last executing test programs:

2m51.444171233s ago: executing program 3 (id=195):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x1, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40100001a000100fcffffff00010000e0000002000000000000000000000000000000000000000000000000000000014e20071c4e2100050200002002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x844)

2m51.290608788s ago: executing program 3 (id=196):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
uname(&(0x7f0000000300)=""/7)

2m51.20354525s ago: executing program 3 (id=197):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
read$dsp(r0, &(0x7f00000004c0)=""/78, 0x4e)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x3ffff)

2m50.416895259s ago: executing program 3 (id=205):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x210000, &(0x7f0000000180)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000007c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x2000008, &(0x7f0000000880)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m49.984135369s ago: executing program 3 (id=209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r1, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

2m49.383450044s ago: executing program 3 (id=218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2m49.14912729s ago: executing program 32 (id=218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403, 0xffef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2m39.319373073s ago: executing program 0 (id=286):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x4, 0x0, 0x4})

2m38.940304733s ago: executing program 0 (id=291):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r1 = dup(r0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x8004}, {0xeb4, 0x8007}, 0x10000004, 0x7})

2m38.794177596s ago: executing program 0 (id=295):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='utf8,fmask=00000000000000000000243,errors=remount-ro,iocharset=cp936,fmask=00000000000000000000005,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYBLOB="12d86d61736b3d303030303030367e3030303008000000000000003030312c6576726f72733d636f6edad9a4423be192b97469", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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")
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}})

2m38.472811234s ago: executing program 0 (id=298):
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x218018, &(0x7f0000000340)=ANY=[], 0xff, 0xc2d, &(0x7f0000000640)="$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")
mount$bind(&(0x7f0000001280)='.\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x290d010, 0x0)
mount$bpf(0x0, &(0x7f00000029c0)='./file0\x00', 0x0, 0x22, &(0x7f0000000380)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])

2m37.972296537s ago: executing program 0 (id=303):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010027bd7000000000000a00004000ddffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)

2m37.375383151s ago: executing program 0 (id=308):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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")
setfsuid(0xee00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

2m36.855539854s ago: executing program 33 (id=308):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfXQRkpc2X5vvX72sOuxPbv2/n7St2/fvNn5vslazsx49m0AhlZj5fHkydkihHc/fefRl58qfru87K72GkdWHovYa4UQmh39Itve53HBtSsvndmsLcLxlcfUD49dbr92MoSwGI6Ez0IrfDS/8OWH7z1y9OPXJ2556+Izr+zS7rfl+wEAAPvRpT8v/P2+f/7pgZmrlw6fDuPt5en4vBX7k/G4/1g8UE7Hy42wvl90RKexbL2RGI1svZFsvdEsz2hJvma2nWbJemNd8o10LNtsPwEAAGAvSue1rVA05tb1G425udXz/mWfT48Vc8+dXzh3oU+FAgAAAJX959WVm26FEEIIIUSt0RyAGoQQQgxTLE33+woEAAAAMGzy+cI2WNzZmbraW2v1lv/yw43NXw87oO6ff/n3Vv4PXvMbBwCA6vbr0WTar3QcneYxyOcRHMlet9Xj/0a2ndEt1lk2r+C65cXgvk1l9ef/roOqrP6tvo/9UlZ/Ph/moCqrP5+nc1CV1T9ecx1VldU/UXMdVZXVf6DmOqoqq/9gzXVUVVb/ZM11VFVW/1TNdVRVVv8NNddRVVn9h2quo6qy+vfKbbVl9bdqrqOqsvpnaq6jqrL6b6y5jqrK6r+p5jqqKqv/5prr6Jc7Y5v+HQ5n453nz/k53V45xwMAAIBh9z/z/wkhhBAbYuU+iAGoQ4j9HcUA1CC+Ktp/7xuAWoQQ249X+3r1AQAAABgE6XMB6QPoS1EaH+kyPho/S7QyPrG2Qhpvdnn9WJfx8S7jAAAAQAi/e+PcbW8Xa5/z3+58eB3zRl0PFeYxyie622r+7c57tt38e2XeMgAAAIZL8b3Prt//6PsvzFy9dPh0x9nv9Xi+m+YBHY3XBj6J/XRfwFTWL9I59On1eRol6+XXB24o297j29xRAAAAGGLp/L0VisZcx3l3KzQac3Nr5+OzoVmcO79w9ljsp+9n+eN0c3x5+UM11w0AAAD0bu18f/Pz//Q9vrNhrJh77vzCuQur/an28maj87rA9NryovO6QCtbfrxk+YnYT9/f+YPpAyvL5878cOGpnd55AAAAGBIXXrz4zJMLC2d/5IknnnjSftLv30wAAMBO++KLd5o/PjH1+9XP/6/Nf5c+/38k9ltxbr+/xBXSfQLpcwAbPq//xPo802XrPb9+vVa23kiM8azuiY7tLDuQvW6mLF9r/XbGSvJNZvmmsnz5PAWj2fop36FseT4/YVpvOluez8M4muUosvx3BwAAACg3/8Kzz89fePHig+efffLps0+ffe7E8VPfPXXq2EPfeWh+5b7++c67+wEAAIC9aO2m335XAgAAAAAAAAAAAAAAAAAAAMOrjq8T6/c+AgAAwLD796shhEUhhKgcS+P9r0EIIYQQQog9Eyvf7V5/3ka/rz8AAAAAw+falZfOhDARQlhuN7FY7Gi+9tZaq831K6t5Uzv14N9mliOtdvnhkXWvP7ij1TDsrsWfu9RusMM///LvrfwfvLaz+SfSk55//2WXjE9Xy3vv/C9nO/PfPtpj/nz/H6+W/2iW/97QW/6l97P8T1TLf1+W/2CP+Tfs//PV8t8f88/G/tF7es2//v0fj23ajwM95v92tv9PhV7zZ/vf6jFh5oGYHwCG0X69ASAdJaTj6MnYT/sbDzfDSPa6rR7/N7LtjG678vXbTcdBt8Z+Ol6ayvImW61/MtveDRXrzOV1Daqy+nfqfdxtZfU3a66jqrL6x2quo6qy+sdrrqOqsvonaq6jqrL6ez0P7bey+vfKdeWy+idrrqOqsvqnaq6jqrL6t/r/eL+U1X+o5jqqKqt/uuY6qiqrv+JltdqV1T9Tcx1VldV/Y811VFVW/00111FVWf0311xHv9wR27Lz4XT+OR3HUr+V9cc3+bfcr9cWAAAAYK/519DO/xevdPS9DiGEEELs1ZgY9GOJZFe2P7rL2xd1x3+XVvW7DiHE7sXSUt1XHBgku/tpZgAGld//w837P9y8/8PN+89XSffwF1k/GekyPtplvNllfCwbz39ex7uM35Rtdyld14xu7jL+tS7jh7qM39plfLbL+G1dxm/vMn5Hl3EAAACGwy2xdX4IAAAA+9fLv/rkzd/c+8SVmauXDp8OYxvmnT8W++Pxb+tvxH4+733SjH/z/0ns/yK2f4jtP7L13X8CAAAAuy99T4y//wMAAMD+lb6n1Pk/AAAA7F8zsXX+DwAAAPvXjbF1/g8AAAD7WDGx+eLYpusCd8e213n9AIDB9/XY3hnbw7G9K7bfiG06Drgntt+sqT4AYOf8/Ps/PfV2sTbf/4ls/FpcntoNFlevFBSN9TP5H4jtwdh+q8d68u8D6DV/cqjHPLuVf3qb+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aOx8njy5GwRwrufvvPoz8be/OvysrvaaxxZeSxirxVCaLZfl0bX+r+OK1678tKZzvZ6bItwPBShaC8Pj11uZ5oMISyGI+Gz0AofzS98+eF7jxz9+PWJW966+Mwru/hPsG7/AAAAYD/6fwAAAP//ScMebw==")
setfsuid(0xee00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

1m19.055258047s ago: executing program 2 (id=1078):
r0 = syz_open_dev$evdev(&(0x7f0000002a40), 0x0, 0x882)
ioctl$EVIOCSABS20(r0, 0x40044591, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

1m18.507085289s ago: executing program 2 (id=1083):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m18.247145336s ago: executing program 2 (id=1087):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000f00)={0xfc, {"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", 0x1000}}, 0x1006)

1m17.451277626s ago: executing program 2 (id=1094):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m17.088194815s ago: executing program 2 (id=1098):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x2)

1m16.579151248s ago: executing program 2 (id=1105):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1m16.218166186s ago: executing program 34 (id=1105):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1m10.519972897s ago: executing program 1 (id=1146):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002c00)={0x0, 0x2}, &(0x7f0000001180)=0x8)

1m10.41526699s ago: executing program 1 (id=1147):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x2000057, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m9.434561024s ago: executing program 1 (id=1150):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f0, 0x0)

1m9.008843575s ago: executing program 1 (id=1151):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m8.340874121s ago: executing program 1 (id=1153):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2501000000080002000200000008000100010000002400048005000308020000000500030005000000050003000100000005"], 0x48}}, 0x20000080)

1m8.129165386s ago: executing program 4 (id=1156):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x2})
close(r0)

1m7.9743794s ago: executing program 4 (id=1158):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)=0x8)

1m7.861245993s ago: executing program 4 (id=1159):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TCFLSH(r0, 0x540b, 0x1)

1m7.723517326s ago: executing program 4 (id=1161):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m7.384820515s ago: executing program 4 (id=1164):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="25937453d1c9", 0x0, 0x0, 0x14, 0x0, 0x0})

1m6.974637474s ago: executing program 1 (id=1166):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

1m6.623019714s ago: executing program 35 (id=1166):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

1m6.590719954s ago: executing program 4 (id=1168):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
write(r0, &(0x7f0000000300)="355a6bc45d76208e339268e59e3595b0fb338cdfaecd50b60ad4f35658866cb23dc4aea625ba902b4d78bc332765640d3cd1d6eefef223ca12d5a962b2edd61aa22dd34742d7c3011f9e", 0x4a)

1m6.33729327s ago: executing program 36 (id=1168):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
write(r0, &(0x7f0000000300)="355a6bc45d76208e339268e59e3595b0fb338cdfaecd50b60ad4f35658866cb23dc4aea625ba902b4d78bc332765640d3cd1d6eefef223ca12d5a962b2edd61aa22dd34742d7c3011f9e", 0x4a)

6.228257776s ago: executing program 7 (id=1817):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000001000800030000000000080004"], 0x54}}, 0x0)

5.993797141s ago: executing program 7 (id=1820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4040800)

5.797028746s ago: executing program 7 (id=1822):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0xfd, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)

2.853689769s ago: executing program 8 (id=1842):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000000a00)="$eJzs3buLY1UYAPDvZvJCi0SwEsELWlgtu9vaZJBZWEylplALXdxdkEkQdmDAB2amsrWxtLURBDv/CRv/A8FWsHNgBq7cVx5jJiY6UXR+v2Lm5NzznfOdew8TpsiX956fHD5M4/Hppz9Ft5tEYxCtOEuiH42oncSSwRcBAPyXnWVZ/JqVtolLIqK7u7QAgB0q3v/Pt3j//27nKQEAO/bGW2+/tj8cHryept24N/n8eJT/Z5//Lq/vP44PYhyP4nb04iIimynb97IsmzbTXD9emkyPR3nk5N0fqvn3f4mIZvWiX/xcjr8/PLiTlhbip3keT1XrD/L170Yvnl2x/v3hwd0V8TFqx8svLuR/K3rx4/vxYYzjYZFEGR+NiM/upOmr2Ze/ffJOnl4en0yPR51i3Fy2t+L2vbnDRwMAAAAAAAAAAAAAAAAAAAAAwP/Yrap2TieK+j15V1V/Z+8if9GKtNZfrs9Txif1RJfqA02z+Kquz3M7TdOsGjiPb8ZzzVllIAAAAAAAAAAAAAAAAAAAALjRjj76+PDBePzoybU06moA9cf6/+o8g4WeF2L94M58rUbVXDNz7NVjkoi1aeSb2Djn86rswboxjbjq0jNX5fzNtxvfuq//fO9Vo7XBmL/ZqE/X4YNk9T3sRN3TrQ/J94tj2rHhWu3lnu7smWZbHb/2yku9zbecnJQ7frromVaHrdzF8nOPZF1ir/xczlP1JJd30S7u6nJU1dOqehbCl5fobn6ei+QvS2bVOpJr/AsEAAAAAAAAAAAAAAAAAADUFj9F/Aena0MbWWdnaQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP2r+/f9bNKZV8AaD2/Hk6F/eIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfA7wEAAP//56xb2A==")
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x19d)

2.590679925s ago: executing program 7 (id=1845):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0)

2.523642617s ago: executing program 8 (id=1848):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]})
socket$phonet(0x23, 0x2, 0x1)
close_range(r0, 0xffffffffffffffff, 0x3f00000000000000)

