last executing test programs:

7m16.836266311s ago: executing program 2 (id=37):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840)

7m16.604515095s ago: executing program 2 (id=41):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x802)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0)

7m16.417195454s ago: executing program 2 (id=43):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x80000)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})

7m16.164040319s ago: executing program 2 (id=46):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@umask={'umask', 0x3d, 0xcdba}}, {@namecase}, {@zero_size_dir}, {@keep_last_dots}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@zero_size_dir}, {@errors_continue}, {@sys_tz}, {@dmask={'dmask', 0x3d, 0xc}}]}, 0x1, 0x152a, &(0x7f000001a8c0)="$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")
execve(&(0x7f000001be40)='./file0\x00', 0x0, 0x0)
mount(&(0x7f00000196c0)=@filename='mtd0\x00', &(0x7f0000019700)='./file0\x00', &(0x7f0000019740)='jffs2\x00', 0x800040, 0x0)

7m15.829243338s ago: executing program 2 (id=50):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x3c)
sendto$inet(r0, &(0x7f0000000100)="e2", 0x1, 0x2000c051, &(0x7f0000000140)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

7m15.369003558s ago: executing program 2 (id=54):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb000, 0x3, &(0x7f0000055000/0xb000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

7m14.964928931s ago: executing program 32 (id=54):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb000, 0x3, &(0x7f0000055000/0xb000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

6m51.564520723s ago: executing program 5 (id=321):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f00000003c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xfd}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xd}, @time=@tick=0x5}], 0x70)

6m51.470653148s ago: executing program 5 (id=322):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x10002, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

6m51.324912955s ago: executing program 5 (id=326):
socket$nl_route(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000480)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000180)='rw\x00', 0x0, 0x4)

6m51.157570958s ago: executing program 5 (id=327):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004814}, 0x0)

6m50.937898732s ago: executing program 5 (id=333):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file2\x00', 0x109141, 0xd6)

6m50.757180052s ago: executing program 5 (id=338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r1}, 0xc)

6m35.656493963s ago: executing program 33 (id=338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x2, 0x4, 0x6, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r1}, 0xc)

5m49.344012099s ago: executing program 4 (id=941):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)

5m48.964143716s ago: executing program 4 (id=947):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)

5m48.949856357s ago: executing program 4 (id=948):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000280001"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

5m48.81785789s ago: executing program 4 (id=951):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)

5m48.510900943s ago: executing program 4 (id=954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181}, 0x94)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')

5m48.039945704s ago: executing program 4 (id=957):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x6ea, @vifc_lcl_ifindex, @remote}, 0x10)

5m47.323491009s ago: executing program 34 (id=957):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x6ea, @vifc_lcl_ifindex, @remote}, 0x10)

4m55.064524511s ago: executing program 3 (id=1676):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0xd)
write(r0, 0x0, 0x0)

4m55.023598969s ago: executing program 3 (id=1677):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x5, 0x8, 0xc1, 0xffffffffffffffff, 0xeaf}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x3f, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38)

4m54.923407104s ago: executing program 3 (id=1678):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x49032d060321e037, 0x3c}, {0x0, 0x800000000000, 0x5, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0x81, 0x0, 0x1}, {{@in=@private=0x4, 0x4, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7, 0x8001, 0x0, 0x2}}, 0xe8)

4m54.903982027s ago: executing program 3 (id=1679):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3004001, &(0x7f0000000180)={[{@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@dmode={'dmode', 0x3d, 0x8}}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@cruft}, {@map_normal}, {}, {@hide}, {@cruft}, {@showassoc}, {}, {@map_off}]}, 0xfe, 0xa43, &(0x7f0000000cc0)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

4m54.771917305s ago: executing program 3 (id=1680):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m54.455531119s ago: executing program 3 (id=1687):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,iocharset=iso8859-13,uid=', @ANYRESHEX=0xee01, @ANYRES16=0x0], 0x21, 0x61e2, &(0x7f0000004400)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLUauu74D+Jm9ee1AYiCkTmpg45gQkk12bSe+0KaYcG24lUAo9ILtetdmwTe8dgk0kk0DJRJGRRVtw0NbQKjNS0UeeKAVoDygVkiVoH2gL4gKlYeoCiggVYIK2GrO+f//OzM7O7Nrj9dnzvl8pOSXnTkz58yZM7P73c13DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACtbn3t/CcbWZY1/8n/tTXLntf8781TW/PLXnWttxAAAAC4Ur/M//3cDemCg2u4Ucsy//rSb39laWlpKXvP6F+Of3ZpKV0xlWXjm7Isvy566gfvbbQuEzyWTTZGWr4e6bP60T7Xj/W5frzP9RN9rt/U5/rJPtev2AErbC5+H5Pf2c78P7cWuzS7MRvPr9vZ5VaPNTaNjMTf5eQa+W2Wxo9lC9mJbD6bbVu+WLaRL/+1W5vrelMW1zXSsq7tzSPkJ48ejdvQCPt4Z9u6lu8z+tFrsqmf/uTRo39/7tmbu82+u6Ht/ortvGNHczs/Hi4ptrWRbUr7JG7nSMt2bu/ynIy2bWcjv13zvzu387k1bufo8mZuqM7nfDIbyf/7O/l+Gmv9tV7aT9vDZT+7Lcuyi8ub3bnMinVlI9mWtktGlp+fyeKIbN5H81B6YTa2ruP01jUcp805t7P9OO18TcTn/9Zwu7FVtqH1afrRxyZanvdfLF3OcRo1H/Vqr5XOY3DQr5WyHIPxuPhO/qAf73oM7gyP/9HbVz8Gux47XY7B9LhbjsEd/Y7BkYnRfJvTk9DIb7N8DO5qW340X1Mjn8/c3vsYnDl38szM4kc+evfCySPH54/Pn9qza9fsnr179+/fP3Ns4cT8bPHvy9zb5bclG0mvgR1h38XXwCs6lm09VJe+MLHi/fdyX4eTPV6HWzuWHfTrcKzzwTU25gW58pguXhvvau70yUsj2Sqvsfz5ufPKX4fpcbe8DsdaXoddv6d0eR2OreF12FzmzJ1r+5llrOWfbtuw+veCKzsGt7Ycg50/j3Qeg4P+eaQsx+BkOC6+d+fq3wu2h+19fHq9P4+MrjgG08MN7z3NS9LP+5P789HtuLylecV1E9n5xfmz9zxy5Ny5s7uyMDbEi1qOlc7jdUvLY8pWHK8j6z5eDy689PFbuly+Neyrybub/5pc9blqLnPvPb2fq/y7W/f92Xbp7iyMAdvo/dntu3lzf05k2ee++bGHvv7o51676v5s5s2Pz1z5z+Ipl7a8/46v8v4bc/+vivWlu3psdHyseP2Opr0z3vZ+3P5UjeXvXY183c/NrO39eDz8s9Hvxzf2eD/e1rHsoN+PxzsfXHw/bvT7bceV6Xw+J8NxcmK29/txc5ltu9d7TI71fD++LcxG2P+vDEkh5aKWY2e14zata2xsPDyusbiG9uN0T9vy4yGbNdf15O7wQ2HayrUdp3fcViw/2nK7aKOO06mOZQd9nKbffa12nDb6/fbt8nQ+n5PhuLhxT+/jtLnM0/de+Xvn5vifLe+dE/2OwfHRieY2j6eDMH+/z5Y2x2Pwnuxodjo7kc3l107kx1MjX9f0fWt7r5wI/2z0e+W2HsfgHR3LDvoYTN/HVjv2GmMrH/wAdD6fk+G4eOK+3sdgc5nX7Rvsz653hEvSMi0/u3b+fm2133nd0rGbrtaxMha285v7ev9utrnMif3rzZm999Nd4ZLruuynztfvaq+puWxj9tO2sJ3P7l99PzW3p7nMZw+s8Xg6mGXZhQ89kP++N/x95cL5736l7e8u3f6mc+FDD/z4+cf+ZT3bD8Dw+1UxthTf61r+MrWWv/8DAAAAQyHm/pEwE/kfAAAAKiPm/vh/hSfyPwAAAFRGzP1jYSZVyP9/2n+Rba97duFXF7LUzF8K4vVpNzxYLBc7rrPh66mlZc3LH/jS/P/+84W1bd5IlmW/ePBPui6/7cG4XYWpsJ1Pvb798hW+cvea1n344Qtpva399c+H+4+PZ62HQbcK7myWZV+74dP5eqbeeymfTz94OJ8PXXz8seYyzx0ovo63f+ZFxfJ/E8q/B48dabv9M2E//DDM2Td33x/xdl++9Mrt+969vL54u8aO6/OH/cT7ivuNn5PzmceK5eN+Xm37v/6pJ7/cXP6Rl3ff/gsj3bf/yXC/Xwrz5y8plm99Dppfx9t9Imx/XF+83T1f/EbX7X/qk8XyZ95QLHc4zLj+O8LXO9/w7ELr/nqkcaTtcWVvLJaL65/97p/n18f7i/ffuf2Thy617Y/O4+Pp/yjuZ6Zj+Xh5XE/0Tx3rb95P6/EZ1//knx1u28/91v/UQ8+8pHm/neu/q2O5Mx+6M1//8v21f2LT337i013XF7fn4D+eaXs8B98RXsdh/U+8LxyP4fr/e6q4v85PVzj8jvb3n7j857deaHs80Zt+Wqz/qVcfz+emyc1brnve86+/+LLmvsuy72wq7q/f+o//3em27f/CTcX+iNfHjn7n+lcT13/2w9OnTi+eX5hLe/XRG/LPznlLsT1xe28I762dXx86fe7982enZqdms2yquh+hd9m+GOaPi3Gx99JLK95B73w4PJ+3/PXXttz+75+Kl//nu4rLL725+L71irDcZ8LlW8Pzt771r/TErTflr+/G02ELl1Z+XvCV2L7zf/avacHw+Dt/LojH+5kXvz/fD83r8u8b8XV9hdv//bnifr4a9utS+GTmHTctr691+fjZCJfeWbzer3j/hbe5+Lz+Q3i+3/rD4v7jdsXH+/3wc8w3trW/38Xj46sXRjrvP/8Uj4vh/SS7WFwfl4r7+9JzN3XdvPg5JNnFm/Ov/yLdz83repirWfzI4syJhVPnH5k5N794bmbxIx89dPL0+VPnDuWf5XnoA/1uv/z+tCV/f5qb33tvlr9bnS7GVXatt//Mw0fn9s3ePjd/7Mj5Y+cePjN/9vjRxcWj83OLtx85dmz+w/1uvzB3/67dB/bs2z19fGHu/v0HDuw5ML1w6nRzM4qN6mPv7AenT509lN9k8f57D+y67757Z6dPnp6bv3/f7Oz0+X63z783TTdv/cfTZ+dPHDm3cHJ+enHho/P37zqwd+/uvp8GePLMscWpmbPnT82cX5w/O1M8lqlz+cXN7339bk81Lf5X8fNsp0bxQXzZ2+/amz6ftelLH1v1ropFOj5A9NnwWTTfesGZ/Wv5Oub+8TCTKuR/AAAAIBdz/0SYifwPAAAAlRFz/6YwE/kfAAAAKiPm/skw0/8SUJP8X7n+/7YLa1q//r/+f+v+0v+vWf//nWXr/xfvF/r/g3Gl/Xv9/0D/X/9f/1//X/+fAShb/z/m/s1Z5u//AAAAUFEx928JM5H/AQAAoDJi7r8uzET+BwAAgMqIuf95YSY1yf/6//r/+v/6//r/3dev/z+c9P970//vQ/9/JqtX///iILf/GvT/N7d+of9PGZWt/x9z//PDTGqS/wEAAKAOYu6/PsxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+rWEmNcn/+v9X1P9PnSv9//bt1/9vp/8fjgf9f/3/DaD/35v+fx/6/87/P1z9/zb6/5RR2fr/Mfe/IMykJvkfAAAA6iDm/heGmcj/AAAAUD5jl3ezmPtfFGayIv9f5goAAACAay7m/huzjiJ4Tf7+r//v/P/6//r/+v/d17/2/v9opv9fHvr/ven/96H/r/+v/6//z0CVrf+f5/5sMntxmElN8j8AAADUQcz9N4WZyP8AAABQGTH3/1qYifwPAAAAlRFz/7Ywk5rkf/3/yvT/f9b61On/6//3Wr/+v/P/V5n+f2/6/33o/+v/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9/96mIn8DwAAAJURc//2MJOa5H/9/5L3/2Nz1Pn/9f/1/0vZ/5/U/y8d/f/e9P/70P/X/9f/1/9noMrW/4+5/yVhJjXJ/wAAAFAHMfe/NMxE/gcAAIDKiLn/ZWEm8j8AAABURsz9U2EmNcn/6+n/Ny7q/6/mKp//f2IN5/9vo/+v/99r/fr/zv9fZfr/ven/96H/r/+v/6//z0CVrf8fc/+tYSY1yf8AAABQBzH37wgzkf8BAACgMmLuvy3MRP4HAACAyoi5f2eYSU3yv/P/D0X/P9P/1//X/9f/1/9fG/3/3vT/+9D/1//X/9f/Z6DK1v+Puf/lYSY1yf8AAABQBzH33x5mIv8DAABAZcTc/4owE/kfAAAAKiPm/jvCTGqS//X/9f/1//X/9f+7r1//fzjp//em/9+H/r/+v/6//j8DVbb+f8z9rwwzqUn+BwAAgDqIuf/OMBP5HwAAACoj5v67wkzkfwAAAKiMmPunw0xqkv/1//X/9f/1//X/u69f/3846f/3pv/fh/6//r/+v/4/A1W2/n/M/XeHmdQk/wMAAEAdxNx/T5iJ/A8AAACVEXP/TJiJ/A8AAACVEXP/bJhJTfK//r/+v/6//v+6+v8vW75f/f+C/n+56P/31t7/73y1tdD/1//X/79G/f/x6vX/f97xRkKtlK3/H3P/rjCTmuR/AAAAqIOY+3eHmcj/AAAAUBkx9+8JM5H/AQAAoDJi7r83zKQm+V//X/9f/1//3/n/u69f/3846f/3Nvjz/8eHqP+v/6//7/z/zv/PSmXr/8fcf1+YSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf7X/9f/1//X/9f/775+/f/hpP/f2+D7/87/r/+/TP//2vb/m8eW/j9lU7b+f8z9B8JMapL/AQAAoA5i7n9VmIn8DwAAAJURc/9vhJnI/wAAAFAZMff/ZphJTfJ/z/7/qP6//r/+v/7/te//T+j/6/+vg/5/b/r/fej/6/8Pcf/f+f8po7L1/2Puvz/MpCb5HwAAAOog5v7fCjOR/wEAAKAyYu5/dZiJ/A8AAACVEXP/wTCTmuR/5//foP5/vFD/X/9f/9/5//X/r6qO/v266f8H+v/6//r/+v/6/wxA2fr/Mfe/JsykJvkfAAAA6iDm/gfCTOR/AAAAqIyY+18bZiL/AwAAQGXE3P+6MJOa5H/9f+f/v/b9//G2bdf/X76d/n9B/1//fz2c/783/f8+9P/1//X/9f8ZqLL1/2Puf32YSU3yPwAAANRBzP1vCDOR/wEAAKAyYu5/Y5iJ/A8AAACVEXP/m8JMapL/9f/1/699/9/5//X/C/r/+v+DoP/fm/5/H/r/+v/6//r/DFTZ+v8x9/92mElN8j8AAADUQcz9D4aZyP8AAABQGTH3vznMRP4HAACAyoi5/y1hJjXJ//r/+v/6//r/+v/d16//P5z0/3sbsv7/L68Pl+v/F/T/y7396+3/j3V8fVX6/z9Yrf+/tKnz9vr/XA1l6//H3P/WMJOa5H8AAACog5j73xZmIv8DAABAZcTc//YwE/kfAAAAKiPm/t8JM6lJ/tf/b27HcntZ/1//P79A/1//X/9/aOn/9zZk/X/n/++g/1/u7Xf+f/1/Vipb/z/m/neEmdQk/wMAAEAdxNz/UJiJ/A8AAACVEXP/O8NM5H8AAACojJj73xVmUpP8r//v/P/6//r/+v/d16//P5z0/3vT/+9D/1//v2z9///W/2e4la3/H3P/w2EmNcn/AAAAUAcx9787zET+BwAAgMqIuf93w0zkfwAAAKiMmPvfE2ZSk/yv/z8s/f8p/f919v8nwmX6//r/+v/1ov/fm/5/H/r/+v9l6/87/z9Drmz9/5j73xtmsvb8P7nmJQEAAIBrIub+3wszqcnf/wEAAKAOYu7//TAT+R8AAAAqI+b+PwgzqUn+1/8flv6/8/9nzv+v/9/xePT/9f+72bj+f3zn0f/X/9f/j/T/9f/1/+lUtv5/zP1/GGZSk/wPAAAAdRBz//vCTOR/AAAAGArd/p/sTjH3Hwozkf8BAACgMmLuPxxmUpP8r/+v/6//X9L+/1/t+Lfvfftth3fp/+v/6/+vy4ae/7/54nf+f/1//f9E/1//X/+fTmXr/8fcfyTMZDn4vcUJ/gEAAGC4xdz/R2EmNfn7PwAAANRBzP1Hw0zkfwAAAKiMmPvnwkxqkv/1//X/9f9L2v8f4vP/x/0xTP3/6U1D1P+Pb7r6/11taP//3cs9cf3/9fb/J7pe2tn/b+j/t9H/X/f2fyvLMv1//X+uobL1/2Punw8zqUn+BwAAgDoIuX/kWDGXr5D/AQAAoDJi7j8eZiL/AwAAQGXE3P/+MJOa5H/9f/1//X/9f+f/777+0vb/nf+/J/3/3srT/+/O+f/1/4d5+/X/9f9ZqWz9/5j7F8JMapL/AQAAoA5i7v9AmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPtPhJnUJP/r/+v/6//r/+v/d1+//v9w0v/vTf+/D/1//X/9f/1/Bqps/f+Y+0+GmdQk/wMAAP/P3n18WV6ndRy/hdXSfdi4c+FC9/4JLGStf4ALNi70HI8LUDEnGnPEnANmMWAARUyYE0xihsnDzDA5ByYzM6fnQD3P0xV+9btV3beqfvf7vF4Ln6GG9haePuCH5s0X6CB3/11xi/0PAAAAw8jdf3fcYv8DAADAMHL3f3Pc0mT/6//1/8P2/1+l/z/u8/X/+v+R6f/n6f/X0P/r//X/+n82amn9f+7+b4lbmux/AAAA6CB3/7fGLfY/AAAADCN3/z1xi/0PAAAAw8jd/21xS5P9f6j/31n17P8z49X/j9T/e///2M/X/+v/R3a+/f99L/yZT/+v/9f/B/2//l//z2FL6/9z93973NJk/wMAAEAHufu/I26x/wEAAGAYufu/M26x/wEAAGAYufu/K25psv+9/+/9f/2//l//P/35+v/t5P3/eZ36/3uevu2u5x79ssdO8/n6f/2//l//z2Ytrf/P3f/dcUuT/Q8AAAAd5O7/nrjF/gcAAIBh5O7/3rjF/gcAAIAtdGXyq7n7vy9uabL/9f/6f/1/9P+X9f/6f/3/CPT/8zr1/zfy+fp//b/+X//PZi2t/8/d//1xS5P9DwAAAB3k7v+BuMX+BwAAgOWa+gexZ+Tuvzdusf8BAABgGLn7r8YtTfa//v/s+//P6/+3o//3/r/+X/8/BP3/PP3/Gvp//b/+X//PRi2t/8/df1/c0mT/AwAAQAe5+38wbrH/AQAAYBi5+38obrH/AQAAYBi5+384bmmy//X/3v/X/+v/9f/Tn6//3076/3n6/zX0/zfbz1/S/+v/9f/sd8r+//mZP21vpP/P3f8jcUuT/Q8AAAAd5O7/0bjF/gcAAIBh5O7/sbjF/gcAAIBh5O7/8bilyf7X/+v/9f/6/xvu/4/+1HuR/n+a/v986P/nLab/39md/LL+f+v7f+//6//1/xywtPf/c/f/RNzSZP8DAABAB7n7fzJumdn/p/6b+QAAAMCFyt3/U3GLX/8HAACArZfVWe7+n45bmux//b/+X/+v//f+//Tnz/X/j+37/vT/y6L/n7eY/v8Y+n/9/zZ///p//T9HLa3/z93/M3FLk/0PAAAAHeTuvz9usf8BAABgGLn7fzZusf8BAABgGLn7fy5uabL/p/v/6/+9/v9k9P8Hv3/9//TPj031//m/Uf8/2//f4f3/nvT/8/T/a+j/9f/6/+P6/yvrfrz+nylL6/9z9/983NJk/wMAAEAHuft/IW6x/wEAAGAYuft/MW6x/wEAAGAYuft/KW5psv+9/6//1/9vX//v/f89F/n+/+rc+/9d/f8J6f/n6f/X0P/r//X/8+//z/xbAPT/TFla/5+7/5fjlib7HwAAADrI3f8rcYv9DwAAANth/z87cPgfKA25+381brH/AQAAYBi5+38tbhln/8++1an/1//r//X/+v/pz19W/+/9/5PS/8/T/6+h/z+Lfn53sP7/geN+/BL6/3vPuv+fof9nyoH+//HrX7+o/j93/6/HLePsfwAAAGgvd/9vxC32PwAAAAwjd/9vxi32PwAAAAwjd/9vxS1N9v+Z9/8z//YB/b/+X/+v/9f/6/83Tf8/T/+/hv7f+//e/9f/s1EH+v99Lqr/z93/23FLk/0PAAAAHeTu/524xf4HAACAYeTufyBusf8BAABgGLn7fzduabL/vf+v/9f/6//1/9Ofr//fTjfV39+i/y/6f/2//l//r/9nA5bW/+fu/724pcn+BwAAgA5y9/9+3GL/AwAAwDBy9/9B3GL/AwAAwDBy9/9h3NJk/+v/z7b/z6/r//X/K/2//l//fy7avv+/M/VXoqOO6f+f/MarX3PwK/p//b/+X/+v/+eEvmTmv1tE/3/t+v93mbv/j+KWJvsfAAAAOsjd/8dxi/0PAAAAw8jd/ydxi/0PAAAAw8jd/2Dccsr9P9c8LJn+3/v/+n/9/77+/9JK/6//33Jt+/8T8v7/Gvp//f+W9v/XbtX/s0yL6P/3/Xbu/j+NW/z6PwAAAAwjd/+fxS32PwAAAAwjd/+fxy32PwAAAAwjd/9fxC1N9r/+X/+v/9f/e/9/+vP1/9tJ/z9P/7/GNvX/D95E/787/eWL7udv1kV//97/1/9z1NL6/9z9D8UtTfY/AAAAdJC7/y/jFvsfAAAAhpG7/6/iFvsfAAAAhpG7/6/jlib7X//fsv+/pP/X/+v/9f+j0v/P0/+vVquHZ76Bqf7/2q3L7P+9/7+471//r//nqKX1/7n7/yZuabL/AQAAoIPc/Q/HLfY/AAAADCN3/yNxi/0PAAAAw8jd/7dxS5P9r/9v2f97/1//r//X/w9L/z9P/7/GNr3/r/9f3Pev/9f/c9TS+v/c/X8XtzTZ/wAAANBB7v5H4xb7HwAAAIaRu//v4xb7HwAAAIaRu/+xuKXJ/tf/6//1//p//f/051f/f2Xvt/X/2+Hs+v+V/l//r/9fQ/+v/9f/c9jS+v/c/f8QtzTZ/wAAANBB7v5/jFvsfwAAABhG7v5/ilvsfwAAABhG7v5/jlua7H/9v/5f/6//1/9Pf773/7eT9//n6f/X0P/r//X/+n82arr/v/fC+v/c/f8StzTZ/wAAANBB7v7H4xb7HwAAAIaRu/9f4xb7HwAAAIaRu//f4pYm+1//r/8/2P+vVvp//b/+f8859P+XV/r/jdP/z9P/r6H/H7P/v2U1UP9/5dgfr/9niZb2/n/u/n+PW5rsfwAAAOggd/9/xC32PwAAAAwjd/9/xi32PwAAAAwjd/9/xS1N9r/+X//v/X/9v/5/+vO9/7+d9P/z9P9r6P/H7P+9/6//58Isrf/P3f/fcUuT/Q8AAAAd5O7/n7jF/gcAAIBh5O7/37jF/gcAAIBh5O7/v7ilyf7X/+v/9f/6f/3/9Ofr/7eT/n/exvv/L16tVvp//X/Q/+v/9f8ctrT+P3f//8ctTfY/AAAAdJC7/4m4xf4HAACAYeTufzJusf8BAABgGLn7XxK3NNn/+n/9v/5/O/v/y/p//b/+f9JS+v/bb//qp1r0/97/1//vo//X/+v/OWxp/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAAMPI3f/yuMX+BwAAgGHk7n9F3NJk/x/t/y+t9grVPVP9fzRq+v999P8Hv3/9//TPD+//6//1/2dvKf1/m/f/9f/6/330/6fo/7/i6I/X/zOipfX/ufufilua7H8AAADoIHf/K+MW+x8AAACGkbv/VXGL/Q8AAADDyN3/dNzSZP97/1//r//X/+v/pz9f/7+d9P/z9P9r6P/1/97/v/vrv0j/z+Ysrf/P3f/quKXJ/gcAAIAOcve/Jm6x/wEAAGAYuftfG7fY/wAAADCM3P2vi1ua7H/9v/5f/6//1/9Pf77+fzvp/+fp/8vhP7Q9ffr/y1NfvOh+/mZd9Pc/TP/v/X82aGn9f+7+18ctTfY/AAAAdJC7/w1xi/0PAAAAw8jd/8a4xf4HAACAYeTuf1Pc0mT/6//1/+P3/1+n/z/0+fp//f/I9P/5V/Rp+v81+vT/ky66n9/271//r//nqKX1/7n7n4lbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//36v93Vh37f+//6//1/53o/+fp/9fQ/+v/9f/6fzZqaf1/7v5nd3Zb7n8AAADYVl/7ld/0zEl/32df/J+XV2+LW+5YXTvhL2MDAAAAC/fC7t/ZXa3e/uJv+fV/AAAAGFHu/nfELU32v/6/V//f8/1//b/+X//fif5/nv5/Df2//l//r/9no5bW/+fuf2fcsm/47Z76jxIAAABYktz974pbmvz6PwAAAHSQu//dccuR/e9fBwgAAADbKnf/e+KWJr/+r/9feP+/OqP+P34//f8e/b/+f+rz9f/bSf8/7yb7/2s7+n/9/wz9v/5f/89hS+v/c/e/N25psv8BAABgUAf+jkLu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wNxS5P9r/8/9/4/U/UzfP//Sv0n7/837//vvzz5+Qf6/5X+X/8/Fv3/PO//r6H/H6X/v1X/r/9nGZbW/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAMIzc/R+OW+x/AAAAGEbu/o/ELU32v/5/4e//31D/f4L3//X/Pfr/Yz5/nPf/v/S2q0/c+Q2PPKT/57rz7P/z54L+X/+v/9+zoP7f+//6fxZi8/3/7oEvnrb/z93/0bilyf4HAACADnL3Pxe32P8AAAAwjNz9H4tb7H8AAAAYRu7+j8ctTfa//l//v5T+P/9vfQH9/9Ub7v+vrFarC+n/synu3v97/1//f5T3/+fp/9fQ/+v/9f/6fzZq8/3/wS+etv/P3f+JuKXJ/gcAAIAOcvd/Mm7J/b9z6r91DwAAACxM7v5PxS1+/R8AAACGkbv/03FLk/2v/9f/L6X/T97/v/7jxnr//86KU3v2/19e/0n/f7b0//P0/2vo//X/+n/9Pxu1tP4/d/9n4pYm+x8AAAA6yN3/fNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f/6/1H7/yzi9f/6/6X0/97/9/7/+dD/z9P/r6H/1//r//X/bNTS+v/c/V8IAAD//y1gdxA=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000021c0)='.\x00', 0x181400, 0x108)
getdents64(r0, &(0x7f0000002200)=""/4096, 0x1000)

