last executing test programs:

5m55.646815564s ago: executing program 0 (id=3478):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x140c, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040041}, 0xd0)

5m55.434451886s ago: executing program 0 (id=3481):
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94)

5m55.236730248s ago: executing program 0 (id=3485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x4}, 0x38)

5m55.055985188s ago: executing program 0 (id=3488):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

5m54.536284968s ago: executing program 0 (id=3496):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x4, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xffffffffffffff4e, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x200000000000000, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x10000, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x0, 0x20000000000, 0x5e, 0x9, 0x100000000000000, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x200, 0xfffffffffffffffe, 0x0, 0x4000000000000001, 0x3, 0x6c65, 0x4, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x751, 0x0, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x0, 0x0, 0x0, 0x10008001, 0x3, 0x8, 0x0, 0x0, 0x0, 0xf32, 0x11, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x40008, 0x0, 0x1, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6]})

5m53.970597262s ago: executing program 0 (id=3505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf25e4ffffff04000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)

5m53.65795228s ago: executing program 32 (id=3505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf25e4ffffff04000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)

2m30.267185102s ago: executing program 3 (id=6412):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001140)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xd}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0xfffffffa, 0x1, 0x0, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x6, 0x8, 0xb, 0x1, 0x7, 0x101}}, {0x4}}]}]}, 0x68}}, 0x8000)

2m30.120462631s ago: executing program 3 (id=6416):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m29.570396873s ago: executing program 3 (id=6425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50)

2m29.407815932s ago: executing program 3 (id=6427):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x2, 0x1, 0x2, "64c5df933425daa7838d5ea3b8c184d43ba63d6591efe577a83f0e08e4ecd0d6", 0x30324c4a})

2m29.2797312s ago: executing program 3 (id=6429):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m28.517821504s ago: executing program 2 (id=6434):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x200900)

2m28.317891776s ago: executing program 3 (id=6436):
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000680)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'cp852'}}, {@gid}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61)

2m28.24981285s ago: executing program 2 (id=6439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c790d25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

2m28.088797109s ago: executing program 2 (id=6440):
r0 = socket(0x2, 0x805, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="86", 0x1}], 0x1, &(0x7f00000013c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x100c, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x0, 0x4, 0x2, 0x10001, 0xfffffff9, 0x5, 0xb340}}], 0x50, 0x45d37b1926d9ae5c}, 0x40000)

2m27.814270725s ago: executing program 2 (id=6443):
r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x9d)

2m27.73558831s ago: executing program 2 (id=6445):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m26.770400436s ago: executing program 2 (id=6459):
r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$damon_contexts(r0, 0x0, 0xfc86)

2m12.830339658s ago: executing program 33 (id=6436):
syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000680)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'cp852'}}, {@gid}, {@gid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61)

2m11.684599536s ago: executing program 34 (id=6459):
r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$damon_contexts(r0, 0x0, 0xfc86)

1m31.96619238s ago: executing program 6 (id=7071):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0)

1m31.909519353s ago: executing program 6 (id=7072):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)

1m31.758160222s ago: executing program 6 (id=7073):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x800200)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x4, 0x1, 0x292, 0x5, "64d8f93fa8e2f785e4fcf44aa680c2265ec87552f2140a395aad18036dd85f2d"})

1m31.470224329s ago: executing program 6 (id=7077):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0)

1m31.181286346s ago: executing program 6 (id=7082):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x5, 0x4ba, &(0x7f0000000940)="$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")
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)

1m30.819708857s ago: executing program 6 (id=7086):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@inline_data}, {@compress_cache}, {@discard_unit_section}, {@noflush_merge}, {@nobarrier}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@six_active_logs}, {@memory_low}, {@heap}, {@discard_unit_segment}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$eJzs3E1vG1UXAODjpGn69faNEAt2HalCSqTaivNRwS5AKz5EqqjAghU4tmO5tT1R7DghKxYsEQv+CQKJFUt+AwvW7BALEDskkGcm0FAQlXBskj6PND5zr6/PnGtVlc5M5ACeWgvJzz+W4npcjojZiLgWkZ2XiiOzkYfnIuJGRMw8cpSK+d8nLkbElYi4Pkqe5ywVb316a3hz/Yc3fvrqm/kLVz/78tvp7RqYtucjorubnx9085i28vigmK8N21nsrg2LmL/RfViM0zweNLezDAe143W1LK628vXp7n5/FHc6tfootto72fxuL79gf9g6zpN94EFtLxs3mttZbPfTLLaO8roOj/L/2476gzxPo8j3QZY+BoPjmM83D5v5fnYfZrHeGxTzed600TwcxWERi8tFPe00sjq2/803/d/2Zru3f5gMm3v9dtpL1ivVFyrV2+XqXtpoDppr5Vq3cXstWWx1RsvKg2atu9FK01anWamn3aVksVWvl6vVZPFOc7td6yXVamW1slxeXyrObiWv3nsn6TSSxVF8ud3bH7Q7/WQn3UvyTywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KseixspLFleWVlXJ1ubxSXXp8T/Pndf8fFUX/w/5hYkrTLgDg7NH/A9Nwev3/3v2I0+//Q/8/Fmeq/33C/t/+YUL0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT63v5j5/LTtZyMdXi/n/FVPPFONSRMxExK9/YTYunsg5W+SZ+5v1c3+q4etSZBlG15gvjisRsVEcv/z/tL8FAAAAOL+++PDGJ3m3nr8sTLsgJim/aTNz7f0x5StFxNzC92PKNjN6eXZMybJ/3xficEzZshtYl8aUbD675XZhTNmezOyJcOmRUMrDzETLAQAAJuJkJzDZLgQAAIBJ+njaBTAdpTh+lHn8LDj7y/s/HghePjECAAAAzqDStAsAAAAATl3W//v9PwAAADjf8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnKWBuI4AP9b3r7gVyTGvVdxB8fwCC5dGg7gJTiAC7yCF+AMuPMIBgydEUG6MOm0jeZ5kjJMW37MELqYmWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSN+a3frLxzef+uYcT/2U6Q0AAADQ5dDs1u2bZao/y+df5FOvcr2KiDoiusbus3i8yZzlnOb3/Z+v72/+aMPXiDbh/B3zfDyNiLf5+PFy6F8BAAAA/l/7zXaVRuvpZTl1gxhTmrSpn78rlFdFRLP8XiitPue9LhTW/r8f4kOhtHYCa1EoLE25PZRK+yvt436ZtVtcFVUq6s6PXRpZrO8AAMCIZjfFuKMQAAAAxvR+6gYwjSp+LWVelgLnqcjLe09uagAAAMA/qJq6AQAAAMDg2vH/SPv/nez/BwAAANNI+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwpEOzW+8321XfnOPp3mO+1nHpTv+eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIB/Z2Zna6pijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnstM24PprZpt8PvDmfXcY5n3fBEK+814WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnsaZ8VhcRKn1blb969tFP3th/rCjZ07K0Ur4qTNpB8PLzY/JMvdJQIAAMDhkdX1fUTczXfXij5dLOv/vL6mqPm/fXoS1/X8w3V/3de1f9F++fne83sDLU7GKW56bnM0PP5oKr3/b5bz7Zm/vKJXPvny3UsWC5FG+t72c+O8fJ7J1zdvvtMvwyNtZAsA/BPH6r4K6r+Hin7QZWIAHBq9RuFd1//ZYrc5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRhvB1P1nESESu9aVy4ff/axn79jZ07K3U7ff36Tnw5vWdxizwizm2Ohsdbnc18u3zl6oX10Wh4qf3gpYjoavS3qulf+GCGiyM6eT6C/yhIqx/2vOTzeAQd/lICAOBAyqtW1PV389214lyyFPHHdw/W/6824pix/r/34elbzbGa9f+gtRnOv9Wti5+uXr5y9fXNi+vnh+eHH79xYvDm4OSZU6fOrJbvSla9MQEAAODf6VetWf+nS4+u/x9txDFj/f/ZN4MvmmNl6v99TRf9us4EAADgcHv25d9/S/Y5n/T78fn61talweS49/nE5NhBqn/bkao16/9sqeusAAAAgDaMt5MH1v/PNuKYcf3/qe9f+LF5zywiFqr1/2Mbn4zOtjedudbGvxN3PUcAAAC6tVC15vp/Xu7/T/e2PKQR8dork7j6GsCZ6v/s3a9+aI7V3P9/sr0pzqV0efI8yn45orfcdUYAAAAcZE9UrSj2f8131z766ej7ffv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//uCM2tw==")
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