2.369139771s ago: executing program 7 (id=1849):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzhw4YByRYlct4pIASUBpVVEXFlCHHgRICSOgDhy4gX0wJUbL4BICRLQUweN/TzOeNnNOkm9s/bz+UjuzG+eGe8z/e54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/77g/OVBFx6edpwbGIz0Q/ohex0tRrEbGydiyvP4iI52K7OZ6NiOFSRJUbn454LSI+eiri7r1b682is/vsx3f+9Pff/fCJ7//tD8NT//nzjf7r09a7efPX//7L7UffXwAAAChRXdd1lT7mH0+f73tddwoAmIv8+l8nebl64erNBeuPWq1Wqw9h3VZPdrtdRMRme5vmPYPT8QBwyGzGx113gQ7Jv2iDiHii604AC63qugMciLv3bq1XKd+q/XqwttOerwXZk/9mtXt/x7TpLOPXmMzr+bUV/XhmSn9W5tSHRZLz743nf2mnfZTWO+j852Va/qOdW5+Kk/Pvj+c/5ujk35uYf6ly/oOHyr8vfwAAAAAAWGD53/+PdXz+d+nxd2VfHnT+d21OfQAAAAAAAACAT9vjjv+3qzL+HwAAACyq5rN64zdP3V827bvYmuUXq4gnx9YHCpNullntuh8AAAAAAAAAAAAAUJLBzjW8F6uIYUQ8ubpa13Xz0zZeP6zH3f6wK33/oWRd/5EHAIAdHz01di9/FbEcERfTd/0NV1dX63p5ZbVerVeW8vvZ0dJyvdL6XJunzbKl0ez3wysxqptfttzarm3W5+VZ7eO/r3msUd2f3bE56TBwAIiInVeju16Rjpi6fjq6fpfD4eD4P3oc/+xH189TAAAA4ODVdV1X6eu8j6dz/r2uOwUAzEV+/R8/L6BWq9Vqtfro1W31ZLfbRURstrdp3jMYjh8ADpnN+Hji8l8a4LcI0/KnCIOIeG6f6y4dcF+AxVR13QEOxN17t9arlG/Vfj1I47vna0H25L9ZbW+Xt580nWX8GpN5Pb+2oh/PTOnPs3PqwyLJ+ffG87+00z5K6x10/vMyLf9mP4910J+u5fz74/mPOTr59ybmX6qc/+Ch8u/LHwAAAAAAFlj+9/9jC3X+d/SouzPTg87/rh3YowIAAAAAAADAwbp779Z6vu81n///3IT13P95NOX8K/kXKeef7v/fvfDmpbH1+q35O2/dz/9f926t//7GPz+bp/vNf/e7hKr0zKrSM6JKj1QN0vQRd2yKrWF/1DzSsOr1B+man3r4TlyJq7ERp/es20vHw/32M3vam54Ot9vr/k772T3tg932vP25Pe3DdKVTvZLbT8Z6/CSuxtvb7U3b0oz9X57RXs9oz/n3Hf9FyvkPWj9N/qupvRqbNu582Pu/4749nfQ4b175/K9OH/zuzLQV/d19a2v274UO+rP9/+SJUfzs+sa1kzcv37hx7UykyZ6lZyNNPmU5/2H6yfm/9OJOe/673z5e73w4euj8F8VWDNr57842+b/Ymm/29+UO+jdvOf9R+sn5v53aJx//hzn/6cf/Kx30BwAAAAAAAAAAAAAAAB6kruvtW0TfjIjz6f6fru7NBADmK7/+10lePq+6/6jb/3HvfnTVf7V6znW1YP2Za/1JvVj9US9k/d8F68/C1W31ZG+0i4j4a3ub5j3DLyb9MgBgkX0SEf/ouhN0Rv4Fy9/310xPdN0ZYK6uv//Bjy5fvbpx7XrXPQEAAAAAAAAAHlUe/3OtNf7zibqub4+tt2f817di7XHH/xzkmd0BRqcMVN1/+H16kK3eqN9rDTf+fEwb/3u4O/eg8b8HMx5vOKN9NKN9aUb78oz2iTd6tOT8n2+Nd34iIo6PDb9ewviv42PelyDn/0Lr+dzk/6Wx9dr51789zPn39uR/6sZ7Pz11/f0PXr3y3uV3N97d+PG5M2dOnzt//sKFC6feuXJ14/TOfzvs8cHK+eexr10HWpacf85c/mXJ+X8h1fIvS87/i6mWf1ly/vn9nvzLkvPPn33kX5ac/8upln9Zcv5fTrX8y5LzfyXV8i9Lzv8rqZZ/WXL+r6Za/mXJ+Z9MtfzLkvM/lep95r9y0P1iPnL++QyX478sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/tVTLvyw5/6+mWv5lyfmfT7X8y5Lz/1qq5V+WnP+FVMu/LDn/r6da/mXJ+X8j1fIvS87/9VTLvyw5/2+mWv5lyfl/K9XyL0vO/9upln9Zcv5vpFr+Zbn//f9mzJgxk2e6/ssEAAAAAAAAAAAAAIybx+XEXe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH5m73EgMRBSJzVh45gQnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4XV8kArQHlArapWgvaBviAqVB6iKqCAhEQrYKs55///78zs7Myud7yZOefzkZJfdubMnDNn/jO7XzvfHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt3+urlP1LIsq9VqxQWbs+wF9Xnd5Ob8klc/v8cHAAAArN/P838/d2O64NAqbtSwzT/f9s0vLy4uLmbvGf7T0c8sLqYrJrNsdDzL8uuiK997b61xm+DxbKI21PD1UJfdD3e5fqTL9aNdrh/rcv14l+snuly/7AQsc11WS3e2Pf/PzcUpzW7KRvPrtre51eO18aH6uUu3zWr5bRZHj2fz2clsLptp2r7YtpZv/9Xb6/t6cxb3NdSwr631FfKjR4/FY6iFc7y9aV9L9xn94LXZ5I9/9Oixvz7/7C3tZtfT0HR/xXHeta1+nB8LlxTHWsvG0zmJxznUcJxb2zwnw03HWctvV//v1uN8bpXHObx0mBuq9TmfyIby//5Wfp5Galmb87Q1XPbTO7Isu7R02K3bLNtXNpRtarpkaOn5mShWZP0+6kvpxdnImtbp7atYp/U5u715nba+JuLzf3u43cgKx9D4NP3gsbGG5/1ni1ezTqP6o17ptdK6Bnv9WumXNRjXxbfyB/1E2zW4PTz+R+9ceQ22XTtt1mB63A1rcFu3NTg0Npwfc3oSavltltbgzqbth/M91fL5zJ2d1+D0+VNnpxc+8tF75k8dPTF3Yu707p07Z3bv3bt///7p4/Mn52aKf1/l2e5/m7Kh9BrYFs5dfA28smXbxqW6+PmxZe+/V/s6nOjwOtzcsm2vX4cjrQ+utjEvyOVrunhtvKt+0icuD2UrvMby52fH+l+H6XE3vA5HGl6Hbb+ntHkdjqzidVjf5uyO1f3MMtLwT7tjWPl7wfrW4OaGNdj680jrGuz1zyP9sgYnwrr4zo6VvxdsDcf7xNRafx4ZXrYG08MN7z31S9LP+xP789FuXd5av+L6sezCwty5ex85ev78uZ1ZGBviJQ1rpXW9bmp4TNmy9Tq05vV6aP62J25tc/nmcK4m7qn/a2LF56q+zZ57Oz9X+Xe39uez6dJdWRg9ttHns9138/r5HMuyz37jsQe/9uhnX7fi+aznzY9Nr/9n8ZRLG95/R1d4/425/xfF/tJdPT48OlK8fofT2Rltej9ufqpG8veuWr7v56ZX9348Gv7Z6Pfjmzq8H29p2bbX78ejrQ8uvh/Xuv1px/q0Pp8TYZ2cnOn8flzfZsuuta7JkY7vx3eEWQvn/1UhKaRc1LB2Vlq3aV8jI6PhcY3EPTSv091N24+GbFbf11O7rm6d3nVHcV/D6dEt2ah1Otmyba/Xafqzr5XWaa3bn75dndbncyKsi5t2d16n9W2e3rP+987r4n82vHeOdVuDo8Nj9WMeTYswf7/PFq+La/De7Fh2JjuZzebXjuXrqZbva+q+1a3BsfDPRr9XbumwBu9q2bbXazB9H1tp7dVGlj/4Hmh9PifCunjyvs5rsL7N6/f19mfXu8IlaZuGn11b/3xtpT/zurXlNF2rtTISjvMb+zr/2Wx9m5P715ozO5+nu8Ml17c5T62v35VeU7PZxpynLeE4n92/8nmqH099m88cWOV6OpRl2cUP3Z//eW/4+5W/u/DtLzf9vUu7v9O5+KH7f/jC4/+0luMHYPD9ohibiu91DX8ztZq//wcAAAAGQsz9Q2Em8j8AAACURsz98f8KT+R/AAAAKI2Y+0fCTCqS/7e8/tn5X1zMUjN/MYjXp9PwQLFd7LjOhK8nF5fUL7//i3M/+ceLq9v3UJZlP3vgD9puv+WBeFyFyXCcV97QfPkyX75nVfs+8vDFtN/G/vrnwv3Hx7PaZdCugjuTZdlXb/xUvp/J917O59MPHMnng5eeeLy+zXMHiq/j7Z95SbH9X4Ty76HjR5tu/0w4D98Pc+Yt7c9HvN2XLr9q6753L+0v3q627Yb8YT/5vuJ+4+/J+fTjxfbxPK90/F/75FNfqm//yCvaH//FoXQceaU83v6pcL9fDPN/X1Zs3/gc1L+Ox//xcPxxf/F2937h622P/8oniu3PvrHY7kiYcf93ha+3v/HZ+cbz9UjtaNPjyt5UbBf3P/PtP86vj/cX77/1+CcOX246H63r4+n/KO5numX7eHncT/QPLfuv30/j+oz7f+qPjjQ9T932f+XBZ15Wv9/W/d/dst3ZD+3I9790f82/sekvP/6ptvuLx3Pob882PZ5D7wyv47D/J98X1mO4/v+uFPfX+tsVjryz+f0nbv+5zRebHk/05h8X+7/ymhP5HJ+4btP1L3jhDZdeXj93Wfat8eL+uu3/xF+daTr+z99cnI94fezot+5/JXH/5z48dfrMwoX52XRWH70x/905by2OJx7vjeG9tfXrw2fOv3/u3OTM5EyWTZb3V+hdtS+E+cNiXOq89eKyd9AdD4fn89Y//+qmO//9k/Hy/3xXcfnltxTft14Ztvt0uHxzeP7Wtv/lnrz95vz1XXs6HOHi8t8XvB5bt//P/lVtGB5/688Fcb2ffen78/NQvy7/vhFf1+s8/u/OFvfzlXBeF8NvZt5289L+GrePvxvh8kPF633d5y+8zcXn9W/C8/227xf3H48rPt7vhp9jvr6l+f0uro+vXBxqvf/8t3hcCu8n2aXi+rhVPN+Xn7u57eHF30OSXbol//pP0v3csqaHuZKFjyxMn5w/feGR6fNzC+enFz7y0cOnzlw4ff5w/rs8D3+g2+2X3p825e9Ps3N792T5u9WZ8ZkNeMO6hsefreb4zz58bHbfzJ2zc8ePXjh+/uGzc+dOHFtYODY3u3Dn0ePH5z7c7fbzswd37jqwe9+uqRPzswf3Hziw+8DU/Okz9cMoDqqLvTMfnDp97nB+k4WDew7svO++PTNTp87Mzh3cNzMzdaHb7fPvTVP1W//+1Lm5k0fPz5+am1qY/+jcwZ0H9u7d1fDbAH/S9vanzh5fmJw+d+H09IWFuXPTxWOZPJ9fXP/e123/lNPCfxU/z7aqFb+IL3vH3XvT72et++JjK95VsUnLLxB9Nvwumn950dn9q/k65v7RMJOK5H8AAACogpj7x8JM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/S9f/33JxVfvX/9+w/n/T7fX/9f/7ov//UL/1/4v3C/3/3lhv/17/P9D/1/9/Hvrzg3781en/t6f/Tzv91v+Puf+6LKtk/gcAAIAqiLl/U5iJ/A8AAAClEXP/9WEm8j8AAACURsz9LwgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6/9NZtfr/l3p5/Pr/+v8s12/9/5j7XxhmUpH8DwAAAFUQc/8NYSbyPwAAAJRGzP03hpnI/wAAAFAaMfdvDjOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/Pv9f/1//n57qt/5/zP0vCjOpSP4HAACAKoi5/8VhJvI/AAAA9J+Rq7tZzP0vCTNZlv+vcgcAAADA8y7m/puyliJ4Rf7+X/9f/7//+//j6Tr9f/3/rC/7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s8mspeGmVQk/wMAAEAVxNx/c5iJ/A8AAAClEXP/L4WZyP8AAABQGjH3bwkzqUj+1//X/+///r/P/9f/7/f+v8//7yf6/53p/3eh/6//r/+v/09P9Vv/P+b+W8JMKpL/AQAAoApi7r81zET+BwAAgNKIuf+Xw0zkfwAAACiNmPu3hplUJP/r//d5/z82R/X/9f/1//X/9f9XRf+/M/3/LvT/9f/1//X/6al+6//H3P+yMJOK5H8AAACogpj7bwszkf8BAACgNGLuf3mYifwPAAAApRFz/2SYSUXyv/5/n/f/ix78mM//1//X/9f/1/9fHf3/zvT/u9D/1//vSf9/8WJ1+//jmf4/jfqt/x9z/+1hJhXJ/wAAAFAFMfdvCzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/e5hJRfK//v9A9P8z/X/9f/1//X/9/9XR/+9M/78L/X/9f5//7/P/6al+6//H3P+KMJOK5H8AAACogpj77wwzkf8BAACgNGLuf2WYifwPAAAApRFz/11hJhXJ//r/+v/6//r/+v/t96//P5j0/zvT/+9C/1//X/9f/5+e6rf+f8z9rwozqUj+BwAAgCqIuX9HmIn8DwAAAKURc//dYSbyPwAAAJRGzP1TYSYVyf/6//r/+v/6//r/S8+h/v/g0//vTP+/C/1//X/9f/1/eqrf+v8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz902Em8j8AAACURsz9M2EmFcn/+v/6//r/+v9r6v+/fOl+y9T/b7d//f/BpP/fmf5/F/r/+v/Pe/9/VP+fUum3/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNy/O8xE/gcAAIDSiLl/T5hJRfK//r/+v/6//r/P/2+/f/3/waT/31nv+//xIW5E/3982fb6//r//XT8Pv9f/5/l+q3/H3P/fWEmFcn/AAAAUAUx9+8NM5H/AQAAoDRi7t8XZiL/AwAAQGnE3L8/zKQi+V//X/9f/1//X/+//f71/weT/n9nPv+/C/1//X/9f/1/1umhP2z86ur6/2Pt7rgn/f+Y+w+EmVQk/wMAAEAVxNz/6jAT+R8AAABKI+b+X8nnvy5dIf8DAABAaRS5fyL71TCTiuR//f+m7nn94er/6//r/+v/5/T/B5P+f2f6/13o/+v/6//r/9NTK/b/Q/Ru3/9vqyf9/5j7D4aZVCT/AwAAQBXE3P9rYSbyPwAAAJRGzP2vCTOR/wEAAKA0Yu4/FGZSkfyv/+/z//X/9f/1/9vvf6P7//GTbvX/10f/vzP9/y70//X/9f/1/+mpq/v8/7Z60v+Puf+1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/7owE/kfAAAASiPm/teHmVQk/+v/6//r/+v/6/+337/P/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/jeEmVQk/wMAAEAVxNz/xjAT+R8AAABKI+b+N4WZyP8AAABQGjH3vznMpCL5X/9f/1//X/9f/7/9/rv1/+Pn9ev/9xf9/870/7vQ/9f/1//X/6en+q3/H3P/r4eZVCT/AwAAwECaWNvmMfc/0Hpj+R8AAABKI+b+t4SZyP8AAABQGjH3vzXMpCL5X/9f/1//X/9f/7/9/n3+/2DS/+9swPr/P78hXK7/X9D/7+/jX2v/f6Tl62vS///eSv3/xfHW2+v/cy30W/8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox9/9GmElF8r/+f/04ltrL+v9l7f8P6f/3X///77+TZfr/+v89p//f2YD1/33+fwv9//4+fp//r//Pcv3W/4+5/51hJhXJ/wAAAFAFMfc/GGYi/wMAAEBpxNz/UJiJ/A8AAAClEXP/u8JMKpL/9f99/n81+v8+/z/rv/6/z/9vOKv6/72j/9+Z/n8X+v/6//3W//9v/X8GW7/1/2PufzjMpCL5HwAAAKog5v53h5nI/wAAAFAaMff/ZpiJ/A8AAAClEXP/e8JMKpL/9f8Hpf8/OaD9/8f0/69h//+2G4rt9P/1/1mi/9+Z/n8X+v/6//3W//f5/wy4fuv/x9z/3jCT1ef/iVVvCQAAADwvYu7/rTCTivz9PwAAAFRBzP2/HWYi/wMAAEBpxNz/O2EmFcn/+v+D0v/3+f+Z/r/P/295PPr/+v/tbFz/P77z6P/r/+v/R/r/+v/6/7Tqt/5/zP2/G2ZSkfwPAAAAVRBz//vCTOR/AAAAGAjt/p/sVjH3Hw4zkf8BAACgNGLuPxJmUpH8r/+/iv7/ePf70/9vPn79//brY039/z/b9m/f+ebbj+zU/9f/1/9fkw39/P/6i9/n/+v/6/8n+v/6//r/tOq3/n/M/UfDTCqS/wEAAKAKYu7/vTAT+R8AAABKI+b+Y2Em8j8AAACURsz9s2EmFcn/+v8+/1//v0/7/wP8+f/xfOj/N+tZ/z++6er/t1X079Mqurb9/3cv9cT1/9fa/x9re6n+v/7/IB+//r/+P8v1W/8/5v65MJOK5H8AAACogpD7h44Xc+kK+R8AAABKI+b+E2Em8j8AAACURsz97w8zqUj+1//X/9f/1//3+f/t99+p/18b8fn//Sr173+av1D0/1v0T/+/Pf1//f9BPn79f/1/luu3/n/M/fNhJhXJ/wAAAFAFMfd/IMxE/gcAAIDSiLn/g2Em8j8AAACURsz9J8NMKpL/9f8Hr/8ft9X/1//X/6/o5//r/3f0/+zdSZBldVbH8ZtYUFmBYbgwwoUbI1i6dMlC17p04cKNGyMMI8QBFWcK5xFFxVkRnAccQBBRQe0ZeqKbnqG76XmiB3oomm6iOsg85+R0870cXua79///fBacNqnkPYgy4UfWl3va/l7/H/T/fff/V/T/+n/9P6sxtf4/d//3xy2d7H8AAADoQe7+m+IW+x8AAACakbv/B+IW+x8AAACakbv/B+OWTva//v80/f9Opez5/3vf/yT6/2/R/x/2+vr/aff/1w36/9PQ/y+m/19C/+/5//p//T8rNbX+P3f/D8Utnex/AAAA6EHu/h+OW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0filk72/77+f2Pos//PjHcWz//X/3v+v/5/W6v9v+f/n8759v+3vfSVT/+v/9f/B/3/kfr/i4d9vv6fFk2t/8/d/6NxSyf7HwAAAHqQu//H4hb7HwAAAJqRu/+WuMX+BwAAgGbk7v/xuKWT/b+65/9f2vr4TPv/ov/X/299QP+v/9f/z5bn/y/WU/9/85PX3/Tcg9/w0HFeX/+v//f8f/0/qzW1/j93/0/ELZ3sfwAAAOhB7v6fjFvsfwAAAGhG7v6filvsfwAAAGhG7v6fjls62f+r6/9n/fz/ov/X/299QP+v/9f/z5b+f7Ge+v+TvL7+X/+v/9f/s1pT6/9z9/9M3NLJ/gcAAIAe5O7/2bjF/gcAAIBm5O6/NW6x/wEAAKAZufsvxy2d7H/9/9n3/y/q//X/cfX/+n/9/9nT/y+m/19C/6//1//r/1mpqfX/uftvi1s62f8AAADQg9z9Pxe32P8AAADQjNz9Px+32P8AAADQjNz9vxC3dLL/9f+e/6//1//r/8dfX/8/T/r/xfT/S+j/T9vPX6v/1//r/9ntmP3/Cwu+bK+k/8/d/4txSyf7HwAAAHqQu/+X4hb7HwAAAJqRu/+X4xb7HwAAAJqRu/9X4pZO9r/+X/+v/z9S/7/1evr/ff3/wZ96W/T/4/T/50P/v9hk+v+NC6Mf1v/Pvv+f2PP/8yu2/l//z7pM7fn/uft/NW7pZP8DAABAD3L3/1rcsmD/H/tf5gMAAABrlbv/1+MW3/8HAACA2cvqLHf/b8Qtnex//b/+X//v+f+e/z/++ov6/4d2vT/9/7To/xebTP9/CP2//n/O71//r//noKn1/7n7fzNu6WT/AwAAQA9y998et9j/AAAA0Izc/b8Vt9j/AAAA0Izc/b8dt3Sy/8f7/53fr/8/Gv3/3vev/x//+bGq/j//iPr/hf3/t3r+f5/0/4udf/9/Uf+/949/wv5/+yuO/n/a77/x/v/Sss/X/zNmav1/7v474pZO9j8AAAD0IHf/78Qt9j8AAAA0I3f/78Yt9j8AAADM2jd/3U4Llrv/9+KWTva/5//r//X/8+v/Pf9/2zqf/z+ce/9/Qf9/RPr/xTz/f4nJ9v/b9P/Tfv+N9/+e/8+JTK3/z91/Z9zSyf4HAACAHtz5/LC1+39/GOx/AAAAmKPdv3Zg/y8oDbn7/yBusf8BAACgGbn7/zBu6WT/6//1//p//b/+f/z1p9X/e/7/Uc26/7+w8z/1//r/MTPt/y801v/fddjnT6H/v1X/z8Ts6f8f2fn4uvr/3P1/FLd0sv8BAACgB7n7/zhusf8BAACgGbn7/yRusf8BAACgGbn7/zRu6WT/n3n/f+nw19b/6//1//p//b/+f9Vm3f97/r/+v83+3/P/Pf9f/9+xnf5/79fDdfX/ufv/LG7pZP8DAABAD3L3/3ncYv8DAABAM3L33xW32P8AAADQjNz9fxG3dLL/Pf9f/6//1//r/8dfX/8/T/r/xfT/S+j/9f/6f/0/K7Xn+f+7rKv/z91/d9zSyf4HAACAHuTuvydusf8BAACgGbn7/zJusf8BAACgGbn7/ypu6WT/6//Ptv/Pj+v/9f+D/l//r/8/F932/xtjfyc66JD+//Hvvfztez+i/9f/6//1//p/VmAS/f/VnX+6zN3/13FLJ/sfAAAAepC7/2/iFvsfAAAAmpG7/2/jFvsfAAAAmpG7/+/ilmPu/69d6bs6P/p/z//X/+v/9f/jr6//n6du+/8j8vz/JfT/+n/9v/6flTqT/v/Kzhf34z7/P3f/38ctvv8PAAAAzcjd/w9xi/0PAAAAzcjd/49xy9L9f8PXnOHbAgAAAFYod/8/xS2dfP9f/6//1//r//X/469/0v5/cxin/z8f+v/F9P9L6P/1//p//T8rdSb9/y7H7f9z998bt3Sy/wEAAKAHufv/OW6x/wEAAKAZufv/JW6x/wEAAKAZufv/NW7pZP/r//X/+n/9v/5//PU9/3+e9P+L6f+HYbhvwRsY6/+vXtT/6//1//p/Tmhq/X/u/n+LWzrZ/wAAANCD3P33xS32PwAAADQjd//9cYv9DwAAAM3I3f/vcUsn+1//r//X/+v/9f/jr6//nyf9/2L6/yU8//+0/fxV/b/+X//PblPr/3P3PxC3dLL/AQAAoAe5+x+MW+x/AAAAaEbu/v+IW+x/AAAAaEbu/ofilk72v/5f/6//1/+fSf9/Wf+/n/7/fJxd/z/o//X/+v8lPP9f/6//Z7/z6v9fiK/3y/r/3P3/Gbd0sv8BAACgB7n7H45b7H8AAABoRu7+/4pb7H8AAABoRu7+/45bOtn/+n/9v/5f/+/5/+Ovr/+fJ8//X0z/v4T+X/+v/9f/s1Ln1f8f1vvv/79z9/9P3NLJ/gcAAIAe5O5/JG6x/wEAAKAZufsfjVvsfwAAAGhG7v7/jVs62f/6f/3/3v5/GPT/+n/9/7Zz6P83B/3/yun/F9P/L6H/b7P/v2ZoqP+/dOjn6/+Zoqn1/7n7/y9u6WT/AwAAQA9y9/9/3GL/AwAAQDNy978sbrH/AQAAoBm5+18et7S0/188PH2bf/9/cd8n6v+HYXjqFs//39X/7/z/tf5f/z+x/r/+qur/V0f/v5j+fwn9f5v9v+f/6/9Zm6n1/7n7XxG3tLT/AQAAoHO5+18Zt9j/AAAA0Izc/a+KW+x/AAAAaEbu/lfHLZ3s/z39/5Wd8Cx///T7//2fqP8fTvX8/xb7f8//1//r/3ty2v7+7s34e5r+X/+v/x/t5zcO+eeeIfr5l/789P/6f/0/aWr9f+7+18Qtnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTuf23c0sn+n//z//d/ov5/0P930f9v6v/1//r/UVN5/v+NN37bE/p//X+L/f8inv+v/9f/s9/U+v/c/a+LWzrZ/wAAANCD3P2vj1vsfwAAAGhG7v43xC32PwAAADQjd/8b45ZO9v/B/v/aYbtQ3TbW/0ejpv/fRf+/9/3r/8d/fnj+v/5f/3/2ptL/e/7/yd6//n+F/f8Jfuqsu58/rXW//2P1/9948PP1/7Roav1/7v4n4pZO9j8AAAD0IHf/m+IW+x8AAACakbv/zXGL/Q8AAADNyN3/ZNzSyf73/H/9v/5f/6//H399/f886f8X0/8v0VL/fwIr6efzq6r+f77P//8q/T+rM7X+P3f/W+KWreF3w1ef8E8TAAAAmJDc/W+NWzr5/j8AAAD0IHf/2+IW+x8AAACakbv/7XFLJ/tf/6//1//r//X/46+v/58n/f9i+v8l+un/N8c+uO5+/rTW/f6b6f89/58Vmlr/n7v/HXFLJ/sfAAAAZuza5T/k+a3f5u5/Z9xi/wMAAEAzcve/K2452v6/cDbvCgAAAFil3P1PxS2dfP9f/6//b7///279/77X1//r/1um/1/8iyD1/0v00/+PWnc/P/f3X/3/1Yv6f/0/YWr9f+7+p+OWTvY/AAAA9CB3/7vjFvsfAAAAmpG7/z1xi/0PAAAAzcjd/964pZP9r//vq//fGHrs/z3/v5X+f3Pfn4/+X/8/Zj79/z2j/w1hz//X/+v/5/v+Pf9f/89BU+v/c/c/s3Ghy/0PAAAAc/Wd3/R9Tx/1xz6z9dvN4X1xi/0PAAAAzcjd//64xf4HAACAZuTu/0Dc0sn+1//31f/3+fx//X8r/b/n/+v/j2I+/f84/b/+X/8/3/ev/9f/c9DU+v/c/R+MW3YNv9H/QA8AAACwPtcd74fn7v9Q3NLJ9/8BAACgB7n7Pxy3HNj/V4/4q9oBAACAqcnd/5G4pZPv/+v/J97/D2fU/8eP0/9v0//r/8deX/8/T/r/xU7Z/1/d0P/r/xfQ/+v/9f/sN7X+P3f/ww8MXe5/AAAAaNSef6Pw0a3fbg4fi1vsfwAAAGhG7v6Pxy32PwAAADQjd/8n4pZO9r/+f+L9/4me/3+p/pfn/3fe/9++Ofr6+n/9f8v0/4t5/v8S+n/9v/5f/89KHaP/3xqkZ93/5+5/Nm7pZP8DAABAD3L3fzJusf8BAACgGbn7PxW32P8AAADQjNz9n45bOtn/+v819P93XByGM+3/j/D8f/1/H/3/Ia/fTv//9ddffuy7vuf+e/X/7DjP/j9/Luj/9f/6/236f/2//p/9pvb8/9z9n4lbOtn/AAAA0IPc/c/FLfY/AAAANCN3/2fjlpf2/6PrelcAAADAKuXu/1zc0sn3//X/LT7/f579f/61XkP/f3l+/X82xb33/57/r/8/yPP/F9P/L6H/1//r//X/rNTU+v/c/Z+PWzrZ/wAAANCD3P1fiFty/28c+1/dAwAAABOTu/9K3OL7/wAAANCM3P3Pxy2d7H/9v/5/Kv1/8vz/nc/z/P9t+n/9/3Ho/xfT/y+h/9f/6//1/6zU1Pr/3P1fjFs62f8AAADQg9z9L8Qt9j8AAAA0I3f/l+IW+x8AAACakbv/y3FLJ/tf/z8M1zy783H9v/5/6wP6f/2//n+2ptj/f8cxGvTz6f8vLf+B+n/9v/5f/6//ZwWm1v/n7v9KAAAA//+vq2ae")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)