4m54.253028956s ago: executing program 35 (id=1687):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,iocharset=iso8859-13,uid=', @ANYRESHEX=0xee01, @ANYRES16=0x0], 0x21, 0x61e2, &(0x7f0000004400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000021c0)='.\x00', 0x181400, 0x108)
getdents64(r0, &(0x7f0000002200)=""/4096, 0x1000)

7.968361346s ago: executing program 7 (id=4696):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

6.122710746s ago: executing program 6 (id=4700):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@nogrpid}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
unshare(0x8000400)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000100))

5.60189159s ago: executing program 7 (id=4702):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})

5.60031469s ago: executing program 8 (id=4712):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x7b186446, 0xb, 0x4, 0x70000, 0xfffffffd, {0x77359400}, {0x4, 0x1, 0xf6, 0x9, 0x3, 0x6, "95d63c46"}, 0x7, 0x1, {}, 0x80000001, 0x0, r1})

5.343395536s ago: executing program 6 (id=4703):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xc0000000}}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.244995192s ago: executing program 8 (id=4704):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0)
mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r0, 0x8000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x11)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x200001, 0x0, 0x2, 0x4}}, 0x20)

4.429993537s ago: executing program 6 (id=4706):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001180)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000700)={0x28, r0, 0x1, 0x70bd2b, 0x25dfcbbf, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x480d1}, 0xcc10)

4.236669367s ago: executing program 6 (id=4708):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f00000004c0), 0x800001d, 0x0)

4.173692094s ago: executing program 0 (id=4709):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06fdff8fd38ce500004001000058000b480400945f6400940005003a923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

3.971060946s ago: executing program 0 (id=4711):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000), 0x9, 0x400, 0x0, 0x0, 0x0, 0x70})

3.7567529s ago: executing program 8 (id=4714):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000500)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000540)={@hyper})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0)

3.458482785s ago: executing program 8 (id=4716):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4)

3.102176584s ago: executing program 6 (id=4717):
r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z")
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x8080)
ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240))
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)

3.087408358s ago: executing program 1 (id=4718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000a80a000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006001000010000000600120001000000040013"], 0x3c}}, 0x0)

3.086833566s ago: executing program 8 (id=4719):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf761d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

2.823962276s ago: executing program 1 (id=4720):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001d40)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x4}, {0x30, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)

2.67461234s ago: executing program 1 (id=4721):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/node/node0/compact\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)

2.614799335s ago: executing program 0 (id=4722):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]})

2.383877139s ago: executing program 7 (id=4723):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r0, &(0x7f00000006c0)='1', 0x1)

2.218699329s ago: executing program 0 (id=4724):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x5, &(0x7f00000000c0)=<r1=>0x0)
io_submit(r1, 0xf3, &(0x7f0000000200)=[&(0x7f0000000240)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000280)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

2.115693942s ago: executing program 7 (id=4725):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always'])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='mounts\x00')
read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020)

1.681142756s ago: executing program 7 (id=4726):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2000003, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xc5c30000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
times(0x0)

1.533475133s ago: executing program 0 (id=4727):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x48, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040)

979.788622ms ago: executing program 8 (id=4728):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f00000004c0), 0x800001d, 0x0)

979.341896ms ago: executing program 0 (id=4729):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x50)
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fchown(r0, r1, 0xffffffffffffffff)

979.21466ms ago: executing program 1 (id=4730):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

966.685829ms ago: executing program 6 (id=4731):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x5, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

813.770866ms ago: executing program 1 (id=4732):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='|o', 0x2)

352.509067ms ago: executing program 1 (id=4733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a0"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
close(r0)

0s ago: executing program 7 (id=4734):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0e01100100000040b4041e934000010203010902a200030101c010080b0001010130070904000000010130000a2b9c60b000070000000d240704030c0000000c00000014240203050203030500000009008b00d70195484c2403010101030404"], 0x0)

kernel console output (not intermixed with test programs):