1m27.985869352s ago: executing program 4 (id=7120):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x40002)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0})

1m27.84541921s ago: executing program 4 (id=7122):
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x100002, 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff)

1m26.912811234s ago: executing program 4 (id=7136):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r0, 0x400000000000003a, 0x1, 0x0, 0x0)

1m26.694383997s ago: executing program 4 (id=7139):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xa, {0x2, 0x3, 0x4, 0x9}})

1m26.593516653s ago: executing program 4 (id=7142):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @mcast1, 0x7fff}, 0x1c)

1m26.428302003s ago: executing program 4 (id=7146):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@acl}, {@norecovery}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@discard}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0)

1m15.764509224s ago: executing program 35 (id=7086):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@inline_data}, {@compress_cache}, {@discard_unit_section}, {@noflush_merge}, {@nobarrier}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@six_active_logs}, {@memory_low}, {@heap}, {@discard_unit_segment}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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")
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

1m11.332716193s ago: executing program 36 (id=7146):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)={[{@acl}, {@norecovery}, {@bsdgroups}, {@noload}, {@delalloc}, {@resuid}, {@discard}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffff}}, {@errors_remount}]}, 0xfa, 0x477, &(0x7f0000000dc0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0)

2.362948212s ago: executing program 1 (id=8332):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setregid(0xffffffffffffffff, 0xee00)

2.133541855s ago: executing program 1 (id=8338):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$lock(r0, 0x24, &(0x7f00000003c0)={0x0, 0x0, 0x7fffffffffffffff, 0x1ffffffff})

1.797952234s ago: executing program 1 (id=8345):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94)

1.577940118s ago: executing program 7 (id=8348):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04"], 0x20}, 0x4000)

1.381597569s ago: executing program 7 (id=8352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

1.221049188s ago: executing program 8 (id=8353):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

1.204308259s ago: executing program 7 (id=8354):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, @raw_data=[0x7, 0x400008, 0x3010, 0x1, 0x8, 0x7f, 0xff, 0x6, 0x0, 0x101, 0x5, 0xd60, 0x80000004, 0xbb, 0x1, 0xeb]})

1.01503444s ago: executing program 7 (id=8355):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000f80)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid}, {@undelete}, {@uid_forget}, {@volume}, {@dmode={'dmode', 0x3d, 0x8}}, {@adinicb}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@unhide}, {@noadinicb}, {@adinicb}]}, 0xfd, 0xc3b, &(0x7f0000000340)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f0000000140))

882.252348ms ago: executing program 8 (id=8356):
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0)

685.150349ms ago: executing program 8 (id=8358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

684.905579ms ago: executing program 5 (id=8359):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)

601.135124ms ago: executing program 7 (id=8360):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40}, 0x23f58e5b666a3f02)

528.833759ms ago: executing program 5 (id=8362):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x942, 0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="83656622d3872f627903c2e7fa386a967c6a6d2d3c641f3671bb60c6214f765c51f51a112ee4dbf628a7dc999c68f5dc076a0100e190039da8ace81198136af6", 0x40}], 0x1)

515.676609ms ago: executing program 1 (id=8370):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500000800002c00128009000100626f6e64000000001c00028005000100040000000600190070040000060018"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40044)

471.365072ms ago: executing program 5 (id=8363):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x3, 0x0, 0x3c)

385.578097ms ago: executing program 8 (id=8364):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

385.294847ms ago: executing program 5 (id=8365):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x8892}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

340.557719ms ago: executing program 7 (id=8366):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x181200)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/78, 0x4e}, {0x0}], 0x2)

191.838148ms ago: executing program 8 (id=8367):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000002c0)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x8, 0x0, 0x200, 0x2})

191.704708ms ago: executing program 1 (id=8368):
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r0, &(0x7f0000000140)={0x8, 0x2d, 0x200, 0xa, 0x2000006, 0x2c}, 0x48)

142.910151ms ago: executing program 5 (id=8369):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800003fffffffffd})

60.407996ms ago: executing program 8 (id=8371):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000)

2.517199ms ago: executing program 5 (id=8372):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="d8000000100081046808000000000000001d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a0001400600f2b017501de5877430170d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d77ccbec4c2ee5a7ce0000000000000000943f32edc4dea1adb8c7f778df2226d797083a8ea1fad63f9e9309cbac917d6f01c8721b5d06feee2cf40d8daaf70c5544553d700d92d0d711bb52a20fdce3375b23d676979ba1a3a081a18243f1be721ebd0191bbcb64c5242b6ef298be49b148d001", 0xd9}], 0x1}, 0x0)

0s ago: executing program 1 (id=8380):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x87cb}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810)

kernel console output (not intermixed with test programs):