2.202332135s ago: executing program 8 (id=1852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

2.00177638s ago: executing program 8 (id=1854):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

1.59136391s ago: executing program 6 (id=1857):
unshare(0x22020400)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)

1.240789209s ago: executing program 5 (id=1860):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x1000, 0x10000000000ef, 0x3, 0x0, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x1}, 0x0, 0x0, 0x6, 0x5, 0x6, 0x4, 0x20, 0x584}}], 0xb0, 0x4008080}, 0x0)

1.146634401s ago: executing program 5 (id=1861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

1.122952182s ago: executing program 6 (id=1862):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x6, 0x0)

949.015136ms ago: executing program 6 (id=1863):
r0 = io_uring_setup(0x6abc, &(0x7f0000004540)={0x0, 0x2001e37d, 0x100, 0x0, 0x126})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000045c0), 0x97)
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)

889.281977ms ago: executing program 5 (id=1864):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000006000000ff000000050000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce08e020149e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

760.36579ms ago: executing program 6 (id=1865):
io_setup(0x6, &(0x7f0000000d80)=<r0=>0x0)
r1 = eventfd2(0xffff, 0x80801)
io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r1}])

556.756466ms ago: executing program 7 (id=1866):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x3, 0x8, 0xa4b0, 0x3ff, 0x1, 0x7, 0x5, 0x8, 0xa, 0x0, 0xfffffff8, 0x1})

484.581808ms ago: executing program 5 (id=1867):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r0, &(0x7f0000007400)=[{{&(0x7f0000000600)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000c844)

443.781379ms ago: executing program 6 (id=1868):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf6}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x44}}, 0x0)

441.773399ms ago: executing program 8 (id=1869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xb368f4ff5519c3e8}, 0x850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

295.281622ms ago: executing program 5 (id=1870):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0)

205.183744ms ago: executing program 8 (id=1871):
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804020000"], 0x7)

109.793077ms ago: executing program 6 (id=1872):
r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r0, 0x0)
read(r0, &(0x7f00000005c0)=""/4096, 0x1000)

0s ago: executing program 5 (id=1873):
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000300)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESHEX=0x0, @ANYBLOB="e03f9c0ce2afb796026bdd047770b0e3aeaa5f915c48e1dae1b58760633e809b40607e492079cc84baa304eb066115bef7120fde299b69babc025988054c40d35d919704678e238e3eb3efd893a8b4589ce7011b064cf613513f48c4f1b78a10e4e5364de7b013adc30eed3d7e73dca89f46c2d4f7be69818b5937e0d4547295fd8a2ab8df6b88967c5b", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0xff, 0x5ac, &(0x7f0000002940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000005c0)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

