_path_openat+0x10/0x10
[  333.238921][ T7951]  do_file_open+0x20e/0x430
[  333.238959][ T7951]  ? __pfx_do_file_open+0x10/0x10
[  333.239014][ T7951]  ? _raw_spin_unlock+0x28/0x50
[  333.239062][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.239098][ T7951]  ? alloc_fd+0x471/0x7a0
[  333.239140][ T7951]  do_sys_openat2+0x10f/0x1e0
[  333.239192][ T7951]  ? __pfx_do_sys_openat2+0x10/0x10
[  333.239241][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.239274][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.239316][ T7951]  ? __x64_sys_futex+0x358/0x4d0
[  333.239355][ T7951]  __x64_sys_creat+0xcc/0x120
[  333.239400][ T7951]  ? __pfx___x64_sys_creat+0x10/0x10
[  333.239446][ T7951]  ? srso_alias_return_thunk+0x5/0xfbef5
[  333.239492][ T7951]  ? do_syscall_64+0xae/0x790
[  333.239544][ T7951]  do_syscall_64+0x123/0x790
[  333.239592][ T7951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.239631][ T7951] RIP: 0033:0x7f63acb9e0d9
[  333.239658][ T7951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.239690][ T7951] RSP: 002b:00007f63aadf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  333.239719][ T7951] RAX: ffffffffffffffda RBX: 00007f63ace25fa0 RCX: 00007f63acb9e0d9
[  333.239739][ T7951] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  333.239764][ T7951] RBP: 00007f63acc35024 R08: 0000000000000000 R09: 0000000000000000
[  333.239786][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.239807][ T7951] R13: 00007f63ace26038 R14: 00007f63ace25fa0 R15: 00007ffd14f2ef58
[  333.239840][ T7951]  </TASK>
[  333.809910][ T7957] loop1: detected capacity change from 0 to 4096
[  334.514425][ T7962] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.757062][ T7966] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[  335.236942][ T5612] ocfs2: Unmounting device (7,5) on (node local)
[  336.976392][ T6124] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  336.991766][ T5733] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  337.006841][ T6124] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  337.016351][ T5733] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[  337.028418][ T6124] usb 2-1: USB disconnect, device number 6
[  337.036649][ T5733] usb 4-1: USB disconnect, device number 7