umber: syz
[  621.072311][ T5925] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  621.092620][ T5928] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  621.513307][T10756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  621.578497][T21205] loop4: detected capacity change from 0 to 1024
[  621.610429][ T5925] usb 7-1: USB disconnect, device number 2
[  622.028219][T21222] xt_connbytes: Forcing CT accounting to be enabled
[  622.065321][T21222] xt_bpf: check failed: parse error
[  622.210749][T21228] loop1: detected capacity change from 0 to 1024
[  622.237489][ T5928] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  622.261268][ T5928] ath9k_htc: Failed to initialize the device
[  622.293550][ T5925] usb 7-1: ath9k_htc: USB layer deinitialized
[  622.401552][ T1144] hfsplus: b-tree write err: -5, ino 4
[  622.515963][T21237] loop4: detected capacity change from 0 to 256
[  622.581482][T21241] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  622.635625][T21237] FAT-fs (loop4): Directory bread(block 64) failed
[  622.660540][T21237] FAT-fs (loop4): Directory bread(block 65) failed
[  622.668348][T21237] FAT-fs (loop4): Directory bread(block 66) failed
[  622.710417][T21237] FAT-fs (loop4): Directory bread(block 67) failed
[  622.717118][T21237] FAT-fs (loop4): Directory bread(block 68) failed
[  622.740315][T21237] FAT-fs (loop4): Directory bread(block 69) failed
[  622.746997][T21237] FAT-fs (loop4): Directory bread(block 70) failed
[  622.791631][T21237] FAT-fs (loop4): Directory bread(block 71) failed
[  622.798342][T21237] FAT-fs (loop4): Directory bread(block 72) failed
[  622.798921][   T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  622.822683][T21247] netlink: 'syz.6.6703': attribute type 5 has an invalid length.
[  622.835416][T21237] FAT-fs (loop4): Directory bread(block 73) failed
[  623.037680][T21255] loop5: detected capacity change from 0 to 128
[  623.102230][T21255] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  623.241924][T21255] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  623.375186][T20867] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  623.501283][ T5800] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  623.569111][T21271] loop5: detected capacity change from 0 to 2048
[  623.658813][T21271] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  623.695877][T21275] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  623.713604][T20880] udevd[20880]: incorrect nilfs2 checksum on /dev/loop5
[  623.719969][T21271] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  623.735046][ T5800] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  623.741386][T21271] Remounting filesystem read-only
[  623.777909][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.807402][ T5800] usb 7-1: config 0 descriptor??
[  624.042833][ T5800] usb 7-1: Cannot read MAC address
[  624.048190][ T5800] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71
[  624.104736][T21289] loop4: detected capacity change from 0 to 64
[  624.111065][ T5800] usb 7-1: USB disconnect, device number 3
[  624.717649][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  624.724489][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  624.928447][T21316] loop6: detected capacity change from 0 to 1024
[  625.003167][T21320] loop5: detected capacity change from 0 to 256
[  625.039586][T21320] exfat: Deprecated parameter 'utf8'
[  625.068164][T21320] exfat: Deprecated parameter 'namecase'
[  625.075716][T21316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.169656][T21320] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  625.227551][T21327] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  625.329751][T20923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.594294][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6747'.
[  626.361837][T21335] loop5: detected capacity change from 0 to 40427
[  626.378244][T21335] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  626.410829][T21335] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  626.422635][T21367] QAT: failed to copy from user cfg_data.
[  626.435374][T21335] F2FS-fs (loop5): invalid crc value
[  626.469359][T21335] F2FS-fs (loop5): Found nat_bits in checkpoint
[  626.632750][T21335] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  626.639883][T21335] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  626.740740][ T5800] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  626.829356][T21379] loop1: detected capacity change from 0 to 4096
[  626.947366][T21379] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  626.966538][ T5800] usb 5-1: config 0 has an invalid interface number: 110 but max is 0
[  626.990725][ T5800] usb 5-1: config 0 has no interface number 0
[  627.000300][T21379] ntfs3: loop1: Failed to load $Extend (-22).
[  627.006426][T21379] ntfs3: loop1: Failed to initialize $Extend.
[  627.020402][ T5800] usb 5-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  627.050383][ T5800] usb 5-1: config 0 interface 110 has no altsetting 0
[  627.074846][ T5800] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  627.099426][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.137284][ T5800] usb 5-1: Product: syz
[  627.146661][ T5800] usb 5-1: Manufacturer: syz
[  627.161225][ T5800] usb 5-1: SerialNumber: syz
[  627.178435][ T5800] usb 5-1: config 0 descriptor??
[  627.195452][T21372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  627.283957][   T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.421228][T21372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  627.443236][ T5800] cdc_subset: probe of 5-1:0.110 failed with error -22
[  627.579178][T21395] loop5: detected capacity change from 0 to 4096
[  627.645812][ T5800] usb 5-1: USB disconnect, device number 12
[  627.799719][T21401] loop6: detected capacity change from 0 to 256
[  627.850795][T21401] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  628.160426][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  628.354327][ T5925] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  628.372573][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.410333][ T5925] usb 6-1: Product: syz
[  628.414561][ T5925] usb 6-1: Manufacturer: syz
[  628.419174][ T5925] usb 6-1: SerialNumber: syz
[  628.524767][T21425] loop1: detected capacity change from 0 to 512
[  628.597429][T21430] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615)
[  628.598722][T21425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.622004][   T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  628.650653][T21428] loop4: detected capacity change from 0 to 512
[  628.710055][T21428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.6789: missing EA_INODE flag
[  628.774548][T21428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.6789: error while reading EA inode 11 err=-117
[  628.794017][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.797164][T21428] EXT4-fs (loop4): 1 orphan inode deleted
[  628.812995][T21428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.861382][T21436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  628.868703][T21436] IPv6: NLM_F_CREATE should be set when creating new route
[  628.876048][T21436] IPv6: NLM_F_CREATE should be set when creating new route
[  628.932104][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  628.967192][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  628.983600][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  628.998537][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.019443][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  629.070820][ T5925] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  629.112717][ T5925] lan78xx: probe of 6-1:1.0 failed with error -71
[  629.160726][ T5925] usb 6-1: USB disconnect, device number 3
[  629.808295][T21469] loop5: detected capacity change from 0 to 736
[  630.010286][T21469] rock: directory entry would overflow storage
[  630.016511][T21469] rock: sig=0x3b10, size=4, remaining=3
[  630.291382][T21477] netlink: 'syz.5.6811': attribute type 2 has an invalid length.
[  630.408940][T21479] loop6: detected capacity change from 0 to 2048
[  630.472918][T21479] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  630.507803][T21479] UDF-fs: Scanning with blocksize 512 failed
[  630.535068][T21479] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  630.550379][T21479] UDF-fs: Scanning with blocksize 1024 failed
[  630.616198][T21479] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=515, location=515
[  630.647218][T21479] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  630.690612][T21479] UDF-fs: Scanning with blocksize 2048 failed
[  630.700326][T21463] loop1: detected capacity change from 0 to 32768
[  630.731678][T21479] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=259, location=259
[  630.743383][T21463] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.6804 (21463)
[  630.770747][T21479] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=515, location=515
[  630.820274][T21479] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  630.827972][T21479] UDF-fs: Scanning with blocksize 4096 failed
[  630.839191][T21463] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  630.865984][T21479] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  630.874786][T21463] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  630.911595][T21463] BTRFS info (device loop1): force zlib compression, level 3
[  630.919047][T21463] BTRFS info (device loop1): force clearing of disk cache
[  630.960345][T21463] BTRFS info (device loop1): setting nodatasum
[  630.966600][T21463] BTRFS info (device loop1): allowing degraded mounts
[  631.021551][T21463] BTRFS info (device loop1): enabling disk space caching
[  631.028660][T21463] BTRFS info (device loop1): disk space caching is enabled
[  631.248429][T21506] loop4: detected capacity change from 0 to 512
[  631.277758][T21463] BTRFS info (device loop1): auto enabling async discard
[  631.340274][T21506] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  631.365592][T21463] BTRFS info (device loop1): rebuilding free space tree
[  631.400548][T21506] EXT4-fs (loop4): orphan cleanup on readonly fs
[  631.414875][T21506] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.6822: Block bitmap for bg 0 marked uninitialized
[  631.452969][T21506] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  631.506845][T21463] BTRFS info (device loop1): disabling free space tree
[  631.522482][T21506] EXT4-fs (loop4): 1 orphan inode deleted
[  631.529590][T21506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  631.534839][T21463] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  631.601535][T21506] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  631.630431][T21463] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  631.641741][T21506] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  631.780107][T21524] loop6: detected capacity change from 0 to 8
[  631.813697][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.984971][ T5774] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  632.195679][   T28] audit: type=1326 audit(2000000185.540:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21533 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5696d9aeb9 code=0x7ffc0000