tting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.694782][  T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.714769][  T971] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  152.744845][  T971] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  152.753949][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.801755][  T971] usb 6-1: config 0 descriptor??
[  153.007946][ T7932] option changes via remount are deprecated (pid=7930 comm=syz.1.649)
[  153.014862][ T7929] loop2: detected capacity change from 0 to 4096
[  153.029317][ T7932] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  153.049667][ T7929] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  153.174335][ T7929] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  153.182769][ T7938] loop1: detected capacity change from 0 to 256
[  153.268294][  T971] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x1
[  153.313432][  T971] plantronics 0003:047F:FFFF.0008: collection stack underflow
[  153.345564][  T971] plantronics 0003:047F:FFFF.0008: item 0 1 0 12 parsing failed
[  153.353970][  T971] plantronics 0003:047F:FFFF.0008: parse failed
[  153.399638][  T971] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22
[  153.479299][  T971] usb 6-1: USB disconnect, device number 2
[  153.566778][ T5779] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22.
[  154.009165][ T7939] loop4: detected capacity change from 0 to 32768
[  154.158993][   T28] audit: type=1326 audit(1792196708.804:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.166790][ T7939] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  154.183313][   T28] audit: type=1326 audit(1792196708.804:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.254715][   T28] audit: type=1326 audit(1792196708.844:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.354016][   T28] audit: type=1326 audit(1792196708.844:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.471472][   T28] audit: type=1326 audit(1792196708.844:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.521256][   T28] audit: type=1326 audit(1792196708.844:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.588175][   T28] audit: type=1326 audit(1792196708.864:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.667370][ T6394] ocfs2: Unmounting device (7,4) on (node local)
[  154.668381][   T28] audit: type=1326 audit(1792196708.864:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.746859][   T28] audit: type=1326 audit(1792196708.864:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7966 comm="syz.5.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd00ff9e559 code=0x7ffc0000
[  154.764184][ T7950] loop2: detected capacity change from 0 to 32768
[  155.279411][   T56] kernel write not supported for file /uhid (pid: 56 comm: kworker/1:2)
[  155.685130][ T8005] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  156.213576][ T8031] program syz.2.682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.486784][ T8052] loop1: detected capacity change from 0 to 32768
[  157.533994][ T8052] 
[  157.533994][ T8052]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.533994][ T8052] 
[  157.700235][ T5773] 
[  157.700235][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.700235][ T5773] 
[  157.721157][ T8083] Cannot find add_set index 0 as target
[  157.728789][ T5773] 
[  157.728789][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.728789][ T5773] 
[  158.125559][ T8098] ax25_connect(): syz.2.704 uses autobind, please contact jreuter@yaina.de
[  158.529864][ T8118] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  158.837319][ T8102] loop4: detected capacity change from 0 to 32768
[  158.869597][ T8124] loop2: detected capacity change from 0 to 4096
[  158.940001][ T8102] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  158.976224][ T8102] JBD2: Ignoring recovery information on journal
[  159.030296][ T8124] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  159.044470][ T8102] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  159.187321][ T8124] ntfs3: loop2: Failed to load $Extend (-22).
[  159.193473][ T8124] ntfs3: loop2: Failed to initialize $Extend.
[  159.370131][ T8112] loop1: detected capacity change from 0 to 40427
[  159.470892][ T8112] F2FS-fs (loop1): invalid crc value
[  159.535303][ T8112] F2FS-fs (loop1): Found nat_bits in checkpoint
[  159.593044][ T8102] syz.4.706 (8102) used greatest stack depth: 19320 bytes left
[  159.623580][ T8143] loop2: detected capacity change from 0 to 256
[  159.743377][ T8112] F2FS-fs (loop1): Start checkpoint disabled!
[  159.764372][ T6394] ocfs2: Unmounting device (7,4) on (node local)
[  159.834672][ T8112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  160.256227][ T2919] kworker/u4:8: attempt to access beyond end of device
[  160.256227][ T2919] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  160.307979][ T2919] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  160.325234][ T2919] kworker/u4:8: attempt to access beyond end of device
[  160.325234][ T2919] loop1: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  160.344313][ T2919] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  161.265307][ T8161] loop2: detected capacity change from 0 to 40427
[  161.322075][ T8161] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff
[  161.344260][ T8161] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4
[  161.407383][ T8161] F2FS-fs (loop2): invalid crc value
[  161.450496][ T8161] F2FS-fs (loop2): Found nat_bits in checkpoint
[  161.481542][ T8202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  161.506014][ T8205] loop1: detected capacity change from 0 to 16
[  161.526782][ T8205] erofs: (device loop1): mounted with root inode @ nid 36.
[  161.558161][ T8205] process 'syz.1.733' launched './file2' with NULL argv: empty string added
[  161.588190][ T8161] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  161.630827][ T5774] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[52, 0] out[9000]
[  161.688051][ T8205] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -20 in[52, 4044] out[4096]
[  161.707778][ T8161] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.173553][ T8223] loop4: detected capacity change from 0 to 2048
[  162.228939][ T8223] NILFS (loop4): invalid segment: Magic number mismatch
[  162.254675][ T8223] NILFS (loop4): trying rollback from an earlier position
[  162.314148][ T8223] NILFS (loop4): recovery complete
[  162.338890][ T8229] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.346705][  T173] kernel write not supported for file /uhid (pid: 173 comm: kworker/0:2)
[  162.616134][ T8216] loop1: detected capacity change from 0 to 40427
[  162.626480][ T8216] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  162.634251][ T8216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  162.649140][ T8216] F2FS-fs (loop1): invalid crc value
[  162.671167][ T8216] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.738018][ T8216] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  162.745315][ T8216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  163.039258][ T8247] loop2: detected capacity change from 0 to 128
[  163.072710][ T8247] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  163.122075][ T8247] hpfs: filesystem error: improperly stopped
[  163.150924][ T8247] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  163.174680][ T8247] hpfs: You really don't want any checks? You are crazy...
[  163.183807][ T8247] hpfs: hpfs_map_sector(): read error
[  163.202794][ T8247] hpfs: code page support is disabled
[  163.215541][ T8247] hpfs: hpfs_map_4sectors(): unaligned read
[  163.222051][ T8247] hpfs: hpfs_map_4sectors(): unaligned read
[  163.232812][ T8247] hpfs: filesystem error: unable to find root dir
[  163.266807][ T8249] loop4: detected capacity change from 0 to 512
[  163.304647][ T8249] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  163.314369][ T8251] kAFS: unable to lookup cell 's
Õ§K²ùyyµ¬
[  163.314369][ T8251] 
[  163.314369][ T8251] =6%ñ©*°;¾eÕܲ5ô;ZÑ*ëÜd{ªÀ¿iElÝZS—j—­UF
/»�øk!ª�b…�tF\_·Üvf£Vn¯D…ìPʳ¤ý´PÑB1Ú%ÐA)X¥ã‰\YT"8ÏŽŽµd²J_¿�.�ÖÁÐé5d×#ãÛœÒh»Gp6è"±5ͺô�*§Û
Ò,‚š°âI—ÚémÞíIæ-(W
ÕAž?”¨¹W�ÏZ)nÑ[ÿ®qGjnÚ‡%(„J-ô%�ؘccʵÌÎÅ{|ê6ZØÉûçËA–5Îkó@¥aÀ­’+o­éSŽT;ÅÞò¨]5«Ò!œG3ƒ{âÁK¤ÓÓ,'
[  163.348651][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.390882][ T8249] EXT4-fs (loop4): invalid journal inode
[  163.430074][ T8249] EXT4-fs (loop4): can't get journal size
[  163.462645][ T8249] EXT4-fs (loop4): 1 truncate cleaned up
[  163.471188][ T8249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.495939][ T8255] loop1: detected capacity change from 0 to 4096
[  163.536258][ T8255] EXT4-fs (loop1): Test dummy encryption mode enabled
[  163.568682][ T8255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.681154][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.750702][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.081642][ T8278] loop1: detected capacity change from 0 to 512
[  164.109890][ T8278] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  164.794714][  T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  164.999812][  T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.015895][  T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.029734][  T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  165.043311][  T971] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  165.052858][  T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.068000][  T971] usb 3-1: config 0 descriptor??
[  165.451913][ T8317] netlink: 'syz.5.781': attribute type 3 has an invalid length.
[  165.463438][ T8317] netlink: 'syz.5.781': attribute type 1 has an invalid length.
[  165.473360][ T8317] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.781'.
[  165.518580][  T971] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x1
[  165.536715][  T971] plantronics 0003:047F:FFFF.0009: collection stack underflow
[  165.544308][  T971] plantronics 0003:047F:FFFF.0009: item 0 1 0 12 parsing failed
[  165.567892][  T971] plantronics 0003:047F:FFFF.0009: parse failed
[  165.574233][  T971] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22
[  165.771046][  T971] usb 3-1: USB disconnect, device number 7
[  165.931187][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'.
[  165.948938][ T8334] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  166.208135][ T8347] veth0_vlan: left promiscuous mode
[  166.231555][ T8347] veth0_vlan: entered promiscuous mode
[  166.249595][ T8347] team0: Device veth0_vlan failed to register rx_handler
[  166.503058][ T8353] ALSA: seq fatal error: cannot create timer (-19)
[  166.792024][ T8351] loop1: detected capacity change from 0 to 32768
[  166.836153][ T8351] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  166.879179][ T8351] JBD2: Ignoring recovery information on journal
[  166.955758][ T8351] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  167.093339][ T8377] loop2: detected capacity change from 0 to 4096
[  167.162645][ T8382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.322567][ T5773] ocfs2: Unmounting device (7,1) on (node local)
[  168.286010][  T971] lg-g15 0003:046D:0A07.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  168.307076][  T971] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000A/input/input15
[  168.321090][ T5843] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  168.438862][ T8410] fido_id[8410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  168.529692][ T5843] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.552068][ T5843] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.562575][ T5843] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.583843][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0
[  168.590972][ T5843] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  168.605459][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.641535][ T5843] usb 3-1: config 0 descriptor??
[  168.659170][ T5843] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  168.708557][ T8420] loop4: detected capacity change from 0 to 512
[  168.750083][ T8420] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  169.097965][ T5843] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.000B/input/input16
[  169.292596][ T5843] uclogic 0003:28BD:0909.000B: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0
[  169.365769][ T5843] usb 3-1: USB disconnect, device number 8
[  169.389819][ T8427] loop1: detected capacity change from 0 to 2048
[  169.440441][ T8424] fido_id[8424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  169.463471][ T8427] NILFS (loop1): invalid segment: Magic number mismatch
[  169.498582][ T8427] NILFS (loop1): trying rollback from an earlier position
[  169.511075][ T8430] CUSE: info not properly terminated
[  169.549642][ T8427] NILFS (loop1): recovery complete
[  169.575226][ T8431] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.863014][ T8440] loop4: detected capacity change from 0 to 128
[  169.877395][  T173] lg-g15 0003:046D:0A07.000C: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  169.900466][  T173] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000C/input/input17
[  170.059873][ T8444] fido_id[8444]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  170.236656][ T8448] loop2: detected capacity change from 0 to 16
[  170.262223][ T8448] erofs: (device loop2): mounted with root inode @ nid 36.
[  170.320041][ T5774] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[52, 0] out[9000]
[  170.333870][ T8448] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[52, 4044] out[4096]
[  170.484943][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  170.516344][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'.
[  170.564711][ T8457] netlink: 'syz.1.836': attribute type 15 has an invalid length.
[  170.572497][ T8457] netlink: 'syz.1.836': attribute type 18 has an invalid length.
[  170.591523][ T8459] loop4: detected capacity change from 0 to 4096
[  170.642637][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.843'.
[  170.677495][   T56] lg-g15 0003:046D:0A07.000D: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  170.702917][   T56] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000D/input/input18
[  170.728401][ T8459] ntfs3: loop4: ino=b, mi_enum_attr
[  170.734110][ T8459] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  170.770667][ T8459] ntfs3: loop4: Failed to load $Extend (-22).
[  170.791501][ T8459] ntfs3: loop4: Failed to initialize $Extend.
[  170.862804][ T8468] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.846'.
[  170.914811][ T8468] bridge: RTM_NEWNEIGH with invalid state 0x1
[  170.921208][ T8466] fido_id[8466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  171.354238][ T8493] loop1: detected capacity change from 0 to 16
[  171.378121][ T8493] erofs: (device loop1): mounted with root inode @ nid 36.
[  171.400100][ T8493] erofs: (device loop1): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  171.419682][ T8493] erofs: (device loop1): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  171.772506][ T8509] loop1: detected capacity change from 0 to 256
[  171.785413][ T8509] exfat: Deprecated parameter 'utf8'
[  171.813288][ T8509] exfat: Deprecated parameter 'namecase'
[  171.824627][ T8509] exfat: Deprecated parameter 'utf8'
[  171.846924][ T8505] loop4: detected capacity change from 0 to 32768
[  171.858027][ T8509] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  171.908418][ T8505] JBD2: Ignoring recovery information on journal
[  171.942110][ T8505] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  171.989225][ T8505] JBD2: bad block at offset 32
[  172.051088][ T8505] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  172.138515][ T8517] loop2: detected capacity change from 0 to 2048
[  172.147969][ T8505] ocfs2: Unmounting device (7,4) on (node local)
[  172.182937][ T8517] NILFS (loop2): invalid segment: Magic number mismatch
[  172.192502][ T8517] NILFS (loop2): trying rollback from an earlier position
[  172.227000][ T8517] NILFS (loop2): recovery complete
[  172.279919][ T8520] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.361629][ T8524] loop1: detected capacity change from 0 to 128
[  172.824061][   T28] audit: type=1800 audit(1792196727.464:35): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name="file1" dev="loop2" ino=21 res=0 errno=0
[  172.861673][ T8540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.878'.
[  173.180145][ T8546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (8546)
[  173.206348][ T8546] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.217764][ T8546] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  173.229642][ T8546] BTRFS warning (device loop1): excessive commit interval 3581
[  173.237752][ T8546] BTRFS info (device loop1): force zlib compression, level 3
[  173.245638][ T8546] BTRFS info (device loop1): metadata ratio 107050
[  173.252499][ T8546] BTRFS info (device loop1): turning on flush-on-commit
[  173.261920][ T8546] BTRFS info (device loop1): max_inline at 4096
[  173.268559][ T8546] BTRFS info (device loop1): using free space tree
[  173.385140][ T8546] BTRFS info (device loop1): enabling ssd optimizations
[  173.597123][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.954239][ T8576] set_capacity_and_notify: 2 callbacks suppressed
[  173.954254][ T8576] loop2: detected capacity change from 0 to 128
[  174.064379][ T5843] lg-g15 0003:046D:0A07.000E: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  174.108920][ T5843] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.000E/input/input20
[  174.246409][ T8580] fido_id[8580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  174.331149][ T8585] loop4: detected capacity change from 0 to 256
[  174.708264][ T8604] loop4: detected capacity change from 0 to 512
[  174.750918][ T8604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  174.779651][ T8604] EXT4-fs (loop4): 1 truncate cleaned up
[  174.780899][ T8604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.899142][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.162599][ T8621] loop2: detected capacity change from 0 to 1024
[  175.329949][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'.
[  175.864218][ T8650] loop4: detected capacity change from 0 to 1024
[  176.069133][ T8653] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.079040][ T8653] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.088296][ T8653] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.097137][ T8653] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.282363][ T8658] loop1: detected capacity change from 0 to 512
[  176.339311][ T8658] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.924: invalid block
[  176.343533][ T8663] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  176.418331][ T8665] loop4: detected capacity change from 0 to 128
[  176.464898][ T8658] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.924: invalid indirect mapped block 10 (level 1)
[  176.480153][ T8658] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.924: invalid indirect mapped block 8 (level 1)
[  176.525575][ T8658] EXT4-fs (loop1): 1 truncate cleaned up
[  176.551815][ T8658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.592217][ T8648] loop2: detected capacity change from 0 to 32768
[  176.614204][ T8648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.919 (8648)
[  176.660265][ T8648] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.686494][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.705150][ T8648] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  176.725439][ T8648] BTRFS warning (device loop2): excessive commit interval 3581
[  176.734371][ T8648] BTRFS info (device loop2): force zlib compression, level 3
[  176.744160][ T8648] BTRFS info (device loop2): metadata ratio 107050
[  176.751602][ T8648] BTRFS info (device loop2): turning on flush-on-commit
[  176.759516][ T8648] BTRFS info (device loop2): max_inline at 4096
[  176.786402][ T8648] BTRFS info (device loop2): using free space tree
[  176.850554][   T56] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  176.979163][ T8648] BTRFS info (device loop2): enabling ssd optimizations
[  177.178068][   T56] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  177.296963][ T8707] loop4: detected capacity change from 0 to 128
[  177.340577][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.607135][ T8713] loop1: detected capacity change from 0 to 64
[  177.695279][   T28] audit: type=1800 audit(1792196732.334:36): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.948" name="file1" dev="loop1" ino=21 res=0 errno=0
[  177.707188][ T5843] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  177.914748][ T8672] ceph: No mds server is up or the cluster is laggy
[  177.994071][ T8719] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  178.057756][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.718000][ T8732] usb usb1: usbfs: process 8732 (syz.5.947) did not claim interface 0 before use
[  178.754141][ T8725] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  178.784605][ T8725] F2FS-fs (loop2): invalid crc value
[  178.808735][ T8725] F2FS-fs (loop2): Found nat_bits in checkpoint
[  178.989918][ T8725] F2FS-fs (loop2): Start checkpoint disabled!
[  179.013854][ T8725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  179.038751][ T8725] syz.2.944: attempt to access beyond end of device
[  179.038751][ T8725] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.329227][ T1130] kworker/u4:5: attempt to access beyond end of device
[  179.329227][ T1130] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  179.351467][ T1130] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  179.370570][ T1130] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  179.662931][ T8756] set_capacity_and_notify: 4 callbacks suppressed
[  179.662942][ T8756] loop4: detected capacity change from 0 to 512
[  179.685742][ T8756] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.713461][ T8756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  179.741018][ T8756] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  179.839328][ T8756] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.958: Allocating blocks 41-42 which overlap fs metadata