8][ T5628] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  421.532375][T16403] batman_adv: Routing algorithm 'B' is not supported
[  421.682895][ T7265] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.853513][T16409] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.855034][T16409] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.949678][T16409] bridge0: entered allmulticast mode
[  421.976896][T16412] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.976963][T16412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.977153][T16412] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.977214][T16412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.977495][T16412] bridge0: entered promiscuous mode
[  422.582246][T16425] loop0: detected capacity change from 0 to 256
[  422.644722][T16425] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  422.959206][T16434] serio: Serial port ttyS3
[  423.298192][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3854'.
[  423.360800][T16447] profile_transition: unconfined exec no attachment
[  423.537306][T16457] loop6: detected capacity change from 0 to 256
[  423.768134][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3864'.
[  423.768158][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3864'.
[  424.185494][T16449] loop1: detected capacity change from 0 to 32768
[  424.202538][T16449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3857 (16449)
[  424.231870][T16449] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  424.231892][T16449] BTRFS info (device loop1): using sha256 checksum algorithm
[  424.379249][T16491] loop7: detected capacity change from 0 to 256
[  424.432296][T16491] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d)
[  424.460713][T16449] BTRFS info (device loop1): enabling ssd optimizations
[  424.460731][T16449] BTRFS info (device loop1): turning on async discard
[  424.460740][T16449] BTRFS info (device loop1): enabling free space tree
[  424.550179][T16491] exFAT-fs (loop7): valid_size(150994954) is greater than size(10)
[  424.578125][T16500] profile_transition: unconfined exec no attachment
[  424.662416][T16449] BTRFS error: failed to open device for path jÿ•†}àÑñÀSà3KÜÜãî®
=?)€6ó"ظ!z¯Î­…´/EXã@»Þ€],}`�…=Á¯.bry© rmœX¤ˆŒ!–	!HüJ›C”	„ QEúVĪ×8u vþEÐN¢7¹M£%ˆ¢Ž)Kƒ
[  424.662416][T16449] 8Oí´ß³‘¼…&QëÂýÌ�{ÿ¯Öc4;c°R‡¹°?GÝwÿÛ/'ðüñ…ˆ!awù¾?�œ’Ê`iNÊ?²»Æ›`C²nû¢s L³;é¤‹C–¿ãá¦æ:.†V&ÊgÞ)Ñã ÔÏ£õ/�‰€Ó•da93R	å2©¿6�L�ÿ$dƒ�;L with flags 0x1: -2
[  424.793320][ T7832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  425.766288][T16533] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  426.349283][T16556] ip6_tables: ip6tables: counters copy to user failed while replacing table
#! ./dev/console
ð×xËÀ[  427.089579][T16581] loop1: detected capacity change from 0 to 2048
[  427.160776][T16581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.160846][T16581] ext4 filesystem being mounted at /634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  427.670267][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.913342][T16596] loop1: detected capacity change from 0 to 1024
[  427.998828][T16596] hfsplus: bad catalog entry type
[  428.215495][   T44] IPVS: starting estimator thread 0...
[  428.311499][T16611] IPVS: using max 52 ests per chain, 124800 per kthread
[  428.411294][T16620] cougar: G6 mapped to space
[  428.533039][T16626] loop1: detected capacity change from 0 to 256
[  428.798882][T16638] netlink: 'syz.0.3936': attribute type 12 has an invalid length.
[  428.798898][T16638] netlink: 'syz.0.3936': attribute type 29 has an invalid length.
[  428.798905][T16638] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3936'.
[  428.940456][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3939'.
[  429.827261][T16656] loop8: detected capacity change from 0 to 131072
[  429.858832][T16656] F2FS-fs (loop8): invalid crc value
[  429.914388][T16656] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  429.929785][T16656] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  429.960071][T16656] F2FS-fs (loop8): f2fs_lookup: inode (ino=4) has zero i_nlink
[  430.327104][T16669] loop7: detected capacity change from 0 to 512
[  430.367979][T16669] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.3949: bad orphan inode 17
[  430.367999][T16669] loop7: lost filesystem error report for type 5 error -117
[  430.368140][T16669] ext4_test_bit(bit=16, block=4) = 1
[  430.368149][T16669] is_bad_inode(inode)=0
[  430.368154][T16669] NEXT_ORPHAN(inode)=0
[  430.368158][T16669] max_ino=32
[  430.368162][T16669] i_nlink=1
[  430.369116][T16669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.553614][ T8705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.908666][   T31] audit: type=1326 audit(2000000200.988:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  430.951059][T16653] loop0: detected capacity change from 0 to 32768
[  430.955399][   T31] audit: type=1326 audit(2000000201.028:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  430.956535][   T31] audit: type=1326 audit(2000000200.988:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  430.956562][   T31] audit: type=1326 audit(2000000201.028:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  430.956584][   T31] audit: type=1326 audit(2000000201.038:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  430.956605][   T31] audit: type=1326 audit(2000000201.038:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  431.076350][   T31] audit: type=1326 audit(2000000201.158:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  431.146451][T16653] (syz.0.3943,16653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  431.146650][T16653] (syz.0.3943,16653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  431.154265][   T31] audit: type=1326 audit(2000000201.228:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  431.219003][   T31] audit: type=1326 audit(2000000201.298:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  431.219033][   T31] audit: type=1326 audit(2000000201.298:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16680 comm="syz.6.3954" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece7d9f559 code=0x7ffc0000
[  431.291028][T16684] loop1: detected capacity change from 0 to 512
[  431.302333][T16653] JBD2: Ignoring recovery information on journal
[  431.336960][T16684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  431.374503][T16687] loop7: detected capacity change from 0 to 1024
[  431.419137][T16687] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  431.438649][T16687] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  431.439535][T16687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.468165][T16653] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  431.523157][T16684] EXT4-fs error (device loop1): ext4_readdir:226: inode #2: comm syz.1.3955: path /newroot/642/file1: directory fails checksum at offset 0
[  431.634681][T16687] fscrypt (loop7, inode 18): Mutually exclusive encryption flags (0x18)
[  431.693605][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.808433][ T8705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.170435][T16705] ip_tables: iptables: counters copy to user failed while replacing table
[  432.191995][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3962'.
[  432.601883][ T5628] ocfs2: Unmounting device (7,0) on (node local)
[  432.719657][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  432.876897][   T10] usb 2-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  432.877702][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  432.877716][   T10] usb 2-1: config 0 has no interface number 0
[  432.907450][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.907467][   T10] usb 2-1: Product: syz
[  432.907475][   T10] usb 2-1: Manufacturer: syz
[  432.907482][   T10] usb 2-1: SerialNumber: syz
[  432.909103][   T10] usb 2-1: config 0 descriptor??
[  433.083977][T16734] profile_transition: unconfined exec no attachment
[  433.130519][   T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  433.151703][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  433.151913][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  433.151940][   T10] usb 2-1: media controller created
[  433.230392][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  433.491999][T16730] loop0: detected capacity change from 0 to 32768
[  433.496018][ T5771] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  433.502776][T16730] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3968 (16730)
[  433.533398][T16730] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  433.533418][T16730] BTRFS info (device loop0): using crc32c checksum algorithm
[  433.648796][T16730] BTRFS info (device loop0): enabling ssd optimizations
[  433.648813][T16730] BTRFS info (device loop0): turning on async discard
[  433.648822][T16730] BTRFS info (device loop0): enabling free space tree
[  433.655870][ T5771] usb 9-1: Using ep0 maxpacket: 32
[  433.685788][ T5771] usb 9-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  433.701427][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.740666][T16730] BTRFS critical (device loop0 state EH): emergency shutdown
[  433.763438][ T5771] usb 9-1: config 0 descriptor??
[  433.798127][T16755] profile_transition: unconfined exec no attachment
[  433.817396][ T5628] BTRFS info (device loop0 state EH): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  433.994330][ T5771] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  434.012325][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  434.015167][ T5771] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  434.015198][ T5771] usb 9-1: media controller created
[  434.050875][T16757] loop5: detected capacity change from 0 to 7
[  434.139709][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.265157][T16740] loop6: detected capacity change from 0 to 32768
[  434.307308][T16740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3977 (16740)
[  434.335557][T16740] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  434.335578][T16740] BTRFS info (device loop6): using crc32c checksum algorithm
[  434.380565][   T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  434.523335][T16740] BTRFS info (device loop6): enabling ssd optimizations
[  434.523368][T16740] BTRFS info (device loop6): turning on flush-on-commit
[  434.523378][T16740] BTRFS info (device loop6): enabling free space tree
[  434.523386][T16740] BTRFS info (device loop6): enabling auto defrag
[  434.523396][T16740] BTRFS info (device loop6): use lzo compression, level 1
[  434.523407][T16740] BTRFS info (device loop6): max_inline set to 4096
[  434.745378][T16757] Dev loop5: unable to read RDB block 7
[  434.745421][T16757]  loop5: unable to read partition table
[  434.745552][T16757] loop5: partition table beyond EOD, truncated
[  434.745573][T16757] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  434.822615][T16772] profile_transition: unconfined exec no attachment
[  434.867004][ T7265] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  434.891343][ T5771] az6027: usb out operation failed. (-71)
[  434.892384][ T5771] az6027: usb out operation failed. (-71)
[  434.892393][ T5771] stb0899_attach: Driver disabled by Kconfig
[  434.892399][ T5771] az6027: no front-end attached
[  434.892399][ T5771] 
[  434.894042][ T5771] az6027: usb out operation failed. (-71)
[  434.894052][ T5771] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  434.895329][ T5771] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input31
[  434.965179][   T10] usb 2-1: USB disconnect, device number 16
[  435.010135][ T5771] dvb-usb: schedule remote query interval to 400 msecs.
[  435.010151][ T5771] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  435.052537][ T5771] usb 9-1: USB disconnect, device number 16
[  435.374718][ T5771] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  435.829246][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3986'.
[  435.937056][T16794] loop6: detected capacity change from 0 to 8
[  436.220694][T16803] sctp: [Deprecated]: syz.6.3992 (pid 16803) Use of int in max_burst socket option.
[  436.220694][T16803] Use struct sctp_assoc_value instead
[  436.413978][T16805] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3994'.
[  436.989585][T16799] loop1: detected capacity change from 0 to 32768
[  437.016052][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4003'.
[  437.045144][T16799] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  437.108055][T16799] XFS (loop1): Ending clean mount
[  437.122190][T16822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  437.133956][T16799] XFS (loop1): Quotacheck needed: Please wait.
[  437.439912][T16799] XFS (loop1): Quotacheck: Done.
[  437.863113][   T31] kauditd_printk_skb: 10 callbacks suppressed
[  437.863126][   T31] audit: type=1326 audit(2000000207.938:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=16850 comm="syz.7.4012" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9191b9f559 code=0x0
[  437.936558][ T7832] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  438.000714][T16842] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  438.218978][T16862] tap0: tun_chr_ioctl cmd 1074025677
[  438.219090][T16862] tap0: linktype set to 825
[  439.105334][T16877] loop0: detected capacity change from 0 to 2048
[  439.211216][T16877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.456954][T16893] dummy0 speed is unknown, defaulting to 1000
[  439.457009][T16893] dummy0 speed is unknown, defaulting to 1000
[  439.457922][T16893] dummy0 speed is unknown, defaulting to 1000
[  439.533381][T16893] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  439.533402][T16893] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  439.533423][T16893] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  439.653921][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.244954][T16901] loop7: detected capacity change from 0 to 131072
[  440.253739][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  440.253771][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  440.277497][T16901] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  440.277515][T16901] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  440.300423][T16901] F2FS-fs (loop7): invalid crc value
[  440.304027][T16893] dummy0 speed is unknown, defaulting to 1000
[  440.354175][T16901] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  440.383374][T16901] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  440.383392][T16901] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  440.414536][T16893] dummy0 speed is unknown, defaulting to 1000
[  440.444947][T16901] F2FS-fs (loop7): sanity_check_inode: inode (ino=6) has corrupted i_extra_isize: 0, max: 36
[  440.461887][T16893] dummy0 speed is unknown, defaulting to 1000
[  440.462929][T16893] dummy0 speed is unknown, defaulting to 1000
[  440.501961][T16893] dummy0 speed is unknown, defaulting to 1000
[  440.502916][T16894] smc: removing ib device rxe0
[  440.641820][   T67] RDS/IB: rds_ib_setup_qp failed (-95)
[  440.694165][   T67] RDS/IB: rds_ib_setup_qp failed (-95)
[  440.717897][T10629] RDS/IB: rds_ib_setup_qp failed (-95)
[  440.787603][   T67] RDS/IB: rds_ib_setup_qp failed (-95)
[  440.828150][T10629] RDS/IB: rds_ib_setup_qp failed (-95)
[  441.137252][   T67] RDS/IB: rds_ib_setup_qp failed (-95)
[  441.239897][T16894] smbdirect: ib_dev[rxe0] removed
[  441.832208][T16925] input: syz1 as /devices/virtual/input/input32
[  441.932637][T16927] loop6: detected capacity change from 0 to 128
[  441.978848][T16927] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  441.999772][T16927] ext4 filesystem being mounted at /738/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  442.230814][ T7265] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  443.437401][T16954] loop6: detected capacity change from 0 to 2048
[  443.460273][T16954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  444.097595][T16973] loop0: detected capacity change from 0 to 256
[  444.158665][T16973] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  444.243203][T16973] gfs2: path_lookup on c::: returned error -2
[  444.628659][T16958] loop7: detected capacity change from 0 to 40427
[  444.653914][T16958] F2FS-fs (loop7): invalid crc value
[  444.783037][T16987] loop1: detected capacity change from 0 to 64
[  444.939863][T16958] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  445.014372][T16958] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  445.014392][T16958] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  445.014406][T16958] F2FS-fs (loop7): Start checkpoint disabled!
[  445.170827][T16958] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  445.171681][T16958] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  445.500231][   T31] audit: type=1326 audit(2000000215.578:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc79f559 code=0x7ffc0000
[  445.500340][   T31] audit: type=1326 audit(2000000215.578:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc79f559 code=0x7ffc0000
[  445.501975][   T31] audit: type=1326 audit(2000000215.578:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc79f559 code=0x7ffc0000
[  445.570368][   T31] audit: type=1326 audit(2000000215.648:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc79f559 code=0x7ffc0000
[  445.632336][   T31] audit: type=1326 audit(2000000215.708:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1cbc79f559 code=0x7ffc0000
[  445.632366][   T31] audit: type=1326 audit(2000000215.708:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1cbc79f2c2 code=0x7ffc0000
[  445.632389][   T31] audit: type=1326 audit(2000000215.708:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1cbc75fd8e code=0x7ffc0000
[  445.720914][T17004] loop1: detected capacity change from 0 to 256
[  445.720956][   T31] audit: type=1326 audit(2000000215.798:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1cbc79f387 code=0x7ffc0000
[  445.720983][   T31] audit: type=1326 audit(2000000215.798:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cbc75fd8e code=0x7ffc0000
[  445.721006][   T31] audit: type=1326 audit(2000000215.798:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=17002 comm="syz.1.4075" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cbc79f1eb code=0x7ffc0000
[  446.051518][T17009] bond0: option slaves: interface +b does not exist!
[  446.063492][T17011] kAFS: bad VL server IP address
[  446.107847][T17013] netlink: 'syz.1.4079': attribute type 6 has an invalid length.
[  446.472683][T17031] loop1: detected capacity change from 0 to 256
[  446.874139][T17042] loop0: detected capacity change from 0 to 8192
[  446.892903][T17042] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  446.984809][T17046] netlink: 'syz.1.4092': attribute type 4 has an invalid length.
[  446.984824][T17046] netlink: 'syz.1.4092': attribute type 1 has an invalid length.
[  446.984835][T17046] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4092'.
[  446.984866][T17046] NCSI netlink: No device for ifindex 0
[  447.023600][T17047] ALSA: mixer_oss: invalid OSS volume ''
[  447.023615][T17047] ALSA: mixer_oss: invalid OSS volume 'qO'
[  447.023812][T17047] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀΗ'
[  447.242957][T17052] loop0: detected capacity change from 0 to 512
[  447.254947][T17054] loop1: detected capacity change from 0 to 1024
[  447.728062][T17069] netlink: 'syz.7.4103': attribute type 1 has an invalid length.
[  448.205995][ T5771] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  448.356073][ T5771] usb 1-1: Using ep0 maxpacket: 16
[  448.357900][ T5771] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  448.358748][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.358764][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.358776][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  448.358798][ T5771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.362436][ T5771] usb 1-1: config 0 descriptor??
[  448.770457][T17079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.770769][T17079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.797774][ T5771] hid_parser_main: 247 callbacks suppressed
[  448.797789][ T5771] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  448.797808][ T5771] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  448.797823][ T5771] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  448.797846][ T5771] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  448.800875][ T5771] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input33
[  448.865325][ T5771] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  448.896958][T17081] profile_transition: unconfined exec no attachment
[  448.992781][ T5771] usb 1-1: USB disconnect, device number 6
[  449.621363][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4113'.
[  450.506743][T17120] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  450.588833][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  450.736098][   T10] usb 2-1: Using ep0 maxpacket: 16
[  450.737803][   T10] usb 2-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00
[  450.757818][   T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.757838][   T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.757850][   T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  450.757863][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  450.757883][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.871021][   T10] usb 2-1: config 0 descriptor??
[  450.910596][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4133'.
[  451.057964][T17137] macvtap1: entered allmulticast mode
[  451.058260][T17137] veth0_to_bond: entered promiscuous mode
[  451.058272][T17137] veth0_to_bond: entered allmulticast mode
[  451.102340][T17137] team0: Device macvtap1 failed to register rx_handler
[  451.122048][T17137] veth0_to_bond: left allmulticast mode
[  451.122069][T17137] veth0_to_bond: left promiscuous mode
[  451.329573][   T10] hid (null): bogus close delimiter
[  451.335415][   T10] hid (null): unknown global tag 0xe
[  451.356800][T17148] jffs2: notice: (17148) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  451.575436][   T10] usb 2-1: USB disconnect, device number 17
[  451.641606][T17155] loop0: detected capacity change from 0 to 256
[  452.044895][T17166] loop8: detected capacity change from 0 to 4096
[  452.119048][T17173] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.328280][T17178] NILFS (loop8): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  452.363463][T17166] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  452.571541][T17166] Remounting filesystem read-only
[  452.667407][T17192] loop0: detected capacity change from 0 to 512
[  452.717135][T17192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  452.717227][T17192] ext4 filesystem being mounted at /876/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.050641][T17192] __quota_error: 23 callbacks suppressed
[  453.050655][T17192] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  453.050734][T17192] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  453.050771][T17192] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.4160: Failed to acquire dquot type 0
[  453.310956][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  453.466193][T17212] team0: entered allmulticast mode
[  453.466209][T17212] team_slave_0: entered allmulticast mode
[  453.466220][T17212] team_slave_1: entered allmulticast mode
[  453.472511][T17212] team0: left allmulticast mode
[  453.472525][T17212] team_slave_0: left allmulticast mode
[  453.472535][T17212] team_slave_1: left allmulticast mode
[  453.694169][T17219] loop1: detected capacity change from 0 to 512
[  453.711537][T17219] EXT4-fs: Ignoring removed nobh option
[  453.740861][T17219] EXT4-fs error (device loop1): ext4_quota_enable:7311: comm syz.1.4171: inode #255: comm syz.1.4171: iget: illegal inode #