[  632.260862][   T28] audit: type=1326 audit(2000000185.540:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21533 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5696d9aeb9 code=0x7ffc0000
[  632.338799][   T28] audit: type=1326 audit(2000000185.540:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21533 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f5696d9aeb9 code=0x7ffc0000
[  632.385767][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  632.410318][   T28] audit: type=1326 audit(2000000185.540:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21533 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5696d9aeb9 code=0x7ffc0000
[  632.475244][   T28] audit: type=1326 audit(2000000185.540:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21533 comm="syz.4.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5696d9aeb9 code=0x7ffc0000
[  632.617275][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6829'.
[  632.630589][ T5925] usb 7-1: Using ep0 maxpacket: 16
[  632.652307][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6829'.
[  632.678196][ T5925] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  632.693800][ T5925] usb 7-1: config 0 has no interface number 0
[  632.712933][ T5925] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  632.730281][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.740825][ T5925] usb 7-1: Product: syz
[  632.745042][ T5925] usb 7-1: Manufacturer: syz
[  632.790532][ T5925] usb 7-1: SerialNumber: syz
[  632.802641][ T5925] usb 7-1: config 0 descriptor??
[  633.012417][ T5925] usb 7-1: selecting invalid altsetting 1
[  633.020833][ T5925] speedtch 7-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  633.029362][ T5925] speedtch 7-1:0.1: usbatm_usb_probe: bind failed: -22!
[  633.038034][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  633.060313][ T5925] speedtch: probe of 7-1:0.1 failed with error -22
[  633.090900][ T5925] usb 7-1: USB disconnect, device number 4
[  633.327199][T21538] loop5: detected capacity change from 0 to 32768
[  633.362668][T21538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.6833 (21538)
[  633.407211][T21563] loop1: detected capacity change from 0 to 2048
[  633.432074][T21538] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  633.454543][T21563] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  633.477878][T21538] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  633.523457][T21568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  633.535669][T21538] BTRFS info (device loop5): allowing degraded mounts
[  633.577532][T21538] BTRFS info (device loop5): metadata ratio 4
[  633.588875][T21569] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  633.595892][T21538] BTRFS info (device loop5): turning on sync discard
[  633.637931][T21538] BTRFS info (device loop5): turning off discard
[  633.664832][T21538] BTRFS info (device loop5): turning on sync discard
[  633.687046][T21538] BTRFS info (device loop5): disabling tree log
[  633.724377][T21538] BTRFS info (device loop5): using free space tree
[  633.751345][   T28] audit: type=1326 audit(2000000187.100:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21570 comm="syz.6.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138299aeb9 code=0x7ffc0000
[  633.840564][   T28] audit: type=1326 audit(2000000187.130:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21570 comm="syz.6.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138299aeb9 code=0x7ffc0000
[  633.881092][   T28] audit: type=1326 audit(2000000187.140:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21570 comm="syz.6.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f138299aeb9 code=0x7ffc0000
[  634.042502][T21538] BTRFS info (device loop5): enabling ssd optimizations
[  634.055155][   T28] audit: type=1326 audit(2000000187.140:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21570 comm="syz.6.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138299aeb9 code=0x7ffc0000
[  634.079674][T21597] loop1: detected capacity change from 0 to 16
[  634.112142][T21597] erofs: (device loop1): mounted with root inode @ nid 36.
[  634.191219][   T28] audit: type=1326 audit(2000000187.140:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21570 comm="syz.6.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138299aeb9 code=0x7ffc0000
[  634.292921][T20867] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  634.311097][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  634.497010][T21606] loop1: detected capacity change from 0 to 512
[  634.635085][T21606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.719412][T21606] ext4 filesystem being mounted at /1821/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  634.859077][T21606] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.6853: Failed to acquire dquot type 0
[  635.038370][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.716385][T21643] loop1: detected capacity change from 0 to 2048
[  635.783177][T21643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.936455][T21616] loop6: detected capacity change from 0 to 40427
[  635.998862][T21616] F2FS-fs (loop6): heap/no_heap options were deprecated
[  636.043571][T21616] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x5
[  636.110301][T21616] F2FS-fs (loop6): invalid crc value
[  636.196705][T21616] F2FS-fs (loop6): Found nat_bits in checkpoint
[  636.298942][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6870'.
[  636.329402][T21663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6870'.
[  636.377190][T21616] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  636.639928][T20923] syz-executor: attempt to access beyond end of device
[  636.639928][T20923] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  636.671150][T20923] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  636.691246][T21673] loop4: detected capacity change from 0 to 4096
[  636.936334][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6878'.
[  637.480176][ T5925] IPVS: starting estimator thread 0...
[  637.580556][T21705] IPVS: using max 24 ests per chain, 57600 per kthread
[  638.141302][T21727] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6894'.
[  638.180352][   T27] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  638.249459][T21733] netlink: 'syz.1.6897': attribute type 2 has an invalid length.
[  638.270532][T21733] netlink: 723 bytes leftover after parsing attributes in process `syz.1.6897'.
[  638.420947][   T27] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  638.434530][T21739] netlink: 'syz.4.6900': attribute type 2 has an invalid length.
[  638.438080][   T27] usb 6-1: config 1 has no interface number 0
[  638.448824][   T27] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  638.459963][   T27] usb 6-1: config 1 interface 105 has no altsetting 0
[  638.467042][T21739] netlink: 'syz.4.6900': attribute type 1 has an invalid length.
[  638.469969][   T27] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  638.486713][ T5755] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  638.490422][T21739] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6900'.
[  638.496144][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.512303][   T27] usb 6-1: Product: syz
[  638.516522][   T27] usb 6-1: Manufacturer: syz
[  638.521600][   T27] usb 6-1: SerialNumber: syz
[  638.670408][ T5755] usb 7-1: Using ep0 maxpacket: 8
[  638.683091][ T5755] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  638.702661][ T5755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.723571][ T5755] usb 7-1: config 0 has no interface number 0
[  638.740349][ T5755] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  638.759840][   T27] aqc111: probe of 6-1:1.105 failed with error -22
[  638.778545][ T5755] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  638.799181][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.819935][ T5755] usb 7-1: config 0 interface 52 has no altsetting 0
[  638.838491][ T5755] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  638.866830][ T5755] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  638.871602][T21751] ieee802154 phy0 wpan0: encryption failed: -22
[  638.891109][ T5755] usb 7-1: Manufacturer: syz
[  638.910165][ T5755] usb 7-1: config 0 descriptor??
[  638.930086][ T5755] hub 7-1:0.52: bad descriptor, ignoring hub
[  638.940346][ T5755] hub: probe of 7-1:0.52 failed with error -5
[  638.970149][ T5903] usb 6-1: USB disconnect, device number 4
[  639.003383][T21755] loop4: detected capacity change from 0 to 47
[  639.109064][T21757] netlink: 'syz.1.6909': attribute type 3 has an invalid length.
[  639.117762][T21757] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6909'.
[  639.178426][ T5755] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input37
[  639.303156][T21759] loop4: detected capacity change from 0 to 4096
[  639.332002][T21759] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  639.441886][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  639.452891][T21759] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  639.493059][ T5755] usb 7-1: USB disconnect, device number 5
[  639.521161][T21759] ntfs3: loop4: failed to convert "c46c" to macinuit
[  640.184819][T21763] loop1: detected capacity change from 0 to 32768
[  640.236687][T21763] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  640.303473][T21763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  640.331407][T21763] (syz.1.6912,21763,0):ocfs2_read_blocks:239 ERROR: status = -12
[  640.348486][T21763] (syz.1.6912,21763,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  640.664161][ T5774] ocfs2: Unmounting device (7,1) on (node local)
[  641.091400][T21814] loop5: detected capacity change from 0 to 64
[  641.200396][T21814] Trying to free block not in datazone
[  641.204053][T21816] loop1: detected capacity change from 0 to 1024
[  641.205887][T21814] Trying to free block not in datazone
[  641.206007][T21814] Trying to free block not in datazone
[  641.242108][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'.
[  641.258994][T21814] Trying to free block not in datazone
[  641.266320][T21814] Trying to free block not in datazone
[  641.272386][T21814] minix_free_block (loop5:6): bit already cleared
[  641.280083][T21814] Trying to free block not in datazone
[  641.329798][T21816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.451184][T21816] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #11: comm syz.1.6936: directory missing '..'
[  641.541341][T21816] EXT4-fs (loop1): Remounting filesystem read-only
[  641.585190][T21827] loop5: detected capacity change from 0 to 64
[  641.653548][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.907713][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6962'.
[  643.164956][T21884] binder: 21882:21884 ioctl c018620c 200000000380 returned -1
[  643.260336][ T5800] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  643.470975][ T5800] usb 2-1: Using ep0 maxpacket: 16
[  643.478354][T21896] loop6: detected capacity change from 0 to 16
[  643.482028][ T5800] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  643.516157][ T5800] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  643.518613][T21896] erofs: (device loop6): mounted with root inode @ nid 36.