[  179.882704][ T8756] Quota error (device loop4): write_blk: dquota write failed
[  179.901971][ T8756] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  179.913893][ T8756] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.958: Allocating blocks 41-42 which overlap fs metadata
[  179.978415][ T8756] Quota error (device loop4): write_blk: dquota write failed
[  180.019561][ T8756] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  180.033571][ T8756] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.958: Failed to acquire dquot type 1
[  180.047872][ T8756] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  180.067119][ T8756] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.958: corrupted inode contents
[  180.079550][ T8756] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.958: mark_inode_dirty error
[  180.093719][ T8756] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.958: corrupted inode contents
[  180.107120][ T8756] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #12: comm syz.4.958: mark_inode_dirty error
[  180.149938][ T8756] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.958: corrupted inode contents
[  180.150273][ T8769] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  180.179485][ T8756] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  180.201567][ T8756] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #12: comm syz.4.958: corrupted inode contents
[  180.220183][ T8771] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  180.238438][ T8756] EXT4-fs error (device loop4): ext4_truncate:4314: inode #12: comm syz.4.958: mark_inode_dirty error
[  180.261712][ T8756] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  180.287182][ T8756] EXT4-fs (loop4): 1 truncate cleaned up
[  180.294173][ T8756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.367689][ T8756] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  180.390753][ T8756] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  180.435463][ T8756] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  180.526859][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.953820][ T8793] loop4: detected capacity change from 0 to 512
[  180.971299][ T8793] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.992105][ T8793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  181.024366][ T8780] loop1: detected capacity change from 0 to 40427
[  181.032610][ T8793] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.973: bad orphan inode 131083
[  181.056250][ T8780] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  181.074889][ T8780] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  181.085657][ T8793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.161215][ T8780] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.283885][ T8780] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  181.308592][ T8780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.423383][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.733643][ T8811] loop2: detected capacity change from 0 to 512
[  181.808411][ T8811] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.981: inode has both inline data and extents flags
[  181.857001][ T8811] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.981: couldn't read orphan inode 15 (err -117)
[  181.898438][ T8811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.988404][   T28] audit: type=1800 audit(1792196736.634:37): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.981" name="file1" dev="loop2" ino=18 res=0 errno=0
[  182.284718][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.433596][ T8837] loop2: detected capacity change from 0 to 1024
[  182.475299][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  182.517268][ T8837] syz.2.991: attempt to access beyond end of device
[  182.517268][ T8837] loop2: rw=0, sector=393216, nr_sectors = 2 limit=1024
[  182.674810][  T173] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  182.678860][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.697623][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.724644][ T5843] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  182.738317][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.758745][ T5843] usb 2-1: config 0 descriptor??
[  182.863318][ T8841] loop2: detected capacity change from 0 to 4096
[  182.881723][  T173] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  182.886144][ T8841] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  182.923691][  T173] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.939383][  T173] usb 5-1: config 0 interface 0 has no altsetting 0
[  182.946300][  T173] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  182.957647][  T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.981826][ T8841] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  183.006273][  T173] usb 5-1: config 0 descriptor??
[  183.027289][ T8835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  183.192708][ T5843] playstation 0003:054C:0DF2.000F: item fetching failed at offset 3/5
[  183.218001][ T5843] playstation 0003:054C:0DF2.000F: Parse failed
[  183.224379][ T5843] playstation: probe of 0003:054C:0DF2.000F failed with error -22
[  183.425279][ T2201] usb 2-1: USB disconnect, device number 3
[  183.469522][  T173] apple 0003:05AC:027A.0010: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  183.515257][  T173] input: HID 05ac:027a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:027A.0010/input/input21
[  183.640067][  T173] apple 0003:05AC:027A.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0
[  183.701131][  T173] usb 5-1: USB disconnect, device number 3
[  183.825545][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  184.240949][ T8870] loop1: detected capacity change from 0 to 2048
[  184.295305][ T8871] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.385084][   T28] audit: type=1800 audit(1792196739.024:38): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1008" name="file1" dev="loop1" ino=15 res=0 errno=0
[  184.412514][ T8873] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.424663][  T173] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  184.474315][ T8853] loop2: detected capacity change from 0 to 65536
[  184.556220][ T8853] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  184.607728][ T8871] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  184.638212][ T8871] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  184.648511][  T173] usb 6-1: Using ep0 maxpacket: 32
[  184.663983][  T173] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  184.684734][  T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.693848][ T8871] Remounting filesystem read-only
[  184.694893][  T173] usb 6-1: Product: syz
[  184.703066][  T173] usb 6-1: Manufacturer: syz
[  184.703441][ T1130] NILFS (loop1): discard dirty page: offset=0, ino=5
[  184.728579][ T1130] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  184.733259][  T173] usb 6-1: SerialNumber: syz
[  184.741032][ T8853] XFS (loop2): Ending clean mount
[  184.743666][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.756006][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.760293][  T173] usb 6-1: config 0 descriptor??
[  184.766473][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.789818][ T1130] NILFS (loop1): discard dirty page: offset=0, ino=3
[  184.795619][ T8853] XFS (loop2): Quotacheck needed: Please wait.
[  184.797748][ T1130] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  184.816545][  T173] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  184.822718][ T1130] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  184.833226][  T173] dvb-usb: bulk message failed: -22 (4/0)
[  184.842916][  T173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  184.847500][ T1130] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  184.858223][  T173] dvb-usb: bulk message failed: -22 (5/0)
[  184.867128][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.867523][  T173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  184.877853][ T1130] NILFS (loop1): discard dirty page: offset=229376, ino=3
[  184.893831][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.898900][ T8853] XFS (loop2): Quotacheck: Done.
[  184.930017][  T173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  184.941214][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  184.951397][  T173] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  184.961344][ T1130] NILFS (loop1): discard dirty block: blocknr=50, size=1024
[  184.972145][  T173] usb 6-1: media controller created
[  184.983882][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.005537][ T1130] NILFS (loop1): discard dirty page: offset=0, ino=4
[  185.012274][ T1130] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  185.012925][ T8868] ttusb2: i2c wr len=58 too high
[  185.032272][  T173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.050475][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.079392][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.081610][ T5779] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  185.101013][ T1130] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.111120][  T173] usb 6-1: selecting invalid altsetting 3
[  185.112182][ T5773] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  185.121455][  T173] ttusb2: set interface to alts=3 failed
[  185.131858][ T5773] NILFS (loop1): discard dirty page: offset=0, ino=6
[  185.138326][ T8889] Bluetooth: MGMT ver 1.22
[  185.143108][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.152345][ T5773] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.162073][ T5773] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  185.169831][ T5773] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  185.251562][  T173] DVB: Unable to find symbol tda10086_attach()
[  185.286040][  T173] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  185.330405][  T173] dvb-usb: bulk message failed: -22 (4/0)
[  185.353845][  T173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  185.393384][  T173] dvb-usb: bulk message failed: -22 (5/0)
[  185.401064][  T173] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  185.435385][  T173] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  185.452822][  T173] usb 6-1: USB disconnect, device number 3
[  185.542448][  T173] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  185.566033][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'.
[  185.599916][ T8898] loop1: detected capacity change from 0 to 164
[  185.696164][ T8898] iso9660: Corrupted directory entry in block 4 of inode 1792
[  185.927563][ T8910] loop4: detected capacity change from 0 to 128
[  185.950379][ T8910] EXT4-fs (loop4): Test dummy encryption mode enabled
[  185.987772][ T8910] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.044013][ T8910] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.087851][ T8910] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 2147500033 (only 1 groups)
[  186.128835][  T173] kernel write not supported for file [eventfd] (pid: 173 comm: kworker/0:2)
[  186.145107][ T6394] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.216424][ T8922] netlink: 'syz.2.1030': attribute type 9 has an invalid length.
[  186.233946][ T8922] netlink: 155304 bytes leftover after parsing attributes in process `syz.2.1030'.
[  186.778157][ T8942] bridge0: entered promiscuous mode
[  186.941870][ T8950] loop4: detected capacity change from 0 to 16
[  186.982641][ T8950] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  187.012035][ T6765] udevd[6765]: incorrect cramfs checksum on /dev/loop4
[  187.261523][ T8962] syz.1.1046 uses obsolete (PF_INET,SOCK_PACKET)
[  187.363470][ T8964] loop2: detected capacity change from 0 to 256
[  187.395275][ T8966] overlayfs: lower data-only dirs require metacopy support.
[  187.412298][ T8964] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  187.906319][ T8961] loop4: detected capacity change from 0 to 40427
[  187.918669][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  187.956745][ T8961] F2FS-fs (loop4): invalid crc value
[  188.125414][    T9] usb 2-1: Using ep0 maxpacket: 32
[  188.145846][    T9] usb 2-1: config index 0 descriptor too short (expected 19, got 18)
[  188.164627][ T8961] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.167261][    T9] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  188.181893][ T8980] hugetlbfs: Bad value 'ß' for mount option 'size'
[  188.181893][ T8980] 
[  188.210605][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.225072][    T9] usb 2-1: Product: syz
[  188.239492][    T9] usb 2-1: Manufacturer: syz
[  188.244148][    T9] usb 2-1: SerialNumber: syz
[  188.267454][    T9] usb 2-1: config 0 descriptor??
[  188.287034][    T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  188.288702][ T8985] loop2: detected capacity change from 0 to 1024
[  188.319362][ T8961] F2FS-fs (loop4): Unrecognized mount option "nogrpid" or missing value
[  188.330372][ T8985] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  188.338601][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  188.385058][ T8985] hfsplus: filesystem is marked journaled, leaving read-only.
[  188.398870][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  188.430577][    T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  188.471991][    T9] usb 2-1: media controller created
[  188.490329][ T8968] cxusb: i2c wr: len=80 is too big!
[  188.490329][ T8968] 
[  188.562446][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  188.626382][    T9] usb 2-1: selecting invalid altsetting 7
[  188.639136][    T9] cxusb: set interface failed
[  188.649715][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  188.753737][    T9] DVB: Unable to find symbol lgdt330x_attach()
[  188.760248][    T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  188.827884][ T8991] loop2: detected capacity change from 0 to 4096
[  188.909932][    T9] rc_core: IR keymap rc-dvico-portable not found
[  188.914206][ T8991] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  188.940499][    T9] Registered IR keymap rc-empty
[  188.966835][ T8991] ntfs3: loop2: Failed to load $Extend (-22).
[  188.973060][ T8991] ntfs3: loop2: Failed to initialize $Extend.
[  188.979440][    T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  189.010597][    T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input22
[  189.077606][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  189.094868][    T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  189.134905][    T9] usb 2-1: USB disconnect, device number 4
[  189.331641][    T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  190.544148][ T9052] loop2: detected capacity change from 0 to 1024
[  190.718558][ T9059] loop4: detected capacity change from 0 to 512
[  190.776545][ T9059] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1085: inode has both inline data and extents flags
[  190.946004][ T9059] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1085: couldn't read orphan inode 15 (err -117)
[  190.983292][ T9059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.108827][ T9077] loop1: detected capacity change from 0 to 512
[  191.113496][   T28] audit: type=1800 audit(1792196745.754:39): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1085" name="file1" dev="loop4" ino=18 res=0 errno=0
[  191.177055][ T9077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.240809][ T9077] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.357292][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.503806][ T6394] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.629267][ T9091] loop2: detected capacity change from 0 to 2048
[  191.754999][ T9091] overlayfs: upper fs needs to support d_type.
[  191.802377][ T9091] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  191.818119][ T9091] overlayfs: failed to set xattr on upper
[  191.827520][ T9091] overlayfs: ...falling back to redirect_dir=nofollow.
[  191.828760][ T9098] loop1: detected capacity change from 0 to 256
[  191.844262][ T9091] overlayfs: ...falling back to index=off.
[  191.848171][ T9098] exfat: Deprecated parameter 'utf8'
[  191.859568][ T9091] overlayfs: ...falling back to uuid=null.
[  191.885139][ T9098] exfat: Deprecated parameter 'namecase'
[  191.915697][ T9098] exfat: Deprecated parameter 'namecase'
[  191.921605][ T9098] exfat: Deprecated parameter 'namecase'
[  191.950134][ T9098] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  191.963709][ T5779] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  191.982839][ T5779] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  192.380918][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.615632][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.666327][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1107'.
[  192.815252][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.976475][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.364848][ T1130] tipc: Disabling bearer <eth:xfrm0>
[  193.377084][ T5843] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  193.396287][ T5843] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  193.421497][ T1130] tipc: Left network mode
[  193.457091][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.484076][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.497552][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.513389][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.525871][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  193.544846][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.666737][   T23] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  193.854938][ T9140] rxe_eth0 speed is unknown, defaulting to 1000
[  194.206923][ T5843] libceph: mon0 (1)127.0.0.1:1 socket error on write
[  194.464908][ T9135] ceph: No mds server is up or the cluster is laggy
[  194.473028][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.479906][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.499857][ T9143] loop4: detected capacity change from 0 to 40427
[  194.529851][ T9143] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  194.536782][ T9143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  194.549523][ T9143] F2FS-fs (loop4): invalid crc value
[  194.589505][ T9143] F2FS-fs (loop4): Found nat_bits in checkpoint
[  194.710997][ T9143] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  194.718341][ T9143] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  194.754984][ T1130] IPVS: stopping backup sync thread 8118 ...
[  194.806630][ T6394] syz-executor: attempt to access beyond end of device
[  194.806630][ T6394] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  194.867258][ T6394] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  195.004384][ T9140] chnl_net:caif_netlink_parms(): no params data found
[  195.477425][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.488007][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.496326][ T9140] bridge_slave_0: entered allmulticast mode
[  195.503833][ T9140] bridge_slave_0: entered promiscuous mode
[  195.546326][ T1130] hsr_slave_0: left promiscuous mode
[  195.575119][ T5774] Bluetooth: hci3: command tx timeout
[  195.577491][ T1130] hsr_slave_1: left promiscuous mode
[  195.596203][ T9193] netlink: 'syz.5.1127': attribute type 1 has an invalid length.
[  195.624287][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.658721][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.694684][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.721199][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.760871][ T1130] bridge_slave_1: left allmulticast mode
[  195.785515][ T1130] bridge_slave_1: left promiscuous mode
[  195.806566][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.838329][ T1130] bridge_slave_0: left allmulticast mode
[  195.850236][ T1130] bridge_slave_0: left promiscuous mode
[  195.870880][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.957085][ T1130] veth1_macvtap: left promiscuous mode
[  195.964890][ T1130] veth0_macvtap: left promiscuous mode
[  195.970560][ T1130] veth1_vlan: left promiscuous mode
[  196.342018][ T9203] loop4: detected capacity change from 0 to 40427
[  196.360345][ T9203] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7
[  196.381118][ T9203] F2FS-fs (loop4): invalid crc value
[  196.389450][ T9203] F2FS-fs (loop4): Found nat_bits in checkpoint
[  196.486529][ T9203] F2FS-fs (loop4): Start checkpoint disabled!
[  196.571985][ T9203] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  196.642243][ T9203] syz.4.1129: attempt to access beyond end of device
[  196.642243][ T9203] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.832210][   T12] kworker/u4:1: attempt to access beyond end of device
[  196.832210][   T12] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  196.848387][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  196.863332][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  197.069267][ T1130] team0 (unregistering): Port device team_slave_1 removed
[  197.156361][ T1130] team0 (unregistering): Port device team_slave_0 removed
[  197.209775][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.293556][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.655827][ T5774] Bluetooth: hci3: command tx timeout
[  197.685357][ T1130] bond0 (unregistering): Released all slaves
[  197.748951][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.756360][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.763523][ T9140] bridge_slave_1: entered allmulticast mode
[  197.771285][ T9140] bridge_slave_1: entered promiscuous mode
[  197.893033][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.968459][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.079136][ T9140] team0: Port device team_slave_0 added
[  198.134059][ T9140] team0: Port device team_slave_1 added
[  198.209049][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.235906][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.287214][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.370366][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.415628][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.473581][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.727216][ T9140] hsr_slave_0: entered promiscuous mode