[  453.740884][T17219] loop1: lost filesystem error report for type 5 error -117
[  453.755657][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  453.755672][    C0] EXT4-fs (loop1): initial error at time 2000000223: ext4_quota_enable:7311
[  453.755685][    C0] EXT4-fs (loop1): last error at time 2000000223: ext4_quota_enable:7311
[  453.776767][T17219] EXT4-fs (loop1): Remounting filesystem read-only
[  453.776782][T17219] EXT4-fs warning (device loop1): ext4_enable_quotas:7355: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix.
[  453.777187][T17219] EXT4-fs (loop1): mount failed
[  453.918035][T17225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4172'.
[  453.918052][T17225] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4172'.
[  453.918060][T17225] netlink: 'syz.0.4172': attribute type 6 has an invalid length.
[  453.918067][T17225] netlink: 'syz.0.4172': attribute type 5 has an invalid length.
[  453.918074][T17225] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4172'.
[  454.127671][T17205] loop8: detected capacity change from 0 to 32768
[  454.142284][T17205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4164 (17205)
[  454.166860][T17205] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  454.166882][T17205] BTRFS info (device loop8): using crc32c checksum algorithm
[  454.251751][T17233] loop6: detected capacity change from 0 to 2048
[  454.331703][T17233]  loop6: p1 p2 p3 < > p4 < p5 p6 >
[  454.331721][T17233] loop6: partition table partially beyond EOD, truncated
[  454.331842][T17233] loop6: p1 start 3405774849 is beyond EOD, truncated
[  454.331853][T17233] loop6: p2 start 53543428 is beyond EOD, truncated
[  454.331861][T17233] loop6: p3 start 4284289 is beyond EOD, truncated
[  454.334544][T17233] loop6: p5 start 3405774849 is beyond EOD, truncated
[  454.334558][T17233] loop6: p6 start 53543428 is beyond EOD, truncated
[  454.422857][T17205] BTRFS info (device loop8): setting nodatasum
[  454.422873][T17205] BTRFS info (device loop8): setting nodatacow
[  454.422883][T17205] BTRFS info (device loop8): turning on async discard
[  454.422891][T17205] BTRFS info (device loop8): enabling free space tree
[  454.422899][T17205] BTRFS info (device loop8): enabling auto defrag
[  454.422908][T17205] BTRFS info (device loop8): max_inline set to 0
[  454.508878][T17251] loop0: detected capacity change from 0 to 128
[  454.546667][T17254] profile_transition: unconfined exec no attachment
[  454.548006][T17251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  454.553743][T17251] ext4 filesystem being mounted at /880/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  454.753243][ T5628] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  454.796039][T17250] loop7: detected capacity change from 0 to 4096
[  455.065257][T10590] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.387667][T17307] netlink: 'syz.0.4204': attribute type 3 has an invalid length.
[  456.448295][T17310] i2c i2c-0: new_device: Extra parameters
[  456.508278][T17313] loop0: detected capacity change from 0 to 512
[  456.528617][T17313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  456.557768][T17313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.557838][T17313] ext4 filesystem being mounted at /889/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  456.623524][T17320] loop8: detected capacity change from 0 to 64
[  456.777714][T17313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.4207: bg 0: block 217: padding at end of block bitmap is not set
[  456.797073][T17313] EXT4-fs (loop0): Remounting filesystem read-only
[  456.859687][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.454304][T17344] loop1: detected capacity change from 0 to 512
[  457.482780][T17344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  457.482852][T17344] System zones: 1-12
[  457.484481][T17344] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.4220: missing EA_INODE flag
[  457.484496][T17344] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  457.485676][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  457.485689][    C0] EXT4-fs (loop1): initial error at time 2000000227: ext4_xattr_inode_iget:437: inode 12
[  457.485705][    C0] EXT4-fs (loop1): last error at time 2000000227: ext4_xattr_inode_iget:437: inode 12
[  457.498825][T17344] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.4220: error while reading EA inode 12 err=-117
[  457.498845][T17344] loop1: lost filesystem error report for type 5 error -117
[  457.572100][T17344] EXT4-fs (loop1): 1 orphan inode deleted
[  457.573014][T17344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.642178][T17349] jffs2: notice: (17349) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  457.675513][T17344] fscrypt (loop1, inode 15): Mutually exclusive encryption flags (0x1a)
[  457.749773][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.776485][T17352] loop6: detected capacity change from 0 to 256
[  457.777112][T17352] exfat: Deprecated parameter 'utf8'
[  457.777173][T17352] exfat: Deprecated parameter 'namecase'
[  457.777201][T17352] exfat: Deprecated parameter 'namecase'
[  457.838409][T17352] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  458.250169][T17336] loop7: detected capacity change from 0 to 32768
[  458.310386][T17336] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  458.616542][ T8705] ocfs2: Unmounting device (7,7) on (node local)
[  459.452148][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4239'.
[  459.604772][T17397] ip_tables: iptables: counters copy to user failed while replacing table
[  460.064237][T17416] loop6: detected capacity change from 0 to 512
[  460.088246][T17416] EXT4-fs: Ignoring removed nobh option
[  460.100007][T17416] EXT4-fs (loop6): Test dummy encryption mode enabled
[  460.100020][T17416] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  460.100027][T17416] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  460.142237][T17416] EXT4-fs (loop6): 1 truncate cleaned up
[  460.152353][T17416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.229308][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.414708][T17427] aa_policy_admin_capable: cap_mac_admin? 1
[  460.414721][T17427] aa_policy_admin_capable: policy locked? 0
[  460.415154][   T31] audit: type=1400 audit(2000000230.488:368): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=17425 comm="syz.1.4257"
[  460.916647][ T5771] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  461.011080][T17448] loop6: detected capacity change from 0 to 512
[  461.066041][ T5771] usb 1-1: Using ep0 maxpacket: 32
[  461.067204][ T5771] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  461.068195][ T5771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  461.070798][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  461.070813][ T5771] usb 1-1: Product: syz
[  461.070820][ T5771] usb 1-1: Manufacturer: syz
[  461.070827][ T5771] usb 1-1: SerialNumber: syz
[  461.074002][ T5771] usb 1-1: config 0 descriptor??
[  461.109935][T17437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  461.120376][ T5771] hub 1-1:0.0: bad descriptor, ignoring hub
[  461.120391][ T5771] hub 1-1:0.0: probe with driver hub failed with error -5
[  461.148228][T17448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.148308][T17448] ext4 filesystem being mounted at /788/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  461.245347][T17448] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 3: comm syz.6.4266: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  461.277311][T17448] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 12: comm syz.6.4266: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[  461.302069][T17448] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 13: comm syz.6.4266: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[  461.334308][T17453] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #2: block 18: comm syz.6.4266: lblock 17 mapped to illegal pblock 18 (length 1)
[  461.469999][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.609399][ T5771] usb 1-1: USB disconnect, device number 7
[  462.084914][T17468] loop8: detected capacity change from 0 to 1024
[  462.112422][T17468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  462.112486][T17468] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.149492][T17473] à‹
[  462.155280][T17471] loop6: detected capacity change from 0 to 1024
[  462.172567][T17468] EXT4-fs error (device loop8): ext4_readdir:280: inode #2: block 16: comm syz.8.4274: path /492/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  462.195854][T17468] EXT4-fs (loop8): Remounting filesystem read-only
[  462.251967][T17474] loop1: detected capacity change from 0 to 2048
[  462.310777][T17474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.339026][T10590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  462.790376][T17491] jffs2: notice: (17491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  462.808345][ T5727] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  462.848019][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.956295][ T5727] usb 1-1: Using ep0 maxpacket: 8
[  462.956744][ T5727] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  462.957820][ T5727] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.957835][ T5727] usb 1-1: config 0 has no interfaces?
[  462.957853][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.959448][ T5727] usb 1-1: config 0 descriptor??
[  463.085359][T17501] loop1: detected capacity change from 0 to 512
[  463.104602][T17501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.104690][T17501] ext4 filesystem being mounted at /706/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.217438][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.251293][ T5727] usb 1-1: USB disconnect, device number 8
[  463.539526][T17511] device-mapper: ioctl: name not supplied when creating device
[  463.663532][T17514] loop6: detected capacity change from 0 to 512
[  463.674790][T17514] EXT4-fs: Ignoring removed bh option
[  463.691785][T17514] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.4292: corrupted in-inode xattr: e_value size too large
[  463.691806][T17514] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  463.706742][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  463.706757][    C0] EXT4-fs (loop6): initial error at time 2000000233: ext4_iget_extra_inode:6027: inode 15
[  463.706773][    C0] EXT4-fs (loop6): last error at time 2000000233: ext4_iget_extra_inode:6027: inode 15
[  463.721037][T17514] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.4292: couldn't read orphan inode 15 (err -117)
[  463.721058][T17514] loop6: lost filesystem error report for type 5 error -117
[  463.765999][T17514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  463.918475][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.249132][T17528] loop1: detected capacity change from 0 to 512
[  464.273363][T17528] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.4298: bad orphan inode 15
[  464.273384][T17528] loop1: lost filesystem error report for type 5 error -117
[  464.273512][T17528] ext4_test_bit(bit=14, block=5) = 0
[  464.274426][T17528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.348398][T17528] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  464.380945][T17532] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4299'.
[  464.382655][T17533] loop8: detected capacity change from 0 to 256
[  464.383315][T17533] exfat: Deprecated parameter 'utf8'
[  464.436887][T17533] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d)
[  464.507903][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.763831][T17540] loop8: detected capacity change from 0 to 2048
[  464.782870][T17544] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  464.812095][T17546] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  464.864159][T17546] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  464.864180][T17546] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  464.891386][T17546] Remounting filesystem read-only
[  464.910483][T17540] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  464.932650][T17547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4306'.
[  464.932666][T17547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4306'.
[  464.989761][T10590] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  465.072052][T17551] loop0: detected capacity change from 0 to 2048
[  465.116395][T17551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.166702][T17558] loop8: detected capacity change from 0 to 512
[  465.290893][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.292921][T17558] FAT-fs (loop8): error, clusters badly computed (1 != 0)
[  465.314951][T17560] loop9: detected capacity change from 0 to 7
[  465.360734][    C0] blk_print_req_error: 10 callbacks suppressed
[  465.360747][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.360802][    C0] buffer_io_error: 10 callbacks suppressed
[  465.360808][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.414058][T17558] FAT-fs (loop8): error, clusters badly computed (2 != 1)
[  465.433175][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.433234][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.463413][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.463469][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.463670][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.463706][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.463793][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.463830][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.463917][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.463949][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.464041][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.464074][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.464096][T17560] ldm_validate_partition_table(): Disk read failed.
[  465.464173][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.464214][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.464304][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.464336][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.464423][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  465.464455][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  465.464643][T17560] Dev loop9: unable to read RDB block 0
[  465.540708][T17560]  loop9: unable to read partition table
[  465.540838][T17560] loop9: partition table beyond EOD, truncated
[  465.540859][T17560] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  465.937399][ T5727] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  466.086284][ T5727] usb 2-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01
[  466.090153][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  466.090170][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  466.093511][ T5727] usb 2-1: string descriptor 0 read error: -22
[  466.093591][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.153043][ T5727] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null))
[  466.153206][ T5727] etas_es58x 2-1:1.0: could not retrieve the product info string
[  466.229389][T17581] loop0: detected capacity change from 0 to 512
[  466.513147][T17563] etas_es58x 2-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE
[  466.513764][    C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  466.535276][    C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  466.543627][    C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  466.543817][    C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  466.544002][    C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT
[  466.544098][T17563] etas_es58x 2-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE
[  466.674358][T17588] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  466.750832][ T5727] usb 2-1: USB disconnect, device number 18
[  466.780909][ T5727] etas_es58x 2-1:1.0: Disconnecting (null) (null)
[  466.945235][T17596] profile_transition: unconfined exec no attachment
[  467.082103][T17602] profile_transition: unconfined exec no attachment
[  467.183786][T17575] loop6: detected capacity change from 0 to 40427
[  467.223715][T17575] F2FS-fs (loop6): invalid crc value
[  467.392789][T17608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4331'.
[  467.436498][T17613] profile_transition: unconfined exec no attachment
[  467.554344][T17575] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  467.658188][T17575] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  467.739484][T17617] profile_transition: unconfined exec no attachment
[  467.997439][T17620] profile_transition: unconfined exec no attachment
[  468.239583][ T7265] syz-executor: attempt to access beyond end of device
[  468.239583][ T7265] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  468.245479][T17624] profile_transition: unconfined exec no attachment
[  468.333503][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  468.333535][ T7265] Tainted: [L]=SOFTLOCKUP
[  468.333542][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  468.333554][ T7265] Call Trace:
[  468.333560][ T7265]  <TASK>
[  468.333565][ T7265]  dump_stack_lvl+0xe8/0x150
[  468.333588][ T7265]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  468.333644][ T7265]  f2fs_write_end_bio+0x118e/0x15d0
[  468.333687][ T7265]  __submit_merged_bio+0x258/0x6a0
[  468.333722][ T7265]  ? rcu_is_watching+0x16/0xb0
[  468.333740][ T7265]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  468.333756][ T7265]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  468.333782][ T7265]  f2fs_write_data_pages+0x2a13/0x36e0
[  468.333825][ T7265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  468.333838][ T7265]  ? is_bpf_text_address+0x26/0x2b0
[  468.333856][ T7265]  ? arch_stack_walk+0xfb/0x150
[  468.333885][ T7265]  ? add_lock_to_list+0xc7/0x100
[  468.333901][ T7265]  ? lockdep_unlock+0x5c/0xd0
[  468.333912][ T7265]  ? __lock_acquire+0x1511/0x2de0
[  468.333939][ T7265]  ? do_raw_spin_lock+0x12b/0x2f0
[  468.333956][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  468.333966][ T7265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  468.333981][ T7265]  do_writepages+0x338/0x560
[  468.333998][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  468.334011][ T7265]  filemap_fdatawrite+0x1e9/0x2f0
[  468.334025][ T7265]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  468.334061][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  468.334074][ T7265]  f2fs_sync_dirty_inodes+0x471/0x970
[  468.334094][ T7265]  f2fs_write_checkpoint+0x860/0x24d0
[  468.334125][ T7265]  kill_f2fs_super+0x2dc/0x700
[  468.334164][ T7265]  ? rcu_do_enqueue+0x616/0x870
[  468.334176][ T7265]  ? lockdep_hardirqs_on+0x7b/0x110
[  468.334189][ T7265]  ? __pfx_kill_f2fs_super+0x10/0x10
[  468.334214][ T7265]  ? __pfx_call_rcu+0x10/0x10
[  468.334232][ T7265]  ? shrinker_free+0x2a7/0x3b0
[  468.334244][ T7265]  deactivate_locked_super+0xbe/0x110
[  468.334259][ T7265]  cleanup_mnt+0x204/0x2a0
[  468.334306][ T7265]  task_work_run+0x1d9/0x260
[  468.334321][ T7265]  ? __pfx_task_work_run+0x10/0x10
[  468.334339][ T7265]  exit_to_user_mode_loop+0x204/0x770
[  468.334353][ T7265]  ? rcu_is_watching+0x16/0xb0
[  468.334370][ T7265]  do_syscall_64+0x328/0x520
[  468.334383][ T7265]  ? trace_irq_disable+0x3b/0x140
[  468.334396][ T7265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.334407][ T7265]  ? clear_bhb_loop+0x70/0xc0
[  468.334420][ T7265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.334430][ T7265] RIP: 0033:0x7fece7da0797
[  468.334443][ T7265] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  468.334452][ T7265] RSP: 002b:00007ffda2a621c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  468.334465][ T7265] RAX: 0000000000000000 RBX: 00007fece7e35f63 RCX: 00007fece7da0797
[  468.334472][ T7265] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda2a62280
[  468.334479][ T7265] RBP: 00007ffda2a62280 R08: 00007ffda2a63280 R09: 00000000ffffffff
[  468.334486][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda2a63310
[  468.334493][ T7265] R13: 00007fece7e35f63 R14: 0000000000072385 R15: 00007ffda2a63350
[  468.334511][ T7265]  </TASK>
[  468.334532][ T7265] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  468.823721][T17631] profile_transition: unconfined exec no attachment
[  468.838050][T17630] loop7: detected capacity change from 0 to 7
[  468.946887][T17630] Dev loop7: unable to read RDB block 7
[  468.946975][T17630]  loop7: unable to read partition table
[  468.947104][T17630] loop7: partition table beyond EOD, truncated
[  468.947126][T17630] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5)
[  469.124034][T17637] loop1: detected capacity change from 0 to 512
[  469.142180][T17638] profile_transition: unconfined exec no attachment
[  469.233107][T17635] loop0: detected capacity change from 0 to 8192
[  469.258049][T17637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.258120][T17637] ext4 filesystem being mounted at /719/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.435426][T17646] profile_transition: unconfined exec no attachment
[  469.506495][ T5771] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  469.657686][ T5771] usb 9-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00
[  469.659732][ T5771] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.659751][ T5771] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  469.659764][ T5771] usb 9-1: config 0 interface 0 has no altsetting 0
[  469.659784][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.661285][ T5771] usb 9-1: config 0 descriptor??
[  469.813878][T17651] profile_transition: unconfined exec no attachment
[  469.964567][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.123383][T17653] loop6: detected capacity change from 0 to 2048
[  470.164202][T17653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.198482][ T5771] hid-multitouch 0003:0EEF:72C4.0016: unknown main item tag 0x0
[  470.198504][ T5771] hid-multitouch 0003:0EEF:72C4.0016: unknown main item tag 0x0
[  470.263942][ T5771] hid-multitouch 0003:0EEF:72C4.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0
[  470.413698][ T5771] usb 9-1: USB disconnect, device number 17
[  470.560074][T17662] fido_id[17662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  470.674293][T17645] loop7: detected capacity change from 0 to 32768
[  470.782928][T17645] JBD2: Ignoring recovery information on journal
[  470.879273][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.930779][T17645] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  471.311353][ T8705] ocfs2: Unmounting device (7,7) on (node local)
[  471.369684][T17678] kvm [17677]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4
[  471.451735][T17682] loop6: detected capacity change from 0 to 128
[  471.474109][T17682] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  471.649842][ T1486] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  471.709105][T17685] loop8: detected capacity change from 0 to 512
[  471.723682][T17685] EXT4-fs: Ignoring removed nobh option
[  471.765041][T17685] EXT4-fs (loop8): 1 truncate cleaned up
[  471.772647][T17685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.064214][T17694] fuse-io-uring is disabled by module parameter
[  472.197582][T10590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.744327][T17709] cifs: Unknown parameter 'éýf#%À#¬H¢Šé–Äa»~™Äa;M)Ú�Zô™Ê§uœÆg¯ŠÎ¦ÜR�3INý�ª«c‚Õã4q¡ìGß[SvNLh„/Ñ¢�Q�.'
[  473.020592][T17695] loop6: detected capacity change from 0 to 40427
[  473.043603][T17695] F2FS-fs (loop6): invalid crc value
[  473.298548][T17695] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  473.475548][T17695] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  473.571252][T17723] loop7: detected capacity change from 0 to 164
[  473.621151][T17723] rock: directory entry would overflow storage
[  473.621162][T17723] rock: sig=0x66, size=4, remaining=3