[  643.549372][ T5800] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  643.572464][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.612888][ T5800] usb 2-1: Product: syz
[  643.617204][ T5800] usb 2-1: Manufacturer: syz
[  643.637516][ T5800] usb 2-1: SerialNumber: syz
[  643.671798][T21898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6975'.
[  643.811965][T21900] openvswitch: netlink: EtherType 0 is less than min 600
[  643.859913][ T5800] usb 2-1: 0:2 : does not exist
[  643.882601][ T5800] usb 2-1: unit 9 not found!
[  643.896760][ T5800] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[  643.959513][ T5800] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4)
[  643.984889][ T5800] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4)
[  644.012218][ T5800] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4)
[  644.060363][ T5800] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4)
[  644.124544][ T5800] usb 2-1: USB disconnect, device number 50
[  644.157559][T21890] loop5: detected capacity change from 0 to 32768
[  644.190960][T20880] udevd[20880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  644.264873][T21890] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  644.385407][T21890] XFS (loop5): ro->rw transition prohibited on norecovery mount
[  644.528648][T20867] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  644.552869][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.198472][   T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  645.220170][T21949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6996'.
[  645.262059][T21951] kAFS: unparsable volume name
[  645.833300][T21975] netlink: 'syz.5.7008': attribute type 13 has an invalid length.
[  645.896586][T21975] gretap0: refused to change device tx_queue_len
[  645.916716][T21975] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  646.180469][ T5800] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  646.385525][ T5800] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  646.395033][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.423172][ T5800] usb 5-1: Product: syz
[  646.430651][ T5800] usb 5-1: Manufacturer: syz
[  646.435304][ T5800] usb 5-1: SerialNumber: syz
[  646.467120][ T5800] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  646.502912][ T5755] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  646.751358][    C1] usb 5-1: ath9k_htc: invalid pkt_len (fd7e)
[  646.912487][T22017] loop6: detected capacity change from 0 to 256
[  646.917994][T22016] loop1: detected capacity change from 0 to 512
[  646.956466][ T5925] usb 5-1: USB disconnect, device number 13
[  646.981413][T22016] EXT4-fs (loop1): orphan cleanup on readonly fs
[  646.995265][T22016] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.7029: corrupted inode contents
[  647.010288][T22016] EXT4-fs (loop1): Remounting filesystem read-only
[  647.017040][T22016] EXT4-fs (loop1): 1 orphan inode deleted
[  647.031715][T22016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  647.163258][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.609603][ T5755] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  647.629340][ T5755] ath9k_htc: Failed to initialize the device
[  647.662933][ T5925] usb 5-1: ath9k_htc: USB layer deinitialized
[  647.891988][T22040] loop4: detected capacity change from 0 to 8192
[  647.928620][T22046] loop6: detected capacity change from 0 to 4096
[  647.966053][T22046] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  647.976209][T22040] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  648.021921][T22040] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  648.055921][T22040] FAT-fs (loop4): Filesystem has been set read-only
[  648.468203][T22061] Cannot find add_set index 0 as target
[  648.521808][T22063] netlink: 'syz.1.7052': attribute type 3 has an invalid length.
[  648.550296][T22063] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7052'.
[  648.704720][T22069] loop6: detected capacity change from 0 to 512
[  648.739715][T22069] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  648.802644][T22069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12d, mo2=0002]
[  648.826901][T22069] System zones: 1-12
[  648.847899][T22069] EXT4-fs (loop6): orphan cleanup on readonly fs
[  648.912495][T22069] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.7055: bg 0: block 361: padding at end of block bitmap is not set
[  648.996417][T22069] EXT4-fs (loop6): Remounting filesystem read-only
[  649.024575][T22069] EXT4-fs (loop6): 1 truncate cleaned up
[  649.046308][T22069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  649.126456][T22069] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.7055: error -117 reading directory block
[  649.176032][T22088] loop5: detected capacity change from 0 to 1024
[  649.204267][T22088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  649.250539][T22088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  649.279065][T22088] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  649.314022][T20923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  649.316974][T22088] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  649.421761][T22098] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7068'.
[  649.430356][T22088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.617195][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.830538][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7070'.
[  649.878281][T22102] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7070'.
[  649.895561][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7070'.
[  649.920519][T22102] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7070'.
[  649.959792][T22102] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7070'.
[  649.977337][T22096] loop4: detected capacity change from 0 to 32768
[  650.067190][T22096] ERROR: (device loop4): diAllocAG: error reading iag
[  650.067190][T22096] 
[  650.103668][T22096] ialloc: diAlloc returned -5!
[  650.299349][T22092] loop1: detected capacity change from 0 to 32768
[  650.312487][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  650.393265][T22092] JBD2: Ignoring recovery information on journal
[  650.458243][T22117] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7077'.
[  650.620706][T22092] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  650.731898][T22128] loop6: detected capacity change from 0 to 512
[  650.776940][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  650.776956][   T28] audit: type=1800 audit(2000000204.130:213): pid=22092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7066" name="file0" dev="loop1" ino=17058 res=0 errno=0
[  650.804847][T22128] EXT4-fs error (device loop6): ext4_orphan_get:1424: comm syz.6.7082: bad orphan inode 13
[  650.836132][T22128] ext4_test_bit(bit=12, block=4) = 1
[  650.845995][T22128] is_bad_inode(inode)=0
[  650.850622][T22128] NEXT_ORPHAN(inode)=0
[  650.854720][T22128] max_ino=32
[  650.858072][T22128] i_nlink=1
[  650.862787][T22128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  650.882234][T22128] EXT4-fs warning (device loop6): dx_probe:845: inode #2: comm syz.6.7082: Hash code is SIPHASH, but hash not in dirent
[  650.895008][T22128] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.7082: Corrupt directory, running e2fsck is recommended
[  650.908632][T22128] EXT4-fs warning (device loop6): dx_probe:845: inode #2: comm syz.6.7082: Hash code is SIPHASH, but hash not in dirent
[  650.922124][T22128] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.7082: Corrupt directory, running e2fsck is recommended
[  650.981219][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  650.996716][ T5774] ocfs2: Unmounting device (7,1) on (node local)
[  651.023329][T20923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.605829][T22146] loop1: detected capacity change from 0 to 2048
[  651.715046][T22151] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  651.872552][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7094'.
[  651.922474][T22154] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7094'.
[  651.956459][T22154] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7094'.
[  652.192258][T22136] loop6: detected capacity change from 0 to 40427
[  652.210939][T22136] F2FS-fs (loop6): Image doesn't support compression
[  652.225218][T22136] F2FS-fs (loop6): heap/no_heap options were deprecated
[  652.238951][T22136] F2FS-fs (loop6): invalid crc value
[  652.259130][T22136] F2FS-fs (loop6): Found nat_bits in checkpoint
[  652.360403][ T5925] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  652.377473][ T5928] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  652.400681][T22136] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  652.466316][T22173] loop5: detected capacity change from 0 to 512
[  652.523851][T22173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.538763][T22173] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.562155][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.595628][ T5928] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  652.608130][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.628600][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.637854][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  652.651246][ T5928] usb 5-1: Product: syz
[  652.655443][ T5928] usb 5-1: Manufacturer: syz
[  652.660075][ T5928] usb 5-1: SerialNumber: syz
[  652.671867][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.676457][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  652.693034][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.709870][ T5928] usb 5-1: config 0 descriptor??
[  652.724389][ T5928] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  652.742297][ T5925] usb 2-1: config 0 descriptor??
[  652.753509][ T5925] hub 2-1:0.0: USB hub found
[  652.977541][ T5925] hub 2-1:0.0: 9 ports detected
[  652.990762][ T5925] hub 2-1:0.0: insufficient power available to use all downstream ports
[  653.126767][ T5928] sonixb 5-1:0.0: Error writing register 01: -71
[  653.150746][ T5928] sonixb: probe of 5-1:0.0 failed with error -71
[  653.181003][ T5925] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  653.189576][ T5928] usb 5-1: USB disconnect, device number 14
[  653.200390][ T5925] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  653.259528][ T5925] usb 2-1: USB disconnect, device number 51
[  654.097477][T22220] loop1: detected capacity change from 0 to 256
[  654.105231][T22220] exfat: Deprecated parameter 'utf8'
[  654.130092][T22220] exfat: Deprecated parameter 'namecase'
[  654.156533][T22220] exfat: Deprecated parameter 'namecase'
[  654.193755][T22220] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  654.616673][T22234] loop1: detected capacity change from 0 to 4096
[  655.006674][T22246] __nla_validate_parse: 1 callbacks suppressed
[  655.006695][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7137'.
[  655.039754][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7137'.
[  655.410400][T22262] netlink: 'syz.1.7145': attribute type 15 has an invalid length.