[  198.769222][ T9140] hsr_slave_1: entered promiscuous mode
[  198.811100][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.829260][ T9140] Cannot create hsr debugfs directory
[  199.302199][ T9261] loop4: detected capacity change from 0 to 8192
[  199.345297][ T9261] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  199.404698][ T9261] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  199.426191][ T9261] REISERFS (device loop4): using ordered data mode
[  199.432737][ T9261] reiserfs: using flush barriers
[  199.483302][ T9140] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  199.524884][ T9261] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  199.555662][ T9140] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  199.582543][ T9261] REISERFS (device loop4): checking transaction log (loop4)
[  199.605365][ T9140] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  199.636073][ T9261] REISERFS (device loop4): Using r5 hash to sort names
[  199.656318][ T9140] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  199.680152][ T9261] REISERFS (device loop4): using 3.5.x disk format
[  199.728161][ T9261] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  199.754586][ T5772] Bluetooth: hci3: command tx timeout
[  199.952963][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.038157][ T9140] 8021q: adding VLAN 0 to HW filter on device team0
[  200.090420][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.097724][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.161945][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.169179][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.183292][ T9280] loop1: detected capacity change from 0 to 2048
[  200.340701][ T9140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.394236][ T9280] overlayfs: upper fs needs to support d_type.
[  200.448232][ T9280] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  200.469939][ T9280] overlayfs: failed to set xattr on upper
[  200.480011][ T9280] overlayfs: ...falling back to redirect_dir=nofollow.
[  200.503680][ T9280] overlayfs: ...falling back to index=off.
[  200.534141][ T9280] overlayfs: ...falling back to uuid=null.
[  200.564931][ T9287] loop4: detected capacity change from 0 to 256
[  200.730085][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  200.767759][ T5773] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  200.971825][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.130155][ T9306] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1157'.
[  201.371608][ T9320] loop4: detected capacity change from 0 to 2048
[  201.451810][ T9320] overlayfs: upper fs needs to support d_type.
[  201.495955][ T9320] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  201.511355][ T9320] overlayfs: failed to set xattr on upper
[  201.517964][ T9320] overlayfs: ...falling back to redirect_dir=nofollow.
[  201.541505][ T9320] overlayfs: ...falling back to index=off.
[  201.569472][ T9320] overlayfs: ...falling back to uuid=null.
[  201.658408][ T5772] Bluetooth: hci1: command 0x0406 tx timeout
[  201.682674][ T9140] veth0_vlan: entered promiscuous mode
[  201.713101][ T9140] veth1_vlan: entered promiscuous mode
[  201.721888][ T6394] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  201.749145][ T6394] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  201.814659][ T5774] Bluetooth: hci3: command tx timeout
[  201.881570][ T9140] veth0_macvtap: entered promiscuous mode
[  201.895650][ T9140] veth1_macvtap: entered promiscuous mode
[  201.971315][ T9333] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  201.987398][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.000410][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.010941][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.023277][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.045963][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.071845][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.083969][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.102538][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.121131][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.132212][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.150370][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.161988][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.177913][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.190419][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.299503][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.324607][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.387590][ T9140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.397054][ T9140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.414739][ T9140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.434837][ T9140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.513376][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.534246][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.641235][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.664629][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.841718][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.864734][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.963948][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.989937][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.053466][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  203.071503][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  203.079935][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  203.095577][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  203.106279][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  203.115372][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  203.176186][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.184063][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.422836][ T9341] rxe_eth0 speed is unknown, defaulting to 1000
[  203.487920][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.499198][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.515341][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.524416][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.532163][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  203.541597][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.755445][ T9358] loop6: detected capacity change from 0 to 4096
[  203.920218][ T9358] ntfs: volume version 3.1.
[  204.031786][ T9358] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  204.196049][ T9348] rxe_eth0 speed is unknown, defaulting to 1000
[  205.174914][ T5774] Bluetooth: hci0: command tx timeout
[  205.409224][ T9341] chnl_net:caif_netlink_parms(): no params data found
[  205.575085][ T5774] Bluetooth: hci1: command tx timeout
[  205.656794][   T11] IPVS: stopping backup sync thread 7605 ...
[  205.927118][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.940376][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.955559][ T9341] bridge_slave_0: entered allmulticast mode
[  205.980977][ T9341] bridge_slave_0: entered promiscuous mode
[  206.005316][ T9348] chnl_net:caif_netlink_parms(): no params data found
[  206.188184][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.196407][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.203684][ T9341] bridge_slave_1: entered allmulticast mode
[  206.220436][ T9341] bridge_slave_1: entered promiscuous mode
[  206.317725][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.351654][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.672693][ T9341] team0: Port device team_slave_0 added
[  206.713307][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.729493][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.738811][ T9348] bridge_slave_0: entered allmulticast mode
[  206.747113][ T9348] bridge_slave_0: entered promiscuous mode
[  206.758309][ T9341] team0: Port device team_slave_1 added
[  206.799154][   T11] hsr_slave_0: left promiscuous mode
[  206.809776][   T11] hsr_slave_1: left promiscuous mode
[  206.818887][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.831094][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.842728][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.851647][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.861727][   T11] bridge_slave_1: left allmulticast mode
[  206.867958][   T11] bridge_slave_1: left promiscuous mode
[  206.873965][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.884361][   T11] bridge_slave_0: left allmulticast mode
[  206.890509][   T11] bridge_slave_0: left promiscuous mode
[  206.897008][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.931437][   T11] veth1_macvtap: left promiscuous mode
[  206.937881][   T11] veth0_macvtap: left promiscuous mode
[  206.943626][   T11] veth1_vlan: left promiscuous mode
[  206.950351][   T11] veth0_vlan: left promiscuous mode
[  207.264717][ T5774] Bluetooth: hci0: command tx timeout
[  207.662988][ T5774] Bluetooth: hci1: command tx timeout
[  208.000826][   T11] team0 (unregistering): Port device team_slave_1 removed
[  208.059659][   T11] team0 (unregistering): Port device team_slave_0 removed
[  208.132520][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.216564][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.683136][   T11] bond0 (unregistering): Released all slaves
[  208.742017][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.749349][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.765091][ T9348] bridge_slave_1: entered allmulticast mode
[  208.784647][ T9348] bridge_slave_1: entered promiscuous mode
[  208.848235][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1192'.
[  208.930277][ T9348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.956647][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.963636][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.030227][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.069192][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.082618][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.112887][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.129273][ T9348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.178154][ T9448] Bluetooth: MGMT ver 1.22
[  209.298762][ T9341] hsr_slave_0: entered promiscuous mode
[  209.324477][ T9341] hsr_slave_1: entered promiscuous mode
[  209.334216][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.354679][ T5774] Bluetooth: hci0: command tx timeout
[  209.373181][ T9341] Cannot create hsr debugfs directory
[  209.410116][ T9348] team0: Port device team_slave_0 added
[  209.460992][ T9348] team0: Port device team_slave_1 added
[  209.580141][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.589960][ T2201] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  209.606848][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.618313][ T2201] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  209.632871][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.639365][ T9348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.735967][ T5774] Bluetooth: hci1: command tx timeout
[  209.753531][ T9348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.768665][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  209.773256][ T9348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.834455][ T9348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.858520][ T9467] netem: change failed
[  210.040393][   T28] audit: type=1800 audit(1792196764.681:40): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1201" name="dbroot" dev="configfs" ino=20241 res=0 errno=0
[  210.151218][ T9480] loop6: detected capacity change from 0 to 256
[  210.159622][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.172936][ T9480] FAT-fs (loop6): Directory bread(block 1285) failed
[  210.185075][ T9480] FAT-fs (loop6): Directory bread(block 1286) failed
[  210.205004][ T9480] FAT-fs (loop6): Directory bread(block 1287) failed
[  210.215240][ T9480] FAT-fs (loop6): Directory bread(block 1288) failed
[  210.267101][ T9480] FAT-fs (loop6): Directory bread(block 1285) failed
[  210.274257][ T9480] FAT-fs (loop6): Directory bread(block 1286) failed
[  210.283836][ T9348] hsr_slave_0: entered promiscuous mode
[  210.293771][ T9480] FAT-fs (loop6): Directory bread(block 1287) failed
[  210.301100][ T9348] hsr_slave_1: entered promiscuous mode
[  210.308296][ T9480] FAT-fs (loop6): Directory bread(block 1288) failed
[  210.315439][ T9348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.323062][ T9348] Cannot create hsr debugfs directory
[  210.330201][ T9480] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  210.346792][ T9480] FAT-fs (loop6): Directory bread(block 1285) failed
[  210.386968][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.573108][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.727047][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.907022][ T9341] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  210.947943][ T9341] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  210.966061][ T9341] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  211.064786][ T9341] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  211.397653][ T9348] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  211.424101][ T5774] Bluetooth: hci0: command tx timeout
[  211.453464][ T9516] trusted_key: encrypted_key: key trusted:syz not found
[  211.644084][ T9348] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  211.754676][ T9348] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  211.758286][ T9348] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  211.816022][ T5774] Bluetooth: hci1: command tx timeout
[  212.911461][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.972427][ T9348] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.057361][ T9550] loop6: detected capacity change from 0 to 1024
[  213.141979][ T9348] 8021q: adding VLAN 0 to HW filter on device team0
[  213.152009][ T9550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.172658][ T9341] 8021q: adding VLAN 0 to HW filter on device team0
[  213.292694][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.299919][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.330831][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.338069][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.350371][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.351694][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.357542][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.481081][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.488315][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.302330][ T9348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.386016][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.435145][   T11] hsr_slave_0: left promiscuous mode
[  214.448563][   T11] hsr_slave_1: left promiscuous mode
[  214.509323][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.517044][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.535624][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.560289][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.579891][ T9559] loop6: detected capacity change from 0 to 40427
[  214.595505][   T11] bridge_slave_1: left allmulticast mode
[  214.601193][   T11] bridge_slave_1: left promiscuous mode
[  214.617049][ T9559] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  214.642017][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.650255][ T9559] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  214.664881][ T9559] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x7ffff
[  214.677107][   T11] bridge_slave_0: left allmulticast mode
[  214.688901][   T11] bridge_slave_0: left promiscuous mode
[  214.705743][ T9559] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8
[  214.721426][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.754229][ T9559] F2FS-fs (loop6): invalid crc value
[  214.786550][   T11] veth1_macvtap: left promiscuous mode
[  214.792726][   T11] veth0_macvtap: left promiscuous mode
[  214.802450][   T11] veth1_vlan: left promiscuous mode
[  214.824818][ T9559] F2FS-fs (loop6): Found nat_bits in checkpoint
[  214.998628][ T9559] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  215.013171][ T9559] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  215.112917][ T9559] syz.6.1227: attempt to access beyond end of device
[  215.112917][ T9559] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  215.353413][ T1130] kworker/u4:5: attempt to access beyond end of device
[  215.353413][ T1130] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  215.374404][ T1130] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  216.074206][   T11] team0 (unregistering): Port device team_slave_1 removed
[  216.122593][   T11] team0 (unregistering): Port device team_slave_0 removed
[  216.178611][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.229694][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.573337][   T11] bond0 (unregistering): Released all slaves
[  216.914136][ T9615] netlink: 'syz.6.1237': attribute type 30 has an invalid length.
[  217.293414][ T9341] veth0_vlan: entered promiscuous mode
[  217.408908][ T9341] veth1_vlan: entered promiscuous mode
[  217.478981][ T9348] veth0_vlan: entered promiscuous mode
[  217.511792][ T9341] veth0_macvtap: entered promiscuous mode
[  217.525806][ T9341] veth1_macvtap: entered promiscuous mode
[  217.534451][ T9348] veth1_vlan: entered promiscuous mode
[  217.561013][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.573799][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.585448][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.598829][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.610415][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.640140][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.651014][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.671956][ T9341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.683599][ T9341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.701723][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.724370][ T9341] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.733503][ T9341] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.744112][ T9341] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.757422][ T9341] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.836684][ T9348] veth0_macvtap: entered promiscuous mode
[  217.874368][ T9348] veth1_macvtap: entered promiscuous mode
[  217.922559][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.934353][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.952519][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.963923][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.975420][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.985900][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.997492][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.008562][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.020322][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.061552][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.072581][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.083866][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.097545][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.107624][ T9348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.118793][ T9348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.130072][ T9348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.155211][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.164171][ T9348] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.173211][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.181697][ T9348] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.191411][ T9348] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.200266][ T9348] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.335972][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.364628][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.423170][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.434277][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.464225][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1167'.
[  218.494802][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1167'.
[  218.525753][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1167'.
[  218.876164][ T9668] loop6: detected capacity change from 0 to 1024
[  218.971335][ T9668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.223567][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.639299][ T9698] loop8: detected capacity change from 0 to 2048
[  219.758813][ T9698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.783857][ T9707] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  219.967258][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.176568][    T8] IPVS: starting estimator thread 0...
[  220.285294][ T9723] IPVS: using max 19 ests per chain, 45600 per kthread
[  220.828380][ T5842] kernel write not supported for file /sg0 (pid: 5842 comm: kworker/1:5)
[  220.995893][ T9719] loop6: detected capacity change from 0 to 32768
[  221.009804][ T9752] loop8: detected capacity change from 0 to 164
[  221.088160][ T9752] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  221.127461][ T9719] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  221.210650][ T9752] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  221.241234][ T9752] Symlink component flag not implemented
[  221.267759][ T9752] Symlink component flag not implemented (7)
[  221.289682][ T9752] Symlink component flag not implemented (7)
[  221.299575][ T9719] XFS (loop6): Ending clean mount
[  221.523214][ T9776] loop8: detected capacity change from 0 to 16
[  221.525551][ T9140] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  221.566475][ T9776] erofs: (device loop8): mounted with root inode @ nid 36.
[  222.023213][ T9792] binder: 9791:9792 ioctl c0306201 200000000080 returned -22
[  223.030412][ T9840] netlink: 'syz.6.1304': attribute type 1 has an invalid length.
[  223.056356][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1304'.
[  223.388645][ T9855] loop8: detected capacity change from 0 to 256
[  223.429322][ T9855] exfat: Deprecated parameter 'utf8'
[  223.474571][ T9855] exfat: Deprecated parameter 'utf8'
[  223.496389][ T9855] exfat: Deprecated parameter 'namecase'