[  473.669201][T17723] rock: directory entry would overflow storage
[  473.669212][T17723] rock: sig=0x66, size=4, remaining=3
[  473.710703][ T7265] syz-executor: attempt to access beyond end of device
[  473.710703][ T7265] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  473.775038][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz-executor Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  473.775059][ T7265] Tainted: [L]=SOFTLOCKUP
[  473.775063][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  473.775070][ T7265] Call Trace:
[  473.775074][ T7265]  <TASK>
[  473.775080][ T7265]  dump_stack_lvl+0xe8/0x150
[  473.775101][ T7265]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  473.775119][ T7265]  f2fs_write_end_bio+0x118e/0x15d0
[  473.775141][ T7265]  __submit_merged_bio+0x258/0x6a0
[  473.775154][ T7265]  ? rcu_is_watching+0x16/0xb0
[  473.775173][ T7265]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  473.775188][ T7265]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  473.775215][ T7265]  f2fs_write_data_pages+0x2a13/0x36e0
[  473.775259][ T7265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  473.775273][ T7265]  ? is_bpf_text_address+0x26/0x2b0
[  473.775291][ T7265]  ? arch_stack_walk+0xfb/0x150
[  473.775321][ T7265]  ? add_lock_to_list+0xc7/0x100
[  473.775336][ T7265]  ? lockdep_unlock+0x5c/0xd0
[  473.775347][ T7265]  ? __lock_acquire+0x1511/0x2de0
[  473.775374][ T7265]  ? do_raw_spin_lock+0x12b/0x2f0
[  473.775391][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  473.775401][ T7265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  473.775417][ T7265]  do_writepages+0x338/0x560
[  473.775434][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  473.775447][ T7265]  filemap_fdatawrite+0x1e9/0x2f0
[  473.775461][ T7265]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  473.775498][ T7265]  ? do_raw_spin_unlock+0xf5/0x200
[  473.775510][ T7265]  f2fs_sync_dirty_inodes+0x471/0x970
[  473.775530][ T7265]  f2fs_write_checkpoint+0x860/0x24d0
[  473.775561][ T7265]  kill_f2fs_super+0x2dc/0x700
[  473.775586][ T7265]  ? rcu_do_enqueue+0x616/0x870
[  473.775599][ T7265]  ? lockdep_hardirqs_on+0x7b/0x110
[  473.775612][ T7265]  ? __pfx_kill_f2fs_super+0x10/0x10
[  473.775639][ T7265]  ? __pfx_call_rcu+0x10/0x10
[  473.775657][ T7265]  ? shrinker_free+0x2a7/0x3b0
[  473.775670][ T7265]  deactivate_locked_super+0xbe/0x110
[  473.775684][ T7265]  cleanup_mnt+0x204/0x2a0
[  473.775701][ T7265]  task_work_run+0x1d9/0x260
[  473.775716][ T7265]  ? __pfx_task_work_run+0x10/0x10
[  473.775734][ T7265]  exit_to_user_mode_loop+0x204/0x770
[  473.775748][ T7265]  ? rcu_is_watching+0x16/0xb0
[  473.775764][ T7265]  do_syscall_64+0x328/0x520
[  473.775777][ T7265]  ? trace_irq_disable+0x3b/0x140
[  473.775790][ T7265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.775801][ T7265]  ? clear_bhb_loop+0x70/0xc0
[  473.775813][ T7265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.775824][ T7265] RIP: 0033:0x7fece7da0797
[  473.775835][ T7265] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  473.775844][ T7265] RSP: 002b:00007ffda2a621c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  473.775856][ T7265] RAX: 0000000000000000 RBX: 00007fece7e35f63 RCX: 00007fece7da0797
[  473.775863][ T7265] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda2a62280
[  473.775870][ T7265] RBP: 00007ffda2a62280 R08: 00007ffda2a63280 R09: 00000000ffffffff
[  473.775877][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda2a63310
[  473.775883][ T7265] R13: 00007fece7e35f63 R14: 00000000000739f2 R15: 00007ffda2a63350
[  473.775901][ T7265]  </TASK>
[  474.107320][ T7265] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  474.730282][T17743] loop1: detected capacity change from 0 to 512
[  474.745969][T17743] EXT4-fs: Ignoring removed mblk_io_submit option
[  474.775349][T17743] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.4384: corrupted in-inode xattr: e_value size too large
[  474.775371][T17743] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  474.789688][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  474.789703][    C0] EXT4-fs (loop1): initial error at time 2000000244: ext4_iget_extra_inode:6027: inode 15
[  474.789720][    C0] EXT4-fs (loop1): last error at time 2000000244: ext4_iget_extra_inode:6027: inode 15
[  474.807349][T17743] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.4384: couldn't read orphan inode 15 (err -117)
[  474.807371][T17743] loop1: lost filesystem error report for type 5 error -117
[  474.849745][T17743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.973533][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.306787][T17744] loop7: detected capacity change from 0 to 32768
[  475.321822][T17744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4374 (17744)
[  475.350040][T17744] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  475.350159][T17744] BTRFS info (device loop7): using sha256 checksum algorithm
[  475.434202][T17744] BTRFS info (device loop7): enabling ssd optimizations
[  475.434227][T17744] BTRFS info (device loop7): turning on async discard
[  475.434256][T17744] BTRFS info (device loop7): enabling free space tree
[  475.478670][T17740] loop8: detected capacity change from 0 to 40427
[  475.492834][T17740] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  475.492848][T17740] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  475.493371][T17740] F2FS-fs (loop8): invalid crc value
[  475.574508][T17765] profile_transition: 6 callbacks suppressed
[  475.574522][T17765] profile_transition: unconfined exec no attachment
[  475.598653][ T8705] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  475.834780][T17740] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  476.020607][T17740] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  476.020644][T17740] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  476.160990][T17762] f2fs_ckpt-7:8: attempt to access beyond end of device
[  476.160990][T17762] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  476.250141][T17762] CPU: 0 UID: 0 PID: 17762 Comm: f2fs_ckpt-7:8 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  476.250162][T17762] Tainted: [L]=SOFTLOCKUP
[  476.250166][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  476.250173][T17762] Call Trace:
[  476.250178][T17762]  <TASK>
[  476.250184][T17762]  dump_stack_lvl+0xe8/0x150
[  476.250205][T17762]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  476.250223][T17762]  f2fs_write_end_bio+0x118e/0x15d0
[  476.250244][T17762]  __submit_merged_bio+0x258/0x6a0
[  476.250258][T17762]  ? rcu_is_watching+0x16/0xb0
[  476.250277][T17762]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  476.250292][T17762]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  476.250318][T17762]  f2fs_write_data_pages+0x2a13/0x36e0
[  476.250354][T17762]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.250375][T17762]  ? arch_stack_walk+0x11b/0x150
[  476.250405][T17762]  ? add_lock_to_list+0xc7/0x100
[  476.250421][T17762]  ? lockdep_unlock+0x5c/0xd0
[  476.250431][T17762]  ? __lock_acquire+0x1511/0x2de0
[  476.250458][T17762]  ? do_raw_spin_lock+0x12b/0x2f0
[  476.250475][T17762]  ? do_raw_spin_unlock+0xf5/0x200
[  476.250486][T17762]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  476.250501][T17762]  do_writepages+0x338/0x560
[  476.250519][T17762]  ? do_raw_spin_unlock+0xf5/0x200
[  476.250532][T17762]  filemap_fdatawrite+0x1e9/0x2f0
[  476.250546][T17762]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  476.250582][T17762]  ? do_raw_spin_unlock+0xf5/0x200
[  476.250595][T17762]  f2fs_sync_dirty_inodes+0x471/0x970
[  476.250614][T17762]  f2fs_write_checkpoint+0x860/0x24d0
[  476.250647][T17762]  __checkpoint_and_complete_reqs+0x135/0x480
[  476.250665][T17762]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  476.250692][T17762]  ? schedule+0x90/0x2b0
[  476.250709][T17762]  issue_checkpoint_thread+0xd5/0x270
[  476.250722][T17762]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  476.250733][T17762]  ? __pfx_autoremove_wake_function+0x10/0x10
[  476.250750][T17762]  ? __kthread_parkme+0x71/0x1f0
[  476.250762][T17762]  ? __kthread_parkme+0x199/0x1f0
[  476.250775][T17762]  kthread+0x38b/0x480
[  476.250787][T17762]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  476.250797][T17762]  ? __pfx_kthread+0x10/0x10
[  476.250816][T17762]  ret_from_fork+0x514/0xb70
[  476.250830][T17762]  ? __pfx_ret_from_fork+0x10/0x10
[  476.250841][T17762]  ? __switch_to+0xc78/0x1410
[  476.250858][T17762]  ? __pfx_kthread+0x10/0x10
[  476.250871][T17762]  ret_from_fork_asm+0x1a/0x30
[  476.250891][T17762]  </TASK>
[  476.250909][T17762] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  476.954003][T17789] loop0: detected capacity change from 0 to 2048
[  477.067397][T17789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.140565][T17789] EXT4-fs (loop0): shut down requested (2)
[  477.196949][T17793] loop1: detected capacity change from 0 to 128
[  477.253791][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.724090][T17809] profile_transition: name lookup ix on error
[  477.750872][T17809] loop1: detected capacity change from 0 to 512
[  477.798907][T17811] program syz.8.4382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  477.958122][T17815] loop6: detected capacity change from 0 to 256
[  478.326129][T17805] loop0: detected capacity change from 0 to 32768
[  478.340981][T17829] loop8: detected capacity change from 0 to 2048
[  478.392565][T17829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.971480][T10590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.262509][T17855] loop1: detected capacity change from 0 to 2048
[  479.289396][T17855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.821914][T17868] loop1: detected capacity change from 0 to 32763
[  479.854575][T17866] loop0: detected capacity change from 0 to 4096
[  479.882347][T17868] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  479.883143][T17868] syz.1.4420: attempt to access beyond end of device
[  479.883143][T17868] loop1: rw=8392704, sector=32767, nr_sectors = 1 limit=32763
[  479.883187][T17868] XFS (loop1): last sector read failed
[  480.475494][T17877] loop7: detected capacity change from 0 to 131072
[  480.509437][T17877] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (512, 24)
[  480.509456][T17877] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  480.509474][T17877] F2FS-fs (loop7): Test dummy encryption mode enabled
[  480.510438][T17877] F2FS-fs (loop7): invalid crc value
[  480.573309][T17877] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  480.573359][T17877] loop7: lost filesystem error report for type 5 error -117
[  480.576929][T17877] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  480.592644][T17877] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  480.592663][T17877] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  480.592677][T17877] F2FS-fs (loop7): Start checkpoint disabled!
[  480.645959][T17877] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  480.647993][T17877] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  480.648009][T17877] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  481.160931][T17886] loop6: detected capacity change from 0 to 2048
[  481.212648][T17886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.297835][T17885] loop1: detected capacity change from 0 to 4096
[  481.550358][T17885] ntfs3(loop1): ino=5, "/" indx_read_ra
[  481.550379][T17885] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  482.082755][T17903] loop7: detected capacity change from 0 to 1024
[  482.129783][T17903] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  482.141845][T17903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  482.141933][T17903] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  482.207036][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.438384][T17903] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 3: comm syz.7.4431: lblock 3 mapped to illegal pblock 3 (length 3)
[  482.464559][T17914] loop0: detected capacity change from 0 to 256
[  482.465215][T17914] exfat: Deprecated parameter 'utf8'
[  482.465227][T17914] exfat: Deprecated parameter 'utf8'
[  482.465269][T17914] exfat: Deprecated parameter 'namecase'
[  482.537680][T17903] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  482.537704][T17903] EXT4-fs (loop7): This should not happen!! Data will be lost
[  482.537704][T17903] 
[  482.576319][T17914] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xfffcecf0, utbl_chksum : 0xe619d30d)
[  482.659533][   T52] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  482.746442][   T52] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  482.746463][   T52] EXT4-fs (loop7): This should not happen!! Data will be lost
[  482.746463][   T52] 
[  482.810631][ T8705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  483.262448][T17931] loop1: detected capacity change from 0 to 2048
[  483.318410][T17931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.613910][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4446'.
[  483.747469][T17746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  483.941869][T17946] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  483.979017][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.186120][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4452'.
[  484.186138][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4452'.
[  484.187757][T17953] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4452'.
[  484.187770][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4452'.
[  484.190973][T17956] aa_policy_admin_capable: cap_mac_admin? 1
[  484.190984][T17956] aa_policy_admin_capable: policy locked? 0
[  484.191082][   T31] audit: type=1400 audit(2000000254.268:369): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=17950 comm="syz.1.4450" offset=16
[  484.216139][T17955] netlink: 'syz.0.4453': attribute type 1 has an invalid length.
[  484.611131][T17973] loop0: detected capacity change from 0 to 2048
[  484.645307][T17973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.825916][ T5771] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  484.977574][ T5771] usb 9-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80
[  484.982576][ T5771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.982596][ T5771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.982618][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.030557][ T5771] usb 9-1: config 0 descriptor??
[  485.183962][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.505513][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505537][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505553][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505568][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505582][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505597][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.505611][ T5771] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0
[  485.575871][ T5771] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0
[  485.636965][T17990] profile_transition: unconfined exec no attachment
[  485.674099][ T5771] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00
[  485.896552][ T5771] cp2112 0003:10C4:EA90.0017: error requesting SMBus config
[  485.902672][ T5771] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -71
[  485.961077][ T5771] usb 9-1: USB disconnect, device number 18
[  486.109329][T17997] loop1: detected capacity change from 0 to 512
[  486.133092][T17997] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  486.133107][T17997] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  486.174594][T17997] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm syz.1.4470: Invalid block bitmap block 0 in block_group 0
[  486.174617][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.188564][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  486.188581][    C0] EXT4-fs (loop1): initial error at time 2000000256: ext4_read_block_bitmap_nowait:487
[  486.188595][    C0] EXT4-fs (loop1): last error at time 2000000256: ext4_read_block_bitmap_nowait:487
[  486.221592][T17997] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  486.221610][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.244962][T17997] EXT4-fs error (device loop1): ext4_clear_blocks:893: inode #11: comm syz.1.4470: attempt to clear invalid blocks 983261 len 1
[  486.245007][T17997] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  486.275585][T17997] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.4470: Invalid inode table block 0 in block_group 0
[  486.275607][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.304156][T17997] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem
[  486.304173][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.313713][T17997] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[  486.313729][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.326319][T17997] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.4470: Invalid inode table block 0 in block_group 0
[  486.326340][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.344764][T17997] EXT4-fs error (device loop1) in ext4_reserve_inode_write:7453: Corrupt filesystem
[  486.344782][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.353292][T17997] EXT4-fs error (device loop1): ext4_truncate:5538: inode #11: comm syz.1.4470: mark_inode_dirty error
[  486.353311][T17997] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  486.420911][T17997] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  486.420931][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.432219][T17997] EXT4-fs error (device loop1): __ext4_get_inode_loc:5733: comm syz.1.4470: Invalid inode table block 0 in block_group 0
[  486.432241][T17997] loop1: lost filesystem error report for type 5 error -117
[  486.468198][T17997] EXT4-fs (loop1): 1 truncate cleaned up
[  486.469374][T17997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.663789][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.893099][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4475'.
[  486.893134][T18006] nbd: socks must be embedded in a SOCK_ITEM attr
[  487.118812][T18011] loop8: detected capacity change from 0 to 2048
[  487.174105][T18011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.569369][T10590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.834484][T18046] loop0: detected capacity change from 0 to 8
[  487.859088][T18045] aa_policy_admin_capable: cap_mac_admin? 1
[  487.859102][T18045] aa_policy_admin_capable: policy locked? 0
[  487.859185][T18045] unpack_pdb: unpacking tags
[  487.859191][T18045] unpack_pdb: done unpacking tags
[  487.860341][T18045] aa_free_profile: aa_free_profile(ffff888028723800)
[  487.860448][   T31] audit: type=1400 audit(2000000257.938:370): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=18043 comm="syz.7.4492" name="p" offset=33
[  488.016600][T18046] SQUASHFS error: Unable to read directory block [629:46]
[  488.048062][ T5629] Bluetooth: hci2: unexpected event for opcode 0x2042
[  488.121969][T18054] netlink: 'syz.7.4497': attribute type 3 has an invalid length.
[  488.280292][T18062] loop1: detected capacity change from 0 to 2048
[  488.332218][T18062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.663063][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.719460][T18075] loop7: detected capacity change from 0 to 512
[  488.722153][T18075] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  488.722165][T18075] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  488.770734][T18075] EXT4-fs (loop7): 1 truncate cleaned up
[  488.771636][T18075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.807421][T18078] ªªªªªª: renamed from vlan0 (while UP)
[  488.827184][T18075] EXT4-fs error (device loop7): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.7.4506: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  488.851041][T18075] EXT4-fs (loop7): Remounting filesystem read-only
[  488.851057][T18075] EXT4-fs warning (device loop7): ext4_rename_delete:3742: inode #2: comm syz.7.4506: Deleting old file: nlink 5, error=-117
[  488.991540][ T8705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.185070][T18089] loop7: detected capacity change from 0 to 64
[  489.283708][T18086] loop8: detected capacity change from 0 to 4096
[  489.298234][T18086] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  489.323354][T18094] loop0: detected capacity change from 0 to 256
[  489.323989][T18094] exfat: Deprecated parameter 'utf8'
[  489.369028][T18094] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  489.428004][T18086] ntfs3(loop8): ino=19, mi_enum_attr
[  489.428026][T18086] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  489.431226][T18086] ntfs3(loop8): ino=1a, mi_enum_attr
[  489.431307][T18086] ntfs3(loop8): ino=1a, mi_enum_attr
[  489.431317][T18086] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  489.688428][T18099] loop5: detected capacity change from 0 to 8
[  489.703609][T18099] Dev loop5: unable to read RDB block 8
[  489.703658][T18099]  loop5: unable to read partition table
[  489.703777][T18099] loop5: partition table beyond EOD, truncated
[  489.703789][T18099] loop_reread_partitions: partition scan of loop5 (þ被xü“ŸÑà– ) failed (rc=-5)
[  490.086401][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  490.239986][   T10] usb 2-1: Using ep0 maxpacket: 32
[  490.244386][   T10] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  490.262114][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.275227][   T10] usb 2-1: config 0 descriptor??
[  490.512493][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  490.549284][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  490.552765][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  490.552850][   T10] usb 2-1: media controller created
[  490.651876][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  490.726038][   T10] az6027: usb out operation failed. (-71)
[  490.727823][   T10] az6027: usb out operation failed. (-71)
[  490.727834][   T10] stb0899_attach: Driver disabled by Kconfig
[  490.727840][   T10] az6027: no front-end attached
[  490.727840][   T10] 
[  490.730857][   T10] az6027: usb out operation failed. (-71)
[  490.730868][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  490.777466][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34
[  490.785398][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  490.785414][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  490.823515][   T10] usb 2-1: USB disconnect, device number 19
[  490.895026][   T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.985440][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  491.028270][T18119] profile_transition: unconfined exec no attachment
[  491.195561][   T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.479302][   T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.690761][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  491.709715][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  491.727306][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4531'.
[  491.727327][T18130] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4531'.
[  491.727579][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  491.728994][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  491.729526][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  491.978237][   T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.054670][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  492.055457][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  492.134245][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  492.477946][T18147] profile_transition: unconfined exec no attachment
[  492.623682][T18151] profile_transition: unconfined exec no attachment
[  492.673603][   T67] bridge_slave_1: left promiscuous mode