[  655.433521][ T1323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  655.470149][T22264] loop4: detected capacity change from 0 to 512
[  655.509985][T22264] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.7146: corrupted in-inode xattr: e_value size too large
[  655.533858][T22264] EXT4-fs (loop4): Remounting filesystem read-only
[  655.572204][T22264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.750966][T22274] loop5: detected capacity change from 0 to 64
[  656.023151][T22282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7154'.
[  656.663913][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7168'.
[  656.712797][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  656.742296][T22309] loop1: detected capacity change from 0 to 4096
[  656.775966][T22309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.874215][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.012528][T22322] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7173'.
[  657.317601][T22331] loop5: detected capacity change from 0 to 256
[  657.395766][T22331] FAT-fs (loop5): Directory bread(block 64) failed
[  657.411212][T22331] FAT-fs (loop5): Directory bread(block 65) failed
[  657.418929][T22331] FAT-fs (loop5): Directory bread(block 66) failed
[  657.434491][T22331] FAT-fs (loop5): Directory bread(block 67) failed
[  657.446123][T22331] FAT-fs (loop5): Directory bread(block 68) failed
[  657.456819][T22331] FAT-fs (loop5): Directory bread(block 69) failed
[  657.484594][T22331] FAT-fs (loop5): Directory bread(block 70) failed
[  657.504171][T22331] FAT-fs (loop5): Directory bread(block 71) failed
[  657.512231][T22331] FAT-fs (loop5): Directory bread(block 72) failed
[  657.525286][T22331] FAT-fs (loop5): Directory bread(block 73) failed
[  657.757612][T22341] tmpfs: Group quota block hardlimit too large.
[  657.883048][T22347] loop5: detected capacity change from 0 to 1024
[  657.968008][T10756] hfsplus: b-tree write err: -5, ino 4
[  657.975511][T22349] netlink: 'syz.1.7186': attribute type 1 has an invalid length.
[  657.983587][T22349] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7186'.
[  658.145930][T22354] ieee802154 phy0 wpan0: encryption failed: -22
[  658.406295][ T1189] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  658.600312][ T1189] usb 2-1: Using ep0 maxpacket: 32
[  658.611759][ T1189] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  658.632152][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.655005][ T1189] usb 2-1: config 0 descriptor??
[  658.665539][ T1189] gspca_main: nw80x-2.14.0 probing 055f:d001
[  659.083501][ T1189] gspca_nw80x: reg_r err -71
[  659.088237][ T1189] nw80x: probe of 2-1:0.0 failed with error -71
[  659.120945][ T1189] usb 2-1: USB disconnect, device number 52
[  659.215920][T22389] loop5: detected capacity change from 0 to 4096
[  659.247480][T22389] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  659.905189][T22407] loop5: detected capacity change from 0 to 4096
[  659.932413][T22407] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  660.202270][T22417] xt_CT: You must specify a L4 protocol and not use inversions on it
[  660.429452][T22425] netlink: 'syz.5.7224': attribute type 27 has an invalid length.
[  660.440119][T22425] netlink: 'syz.5.7224': attribute type 3 has an invalid length.
[  660.457452][T22425] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7224'.
[  660.829910][T22441] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  660.839696][T22441] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  661.191743][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  662.049094][T22491] ieee802154 phy0 wpan0: encryption failed: -90
[  662.104241][T22493] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  662.140831][T22495] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7259'.
[  662.473994][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  662.709817][T22518] raw_sendmsg: syz.1.7271 forgot to set AF_INET. Fix it!
[  663.580279][ T5928] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  663.774182][ T5928] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  663.783096][ T5928] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  663.792274][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  663.802484][ T5928] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  663.811633][ T5928] usb 2-1: config 1 has no interface number 1
[  663.817766][ T5928] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  663.833323][ T5928] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  663.842601][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.851468][ T5928] usb 2-1: Product: syz
[  663.855664][ T5928] usb 2-1: Manufacturer: syz
[  663.860373][ T5928] usb 2-1: SerialNumber: syz
[  664.010436][ T5755] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  664.089478][ T5928] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  664.097030][ T5928] usb 2-1: MIDIStreaming interface descriptor not found
[  664.126785][ T5928] usb 2-1: USB disconnect, device number 53
[  664.206164][ T5755] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  664.226259][ T5755] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  664.237888][ T5755] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  664.250280][ T5755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.261003][T22560] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  664.274622][ T5755] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  664.543680][ T5928] usb 6-1: USB disconnect, device number 5
[  664.828723][T22568] loop1: detected capacity change from 0 to 256
[  664.962299][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7295'.
[  664.971559][T22570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7295'.
[  665.485476][T22590] openvswitch: netlink: Actions may not be safe on all matching packets
[  665.493054][T22589] loop5: detected capacity change from 0 to 1764
[  665.532697][T22589] iso9660: Corrupted directory entry in block 2 of inode 1920
[  665.975018][T22606] loop5: detected capacity change from 0 to 16
[  666.003715][T22606] erofs: (device loop5): mounted with root inode @ nid 36.
[  666.051609][T22606] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  666.100273][T22606] erofs: (device loop5): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  666.109379][T22606] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  666.164436][T22606] erofs: (device loop5): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  666.207677][T22606] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  666.240282][T22606] erofs: (device loop5): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  666.249406][T22606] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  666.293905][T22606] erofs: (device loop5): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  666.311062][T22606] erofs: (device loop5): z_erofs_read_folio: read error -95 @ 0 of nid 89
[  666.321553][   T28] audit: type=1800 audit(2000000219.680:214): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7313" name="file2" dev="loop5" ino=89 res=0 errno=0
[  666.554419][T22619] loop1: detected capacity change from 0 to 128
[  666.916835][T22628] netlink: 'syz.1.7324': attribute type 1 has an invalid length.
[  666.960676][T10756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  666.960810][T22628] netlink: 'syz.1.7324': attribute type 3 has an invalid length.
[  666.987964][T22628] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7324'.
[  667.027323][T18078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  667.046163][T18078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  667.058052][T18078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  667.068926][T18078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  667.083642][T18078] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  667.091357][T18078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  667.882454][T22630] chnl_net:caif_netlink_parms(): no params data found
[  668.067478][T22630] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.075212][T22630] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.082738][T22630] bridge_slave_0: entered allmulticast mode
[  668.090899][T22630] bridge_slave_0: entered promiscuous mode
[  668.100932][T22630] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.108263][T22630] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.116395][T22630] bridge_slave_1: entered allmulticast mode
[  668.125148][T22630] bridge_slave_1: entered promiscuous mode
[  668.209923][T22630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.230817][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  668.254589][T22630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.332217][T22662] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  668.394987][T22630] team0: Port device team_slave_0 added
[  668.432192][T22630] team0: Port device team_slave_1 added
[  668.466329][T22630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.473977][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.530560][T22630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.549217][T22630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.557293][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.611246][T22630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.677811][T22673] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  668.706909][T22630] hsr_slave_0: entered promiscuous mode
[  668.726528][T22630] hsr_slave_1: entered promiscuous mode
[  668.747794][T22630] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  668.797620][T22630] Cannot create hsr debugfs directory
[  668.879887][T22675] xt_CT: No such helper "snmp"
[  668.978736][T22680] loop1: detected capacity change from 0 to 2048
[  669.036349][T22680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  669.191131][ T5771] Bluetooth: hci6: command tx timeout
[  669.338137][T22630] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  669.356642][T22630] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  669.368586][T22630] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  669.391710][T22630] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  669.468138][T22692] xt_recent: Unsupported userspace flags (000000b1)
[  669.669445][T22630] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.704972][T22630] 8021q: adding VLAN 0 to HW filter on device team0
[  669.727916][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.735382][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.757035][T10756] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.764266][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.104257][T22630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.703474][T22630] veth0_vlan: entered promiscuous mode
[  670.745321][T22630] veth1_vlan: entered promiscuous mode
[  670.881125][T22735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  670.959507][T22630] veth0_macvtap: entered promiscuous mode
[  671.082273][T22630] veth1_macvtap: entered promiscuous mode
[  671.175377][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.203015][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.270605][ T5771] Bluetooth: hci6: command tx timeout