[  223.502146][ T9855] exfat: Deprecated parameter 'namecase'
[  223.581482][ T9855] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  224.228500][ T9884] loop6: detected capacity change from 0 to 64
[  224.286957][   T28] audit: type=1800 audit(1792196778.931:41): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1318" name="file1" dev="loop6" ino=21 res=0 errno=0
[  224.307312][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.548354][ T9894] loop6: detected capacity change from 0 to 1024
[  224.564095][ T9890] loop8: detected capacity change from 0 to 4096
[  224.622347][ T9890] ntfs3: loop8: ino=3, Correct links count -> 2.
[  224.630614][ T9894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.817175][ T9890] ntfs3: loop8: failed to convert "0080" to cp874
[  224.839639][ T9890] ntfs3: loop8: failed to convert name for inode 1e.
[  224.842792][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.853688][ T9890] ntfs3: loop8: ino=1f, mi_enum_attr
[  224.864248][ T9890] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  224.929003][ T9890] ntfs3: loop8: ino=1f, mi_enum_attr
[  226.242047][ T9968] vcan0: MTU too low for tipc bearer
[  226.254760][ T9968] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  226.332576][ T9972] loop6: detected capacity change from 0 to 512
[  226.368554][ T9972] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  226.377194][ T9972] System zones: 0-2, 18-18, 34-35
[  226.396091][ T9972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.409638][ T9972] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.469983][ T9972] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  226.508782][ T9981] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  226.539559][ T9981] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  226.657016][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.000218][T10008] loop8: detected capacity change from 0 to 512
[  227.075626][T10008] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  227.093417][T10005] loop6: detected capacity change from 0 to 4096
[  227.108814][T10008] EXT4-fs (loop8): Invalid default hash set in the superblock
[  227.180920][ T6765] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  227.269450][T10005] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  227.389645][T10005] ntfs3: loop6: Failed to load $Extend (-22).
[  227.424605][T10005] ntfs3: loop6: Failed to initialize $Extend.
[  227.833102][ T9993] loop7: detected capacity change from 0 to 32768
[  227.910301][ T9993] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.182098][ T9993] XFS (loop7): Ending clean mount
[  228.194886][ T9993] XFS (loop7): Quotacheck needed: Please wait.
[  228.266346][ T9993] XFS (loop7): Quotacheck: Done.
[  228.493785][ T9341] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.616135][T10067] netlink: 'syz.5.1374': attribute type 10 has an invalid length.
[  228.625239][T10067] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1374'.
[  229.025379][T10084] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  229.968028][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1394'.
[  229.989819][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1394'.
[  230.551362][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1405'.
[  230.636212][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1407'.
[  230.664812][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1407'.
[  230.867697][T10172] loop8: detected capacity change from 0 to 1024
[  230.958316][T10172] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8003c01c, mo2=0002]
[  230.987708][T10172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  231.246003][   T28] audit: type=1326 audit(1792196785.881:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  231.246266][T10172] EXT4-fs: Ignoring sb option on remount
[  231.334957][T10172] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  231.341644][   T28] audit: type=1326 audit(1792196785.881:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1509f5a9ac code=0x7ffc0000
[  231.390297][T10172] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring
[  231.408457][   T28] audit: type=1326 audit(1792196785.881:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1509f5aa0e code=0x7ffc0000
[  231.415902][T10172] System zones: 
[  231.458040][   T28] audit: type=1326 audit(1792196785.881:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  231.470204][T10172] 0-1, 3-12
[  231.531964][T10172] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  231.546323][   T28] audit: type=1326 audit(1792196785.881:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1509f9e1eb code=0x7ffc0000
[  231.636667][   T28] audit: type=1326 audit(1792196785.881:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  231.723062][T10208] netlink: 'syz.7.1422': attribute type 2 has an invalid length.
[  231.734167][   T28] audit: type=1326 audit(1792196785.881:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  231.792348][   T28] audit: type=1326 audit(1792196785.881:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  231.817838][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.938720][   T28] audit: type=1326 audit(1792196785.921:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  232.016111][   T28] audit: type=1326 audit(1792196785.921:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.7.1416" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1509f9e559 code=0x7ffc0000
[  232.027398][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1424'.
[  232.094649][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1424'.
[  232.133717][T10219] nbd: socks must be embedded in a SOCK_ITEM attr
[  232.278262][T10229] loop6: detected capacity change from 0 to 2048
[  232.366091][T10229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.646952][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.727383][T10252] loop7: detected capacity change from 0 to 128
[  232.871689][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'.
[  233.112938][T10269] loop6: detected capacity change from 0 to 256
[  233.132514][T10264] loop8: detected capacity change from 0 to 512
[  233.143378][T10269] exfat: Deprecated parameter 'utf8'
[  233.157988][T10269] exfat: Deprecated parameter 'namecase'
[  233.226388][T10264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.247968][T10269] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  233.302725][T10264] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  233.363719][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.215953][T10314] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID
[  234.556671][T10333] overlayfs: workdir and upperdir must be separate subtrees
[  234.851721][T10346] loop8: detected capacity change from 0 to 2048
[  234.905669][T10346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.016215][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.142157][T10358] loop8: detected capacity change from 0 to 512
[  235.156656][T10358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  235.183873][T10358] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  235.218591][T10358] EXT4-fs (loop8): orphan cleanup on readonly fs
[  235.259876][T10358] EXT4-fs warning (device loop8): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  235.295784][T10358] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  235.320048][T10358] EXT4-fs error (device loop8): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  235.389007][T10358] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1472: corrupted inode contents
[  235.435082][T10358] EXT4-fs error (device loop8): ext4_dirty_inode:6166: inode #12: comm syz.8.1472: mark_inode_dirty error
[  235.470202][T10358] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1472: corrupted inode contents
[  235.484072][T10358] EXT4-fs error (device loop8): __ext4_ext_dirty:208: inode #12: comm syz.8.1472: mark_inode_dirty error
[  235.502023][T10358] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1472: corrupted inode contents
[  235.535089][T10358] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  235.544012][T10358] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1472: corrupted inode contents
[  235.580665][T10358] EXT4-fs error (device loop8): ext4_truncate:4314: inode #12: comm syz.8.1472: mark_inode_dirty error
[  235.602353][T10358] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  235.612430][T10358] EXT4-fs (loop8): 1 truncate cleaned up
[  235.637411][T10358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  235.816225][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.915275][T10386] loop6: detected capacity change from 0 to 512
[  235.950328][T10386] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1481: corrupted in-inode xattr: invalid ea_ino
[  235.973336][T10386] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1481: couldn't read orphan inode 15 (err -117)
[  236.006193][T10386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.200178][T10386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1481: bg 0: block 376: padding at end of block bitmap is not set
[  236.264626][T10386] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  236.345560][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.388035][T10402] loop7: detected capacity change from 0 to 1024
[  236.693970][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1490'.
[  236.963428][T10426] loop7: detected capacity change from 0 to 164
[  237.025599][T10426] rock: corrupted directory entry. extent=1309 out of volume (nzones=41)
[  237.069851][T10426] rock: corrupted directory entry. extent=1309 out of volume (nzones=41)
[  237.244445][T10437] loop6: detected capacity change from 0 to 512
[  237.257527][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  237.269265][T10437] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  237.279392][T10437] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1499: corrupted in-inode xattr: e_value size too large
[  237.304263][T10437] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1499: couldn't read orphan inode 15 (err -117)
[  237.324772][T10437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.476334][T10437] EXT4-fs: Ignoring sb option on remount
[  237.482241][T10437] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  237.507057][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.528751][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.557714][   T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.576607][   T27] usb 6-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00
[  237.586642][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.597978][T10437] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring
[  237.617831][T10437] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  237.651093][   T27] usb 6-1: config 0 descriptor??
[  237.727448][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.102141][T10467] loop6: detected capacity change from 0 to 4096
[  238.105165][   T27] wacom 0003:056A:00D2.0012: unbalanced collection at end of report description
[  238.120483][T10467] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  238.138038][   T27] wacom 0003:056A:00D2.0012: parse failed
[  238.151823][   T27] wacom: probe of 0003:056A:00D2.0012 failed with error -22
[  238.157535][T10467] ntfs3: loop6: ino=19, mi_enum_attr
[  238.192243][T10467] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  238.222343][T10467] ntfs3: loop6: ino=1a, mi_enum_attr
[  238.232246][T10467] ntfs3: loop6: ino=1a, mi_enum_attr
[  238.254610][T10467] ntfs3: loop6: Failed to initialize $Extend/$Reparse.
[  238.398404][   T23] usb 6-1: USB disconnect, device number 4
[  238.555037][T10480] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1511'.
[  238.597103][T10480] openvswitch: netlink: Tunnel attr 255 out of range max 16
[  239.509409][T10535] loop6: detected capacity change from 0 to 128
[  239.550672][T10535] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  239.616436][T10535] hpfs: filesystem error: improperly stopped
[  239.653461][T10535] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  239.683449][T10535] hpfs: You really don't want any checks? You are crazy...
[  239.704311][T10535] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  239.734692][T10535] hpfs: code page support is disabled
[  239.762404][T10535] hpfs: hpfs_map_4sectors(): unaligned read
[  239.791084][T10535] hpfs: hpfs_map_4sectors(): unaligned read
[  239.807496][T10535] hpfs: filesystem error: unable to find root dir
[  239.843755][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1535'.
[  239.862340][T10551] loop7: detected capacity change from 0 to 256
[  239.893851][T10535] hpfs: hpfs_map_4sectors(): unaligned read
[  239.959425][T10551] FAT-fs (loop7): Directory bread(block 64) failed
[  239.985499][T10551] FAT-fs (loop7): Directory bread(block 65) failed
[  239.992182][T10551] FAT-fs (loop7): Directory bread(block 66) failed
[  240.059888][T10551] FAT-fs (loop7): Directory bread(block 67) failed
[  240.084758][T10551] FAT-fs (loop7): Directory bread(block 68) failed
[  240.095599][T10551] FAT-fs (loop7): Directory bread(block 69) failed
[  240.120549][T10551] FAT-fs (loop7): Directory bread(block 70) failed
[  240.145117][T10551] FAT-fs (loop7): Directory bread(block 71) failed
[  240.174801][T10551] FAT-fs (loop7): Directory bread(block 72) failed
[  240.187701][T10551] FAT-fs (loop7): Directory bread(block 73) failed
[  240.542689][T10582] netlink: 'syz.5.1548': attribute type 8 has an invalid length.
[  240.560235][T10580] tipc: Started in network mode
[  240.575067][T10580] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  240.581848][T10584] mmap: syz.6.1549 (10584) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  240.584012][T10580] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  240.844329][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1552'.
[  241.032727][T10606] ip_tables: iptables: counters copy to user failed while replacing table
[  241.214812][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1560'.
[  241.457855][T10622] Bluetooth: hci0: unsupported parameter 5135
[  241.460133][T10620] loop7: detected capacity change from 0 to 2048
[  241.463972][T10622] Bluetooth: hci0: unsupported parameter 8192
[  241.525284][T10620] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.550572][T10622] Bluetooth: hci0: unsupported parameter 5135
[  241.564811][T10622] Bluetooth: hci0: unsupported parameter 8192
[  242.101057][T10615] loop6: detected capacity change from 0 to 32768
[  242.250891][T10615] find_entry called with index = 0
[  242.263833][T10615] find_entry called with index = 0
[  242.281968][T10615] read_mapping_page failed!
[  242.295365][T10615] ERROR: (device loop6): txCommit: 
[  242.295365][T10615] 
[  242.682191][T10670] loop8: detected capacity change from 0 to 512
[  242.726268][T10670] FAT-fs (loop8): Unrecognized mount option "tots" or missing value
[  243.005451][T10684] netlink: 732 bytes leftover after parsing attributes in process `syz.5.1581'.
[  243.034827][T10685] netlink: 'syz.7.1582': attribute type 5 has an invalid length.
[  243.252093][T10696] loop8: detected capacity change from 0 to 256
[  243.309827][T10702] sctp: [Deprecated]: syz.5.1588 (pid 10702) Use of int in maxseg socket option.
[  243.309827][T10702] Use struct sctp_assoc_value instead
[  243.340624][T10698] loop7: detected capacity change from 0 to 256
[  243.343158][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  243.343173][   T28] audit: type=1800 audit(1792196797.981:61): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1586" name="file1" dev="loop8" ino=1048761 res=0 errno=0
[  243.922707][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1599'.
[  244.053568][T10732] tipc: MTU too low for tipc bearer
[  244.653826][T10751] loop8: detected capacity change from 0 to 512
[  244.695879][T10751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.751589][T10751] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.792923][T10751] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters
[  244.824845][T10758] netlink: 'syz.7.1612': attribute type 49 has an invalid length.
[  244.879397][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.704784][T10793] loop8: detected capacity change from 0 to 512
[  245.728192][T10793] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  245.778889][T10793] EXT4-fs (loop8): 1 truncate cleaned up
[  245.789330][T10793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.880371][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.493863][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'.
[  246.516036][T10832] batadv0: entered promiscuous mode
[  246.522122][T10832] macsec2: entered promiscuous mode
[  246.532004][T10832] macsec2: entered allmulticast mode
[  246.539338][T10832] batadv0: entered allmulticast mode
[  246.552437][T10832] batadv0: left allmulticast mode
[  246.561843][T10832] batadv0: left promiscuous mode
[  246.645031][ T5842] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  246.847252][ T5842] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.873139][ T5842] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.893147][ T5842] usb 9-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00
[  246.910387][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  246.918592][ T5842] usb 9-1: Product: syz
[  246.922790][ T5842] usb 9-1: Manufacturer: syz
[  247.386613][ T5842] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:046D:C299.0013/input/input24
[  247.487547][ T5842] logitech 0003:046D:C299.0013: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.8-1/input0
[  247.526666][ T5842] logitech 0003:046D:C299.0013: Force feedback support for Logitech Gaming Wheels
[  247.753699][ T5864] usb 9-1: USB disconnect, device number 2
[  247.855642][T10867] fido_id[10867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  248.151845][T10878] loop7: detected capacity change from 0 to 256
[  248.198486][T10878] exfat: Deprecated parameter 'utf8'
[  248.203873][T10878] exfat: Deprecated parameter 'namecase'
[  248.251554][T10878] exfat: Deprecated parameter 'namecase'
[  248.267719][T10878] exfat: Deprecated parameter 'utf8'
[  248.341219][T10878] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  248.392795][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1644'.
[  249.356126][T10919] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88�re'
[  249.384744][T10919] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  249.631991][T10903] loop6: detected capacity change from 0 to 32768
[  249.680543][T10903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1651 (10903)
[  249.755444][T10903] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.782437][T10937] loop8: detected capacity change from 0 to 512
[  249.788986][T10903] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  249.799142][T10903] BTRFS info (device loop6): using free space tree
[  249.823031][T10937] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  249.937494][T10937] EXT4-fs (loop8): 1 truncate cleaned up
[  249.955471][T10937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.979259][   T28] audit: type=1326 audit(1792196804.621:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10949 comm="syz.7.1665" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1509f9e559 code=0x0
[  250.115838][T10903] BTRFS info (device loop6): enabling ssd optimizations
[  250.151864][T10903] BTRFS info (device loop6): auto enabling async discard
[  250.268262][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.363332][ T9140] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.696420][T10980] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  250.909114][T10985] ip_tables: iptables: counters copy to user failed while replacing table
[  251.002735][T10990] loop7: detected capacity change from 0 to 64
[  251.149804][T10995] MINIX-fs: deleted inode referenced: 6
[  252.308064][T11017] loop8: detected capacity change from 0 to 32768
[  252.358866][T11017] 
[  252.358866][T11017]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  252.358866][T11017] 
[  252.446380][T11017] JFS: metapage_get_blocks failed
[  252.461437][T11017] ERROR: (device loop8): release_metapage: metapage_write_one() failed
[  252.461437][T11017] 
[  252.505821][T11017] ERROR: (device loop8): remounting filesystem as read-only
[  252.513607][T11017] ERROR: (device loop8): diWrite: ixpxd invalid
[  252.513607][T11017] 
[  252.533310][T11049] 
[  252.533310][T11049]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  252.533310][T11049] 
[  252.572159][T11017] ERROR: (device loop8): txCommit: 
[  252.572159][T11017] 
[  252.607959][T11049] 
[  252.607959][T11049]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  252.607959][T11049] 
[  252.762366][ T9348] 
[  252.762366][ T9348]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  252.762366][ T9348] 
[  252.795580][ T9348] 
[  252.795580][ T9348]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  252.795580][ T9348] 
[  252.990115][T11061] netlink: 'syz.5.1696': attribute type 2 has an invalid length.
[  253.488152][T11055] loop6: detected capacity change from 0 to 32768
[  253.501917][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1700'.
[  253.556911][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1700'.
[  253.575135][T11078] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[  253.757974][T11088] loop6: detected capacity change from 0 to 512
[  253.804964][T11088] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  253.877894][T11088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  253.910315][T11088] System zones: 1-12
[  253.955625][T11088] EXT4-fs (loop6): 1 truncate cleaned up
[  253.962144][T11088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.007879][T11093] IPv6: addrconf: prefix option has invalid lifetime
[  254.195920][ T9140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.641009][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1729'.
[  255.674030][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1729'.
[  255.707217][T11169] netlink: 'syz.6.1729': attribute type 18 has an invalid length.
[  255.732354][T11177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1732'.