[  492.673765][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.701762][   T67] bridge_slave_0: left allmulticast mode
[  492.701781][   T67] bridge_slave_0: left promiscuous mode
[  492.701924][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.754577][T18131] infiniband rxe0: set active
[  492.754592][T18131] infiniband rxe0: added rxe_eth0
[  492.851503][T18131] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  492.851529][T18131] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  492.851549][T18131] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  492.966303][T18160] profile_transition: unconfined exec no attachment
[  493.032872][T18131] RDS/IB: rxe0: added
[  493.032907][T18131] smc: adding ib device rxe0 with port count 1
[  493.032919][T18131] smc:    ib device rxe0 port 1 has no pnetid
[  493.061458][  T195] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  493.129444][   T67] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  493.154639][T18164] profile_transition: unconfined exec no attachment
[  493.222042][  T195] usb 2-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  493.254569][  T195] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.254591][  T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  493.254605][  T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  493.293251][  T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.293268][  T195] usb 2-1: Product: syz
[  493.293275][  T195] usb 2-1: Manufacturer: syz
[  493.293283][  T195] usb 2-1: SerialNumber: syz
[  493.303798][  T195] usb 2-1: config 0 descriptor??
[  493.308525][T18156] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  493.344665][  T195] rc_core: Couldn't load IR keymap rc-streamzap
[  493.344678][  T195] Registered IR keymap rc-empty
[  493.427935][  T195] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  493.456460][  T195] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35
[  493.464671][T18172] profile_transition: unconfined exec no attachment
[  493.734330][T18177] profile_transition: unconfined exec no attachment
[  493.876281][ T5629] Bluetooth: hci1: command tx timeout
[  493.918716][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.965457][T18181] profile_transition: unconfined exec no attachment
[  494.029424][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  494.064172][   T67] bond0 (unregistering): Released all slaves
[  494.101203][ T5771] rxe_eth0 speed is unknown, defaulting to 1000
[  494.142008][T18159] rxe_eth0 speed is unknown, defaulting to 1000
[  494.152904][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  494.178543][T18184] profile_transition: unconfined exec no attachment
[  494.465302][ T5289] 8021q: adding VLAN 0 to HW filter on device eth17
[  494.646168][T18186] profile_transition: unconfined exec no attachment
[  495.822750][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  495.906657][ T5771] usb 2-1: USB disconnect, device number 20
[  495.961971][ T5629] Bluetooth: hci1: command tx timeout
[  496.063325][T18199] erspan0: entered promiscuous mode
[  496.151977][T18212] profile_transition: 3 callbacks suppressed
[  496.151992][T18212] profile_transition: unconfined exec no attachment
[  496.337153][T18216] aa_policy_admin_capable: cap_mac_admin? 1
[  496.337167][T18216] aa_policy_admin_capable: policy locked? 0
[  496.337240][T18216] unpack_pdb: unpacking tags
[  496.337245][T18216] unpack_pdb: done unpacking tags
[  496.337264][T18216] unpack_pdb: unpacking tags
[  496.337269][T18216] unpack_pdb: done unpacking tags
[  496.337353][T18216] aa_free_profile: aa_free_profile(ffff88806a0c2800)
[  496.337451][   T31] audit: type=1400 audit(2000000266.418:371): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=18214 comm="syz.6.4557" name="p" offset=79
[  496.501737][T18221] profile_transition: unconfined exec no attachment
[  496.652483][T18228] profile_transition: unconfined exec no attachment
[  496.735975][T18159] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  496.792656][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  496.824652][T18235] profile_transition: unconfined exec no attachment
[  496.887694][T18159] usb 9-1: Using ep0 maxpacket: 16
[  496.889384][T18159] usb 9-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  496.890871][T18159] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.890888][T18159] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.890900][T18159] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  496.890938][T18159] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.012034][T18159] usb 9-1: config 0 descriptor??
[  497.110495][ T5289] 8021q: adding VLAN 0 to HW filter on device eth18
[  497.349546][T18247] profile_transition: unconfined exec no attachment
[  497.463313][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463362][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463378][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463393][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463408][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463423][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463438][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463453][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463468][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.463482][T18159] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  497.561502][T18159] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  497.591336][T18249] profile_transition: unconfined exec no attachment
[  497.613403][T18250] profile_transition: unconfined exec no attachment
[  497.659687][T18159] usb 9-1: USB disconnect, device number 19
[  497.781474][T18250] fido_id[18250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  497.811960][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  497.882293][T18257] profile_transition: unconfined exec no attachment
[  498.036360][ T5629] Bluetooth: hci1: command tx timeout
[  498.071861][T18263] profile_transition: unconfined exec no attachment
[  498.307860][T18268] profile_transition: unconfined exec no attachment
[  498.540665][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  498.642512][T18277] loop6: detected capacity change from 0 to 1024
[  498.681189][T18277] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  498.698506][T18277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  498.698606][T18277] ext4 filesystem being mounted at /858/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.779866][T18277] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 3: comm syz.6.4574: lblock 3 mapped to illegal pblock 3 (length 3)
[  498.800943][T18277] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  498.800963][T18277] EXT4-fs (loop6): This should not happen!! Data will be lost
[  498.800963][T18277] 
[  498.845191][T18284] loop7: detected capacity change from 0 to 512
[  498.871186][T18284] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  498.871200][T18284] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  498.954613][T18284] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.4575: Invalid block bitmap block 0 in block_group 0
[  498.954652][T18284] loop7: lost filesystem error report for type 5 error -117
[  498.955654][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  498.955668][    C0] EXT4-fs (loop7): initial error at time 2000000269: ext4_read_block_bitmap_nowait:487
[  498.955681][    C0] EXT4-fs (loop7): last error at time 2000000269: ext4_read_block_bitmap_nowait:487
[  498.970488][T18284] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  498.970504][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.022885][T18284] EXT4-fs error (device loop7): ext4_clear_blocks:893: inode #11: comm syz.7.4575: attempt to clear invalid blocks 983261 len 1
[  499.022909][T18284] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  499.031788][T18284] EXT4-fs error (device loop7): __ext4_get_inode_loc:5733: comm syz.7.4575: Invalid inode table block 0 in block_group 0
[  499.031807][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.034250][T18284] EXT4-fs error (device loop7) in ext4_reserve_inode_write:7453: Corrupt filesystem
[  499.034265][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.048980][T18284] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem
[  499.048995][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.049256][T18284] EXT4-fs error (device loop7): __ext4_get_inode_loc:5733: comm syz.7.4575: Invalid inode table block 0 in block_group 0
[  499.049271][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.141550][T18284] EXT4-fs error (device loop7) in ext4_reserve_inode_write:7453: Corrupt filesystem
[  499.141570][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.144883][T18284] EXT4-fs error (device loop7): ext4_truncate:5538: inode #11: comm syz.7.4575: mark_inode_dirty error
[  499.144905][T18284] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  499.187897][T18284] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem
[  499.187914][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.198424][T18284] EXT4-fs error (device loop7): __ext4_get_inode_loc:5733: comm syz.7.4575: Invalid inode table block 0 in block_group 0
[  499.198446][T18284] loop7: lost filesystem error report for type 5 error -117
[  499.208170][T18284] EXT4-fs (loop7): 1 truncate cleaned up
[  499.209213][T18284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  499.441478][ T8705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.470902][T18277] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 8: comm syz.6.4574: lblock 8 mapped to illegal pblock 8 (length 8)
[  499.548317][T18277] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  499.548339][T18277] EXT4-fs (loop6): This should not happen!! Data will be lost
[  499.548339][T18277] 
[  499.673794][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  499.745282][ T5289] 8021q: adding VLAN 0 to HW filter on device eth19
[  500.115950][ T5629] Bluetooth: hci1: command tx timeout
[  500.230125][T18131] dummy0 speed is unknown, defaulting to 1000
[  500.279644][T18131] rxe_eth0 speed is unknown, defaulting to 1000
[  500.554225][T18309] loop6: detected capacity change from 0 to 4096
[  500.616029][ T5727] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  500.772887][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short
[  500.772919][ T5727] usb 2-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40
[  500.799200][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  500.799217][ T5727] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  500.803872][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.803887][ T5727] usb 2-1: Product: syz
[  500.803894][ T5727] usb 2-1: Manufacturer: syz
[  500.803902][ T5727] usb 2-1: SerialNumber: syz
[  500.904120][ T5727] usb 2-1: selecting invalid altsetting 1
[  500.987920][   T67] hsr_slave_0: left promiscuous mode
[  501.004664][   T67] hsr_slave_1: left promiscuous mode
[  501.005246][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.005259][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.039486][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.039600][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.106426][   T67] veth1_macvtap: left promiscuous mode
[  501.106451][   T67] veth0_macvtap: left promiscuous mode
[  501.106528][   T67] veth1_vlan: left promiscuous mode
[  501.106566][   T67] veth0_vlan: left promiscuous mode
[  501.214781][ T5727] usb 2-1: unit 6 not found!
[  501.342001][T18323] profile_transition: 7 callbacks suppressed
[  501.342014][T18323] profile_transition: unconfined exec no attachment
[  501.477976][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  501.478027][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  501.664363][T18330] profile_transition: unconfined exec no attachment
[  501.800973][T18335] profile_transition: unconfined exec no attachment
[  501.980905][T18336] profile_transition: unconfined exec no attachment
[  502.245378][T18342] loop9: detected capacity change from 0 to 524287998
[  502.702249][   T67] team0 (unregistering): Port device team_slave_1 removed
[  502.794681][   T67] team0 (unregistering): Port device team_slave_0 removed
[  503.063239][ T5727] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  503.064857][ T5727] usb 2-1: USB disconnect, device number 21
[  503.138903][ T7644] udevd[7644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  503.222170][T18359] CIFS: bad ip= option (127®0.0.1)
[  503.233567][T18359] CIFS: Attempting to mount (null)
[  503.426059][ T5289] 8021q: adding VLAN 0 to HW filter on device eth20
[  503.552416][T18366] profile_transition: unconfined exec no attachment
[  503.584107][T18367] loop6: detected capacity change from 0 to 8
[  503.874128][T18373] profile_transition: unconfined exec no attachment
[  503.954404][   T67] IPVS: stop unused estimator thread 0...
[  504.084648][T18359] CIFS: VFS: Error connecting to socket. Aborting operation.
[  504.084831][T18359] CIFS: VFS: cifs_mount failed w/return code = -4
[  504.200692][T18384] profile_transition: unconfined exec no attachment
[  504.398916][T18392] profile_transition: unconfined exec no attachment
[  504.541982][T18397] loop6: detected capacity change from 0 to 128
[  504.563488][T18131] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.563549][T18131] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.563678][T18131] bridge_slave_0: entered allmulticast mode
[  504.564586][T18131] bridge_slave_0: entered promiscuous mode
[  504.595539][T18397] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  504.628567][T18131] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.630241][T18131] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.635475][T18131] bridge_slave_1: entered allmulticast mode
[  504.667806][T18131] bridge_slave_1: entered promiscuous mode
[  504.679164][T18397] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  504.815604][T18400] profile_transition: unconfined exec no attachment
[  504.832881][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.869368][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.002831][T18131] team0: Port device team_slave_0 added
[  505.017078][T18131] team0: Port device team_slave_1 added
[  505.120753][T18404] profile_transition: unconfined exec no attachment
[  505.125834][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.125845][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.125859][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.135165][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.135176][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.135190][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.434427][T18131] hsr_slave_0: entered promiscuous mode
[  505.435065][T18131] hsr_slave_1: entered promiscuous mode
[  505.435461][T18131] debugfs: 'hsr0' already exists in 'hsr'
[  505.435473][T18131] Cannot create hsr debugfs directory
[  505.501936][T18410] loop8: detected capacity change from 0 to 1024
[  505.532863][T18410] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  505.551467][T18410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  505.551548][T18410] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.634110][T18410] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 3: comm syz.8.4616: lblock 3 mapped to illegal pblock 3 (length 3)
[  505.653843][T18410] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  505.653864][T18410] EXT4-fs (loop8): This should not happen!! Data will be lost
[  505.653864][T18410] 
[  505.714079][T18410] EXT4-fs error (device loop8): ext4_map_blocks:951: inode #15: block 8: comm syz.8.4616: lblock 8 mapped to illegal pblock 8 (length 8)
[  505.730895][T18410] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  505.730915][T18410] EXT4-fs (loop8): This should not happen!! Data will be lost
[  505.730915][T18410] 
[  505.853392][T10590] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  506.559732][T18443] profile_transition: 4 callbacks suppressed
[  506.559746][T18443] profile_transition: unconfined exec no attachment
[  506.764505][T18452] profile_transition: unconfined exec no attachment
[  506.783478][T18451] loop1: detected capacity change from 0 to 1024
[  506.823757][T18451] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  506.859597][T18451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  506.859691][T18451] ext4 filesystem being mounted at /784/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.934860][T18451] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.4630: lblock 3 mapped to illegal pblock 3 (length 3)
[  506.950924][T18451] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  506.950943][T18451] EXT4-fs (loop1): This should not happen!! Data will be lost
[  506.950943][T18451] 
[  506.995180][T18451] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 8: comm syz.1.4630: lblock 8 mapped to illegal pblock 8 (length 8)
[  507.028440][T18451] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  507.028461][T18451] EXT4-fs (loop1): This should not happen!! Data will be lost
[  507.028461][T18451] 
[  507.117987][T18459] profile_transition: unconfined exec no attachment
[  507.185341][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  507.239868][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4627'.
[  507.322219][T18462] profile_transition: unconfined exec no attachment
[  507.411450][T18467] profile_transition: unconfined exec no attachment
[  507.617642][T18471] loop1: detected capacity change from 0 to 512
[  507.620365][T18471] EXT4-fs: Ignoring removed nomblk_io_submit option
[  507.651218][T18471] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  507.671652][T18477] profile_transition: unconfined exec no attachment
[  507.681769][T18471] EXT4-fs (loop1): 1 truncate cleaned up
[  507.682723][T18471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.991543][T18483] profile_transition: unconfined exec no attachment
[  507.994223][T18481] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.995401][T18481] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.159681][ T7832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.304737][T18491] profile_transition: unconfined exec no attachment
[  508.491413][T18499] FAULT_INJECTION: forcing a failure.
[  508.491413][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  508.491436][T18499] CPU: 0 UID: 0 PID: 18499 Comm: syz.6.4647 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  508.491452][T18499] Tainted: [L]=SOFTLOCKUP
[  508.491457][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  508.491464][T18499] Call Trace:
[  508.491469][T18499]  <TASK>
[  508.491475][T18499]  dump_stack_lvl+0xe8/0x150
[  508.491497][T18499]  should_fail_ex+0x3eb/0x540
[  508.491608][T18499]  _copy_from_user+0x2d/0xb0
[  508.491643][T18499]  kstrtouint_from_user+0xd6/0x180
[  508.491680][T18499]  ? lock_acquire+0x115/0x350
[  508.491695][T18499]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  508.491713][T18499]  ? get_pid_task+0x20/0x1f0
[  508.491727][T18499]  ? get_pid_task+0x20/0x1f0
[  508.491747][T18499]  proc_fail_nth_write+0x8e/0x210
[  508.491810][T18499]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  508.491825][T18499]  ? iov_iter_iovec_advance+0x1e0/0x290
[  508.491866][T18499]  vfs_writev+0x4bb/0x990
[  508.491879][T18499]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  508.491897][T18499]  ? __pfx_vfs_writev+0x10/0x10
[  508.491916][T18499]  ? __fget_files+0x2a/0x420
[  508.491951][T18499]  ? __fget_files+0x3a2/0x420
[  508.491967][T18499]  ? fdget+0x1ac/0x250
[  508.491984][T18499]  do_writev+0x154/0x2e0
[  508.491997][T18499]  ? __pfx_do_writev+0x10/0x10
[  508.492014][T18499]  do_syscall_64+0x166/0x520
[  508.492027][T18499]  ? trace_irq_disable+0x3b/0x140
[  508.492042][T18499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.492053][T18499]  ? clear_bhb_loop+0x70/0xc0
[  508.492066][T18499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.492077][T18499] RIP: 0033:0x7fece7d9f559
[  508.492088][T18499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.492098][T18499] RSP: 002b:00007fece8c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  508.492110][T18499] RAX: ffffffffffffffda RBX: 00007fece8025fa0 RCX: 00007fece7d9f559
[  508.492118][T18499] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003
[  508.492125][T18499] RBP: 00007fece7e36b20 R08: 0000000000000000 R09: 0000000000000000
[  508.492132][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.492138][T18499] R13: 00007fece8026038 R14: 00007fece8025fa0 R15: 00007ffda2a62f58
[  508.492158][T18499]  </TASK>
[  508.666378][    T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  508.833226][T18505] profile_transition: unconfined exec no attachment
[  508.886614][    T9] usb 9-1: Using ep0 maxpacket: 16
[  508.899560][    T9] usb 9-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  508.917207][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.917237][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  508.917252][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  508.917262][    T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  508.917274][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  508.945536][    T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  508.945553][    T9] usb 9-1: Manufacturer: syz
[  508.947231][    T9] usb 9-1: config 0 descriptor??
[  509.175564][T18512] profile_transition: unconfined exec no attachment
[  509.241731][    T9] rc_core: Couldn't load IR keymap rc-hauppauge
[  509.241744][    T9] Registered IR keymap rc-empty
[  509.241905][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.273919][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.286815][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  509.292601][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input36
[  509.390503][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.410227][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.426868][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.459299][T18498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.459653][T18498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.459827][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.483752][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.501988][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.517557][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.536205][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.557242][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.577016][    T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  509.614180][    T9] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[  509.614196][    T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  509.800329][    T9] usb 9-1: USB disconnect, device number 20
[  510.301077][T18514] loop1: detected capacity change from 0 to 32768
[  510.303008][T18514] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4651 (18514)
[  510.372343][T18514] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  510.372366][T18514] BTRFS info (device loop1): using blake2b checksum algorithm
[  510.451644][T18131] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  510.481859][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  510.507461][T18131] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  510.526244][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.533684][T18131] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  510.570973][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.572742][T18131] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  510.574384][T18514] BTRFS info (device loop1): enabling ssd optimizations
[  510.574399][T18514] BTRFS info (device loop1): turning on async discard
[  510.574408][T18514] BTRFS info (device loop1): enabling free space tree
[  510.574482][T18514] BTRFS info (device loop1): use zlib compression, level 3