[  671.273863][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.381880][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.405460][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.426291][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.427068][T18078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  671.437747][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.456539][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.463731][T18078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  671.467086][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.496123][T18078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  671.504136][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  671.513991][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.524758][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.535832][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.548289][T18078] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  671.556200][T18078] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  671.563643][T18078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  671.649726][T22630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.744757][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.780567][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.805454][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.837941][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.858588][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.877405][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.889135][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.908760][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.932172][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.951431][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.975802][T22630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.996868][T22630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  672.020090][T22630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  672.066866][T22630] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.095176][T22630] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.133222][T22630] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.153852][T22630] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.661804][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.677861][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.719312][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  672.737294][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.806802][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.821141][T22774] loop5: detected capacity change from 0 to 512
[  672.859835][T22774] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.7380: inode has both inline data and extents flags
[  672.876234][T22742] chnl_net:caif_netlink_parms(): no params data found
[  672.966624][T22774] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.7380: couldn't read orphan inode 15 (err -117)
[  672.986227][T22774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  673.141321][T22742] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.148497][T22742] bridge0: port 1(bridge_slave_0) entered disabled state
[  673.172025][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.229058][T22742] bridge_slave_0: entered allmulticast mode
[  673.236846][T22742] bridge_slave_0: entered promiscuous mode
[  673.282630][T22742] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.289931][T22742] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.326222][T22742] bridge_slave_1: entered allmulticast mode
[  673.354758][ T5771] Bluetooth: hci6: command tx timeout
[  673.379334][T22742] bridge_slave_1: entered promiscuous mode
[  673.487718][T22796] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  673.541310][T22742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  673.571542][T22742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.670409][ T5771] Bluetooth: hci7: command tx timeout
[  673.671126][T22799] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  673.689140][T22799] overlayfs: missing 'lowerdir'
[  673.794141][T22742] team0: Port device team_slave_0 added
[  673.834672][T22742] team0: Port device team_slave_1 added
[  673.945607][T22742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.980979][T22742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.081926][T22742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.121111][T22742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.136881][T22742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  674.221388][   T28] audit: type=1326 audit(2000000227.580:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22816 comm="syz.1.7398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1299aeb9 code=0x0
[  674.250518][T22742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.495841][T22742] hsr_slave_0: entered promiscuous mode
[  674.551533][T22742] hsr_slave_1: entered promiscuous mode
[  674.575050][T22742] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  674.597416][T22742] Cannot create hsr debugfs directory
[  675.224615][T22742] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  675.245168][T22852] vlan0: entered promiscuous mode
[  675.314464][T22742] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  675.404217][T22742] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  675.425084][T22742] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  675.430733][ T5771] Bluetooth: hci6: command tx timeout
[  675.556178][T22868] loop1: detected capacity change from 0 to 256
[  675.751381][ T5771] Bluetooth: hci7: command tx timeout
[  675.789365][T22742] 8021q: adding VLAN 0 to HW filter on device bond0
[  675.889333][T22742] 8021q: adding VLAN 0 to HW filter on device team0
[  675.963358][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.970567][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.024730][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.032065][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.068158][T22881] ..0
ˆ: renamed from veth0_to_hsr (while UP)
[  676.783316][T22742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.512567][T22742] veth0_vlan: entered promiscuous mode
[  677.569891][T22742] veth1_vlan: entered promiscuous mode
[  677.596988][T22939] loop7: detected capacity change from 0 to 512
[  677.647328][T22742] veth0_macvtap: entered promiscuous mode
[  677.676094][T22939] EXT4-fs error (device loop7): ext4_orphan_get:1398: inode #15: comm syz.7.7449: inode has both inline data and extents flags
[  677.699796][T22742] veth1_macvtap: entered promiscuous mode
[  677.742214][T22939] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.7449: couldn't read orphan inode 15 (err -117)
[  677.761668][T22939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  677.807390][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.825730][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.837388][ T5771] Bluetooth: hci7: command tx timeout
[  677.841214][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  677.844857][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.865623][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.875682][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.886184][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.896389][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.907137][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.920711][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.931317][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.941203][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.962951][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  677.974035][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  677.988586][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.012659][T22630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.024259][T22742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.065499][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.110440][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.130375][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.145022][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.156707][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.169656][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.179952][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.191252][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.201745][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.212730][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.223037][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.255906][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.279672][T22742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.298114][T22742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.344773][T22742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.397406][T22742] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.412143][T22742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.422069][T22742] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.431655][T22742] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.710730][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.718612][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.752038][T22964] loop7: detected capacity change from 0 to 64
[  678.798633][T22965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7461'.
[  678.800597][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.824972][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.855209][T22967] netlink: 'syz.5.7462': attribute type 9 has an invalid length.
[  678.863237][T22967] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.7462'.
[  679.081819][    C1] sd 0:0:1:0: [sda] tag#785 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  679.092295][    C1] sd 0:0:1:0: [sda] tag#785 CDB: Read(6) 08 00 9f d1 fe de
[  679.310388][  T786] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  679.490585][  T786] usb 2-1: Using ep0 maxpacket: 16
[  679.513169][  T786] usb 2-1: config index 0 descriptor too short (expected 1068, got 27)
[  679.528795][  T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  679.577634][  T786] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[  679.603081][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.640399][  T786] usb 2-1: Product: syz
[  679.649393][  T786] usb 2-1: Manufacturer: syz
[  679.654688][  T786] usb 2-1: SerialNumber: syz
[  679.672060][  T786] usb 2-1: config 0 descriptor??
[  679.772229][T22973] loop8: detected capacity change from 0 to 32768
[  679.846684][T22973] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  679.886566][  T786] usb 2-1: USB disconnect, device number 54
[  679.892742][ T5800] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  679.910773][ T5771] Bluetooth: hci7: command tx timeout
[  680.107814][T22973] XFS (loop8): Ending clean mount
[  680.109701][T22973] XFS (loop8): Quotacheck needed: Please wait.
[  680.115032][ T5800] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  680.115063][ T5800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.117708][ T5800] usb 8-1: config 0 descriptor??
[  680.128307][ T5800] cp210x 8-1:0.0: cp210x converter detected
[  680.214210][T22973] XFS (loop8): Quotacheck: Done.