[  255.903730][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.903849][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  255.904785][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  255.906376][ T1291] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  256.141038][T11188] netlink: 'syz.8.1736': attribute type 2 has an invalid length.
[  256.371150][   T28] audit: type=1800 audit(1792196811.011:63): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1739" name="dbroot" dev="configfs" ino=25266 res=0 errno=0
[  256.593169][T11207] loop8: detected capacity change from 0 to 1024
[  256.751709][T11182] loop6: detected capacity change from 0 to 32768
[  256.762740][T11212] loop7: detected capacity change from 0 to 256
[  256.917969][T11182] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  256.922631][T11220] sp0: Synchronizing with TNC
[  257.140170][T11182] XFS (loop6): Ending clean mount
[  257.160514][T11228] loop7: detected capacity change from 0 to 4096
[  257.214631][T11228] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  257.339861][T11228] ntfs3: loop7: ino=19, mi_enum_attr
[  257.356574][ T9140] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.565285][T11237] syz.5.1748 (11237) used obsolete PPPIOCDETACH ioctl
[  257.679513][T11239] loop8: detected capacity change from 0 to 4096
[  257.725766][T11239] EXT4-fs: Ignoring removed nobh option
[  257.731598][T11239] EXT4-fs: Ignoring removed bh option
[  257.863320][T11239] EXT4-fs (loop8): Test dummy encryption mode enabled
[  257.931377][T11239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.051856][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.215252][ T5772] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  258.222251][ T5774] Bluetooth: hci0: command 0x0c13 tx timeout
[  258.371096][T11266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1759'.
[  258.704199][T11280] usb usb9: usbfs: process 11280 (syz.8.1764) did not claim interface 0 before use
[  258.998506][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'.
[  259.597319][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1776'.
[  259.688292][T11314] loop7: detected capacity change from 0 to 4096
[  259.796719][T11314] ntfs: volume version 3.1.
[  260.020651][T11314] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  260.068049][T11314] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  260.134606][T11314] ntfs: (device loop7): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  260.185048][T11314] ntfs: (device loop7): parse_options(): Option iocharset is deprecated. Please use option nls=<charsetname> in the future.
[  260.242141][T11314] ntfs: (device loop7): parse_options(): Unrecognized mount option discard.
[  260.264590][T11314] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  260.324620][T11314] ntfs: (device loop7): parse_options(): Unrecognized mount option allow_utime.
[  260.344686][T11314] ntfs: (device loop7): parse_options(): Unrecognized mount option allow_utime.
[  260.377103][T11314] ntfs: (device loop7): parse_options(): Unrecognized mount option .
[  260.394202][T11340] program syz.6.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.636453][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1785'.
[  260.653398][T11348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1785'.
[  261.102986][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1793'.
[  261.232316][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1795'.
[  261.257927][T11375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1796'.
[  261.287676][T11375] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1796'.
[  261.607440][T11356] loop8: detected capacity change from 0 to 32768
[  261.672063][T11356] JBD2: Ignoring recovery information on journal
[  261.726773][T11356] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  261.771865][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  261.771880][   T28] audit: type=1326 audit(1792196816.411:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  261.847226][   T28] audit: type=1326 audit(1792196816.411:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  261.897399][T11398] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1803'.
[  261.928016][   T28] audit: type=1326 audit(1792196816.461:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  261.979094][   T28] audit: type=1326 audit(1792196816.461:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.006854][ T9348] ocfs2: Unmounting device (7,8) on (node local)
[  262.089344][   T28] audit: type=1326 audit(1792196816.461:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.186521][   T28] audit: type=1326 audit(1792196816.461:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.274150][   T28] audit: type=1326 audit(1792196816.461:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.349961][T11416] Bluetooth: MGMT ver 1.22
[  262.364709][   T28] audit: type=1326 audit(1792196816.461:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.400703][T11419] loop7: detected capacity change from 0 to 512
[  262.459903][   T28] audit: type=1326 audit(1792196816.461:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.545708][T11419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.609684][   T28] audit: type=1326 audit(1792196816.461:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11392 comm="syz.6.1802" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd96d39e559 code=0x7ffc0000
[  262.678180][T11419] EXT4-fs error (device loop7): __ext4_find_entry:1698: inode #12: comm syz.7.1811: checksumming directory block 0
[  262.790627][ T9341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.859514][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1815'.
[  263.452316][T11430] loop6: detected capacity change from 0 to 32768
[  263.545314][T11430] JBD2: Ignoring recovery information on journal
[  263.709482][T11430] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  263.949948][T11430] syz.6.1813 (11430) used greatest stack depth: 18808 bytes left
[  264.023008][T11461] loop8: detected capacity change from 0 to 32768
[  264.030392][ T9140] ocfs2: Unmounting device (7,6) on (node local)
[  264.086297][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  264.305036][    T8] usb 6-1: Using ep0 maxpacket: 16
[  264.326563][    T8] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  264.354655][    T8] usb 6-1: config 1 has no interface number 0
[  264.360820][    T8] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  264.388846][T11486] loop8: detected capacity change from 0 to 512
[  264.395202][    T8] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  264.395236][    T8] usb 6-1: config 1 interface 105 has no altsetting 0
[  264.397710][    T8] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  264.454653][    T8] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  264.480707][T11486] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  264.493322][    T8] usb 6-1: Product: syz
[  264.503038][T11486] EXT4-fs (loop8): 1 truncate cleaned up
[  264.507077][    T8] usb 6-1: Manufacturer: syz
[  264.513319][    T8] usb 6-1: SerialNumber: syz
[  264.519847][T11486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.550100][T11473] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  264.568367][T11473] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  264.668503][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.905255][T11499] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  265.041998][T11473] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  265.051905][T11473] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  265.263177][    T8] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  265.285335][    T8] aqc111: probe of 6-1:1.105 failed with error -71
[  265.301736][    T8] usb 6-1: USB disconnect, device number 5
[  266.243179][T11551] loop8: detected capacity change from 0 to 256
[  266.924842][T11573] loop6: detected capacity change from 0 to 4096
[  266.959040][T11573] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  267.168474][T11573] ntfs3: loop6: ino=19, mi_enum_attr
[  267.209890][T11587] loop8: detected capacity change from 0 to 512
[  267.260660][T11587] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  267.310513][T11573] ntfs3: loop6: failed to convert "c46c" to koi8-u
[  267.318415][T11573] ntfs3: loop6: ino=20, mi_enum_attr
[  267.321256][T11587] EXT4-fs (loop8): orphan cleanup on readonly fs
[  267.431455][T11587] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4059: comm syz.8.1854: Allocating blocks 41-42 which overlap fs metadata
[  267.545209][T11587] __quota_error: 5 callbacks suppressed
[  267.545227][T11587] Quota error (device loop8): write_blk: dquota write failed
[  267.609014][T11587] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  267.634625][T11587] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.1854: Failed to acquire dquot type 0
[  267.684978][T11587] EXT4-fs error (device loop8): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  267.739689][T11587] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1854: corrupted inode contents
[  267.795068][T11587] EXT4-fs error (device loop8): ext4_dirty_inode:6166: inode #12: comm syz.8.1854: mark_inode_dirty error
[  267.834676][T11587] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1854: corrupted inode contents
[  267.871364][T11587] EXT4-fs error (device loop8): __ext4_ext_dirty:208: inode #12: comm syz.8.1854: mark_inode_dirty error
[  267.902146][T11576] loop7: detected capacity change from 0 to 32768
[  267.935039][T11587] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1854: corrupted inode contents
[  267.951735][T11576] 
[  267.951735][T11576]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  267.951735][T11576] 
[  267.963464][T11587] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[  267.994997][T11587] EXT4-fs error (device loop8): ext4_do_update_inode:5268: inode #12: comm syz.8.1854: corrupted inode contents
[  268.032593][T11576] ERROR: (device loop7): diWrite: ixpxd invalid
[  268.032593][T11576] 
[  268.046695][T11587] EXT4-fs error (device loop8): ext4_truncate:4314: inode #12: comm syz.8.1854: mark_inode_dirty error
[  268.076570][T11576] ERROR: (device loop7): txCommit: 
[  268.076570][T11576] 
[  268.085023][T11587] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[  268.115935][T11576] ERROR: (device loop7): dtSearch: stack overrun!
[  268.115935][T11576] 
[  268.125833][T11587] EXT4-fs (loop8): 1 truncate cleaned up
[  268.137746][T11587] EXT4-fs (loop8): pa ffff88805c4be1d0: logic 1, phys. 41, len 23
[  268.146286][T11587] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5393: group 0, free 22, pa_free 23
[  268.164818][T11576] btstack dump:
[  268.168352][T11576] bn = 0, index = 0
[  268.185588][T11576] bn = 0, index = 0
[  268.200905][T11576] bn = 0, index = 0
[  268.215012][T11576] bn = 0, index = 0
[  268.231388][T11587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  268.254665][T11576] bn = 0, index = 0
[  268.259089][T11576] bn = 0, index = 0
[  268.268564][T11576] bn = 0, index = 0
[  268.280517][T11576] bn = 0, index = 0
[  268.339506][T11576] jfs_lookup: dtSearch returned -5
[  268.440324][T11587] EXT4-fs error (device loop8): __ext4_remount:6756: comm syz.8.1854: Abort forced by user
[  268.486750][ T9341] 
[  268.486750][ T9341]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.486750][ T9341] 
[  268.499077][T11587] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  268.550528][ T9341] 
[  268.550528][ T9341]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.550528][ T9341] 
[  268.577982][ T9348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.813475][T11636] netlink: 134700 bytes leftover after parsing attributes in process `syz.5.1870'.
[  268.841563][T11636] openvswitch: netlink: Message has 5 unknown bytes.
[  268.882209][   T28] audit: type=1326 audit(1792196823.521:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.8.1871" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefadb9e559 code=0x0
[  268.941973][ T5772] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  268.952142][ T5772] CPU: 0 PID: 5772 Comm: kworker/u5:2 Not tainted syzkaller #0
[  268.959738][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  268.969826][ T5772] Workqueue: hci1 hci_rx_work
[  268.974565][ T5772] Call Trace:
[  268.977877][ T5772]  <TASK>
[  268.980836][ T5772]  dump_stack_lvl+0x18c/0x250
[  268.985572][ T5772]  ? show_regs_print_info+0x20/0x20
[  268.990808][ T5772]  ? load_image+0x420/0x420
[  268.995408][ T5772]  sysfs_create_dir_ns+0x26e/0x2a0
[  269.000544][ T5772]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.005582][ T5772]  ? sysfs_warn_dup+0xa0/0xa0
[  269.010267][ T5772]  ? do_raw_spin_unlock+0x121/0x230
[  269.015485][ T5772]  kobject_add_internal+0x617/0xc90
[  269.020733][ T5772]  kobject_add+0x164/0x240
[  269.025167][ T5772]  ? kobject_init+0x1d0/0x1d0
[  269.029859][ T5772]  ? get_device_parent+0x366/0x390
[  269.034978][ T5772]  device_add+0x3fa/0xc40
[  269.039323][ T5772]  hci_conn_add_sysfs+0xd5/0x1e0
[  269.044265][ T5772]  le_conn_complete_evt+0xe9a/0x1480
[  269.049563][ T5772]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  269.055813][ T5772]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  269.061456][ T5772]  ? mutex_unlock+0x10/0x10
[  269.065966][ T5772]  ? skb_pull_data+0xf0/0x1f0
[  269.070650][ T5772]  hci_le_enh_conn_complete_evt+0x189/0x460
[  269.076568][ T5772]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  269.082995][ T5772]  ? hci_remote_host_features_evt+0x150/0x150
[  269.089064][ T5772]  hci_event_packet+0x7b4/0x1280
[  269.094005][ T5772]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.099035][ T5772]  ? lock_chain_count+0x20/0x20
[  269.103887][ T5772]  ? bis_list+0x290/0x290
[  269.108232][ T5772]  ? kcov_remote_start+0x513/0x810
[  269.113352][ T5772]  ? lockdep_hardirqs_on+0x98/0x150
[  269.118560][ T5772]  ? hci_send_to_monitor+0xd7/0x4f0
[  269.123762][ T5772]  hci_rx_work+0x43a/0xd60
[  269.128218][ T5772]  ? process_scheduled_works+0x975/0x1600
[  269.133971][ T5772]  process_scheduled_works+0xa60/0x1600
[  269.139557][ T5772]  ? worker_attach_to_pool+0x370/0x370
[  269.145047][ T5772]  ? assign_work+0x3cc/0x5d0
[  269.149659][ T5772]  worker_thread+0xa5e/0xfe0
[  269.154279][ T5772]  kthread+0x2fa/0x390
[  269.158356][ T5772]  ? pr_cont_work+0x550/0x550
[  269.163069][ T5772]  ? kthread_blkcg+0xd0/0xd0
[  269.167660][ T5772]  ret_from_fork+0x48/0x80
[  269.172088][ T5772]  ? kthread_blkcg+0xd0/0xd0
[  269.176745][ T5772]  ret_from_fork_asm+0x11/0x20
[  269.181550][ T5772]  </TASK>
[  269.187038][ T5772] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  269.201131][ T5772] Bluetooth: hci1: failed to register connection device
[  269.210061][ T5772] 
[  269.212499][ T5772] ======================================================
[  269.219524][ T5772] WARNING: possible circular locking dependency detected
[  269.226560][ T5772] syzkaller #0 Not tainted
[  269.230971][ T5772] ------------------------------------------------------
[  269.237986][ T5772] kworker/u5:2/5772 is trying to acquire lock:
[  269.244134][ T5772] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550
[  269.253357][ T5772] 
[  269.253357][ T5772] but task is already holding lock:
[  269.260723][ T5772] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0
[  269.270042][ T5772] 
[  269.270042][ T5772] which lock already depends on the new lock.
[  269.270042][ T5772] 
[  269.280437][ T5772] 
[  269.280437][ T5772] the existing dependency chain (in reverse order) is:
[  269.289446][ T5772] 
[  269.289446][ T5772] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[  269.297181][ T5772]        __mutex_lock+0x135/0xc80
[  269.302208][ T5772]        hci_remote_features_evt+0x535/0x900
[  269.308184][ T5772]        hci_event_packet+0x807/0x1280
[  269.313637][ T5772]        hci_rx_work+0x43a/0xd60
[  269.318583][ T5772]        process_scheduled_works+0xa60/0x1600
[  269.324650][ T5772]        worker_thread+0xa5e/0xfe0
[  269.329757][ T5772]        kthread+0x2fa/0x390
[  269.334373][ T5772]        ret_from_fork+0x48/0x80
[  269.339325][ T5772]        ret_from_fork_asm+0x11/0x20
[  269.344629][ T5772] 
[  269.344629][ T5772] -> #1 (&hdev->lock){+.+.}-{3:3}:
[  269.351944][ T5772]        __mutex_lock+0x135/0xc80
[  269.356976][ T5772]        l2cap_chan_connect+0xfc/0xe30
[  269.362435][ T5772]        l2cap_sock_connect+0x586/0x760
[  269.367981][ T5772]        kernel_connect+0x142/0x1c0
[  269.373186][ T5772]        rfcomm_dlc_open+0xa1f/0xec0
[  269.378467][ T5772]        rfcomm_sock_connect+0x2ed/0x600
[  269.384090][ T5772]        __sys_connect+0x3da/0x470
[  269.389192][ T5772]        __x64_sys_connect+0x7a/0x90
[  269.394473][ T5772]        do_syscall_64+0x55/0xb0
[  269.399408][ T5772]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.405827][ T5772] 
[  269.405827][ T5772] -> #0 (rfcomm_mutex){+.+.}-{3:3}:
[  269.413206][ T5772]        __lock_acquire+0x3a07/0x7eb0
[  269.418600][ T5772]        lock_acquire+0x19e/0x420
[  269.423623][ T5772]        __mutex_lock+0x135/0xc80
[  269.428644][ T5772]        rfcomm_security_cfm+0x41/0x550
[  269.434185][ T5772]        hci_encrypt_cfm+0x363/0x4d0
[  269.439466][ T5772]        hci_encrypt_change_evt+0x5c3/0xe30
[  269.445349][ T5772]        hci_event_packet+0x807/0x1280
[  269.450796][ T5772]        hci_rx_work+0x43a/0xd60
[  269.455747][ T5772]        process_scheduled_works+0xa60/0x1600
[  269.461810][ T5772]        worker_thread+0xa5e/0xfe0
[  269.466919][ T5772]        kthread+0x2fa/0x390
[  269.471520][ T5772]        ret_from_fork+0x48/0x80
[  269.476480][ T5772]        ret_from_fork_asm+0x11/0x20
[  269.481759][ T5772] 
[  269.481759][ T5772] other info that might help us debug this:
[  269.481759][ T5772] 
[  269.491976][ T5772] Chain exists of:
[  269.491976][ T5772]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[  269.491976][ T5772] 
[  269.504484][ T5772]  Possible unsafe locking scenario:
[  269.504484][ T5772] 
[  269.512181][ T5772]        CPU0                    CPU1
[  269.517541][ T5772]        ----                    ----
[  269.522907][ T5772]   lock(hci_cb_list_lock);
[  269.527409][ T5772]                                lock(&hdev->lock);
[  269.533989][ T5772]                                lock(hci_cb_list_lock);
[  269.541002][ T5772]   lock(rfcomm_mutex);
[  269.545148][ T5772] 
[  269.545148][ T5772]  *** DEADLOCK ***
[  269.545148][ T5772] 
[  269.553280][ T5772] 4 locks held by kworker/u5:2/5772:
[  269.558558][ T5772]  #0: ffff8881472ce538 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  269.569535][ T5772]  #1: ffffc90004717d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  269.581543][ T5772]  #2: ffff88805dcf80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30
[  269.591375][ T5772]  #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0
[  269.601119][ T5772] 
[  269.601119][ T5772] stack backtrace:
[  269.606995][ T5772] CPU: 0 PID: 5772 Comm: kworker/u5:2 Not tainted syzkaller #0
[  269.614530][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  269.624586][ T5772] Workqueue: hci1 hci_rx_work
[  269.629285][ T5772] Call Trace:
[  269.632588][ T5772]  <TASK>
[  269.635518][ T5772]  dump_stack_lvl+0x18c/0x250
[  269.640189][ T5772]  ? load_image+0x420/0x420
[  269.644691][ T5772]  ? show_regs_print_info+0x20/0x20
[  269.649887][ T5772]  ? print_circular_bug+0x12b/0x1a0
[  269.655090][ T5772]  check_noncircular+0x2fc/0x400
[  269.660035][ T5772]  ? print_deadlock_bug+0x5d0/0x5d0
[  269.665290][ T5772]  ? lockdep_lock+0xf5/0x230
[  269.669874][ T5772]  ? _find_first_zero_bit+0xd6/0x100
[  269.675156][ T5772]  __lock_acquire+0x3a07/0x7eb0
[  269.680097][ T5772]  ? verify_lock_unused+0x140/0x140
[  269.685293][ T5772]  ? l2cap_security_cfm+0x1277/0x1300
[  269.690657][ T5772]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.695676][ T5772]  lock_acquire+0x19e/0x420
[  269.700173][ T5772]  ? rfcomm_security_cfm+0x41/0x550
[  269.705368][ T5772]  ? __might_sleep+0xe0/0xe0
[  269.709955][ T5772]  ? read_lock_is_recursive+0x20/0x20
[  269.715409][ T5772]  ? __mutex_trylock_common+0x160/0x270
[  269.720953][ T5772]  __mutex_lock+0x135/0xc80
[  269.725450][ T5772]  ? rfcomm_security_cfm+0x41/0x550
[  269.730687][ T5772]  ? trace_contention_end+0x39/0xe0
[  269.735877][ T5772]  ? __mutex_lock+0x30d/0xc80
[  269.740554][ T5772]  ? rfcomm_security_cfm+0x41/0x550
[  269.745748][ T5772]  ? mutex_lock_nested+0x20/0x20
[  269.750683][ T5772]  ? hci_encrypt_cfm+0x2fe/0x4d0
[  269.755615][ T5772]  ? mutex_lock_nested+0x20/0x20
[  269.760543][ T5772]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.765571][ T5772]  rfcomm_security_cfm+0x41/0x550
[  269.770593][ T5772]  ? hci_conn_hash_lookup_handle+0x20/0x240
[  269.776482][ T5772]  ? rfcomm_send_msc+0x360/0x360
[  269.781420][ T5772]  hci_encrypt_cfm+0x363/0x4d0
[  269.786220][ T5772]  hci_encrypt_change_evt+0x5c3/0xe30
[  269.791587][ T5772]  ? __skb_clone+0x446/0x6c0
[  269.796204][ T5772]  ? hci_remote_name_evt+0x610/0x610
[  269.801493][ T5772]  ? skb_pull_data+0xf0/0x1f0
[  269.806220][ T5772]  ? hci_remote_name_evt+0x610/0x610
[  269.811509][ T5772]  hci_event_packet+0x807/0x1280
[  269.816527][ T5772]  ? __lock_acquire+0x7eb0/0x7eb0
[  269.821552][ T5772]  ? lock_chain_count+0x20/0x20
[  269.826406][ T5772]  ? bis_list+0x290/0x290
[  269.830759][ T5772]  ? kcov_remote_start+0x513/0x810
[  269.835874][ T5772]  ? lockdep_hardirqs_on+0x98/0x150
[  269.841076][ T5772]  ? hci_send_to_monitor+0xd7/0x4f0
[  269.846278][ T5772]  hci_rx_work+0x43a/0xd60
[  269.850784][ T5772]  ? process_scheduled_works+0x975/0x1600
[  269.856501][ T5772]  process_scheduled_works+0xa60/0x1600
[  269.862057][ T5772]  ? worker_attach_to_pool+0x370/0x370
[  269.867513][ T5772]  ? assign_work+0x3cc/0x5d0
[  269.872102][ T5772]  worker_thread+0xa5e/0xfe0
[  269.876696][ T5772]  kthread+0x2fa/0x390
[  269.880757][ T5772]  ? pr_cont_work+0x550/0x550
[  269.885427][ T5772]  ? kthread_blkcg+0xd0/0xd0
[  269.890006][ T5772]  ret_from_fork+0x48/0x80
[  269.894416][ T5772]  ? kthread_blkcg+0xd0/0xd0
[  269.899001][ T5772]  ret_from_fork_asm+0x11/0x20
[  269.903765][ T5772]  </TASK>
[  271.984920][ T5774] Bluetooth: hci1: command 0x2016 tx timeout
[  274.055199][ T5772] Bluetooth: hci1: command 0x2016 tx timeout