[  510.634757][T18131] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.747438][ T7832] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  511.060676][T18131] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.136884][ T5771] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  511.155518][T18131] 8021q: adding VLAN 0 to HW filter on device team0
[  511.198228][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.198290][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.264822][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.264883][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.296138][ T5771] usb 9-1: Using ep0 maxpacket: 8
[  511.308391][ T5771] usb 9-1: New USB device found: idVendor=054c, idProduct=042f, bcdDevice=0.00
[  511.313668][ T5771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.313687][ T5771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.313699][ T5771] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  511.313722][ T5771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.381587][ T5771] usb 9-1: config 0 descriptor??
[  511.655229][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.691195][T18561] profile_transition: 8 callbacks suppressed
[  511.691208][T18561] profile_transition: unconfined exec no attachment
[  511.870520][T18131] veth0_vlan: entered promiscuous mode
[  511.917238][T18131] veth1_vlan: entered promiscuous mode
[  511.942474][T18562] profile_transition: unconfined exec no attachment
[  512.052930][T18131] veth0_macvtap: entered promiscuous mode
[  512.098716][T18131] veth1_macvtap: entered promiscuous mode
[  512.184067][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.222560][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.237572][ T5771] sony 0003:054C:042F.0019: can't set operational mode: step 1
[  512.237695][ T5771] sony 0003:054C:042F.0019: Failed to set controller into operational mode
[  512.261300][ T5771] sony 0003:054C:042F.0019: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.8-1/input0
[  512.261320][ T5771] sony 0003:054C:042F.0019: failed to claim input
[  512.262304][T18563] profile_transition: unconfined exec no attachment
[  512.362646][ T5771] usb 9-1: USB disconnect, device number 21
[  512.381566][ T1486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.382222][ T1486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.382500][ T1486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.382521][ T1486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.468505][T18564] profile_transition: unconfined exec no attachment
[  512.695593][T18564] fido_id[18564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  512.720825][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.720840][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.781581][T18567] profile_transition: unconfined exec no attachment
[  512.872236][  T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.872252][  T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.986310][T18569] profile_transition: unconfined exec no attachment
[  513.113426][T18576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4666'.
[  513.307393][T18582] profile_transition: unconfined exec no attachment
[  513.451462][T18590] loop8: detected capacity change from 0 to 128
[  513.527496][T18590] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  513.531931][T18596] profile_transition: unconfined exec no attachment
[  513.534586][T18590] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.773869][T18601] profile_transition: unconfined exec no attachment
[  513.782370][T10590] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  513.988969][T18607] profile_transition: unconfined exec no attachment
[  514.462611][T18630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4677'.
[  514.489910][    T9] kernel write not supported for file /sequencer (pid: 9 comm: kworker/0:0)
[  514.505295][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4678'.
[  514.537654][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4678'.
[  514.678777][T18630] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  514.767853][T18630] bond1 (unregistering): Released all slaves
[  514.804140][T18641] loop7: detected capacity change from 0 to 128
[  515.036953][T18645] loop8: detected capacity change from 0 to 128
[  515.103789][T18645] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  515.118996][T18645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  515.535422][T18652] loop1: detected capacity change from 0 to 8192
[  516.355543][T18672] loop8: detected capacity change from 0 to 128
[  516.373003][T18672] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  516.393802][T18672] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  516.725959][T18678] profile_transition: 9 callbacks suppressed
[  516.725974][T18678] profile_transition: unconfined exec no attachment
[  516.987521][T18683] profile_transition: unconfined exec no attachment
[  517.029181][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4693'.
[  517.311247][T18694] profile_transition: unconfined exec no attachment
[  517.472868][T18691] loop6: detected capacity change from 0 to 4096
[  517.500710][T18691] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  517.639734][T18699] profile_transition: unconfined exec no attachment
[  517.770700][T18701] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  517.824785][T18675] loop1: detected capacity change from 0 to 32768
[  517.845064][T18675] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4689 (18675)
[  517.881827][T18675] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  517.881857][T18675] BTRFS info (device loop1): using crc32c checksum algorithm
[  517.920147][T18700] loop8: detected capacity change from 0 to 4096
[  517.953056][T18706] profile_transition: unconfined exec no attachment
[  518.052529][T18675] BTRFS info (device loop1): setting nodatasum
[  518.052546][T18675] BTRFS info (device loop1): setting nodatacow
[  518.052556][T18675] BTRFS info (device loop1): turning on async discard
[  518.052564][T18675] BTRFS info (device loop1): enabling free space tree
[  518.052573][T18675] BTRFS info (device loop1): enabling auto defrag
[  518.052582][T18675] BTRFS info (device loop1): max_inline set to 0
[  518.251556][   T13] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  518.300495][T18716] profile_transition: unconfined exec no attachment
[  518.416559][T18717] profile_transition: unconfined exec no attachment
[  518.436074][T18691] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  518.436096][T18691] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  518.436106][T18691] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  518.537845][   T13] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  518.611395][T18719] profile_transition: unconfined exec no attachment
[  519.026210][T18722] profile_transition: unconfined exec no attachment
[  519.132930][ T7832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  519.373926][T18728] profile_transition: unconfined exec no attachment
[  519.391792][T18727] loop6: detected capacity change from 0 to 512
[  519.465526][T18727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.465597][T18727] ext4 filesystem being mounted at /888/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.550229][ T5727] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  519.551682][T18732] loop1: detected capacity change from 0 to 1024
[  519.719177][ T5727] usb 1-1: New USB device found: idVendor=2040, idProduct=2400, bcdDevice=0.00
[  519.730247][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  519.730276][ T5727] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  519.730288][ T5727] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  519.730311][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.801365][ T5727] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  519.820597][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.998349][ T2352] pvrusb2: Invalid write control endpoint
[  520.104680][ T2352] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  520.104712][ T2352] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  520.281395][T18745] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  520.308845][ T5727] usb 1-1: USB disconnect, device number 9
[  521.353762][T18772] loop1: detected capacity change from 0 to 512
[  521.850564][T18785] profile_transition: 8 callbacks suppressed
[  521.850579][T18785] profile_transition: unconfined exec no attachment
[  522.021039][T18786] profile_transition: unconfined exec no attachment
[  522.190239][T18793] profile_transition: unconfined exec no attachment
[  522.358105][T18796] profile_transition: unconfined exec no attachment
[  522.619126][T18803] profile_transition: unconfined exec no attachment
[  522.926329][T18807] profile_transition: unconfined exec no attachment
[  523.122218][T18790] loop6: detected capacity change from 0 to 40427
[  523.194747][T18790] F2FS-fs (loop6): invalid crc value
[  523.283564][T18815] profile_transition: unconfined exec no attachment
[  523.503147][T18790] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  523.639610][T18819] profile_transition: unconfined exec no attachment
[  523.713542][T18790] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  523.713563][T18790] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  523.713578][T18790] F2FS-fs (loop6): Start checkpoint disabled!
[  523.854034][T18821] profile_transition: unconfined exec no attachment
[  523.920822][T18790] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  523.941394][T18790] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  524.041921][T18825] profile_transition: unconfined exec no attachment
[  525.200914][T18830] loop0: detected capacity change from 0 to 32768
[  525.239483][T18830] (syz.0.4729,18830,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.255388][T18830] (syz.0.4729,18830,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.290608][T18830] JBD2: Ignoring recovery information on journal
[  525.367942][T18830] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  562.917776][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  562.917812][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  583.430381][ T2352] pvrusb2: request_firmware fatal error with code=-110
[  583.430471][ T2352] pvrusb2: Failure uploading firmware1
[  583.430478][ T2352] pvrusb2: Device initialization was not successful.
[  583.430483][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  583.430488][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  583.435404][ T5727] pvrusb2: Device being rendered inoperable
[  616.203088][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  624.361493][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  624.361530][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  685.798055][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  685.798091][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  687.076010][   T33] INFO: task kworker/u8:1:13 blocked in I/O wait for more than 143 seconds.
[  687.076031][   T33]       Tainted: G             L       syzkaller #0
[  687.076038][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.076043][   T33] task:kworker/u8:1    state:D stack:21544 pid:13    tgid:13    ppid:2      task_flags:0x4248060 flags:0x00080000
[  687.076073][   T33] Workqueue: writeback wb_workfn (flush-8:0)
[  687.076186][   T33] Call Trace:
[  687.076191][   T33]  <TASK>
[  687.076199][   T33]  __schedule+0x17dd/0x5830
[  687.076215][   T33]  ? blk_mq_flush_plug_list+0x415/0x540
[  687.076289][   T33]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  687.076308][   T33]  ? __blk_flush_plug+0x416/0x4d0
[  687.076363][   T33]  ? __pfx___schedule+0x10/0x10
[  687.076380][   T33]  ? schedule+0x90/0x2b0
[  687.076394][   T33]  schedule+0x164/0x2b0
[  687.076407][   T33]  io_schedule+0x7f/0xd0
[  687.076421][   T33]  rq_qos_wait+0x266/0x360
[  687.076456][   T33]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  687.076495][   T33]  ? __pfx_wbt_cleanup_cb+0x10/0x10
[  687.076509][   T33]  ? __pfx_rq_qos_wait+0x10/0x10
[  687.076520][   T33]  ? __pfx_rq_qos_wake_function+0x10/0x10
[  687.076531][   T33]  ? __pfx_wbt_inflight_cb+0x10/0x10
[  687.076552][   T33]  wbt_wait+0x326/0x550
[  687.076567][   T33]  ? __pfx_wbt_wait+0x10/0x10
[  687.076580][   T33]  ? __pfx_dd_bio_merge+0x10/0x10
[  687.076614][   T33]  ? __pfx_wbt_wait+0x10/0x10
[  687.076647][   T33]  __rq_qos_throttle+0x6b/0xb0
[  687.076660][   T33]  blk_mq_submit_bio+0x1697/0x2c40
[  687.076676][   T33]  ? blk_mq_submit_bio+0x490/0x2c40
[  687.076693][   T33]  ? __pfx_blk_mq_submit_bio+0x10/0x10
[  687.076715][   T33]  ? __submit_bio+0x7e/0x340
[  687.076731][   T33]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  687.076748][   T33]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  687.076773][   T33]  ext4_bio_write_folio+0x101a/0x18c0
[  687.076840][   T33]  mpage_process_page_bufs+0x6bd/0x8a0
[  687.076878][   T33]  mpage_prepare_extent_to_map+0xf8d/0x1880
[  687.076888][   T33]  ? process_scheduled_works+0xc3d/0x1630
[  687.076918][   T33]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  687.076943][   T33]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  687.076955][   T33]  ? ext4_init_io_end+0x29/0x130
[  687.076967][   T33]  ? kmem_cache_alloc_noprof+0x151/0x600
[  687.076979][   T33]  ? ext4_init_io_end+0x29/0x130
[  687.077000][   T33]  ext4_do_writepages+0xc08/0x44a0
[  687.077048][   T33]  ? kfree+0x1c5/0x650
[  687.077058][   T33]  ? ieee80211_inform_bss+0xc59/0x1150
[  687.077081][   T33]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  687.077094][   T33]  ? __pfx_ext4_do_writepages+0x10/0x10
[  687.077107][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.077122][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.077151][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.077168][   T33]  ? lock_acquire+0x115/0x350
[  687.077192][   T33]  ext4_writepages+0x1fe/0x4e0
[  687.077205][   T33]  ? __pfx_ext4_writepages+0x10/0x10
[  687.077224][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[  687.077236][   T33]  ? __pfx_ext4_writepages+0x10/0x10
[  687.077247][   T33]  do_writepages+0x338/0x560
[  687.077260][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  687.077272][   T33]  ? reacquire_held_locks+0x117/0x1a0
[  687.077286][   T33]  ? writeback_sb_inodes+0x450/0x1af0
[  687.077301][   T33]  __writeback_single_inode+0x136/0x1220
[  687.077315][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[  687.077328][   T33]  writeback_sb_inodes+0x9de/0x1af0
[  687.077354][   T33]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  687.077386][   T33]  ? __pfx_down_read_trylock+0x10/0x10
[  687.077410][   T33]  __writeback_inodes_wb+0x114/0x240
[  687.077427][   T33]  wb_writeback+0x42f/0xad0
[  687.078547][   T33]  ? queue_io+0x291/0x470
[  687.078652][   T33]  ? __pfx_wb_writeback+0x10/0x10
[  687.078665][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  687.078685][   T33]  wb_workfn+0xc92/0x10f0
[  687.078712][   T33]  ? __pfx_wb_workfn+0x10/0x10
[  687.078734][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  687.078749][   T33]  ? lock_acquire+0x115/0x350
[  687.078767][   T33]  ? rcu_is_watching+0x16/0xb0
[  687.078783][   T33]  ? process_scheduled_works+0x97a/0x1630
[  687.078799][   T33]  process_scheduled_works+0xc3d/0x1630
[  687.078833][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  687.078852][   T33]  ? assign_work+0x3cf/0x5d0
[  687.078869][   T33]  worker_thread+0xa47/0xfb0
[  687.078899][   T33]  kthread+0x38b/0x480
[  687.078911][   T33]  ? __pfx_worker_thread+0x10/0x10
[  687.078925][   T33]  ? __pfx_kthread+0x10/0x10
[  687.078937][   T33]  ret_from_fork+0x514/0xb70
[  687.078950][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  687.078962][   T33]  ? __switch_to+0xc78/0x1410
[  687.078979][   T33]  ? __pfx_kthread+0x10/0x10
[  687.078991][   T33]  ret_from_fork_asm+0x1a/0x30
[  687.079012][   T33]  </TASK>
[  687.079074][   T33] INFO: task jbd2/sda1-8:4957 blocked in I/O wait for more than 143 seconds.
[  687.079085][   T33]       Tainted: G             L       syzkaller #0
[  687.079091][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.079096][   T33] task:jbd2/sda1-8     state:D stack:25288 pid:4957  tgid:4957  ppid:2      task_flags:0x240040 flags:0x00080000
[  687.079131][   T33] Call Trace:
[  687.079135][   T33]  <TASK>
[  687.079142][   T33]  __schedule+0x17dd/0x5830
[  687.079163][   T33]  ? percpu_ref_put_many+0x18e/0x240
[  687.079181][   T33]  ? blk_mq_dispatch_list+0xd2c/0xe10
[  687.079198][   T33]  ? __pfx___schedule+0x10/0x10
[  687.079216][   T33]  ? schedule+0x90/0x2b0
[  687.079229][   T33]  schedule+0x164/0x2b0
[  687.079242][   T33]  io_schedule+0x7f/0xd0
[  687.079255][   T33]  bit_wait_io+0x13/0x110
[  687.079270][   T33]  __wait_on_bit+0xac/0x300
[  687.079282][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.079296][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.079310][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.079322][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.079337][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.079355][   T33]  ? __wait_on_buffer+0xe/0x80
[  687.079418][   T33]  jbd2_journal_commit_transaction+0x2f6e/0x5c80
[  687.079461][   T33]  ? trace_hrtimer_start+0x82/0x200
[  687.079494][   T33]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  687.079514][   T33]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  687.079538][   T33]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  687.079552][   T33]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  687.079563][   T33]  ? __timer_delete_sync+0x4a7/0x520
[  687.079579][   T33]  kjournald2+0x3bc/0x740
[  687.079640][   T33]  ? __pfx_kjournald2+0x10/0x10
[  687.079652][   T33]  ? __pfx_autoremove_wake_function+0x10/0x10
[  687.079668][   T33]  ? __kthread_parkme+0x71/0x1f0
[  687.079680][   T33]  ? __kthread_parkme+0x199/0x1f0
[  687.079693][   T33]  kthread+0x38b/0x480
[  687.079705][   T33]  ? __pfx_kjournald2+0x10/0x10
[  687.079714][   T33]  ? __pfx_kthread+0x10/0x10
[  687.079726][   T33]  ret_from_fork+0x514/0xb70
[  687.079740][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  687.079752][   T33]  ? __switch_to+0xc78/0x1410
[  687.079769][   T33]  ? __pfx_kthread+0x10/0x10
[  687.079781][   T33]  ret_from_fork_asm+0x1a/0x30
[  687.079802][   T33]  </TASK>
[  687.079812][   T33] INFO: task syz-executor:5611 blocked in I/O wait for more than 143 seconds.
[  687.079822][   T33]       Tainted: G             L       syzkaller #0
[  687.079828][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.079833][   T33] task:syz-executor    state:D stack:20936 pid:5611  tgid:5611  ppid:5610   task_flags:0x440100 flags:0x00080000
[  687.079858][   T33] Call Trace:
[  687.079862][   T33]  <TASK>
[  687.079869][   T33]  __schedule+0x17dd/0x5830
[  687.079889][   T33]  ? lock_acquire+0x115/0x350
[  687.079907][   T33]  ? __pfx___schedule+0x10/0x10
[  687.079925][   T33]  ? schedule+0x90/0x2b0
[  687.079939][   T33]  schedule+0x164/0x2b0
[  687.079951][   T33]  io_schedule+0x7f/0xd0
[  687.079965][   T33]  bit_wait_io+0x13/0x110
[  687.079979][   T33]  __wait_on_bit+0xac/0x300
[  687.079991][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.080005][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.080019][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.080031][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.080045][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.080066][   T33]  do_get_write_access+0x658/0x10c0
[  687.080089][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.080104][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.080187][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.080202][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  687.080214][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  687.080231][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.080251][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.080270][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.080285][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.080300][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.080318][   T33]  file_update_time_flags+0x399/0x440
[  687.080359][   T33]  ext4_page_mkwrite+0x21f/0x1470
[  687.080383][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  687.080397][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.080415][   T33]  do_page_mkwrite+0x147/0x310
[  687.080430][   T33]  do_wp_page+0x1a85/0x4b60
[  687.080455][   T33]  ? __pfx_do_wp_page+0x10/0x10
[  687.080468][   T33]  ? do_raw_spin_lock+0x12b/0x2f0
[  687.080480][   T33]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  687.080497][   T33]  handle_mm_fault+0x15c1/0x3540
[  687.080517][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.080539][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  687.080553][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  687.080568][   T33]  ? __pfx_set_user_sigmask+0x10/0x10
[  687.080595][   T33]  do_user_addr_fault+0xb35/0x1480
[  687.080616][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  687.080645][   T33]  exc_page_fault+0x6a/0xc0
[  687.080660][   T33]  asm_exc_page_fault+0x26/0x30
[  687.080671][   T33] RIP: 0033:0x7f086867dad6
[  687.080681][   T33] RSP: 002b:00007ffd8fa44a30 EFLAGS: 00010202
[  687.080691][   T33] RAX: 00007f086664c000 RBX: 0000555584fa3c90 RCX: 0000000000000002
[  687.080699][   T33] RDX: 0000000000003fea RSI: 0000555584fabd48 RDI: 0000000000000004
[  687.080706][   T33] RBP: 00007ffd8fa44f30 R08: 0000555584fabda8 R09: 00000000000000a4
[  687.080713][   T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd8fa44d70
[  687.080720][   T33] R13: 00007ffd8fa44b60 R14: 585858582e7a7973 R15: 00007ffd8fa44ab0
[  687.080738][   T33]  </TASK>
[  687.080777][   T33] INFO: task syz.0.4729:18827 blocked in I/O wait for more than 143 seconds.
[  687.080787][   T33]       Tainted: G             L       syzkaller #0
[  687.080793][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.080798][   T33] task:syz.0.4729      state:D stack:25576 pid:18827 tgid:18827 ppid:18131  task_flags:0x440040 flags:0x00080002
[  687.080824][   T33] Call Trace:
[  687.080828][   T33]  <TASK>
[  687.080835][   T33]  __schedule+0x17dd/0x5830
[  687.080855][   T33]  ? lock_acquire+0x115/0x350
[  687.080874][   T33]  ? __pfx___schedule+0x10/0x10
[  687.080892][   T33]  ? schedule+0x90/0x2b0
[  687.080905][   T33]  schedule+0x164/0x2b0
[  687.080918][   T33]  io_schedule+0x7f/0xd0
[  687.080931][   T33]  bit_wait_io+0x13/0x110
[  687.080945][   T33]  __wait_on_bit+0xac/0x300
[  687.080957][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.080971][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.080985][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.080997][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.081012][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.081032][   T33]  do_get_write_access+0x658/0x10c0
[  687.081055][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.081069][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.081088][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.081102][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  687.081113][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  687.081135][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.081155][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.081173][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.081188][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.081202][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.081221][   T33]  file_update_time_flags+0x399/0x440
[  687.081238][   T33]  ext4_page_mkwrite+0x21f/0x1470
[  687.081259][   T33]  ? __pfx_filemap_fault+0x10/0x10
[  687.081276][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  687.081291][   T33]  ? lruvec_stat_mod_folio+0x28e/0x3e0
[  687.081308][   T33]  do_page_mkwrite+0x147/0x310
[  687.081322][   T33]  do_pte_missing+0x70f/0x3570
[  687.081344][   T33]  handle_mm_fault+0x1a2a/0x3540
[  687.081364][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.081386][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  687.081400][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  687.081414][   T33]  ? sched_clock+0x41/0x60
[  687.081442][   T33]  do_user_addr_fault+0xb35/0x1480
[  687.081461][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  687.081476][   T33]  exc_page_fault+0x6a/0xc0
[  687.081489][   T33]  asm_exc_page_fault+0x26/0x30
[  687.081499][   T33] RIP: 0033:0x7f09e9a73c09
[  687.081508][   T33] RSP: 002b:00007fff1da1aba0 EFLAGS: 00010202
[  687.081517][   T33] RAX: 0000001b31724000 RBX: 0000000000000000 RCX: 00000000003ffde8
[  687.081524][   T33] RDX: 0000001b31723ffc RSI: 00000000003ffde8 RDI: 00007f09ea955700
[  687.081531][   T33] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f09e9e12000
[  687.081538][   T33] R10: 00007f09ea955700 R11: 0000000000000000 R12: 0000000000000000
[  687.081545][   T33] R13: 0000000000029d5f R14: ffffffff816dd12e R15: 00007f09ea955720
[  687.081552][   T33]  ? fpregs_assert_state_consistent+0xee/0x150
[  687.081576][   T33]  </TASK>
[  687.081581][   T33] INFO: task syz.8.4728:18829 blocked in I/O wait for more than 143 seconds.
[  687.081590][   T33]       Tainted: G             L       syzkaller #0
[  687.081596][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.081600][   T33] task:syz.8.4728      state:D stack:25576 pid:18829 tgid:18829 ppid:10590  task_flags:0x440040 flags:0x00080002
[  687.081642][   T33] Call Trace:
[  687.081645][   T33]  <TASK>
[  687.081652][   T33]  __schedule+0x17dd/0x5830
[  687.081672][   T33]  ? lock_acquire+0x115/0x350
[  687.081691][   T33]  ? __pfx___schedule+0x10/0x10
[  687.081709][   T33]  ? schedule+0x90/0x2b0
[  687.081722][   T33]  schedule+0x164/0x2b0
[  687.081735][   T33]  io_schedule+0x7f/0xd0
[  687.081748][   T33]  bit_wait_io+0x13/0x110
[  687.081762][   T33]  __wait_on_bit+0xac/0x300
[  687.081774][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.081789][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.081802][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.081814][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.081829][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.081849][   T33]  do_get_write_access+0x658/0x10c0
[  687.081872][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.081886][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.081905][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.081919][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  687.081929][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  687.081946][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.081965][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.081984][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.081998][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.082013][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.082031][   T33]  file_update_time_flags+0x399/0x440
[  687.082048][   T33]  ext4_page_mkwrite+0x21f/0x1470
[  687.082068][   T33]  ? __pfx_filemap_fault+0x10/0x10
[  687.082081][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.082095][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  687.082116][   T33]  do_page_mkwrite+0x147/0x310
[  687.082135][   T33]  do_pte_missing+0x70f/0x3570
[  687.082153][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.082170][   T33]  handle_mm_fault+0x1a2a/0x3540
[  687.082189][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.082211][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  687.082225][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  687.082254][   T33]  do_user_addr_fault+0xb35/0x1480
[  687.082272][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  687.082286][   T33]  exc_page_fault+0x6a/0xc0
[  687.082299][   T33]  asm_exc_page_fault+0x26/0x30
[  687.082309][   T33] RIP: 0033:0x7f2860274332
[  687.082318][   T33] RSP: 002b:00007fffd6e62930 EFLAGS: 00010202
[  687.082326][   T33] RAX: 0000000000005008 RBX: 00007f2861155720 RCX: 0000000000000000
[  687.082333][   T33] RDX: 0000001b3291f000 RSI: 0000000000000008 RDI: 00007f2861155720
[  687.082340][   T33] RBP: 000000000000047c R08: 00007f2860610000 R09: 00007f2860626038
[  687.082347][   T33] R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff8a5d722e
[  687.082353][   T33] R13: 00007f2860626038 R14: 0000000000000126 R15: ffffffffffffb000
[  687.082362][   T33]  ? ip_route_output_key_hash_rcu+0xbce/0x2720
[  687.082383][   T33]  </TASK>
[  687.082388][   T33] INFO: task syz.1.4733:18840 blocked in I/O wait for more than 143 seconds.
[  687.082397][   T33]       Tainted: G             L       syzkaller #0
[  687.082403][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.082407][   T33] task:syz.1.4733      state:D stack:25576 pid:18840 tgid:18840 ppid:7832   task_flags:0x440040 flags:0x00080002
[  687.082433][   T33] Call Trace:
[  687.082436][   T33]  <TASK>
[  687.082443][   T33]  __schedule+0x17dd/0x5830
[  687.082462][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.082481][   T33]  ? __pfx___schedule+0x10/0x10
[  687.082499][   T33]  ? schedule+0x90/0x2b0
[  687.082512][   T33]  schedule+0x164/0x2b0
[  687.082525][   T33]  io_schedule+0x7f/0xd0
[  687.082538][   T33]  bit_wait_io+0x13/0x110
[  687.082552][   T33]  __wait_on_bit+0xac/0x300
[  687.082564][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.082578][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.082592][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.082604][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.082633][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.082655][   T33]  do_get_write_access+0x658/0x10c0
[  687.082677][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.082692][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.082710][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.082724][   T33]  ? trace_kmem_cache_alloc+0x29/0xe0
[  687.082734][   T33]  ? jbd2__journal_start+0x145/0x5d0
[  687.082751][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.082771][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.082789][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.082804][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.082818][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.082837][   T33]  file_update_time_flags+0x399/0x440
[  687.082854][   T33]  ext4_page_mkwrite+0x21f/0x1470
[  687.082874][   T33]  ? __pfx_filemap_fault+0x10/0x10
[  687.082886][   T33]  ? __lock_acquire+0x747/0x2de0
[  687.082900][   T33]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  687.082921][   T33]  do_page_mkwrite+0x147/0x310
[  687.082936][   T33]  do_pte_missing+0x70f/0x3570
[  687.082953][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.082971][   T33]  handle_mm_fault+0x1a2a/0x3540
[  687.082990][   T33]  ? handle_mm_fault+0xee/0x3540
[  687.083013][   T33]  ? __pfx_handle_mm_fault+0x10/0x10
[  687.083026][   T33]  ? lock_vma_under_rcu+0x45a/0x500
[  687.083055][   T33]  do_user_addr_fault+0xb35/0x1480
[  687.083073][   T33]  ? trace_page_fault_user+0x84/0x1e0
[  687.083087][   T33]  exc_page_fault+0x6a/0xc0
[  687.083100][   T33]  asm_exc_page_fault+0x26/0x30
[  687.083110][   T33] RIP: 0033:0x7f1cbc674332
[  687.083118][   T33] RSP: 002b:00007ffe7dcb67e0 EFLAGS: 00010202
[  687.083131][   T33] RAX: 0000000000002008 RBX: 00007f1cbd555720 RCX: 0000000000000000
[  687.083138][   T33] RDX: 0000001b2da22000 RSI: 0000000000000008 RDI: 00007f1cbd555720
[  687.083145][   T33] RBP: 00000000000004dc R08: 00007f1cbca10000 R09: 00007f1cbca26038
[  687.083152][   T33] R10: 0000000000000007 R11: 0000000000000002 R12: ffffffff8bfe7971
[  687.083159][   T33] R13: 00007f1cbca26038 R14: 0000000000000011 R15: ffffffffffffe000
[  687.083167][   T33]  ? string+0x21/0x2d0
[  687.083185][   T33]  </TASK>
[  687.083189][   T33] INFO: task syz.7.4734:18847 blocked in I/O wait for more than 143 seconds.
[  687.083198][   T33]       Tainted: G             L       syzkaller #0
[  687.083203][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.083208][   T33] task:syz.7.4734      state:D stack:26408 pid:18847 tgid:18847 ppid:8705   task_flags:0x440040 flags:0x00080002
[  687.083234][   T33] Call Trace:
[  687.083237][   T33]  <TASK>
[  687.083244][   T33]  __schedule+0x17dd/0x5830
[  687.083269][   T33]  ? is_bpf_text_address+0x26/0x2b0
[  687.083281][   T33]  ? __pfx___schedule+0x10/0x10
[  687.083299][   T33]  ? schedule+0x90/0x2b0
[  687.083317][   T33]  schedule+0x164/0x2b0
[  687.083334][   T33]  io_schedule+0x7f/0xd0
[  687.083348][   T33]  bit_wait_io+0x13/0x110
[  687.083361][   T33]  __wait_on_bit+0xac/0x300
[  687.083374][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.083388][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.083402][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.083414][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.083428][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.083449][   T33]  do_get_write_access+0x658/0x10c0
[  687.083471][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.083486][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.083504][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.083524][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.083544][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.083562][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.083577][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.083591][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.083606][   T33]  ? mnt_get_write_access+0x216/0x280
[  687.083637][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  687.083652][   T33]  touch_atime+0x568/0x670
[  687.083666][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  687.083682][   T33]  ext4_file_mmap_prepare+0x277/0x450
[  687.083698][   T33]  mmap_region+0xef9/0x2840
[  687.083713][   T33]  ? __update_page_owner_handle+0x5a/0x580
[  687.083730][   T33]  ? __update_page_owner_handle+0x5a/0x580
[  687.083748][   T33]  ? lock_acquire+0x115/0x350
[  687.083761][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.083776][   T33]  ? __pfx_mmap_region+0x10/0x10
[  687.083791][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.083807][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.083820][   T33]  ? __page_table_check_zero+0x3c3/0x430
[  687.083833][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.083865][   T33]  ? lock_acquire+0x115/0x350
[  687.083917][   T33]  ? mt_find+0x186/0x630
[  687.083934][   T33]  ? mt_find+0x5ff/0x630
[  687.083949][   T33]  ? mt_find+0x186/0x630
[  687.083963][   T33]  ? __pfx_mt_find+0x10/0x10
[  687.083982][   T33]  ? bpf_lsm_mmap_addr+0x9/0x50
[  687.083995][   T33]  ? security_mmap_addr+0x71/0x240
[  687.084062][   T33]  ? shmem_mapping+0xd/0x50
[  687.084073][   T33]  ? memfd_check_seals_mmap+0xc5/0x220
[  687.084086][   T33]  do_mmap+0xe0a/0x1300
[  687.084106][   T33]  ? __pfx_do_mmap+0x10/0x10
[  687.084132][   T33]  ? vm_mmap_pgoff+0x1ed/0x520
[  687.084144][   T33]  ? down_write_killable+0x179/0x230
[  687.084158][   T33]  ? lock_acquire+0x115/0x350
[  687.084171][   T33]  ? __pfx_down_write_killable+0x10/0x10
[  687.084185][   T33]  ? apparmor_mmap_file+0x2e7/0x390
[  687.084222][   T33]  vm_mmap_pgoff+0x27a/0x520
[  687.084239][   T33]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  687.084252][   T33]  ? __fget_files+0x2a/0x420
[  687.084267][   T33]  ? __fget_files+0x3a2/0x420
[  687.084278][   T33]  ? __fget_files+0x2a/0x420
[  687.084293][   T33]  ksys_mmap_pgoff+0x4dc/0x760
[  687.084312][   T33]  do_syscall_64+0x166/0x520
[  687.084324][   T33]  ? trace_irq_disable+0x3b/0x140
[  687.084338][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.084348][   T33]  ? clear_bhb_loop+0x70/0xc0
[  687.084361][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.084372][   T33] RIP: 0033:0x7f9191b9f2c2
[  687.084381][   T33] RSP: 002b:00007ffcbf5440b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  687.084392][   T33] RAX: ffffffffffffffda RBX: 0000001b34164000 RCX: 00007f9191b9f2c2
[  687.084399][   T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34164000
[  687.084406][   T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  687.084413][   T33] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000002ad
[  687.084420][   T33] R13: 00000000000927c0 R14: 00000000000801be R15: 00007ffcbf544390
[  687.084437][   T33]  </TASK>
[  687.084441][   T33] INFO: task syz.6.4731:18848 blocked in I/O wait for more than 143 seconds.
[  687.084451][   T33]       Tainted: G             L       syzkaller #0
[  687.084457][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.084461][   T33] task:syz.6.4731      state:D stack:26936 pid:18848 tgid:18848 ppid:7265   task_flags:0x440040 flags:0x00080002
[  687.084488][   T33] Call Trace:
[  687.084492][   T33]  <TASK>
[  687.084499][   T33]  __schedule+0x17dd/0x5830
[  687.084524][   T33]  ? is_bpf_text_address+0x26/0x2b0
[  687.084536][   T33]  ? __pfx___schedule+0x10/0x10
[  687.084554][   T33]  ? schedule+0x90/0x2b0
[  687.084567][   T33]  schedule+0x164/0x2b0
[  687.084580][   T33]  io_schedule+0x7f/0xd0
[  687.084593][   T33]  bit_wait_io+0x13/0x110
[  687.084606][   T33]  __wait_on_bit+0xac/0x300
[  687.084650][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.084670][   T33]  out_of_line_wait_on_bit+0x13b/0x190
[  687.084684][   T33]  ? __pfx_bit_wait_io+0x10/0x10
[  687.084696][   T33]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  687.084710][   T33]  ? __pfx_wake_bit_function+0x10/0x10
[  687.084731][   T33]  do_get_write_access+0x658/0x10c0
[  687.084754][   T33]  jbd2_journal_get_write_access+0x1d7/0x230
[  687.084769][   T33]  __ext4_journal_get_write_access+0xec/0x620
[  687.084788][   T33]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  687.084808][   T33]  ext4_reserve_inode_write+0x294/0x360
[  687.084832][   T33]  __ext4_mark_inode_dirty+0x141/0x7e0
[  687.084850][   T33]  ext4_dirty_inode+0xd0/0x110
[  687.084865][   T33]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  687.084879][   T33]  __mark_inode_dirty+0x3a8/0x13b0
[  687.084894][   T33]  ? mnt_get_write_access+0x216/0x280
[  687.084909][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  687.084923][   T33]  touch_atime+0x568/0x670
[  687.084936][   T33]  ? ext4_file_mmap_prepare+0x277/0x450
[  687.084952][   T33]  ext4_file_mmap_prepare+0x277/0x450
[  687.084969][   T33]  mmap_region+0xef9/0x2840
[  687.084983][   T33]  ? __update_page_owner_handle+0x5a/0x580
[  687.085000][   T33]  ? __update_page_owner_handle+0x5a/0x580
[  687.085018][   T33]  ? lock_acquire+0x115/0x350
[  687.085031][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.085046][   T33]  ? __pfx_mmap_region+0x10/0x10
[  687.085061][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.085077][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.085091][   T33]  ? __page_table_check_zero+0x3c3/0x430
[  687.085104][   T33]  ? __page_table_check_zero+0x6c/0x430
[  687.085138][   T33]  ? lock_acquire+0x115/0x350
[  687.085190][   T33]  ? mt_find+0x186/0x630
[  687.085207][   T33]  ? mt_find+0x5ff/0x630
[  687.085222][   T33]  ? mt_find+0x186/0x630
[  687.085236][   T33]  ? __pfx_mt_find+0x10/0x10
[  687.085254][   T33]  ? bpf_lsm_mmap_addr+0x9/0x50
[  687.085267][   T33]  ? security_mmap_addr+0x71/0x240
[  687.085280][   T33]  ? shmem_mapping+0xd/0x50
[  687.085290][   T33]  ? memfd_check_seals_mmap+0xc5/0x220
[  687.085303][   T33]  do_mmap+0xe0a/0x1300
[  687.085323][   T33]  ? __pfx_do_mmap+0x10/0x10
[  687.085343][   T33]  ? vm_mmap_pgoff+0x1ed/0x520
[  687.085354][   T33]  ? down_write_killable+0x179/0x230
[  687.085368][   T33]  ? lock_acquire+0x115/0x350
[  687.085380][   T33]  ? __pfx_down_write_killable+0x10/0x10
[  687.085394][   T33]  ? apparmor_mmap_file+0x2e7/0x390
[  687.085409][   T33]  vm_mmap_pgoff+0x27a/0x520
[  687.085425][   T33]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  687.085438][   T33]  ? __fget_files+0x2a/0x420
[  687.085453][   T33]  ? __fget_files+0x3a2/0x420
[  687.085464][   T33]  ? __fget_files+0x2a/0x420
[  687.085479][   T33]  ksys_mmap_pgoff+0x4dc/0x760
[  687.085497][   T33]  do_syscall_64+0x166/0x520
[  687.085509][   T33]  ? trace_irq_disable+0x3b/0x140
[  687.085523][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.085533][   T33]  ? clear_bhb_loop+0x70/0xc0
[  687.085546][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.085556][   T33] RIP: 0033:0x7fece7d9f2c2
[  687.085565][   T33] RSP: 002b:00007ffda2a63078 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  687.085575][   T33] RAX: ffffffffffffffda RBX: 0000001b32164000 RCX: 00007fece7d9f2c2
[  687.085583][   T33] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32164000
[  687.085589][   T33] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000
[  687.085596][   T33] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000037d
[  687.085602][   T33] R13: 00000000000927c0 R14: 000000000007ff0d R15: 00007ffda2a63350
[  687.191846][   T33]  </TASK>
[  687.191874][   T33] 
[  687.191874][   T33] Showing all locks held in the system:
[  687.191882][   T33] locks held by kworker/u8:1/13: 4, on CPU#0:
[  687.191890][   T33]  #0: ffff888020eae148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.191926][   T33]  #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.191954][   T33]  #2: ffff888037f280e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  687.191983][   T33]  #3: ffff888037c40cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0
[  687.192010][   T33] locks held by pr/ttyS0/32: 1, last CPU#0:
[  687.192018][   T33]  #0: ffffffff8fe33f58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  687.192045][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  687.192052][   T33]  #0: ffffffff8ff5a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  687.192078][   T33] locks held by kworker/u8:2/44: 4, last CPU#0:
[  687.192085][   T33]  #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192112][   T33]  #1: ffffc90000b47c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192139][   T33]  #2: ffff88804e3c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  687.192166][   T33]  #3: ffffffff8ff5a4a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_ibss_rx_queued_mgmt+0xf10/0x2c40
[  687.192192][   T33] locks held by kworker/u8:3/52: 3, last CPU#0:
[  687.192199][   T33]  #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192226][   T33]  #1: ffffc90000bc7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192254][   T33]  #2: ffff88802d680258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30
[  687.192285][   T33] locks held by kworker/u8:6/191: 3, last CPU#0:
[  687.192293][   T33]  #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192320][   T33]  #1: ffffc900030dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  687.192347][   T33]  #2: ffff88802bd1c258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30
[  687.192393][   T33] locks held by klogd/4983: 1, last CPU#0:
[  687.192400][   T33]  #0: ffffffff900b1a70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  687.192427][   T33] locks held by getty/5380: 2, on CPU#1:
[  687.192434][   T33]  #0: ffff8880375f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  687.192542][   T33]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  687.192570][   T33] locks held by syz-executor/5611: 3, on CPU#0:
[  687.192577][   T33]  #0: ffff88803609d588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  687.192605][   T33]  #1: ffff888037f28558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  687.192678][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.192720][   T33] locks held by syz.0.4729/18827: 3, on CPU#0:
[  687.192727][   T33]  #0: ffff888070c48088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  687.192755][   T33]  #1: ffff888037f28558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  687.192782][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.192805][   T33] locks held by syz.8.4728/18829: 3, on CPU#0:
[  687.192812][   T33]  #0: ffff88805717fe48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  687.192839][   T33]  #1: ffff888037f28558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  687.192866][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.192890][   T33] locks held by syz.1.4733/18840: 3, on CPU#0:
[  687.192897][   T33]  #0: ffff88807f7d9088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  687.192923][   T33]  #1: ffff888037f28558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  687.192950][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.192974][   T33] locks held by syz.7.4734/18847: 3, on CPU#0:
[  687.192981][   T33]  #0: ffff88807cb77180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  687.193006][   T33]  #1: ffff888037f28460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  687.193034][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.193058][   T33] locks held by syz.6.4731/18848: 3, on CPU#0:
[  687.193065][   T33]  #0: ffff88804e237180 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520
[  687.193088][   T33]  #1: ffff888037f28460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450
[  687.193116][   T33]  #2: ffff888037f3e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  687.193139][   T33] 
[  687.193142][   T33] =============================================
[  687.193142][   T33] 
[  687.193148][   T33] NMI backtrace for cpu 0
[  687.193160][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  687.193182][   T33] Tainted: [L]=SOFTLOCKUP
[  687.193189][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  687.193200][   T33] Call Trace:
[  687.193208][   T33]  <TASK>
[  687.193218][   T33]  dump_stack_lvl+0xe8/0x150
[  687.193249][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  687.193261][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  687.193275][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  687.193287][   T33]  sys_info+0x135/0x170
[  687.193302][   T33]  watchdog+0x1073/0x10f0
[  687.193319][   T33]  ? watchdog+0x209/0x10f0
[  687.193335][   T33]  kthread+0x38b/0x480
[  687.193347][   T33]  ? __pfx_watchdog+0x10/0x10
[  687.193358][   T33]  ? __pfx_kthread+0x10/0x10
[  687.193370][   T33]  ret_from_fork+0x514/0xb70
[  687.193383][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  687.193393][   T33]  ? __switch_to+0xc78/0x1410
[  687.193409][   T33]  ? __pfx_kthread+0x10/0x10
[  687.193421][   T33]  ret_from_fork_asm+0x1a/0x30
[  687.193440][   T33]  </TASK>
[  687.307417][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  690.430265][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  690.441004][   T33] Tainted: [L]=SOFTLOCKUP
[  690.445301][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  690.455330][   T33] Call Trace:
[  690.458591][   T33]  <TASK>
[  690.461500][   T33]  vpanic+0x26f/0x710
[  690.465459][   T33]  panic+0xc5/0xd0
[  690.469153][   T33]  ? __pfx_panic+0x10/0x10
[  690.473541][   T33]  ? preempt_schedule_common+0x7f/0xd0
[  690.478978][   T33]  ? preempt_schedule_thunk+0x16/0x40
[  690.484328][   T33]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  690.490454][   T33]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  690.496580][   T33]  watchdog+0x10e7/0x10f0
[  690.500893][   T33]  ? watchdog+0x209/0x10f0
[  690.505290][   T33]  kthread+0x38b/0x480
[  690.509356][   T33]  ? __pfx_watchdog+0x10/0x10
[  690.514007][   T33]  ? __pfx_kthread+0x10/0x10
[  690.518571][   T33]  ret_from_fork+0x514/0xb70
[  690.523136][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  690.528220][   T33]  ? __switch_to+0xc78/0x1410
[  690.532897][   T33]  ? __pfx_kthread+0x10/0x10
[  690.537462][   T33]  ret_from_fork_asm+0x1a/0x30
[  690.542208][   T33]  </TASK>
[  690.545291][   T33] Kernel Offset: disabled
[  690.549609][   T33] Rebooting in 86400 seconds..