[  680.340345][ T5800] usb 8-1: cp210x converter now attached to ttyUSB0
[  680.411724][T22742] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  680.547118][ T5903] usb 8-1: USB disconnect, device number 2
[  680.574273][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  680.584528][ T5903] cp210x 8-1:0.0: device disconnected
[  680.623009][T23007] xt_CT: You must specify a L4 protocol and not use inversions on it
[  680.962702][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7476'.
[  681.122446][T23019] batadv1: entered promiscuous mode
[  681.245255][T23025] netlink: 'syz.8.7483': attribute type 21 has an invalid length.
[  681.277014][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7483'.
[  681.710426][T23043] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7496'.
[  681.957635][T23051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7499'.
[  682.000412][T23051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7499'.
[  682.009460][T23051] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7499'.
[  682.788412][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7513'.
[  683.380369][T23105] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7524'.
[  683.615748][   T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  685.848856][T23199] __nla_validate_parse: 1 callbacks suppressed
[  685.848876][T23199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7568'.
[  685.951800][T23166] loop5: detected capacity change from 0 to 32768
[  685.992050][   T28] audit: type=1326 audit(2000000239.350:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23202 comm="syz.7.7572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1542b9aeb9 code=0x7ffc0000
[  686.098764][T23166] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  686.112884][   T28] audit: type=1326 audit(2000000239.350:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23202 comm="syz.7.7572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1542b9aeb9 code=0x7ffc0000
[  686.157666][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  686.171979][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  686.230788][   T28] audit: type=1326 audit(2000000239.380:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23202 comm="syz.7.7572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f1542b9aeb9 code=0x7ffc0000
[  686.326515][   T28] audit: type=1326 audit(2000000239.380:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23202 comm="syz.7.7572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1542b9aeb9 code=0x7ffc0000
[  686.452242][T20867] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  686.951766][   T28] audit: type=1326 audit(2000000240.310:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23236 comm="syz.8.7585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270279aeb9 code=0x7ffc0000
[  687.046156][   T28] audit: type=1326 audit(2000000240.310:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23236 comm="syz.8.7585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270279aeb9 code=0x7ffc0000
[  687.128938][   T28] audit: type=1326 audit(2000000240.320:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23236 comm="syz.8.7585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f270279aeb9 code=0x7ffc0000
[  687.220087][   T28] audit: type=1326 audit(2000000240.320:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23236 comm="syz.8.7585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270279aeb9 code=0x7ffc0000
[  687.265899][T23247] loop7: detected capacity change from 0 to 2048
[  687.341261][T23251] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  687.412013][T23247] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  687.433139][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  687.466304][T23247] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  687.539647][T23247] Remounting filesystem read-only
[  687.555585][T23247] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  687.579760][T23247] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16)
[  687.590128][T23247] NILFS (loop7): error -5 truncating bmap (ino=16)
[  687.644329][T22630] NILFS (loop7): discard dirty page: offset=4096, ino=6
[  687.660369][T22630] NILFS (loop7): discard dirty block: blocknr=39, size=1024
[  687.667709][T22630] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  687.703624][   T28] audit: type=1326 audit(2000000241.050:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.1.7603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1299aeb9 code=0x7ffc0000
[  687.718232][T22630] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  687.748289][   T28] audit: type=1326 audit(2000000241.050:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.1.7603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1299aeb9 code=0x7ffc0000
[  687.783644][T22630] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024
[  687.808996][T22630] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  688.608704][T23296] loop8: detected capacity change from 0 to 128
[  688.700672][T23296] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  688.748554][T23296] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  688.806979][T23295] loop5: detected capacity change from 0 to 4096
[  688.851786][T23295] EXT4-fs: Ignoring removed mblk_io_submit option
[  688.883009][T23296] EXT4-fs error (device loop8): __ext4_new_inode:1075: comm syz.8.7610: reserved inode found cleared - inode=2
[  688.913542][T23295] EXT4-fs (loop5): Test dummy encryption mode enabled
[  688.948950][T23295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  689.087572][T22742] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  689.140489][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.350910][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  689.827742][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7631'.
[  690.463805][T23358] loop5: detected capacity change from 0 to 64
[  690.537968][T23358] hfs: unable to locate alternate MDB
[  690.549207][T23358] hfs: continuing without an alternate MDB
[  690.938111][T23370] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.7647'.
[  691.203942][T23362] loop7: detected capacity change from 0 to 32768
[  691.229186][T23362] ea_get: invalid extended attribute
[  691.235018][T23362] ffff88805750a830: 04 00 00 00                                      ....
[  692.006172][T23394] loop1: detected capacity change from 0 to 64
[  692.042134][T23398] tc_dump_action: action bad kind
[  692.266150][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7663'.
[  692.363722][T23406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7666'.
[  692.542274][T23412] loop8: detected capacity change from 0 to 512
[  692.607671][T23412] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.7667: invalid indirect mapped block 28777 (level 2)
[  692.691936][T23412] EXT4-fs (loop8): 1 truncate cleaned up
[  692.699153][T23412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  692.795568][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  692.795585][   T28] audit: type=1326 audit(2000000246.130:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  692.832809][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.909667][   T28] audit: type=1326 audit(2000000246.130:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  693.029341][   T28] audit: type=1326 audit(2000000246.140:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  693.045847][T23428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7677'.
[  693.109327][T23428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7677'.
[  693.131508][   T28] audit: type=1326 audit(2000000246.140:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  693.191159][ T1323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  693.216795][   T28] audit: type=1326 audit(2000000246.140:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23421 comm="syz.5.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  693.400494][T23442] vivid-000: =================  START STATUS  =================
[  693.408917][T23442] vivid-000: Generate PTS: true
[  693.419916][T23442] vivid-000: Generate SCR: true
[  693.425460][T23442] tpg source WxH: 320x180 (Y'CbCr)
[  693.428393][T23438] loop8: detected capacity change from 0 to 1024
[  693.431541][T23442] tpg field: 1
[  693.458360][T23438] hfsplus: failed to load extents file
[  693.472848][T23442] tpg crop: 320x180@0x0
[  693.492701][T23442] tpg compose: 320x180@0x0
[  693.500350][T23442] tpg colorspace: 1
[  693.508296][T23442] tpg transfer function: 4/0
[  693.534025][T23442] tpg Y'CbCr encoding: 0/0
[  693.538513][T23442] tpg quantization: 0/0
[  693.587236][T23442] tpg RGB range: 0/2
[  693.610298][T23442] vivid-000: ==================  END STATUS  ==================
[  693.903894][ T5771] Bluetooth: hci6: hcon ffff888056950000 sent 1 < count 7
[  693.940349][ T5903] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  694.122826][ T5903] usb 2-1: Using ep0 maxpacket: 32
[  694.144672][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.173860][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.204535][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  694.241853][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.273678][ T5903] usb 2-1: config 0 descriptor??
[  694.288092][ T5903] hub 2-1:0.0: USB hub found
[  694.471705][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  694.511204][ T5903] hub 2-1:0.0: 1 port detected
[  694.721427][ T5903] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  694.727835][ T5903] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  694.767692][ T5903] usbhid 2-1:0.0: can't add hid device: -71
[  694.779062][ T5903] usbhid: probe of 2-1:0.0 failed with error -71
[  694.844848][T23490] loop8: detected capacity change from 0 to 1024
[  694.857068][ T5903] usb 2-1: USB disconnect, device number 55
[  695.027322][T23495] loop7: detected capacity change from 0 to 1024
[  695.136621][T23495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.222935][T23495] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 623: comm syz.7.7709: Attempting to read directory block (623) that is past i_size (638464)
[  695.258562][T23495] EXT4-fs (loop7): Remounting filesystem read-only
[  695.454165][T22630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.656623][T23516] xt_connbytes: Forcing CT accounting to be enabled
[  695.678909][T23516] xt_bpf: check failed: parse error
[  695.825062][T23520] loop5: detected capacity change from 0 to 1024
[  695.920456][ T5903] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  695.955175][   T49] hfsplus: b-tree write err: -5, ino 4
[  696.114957][ T5903] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  696.126411][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.155595][ T5903] usb 2-1: Product: syz
[  696.159827][ T5903] usb 2-1: Manufacturer: syz
[  696.195300][T23532] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  696.200245][ T5903] usb 2-1: SerialNumber: syz
[  696.213268][ T5903] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  696.236877][ T5928] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  696.592943][T23540] netlink: 'syz.5.7730': attribute type 5 has an invalid length.
[  696.770770][ T5807] usb 2-1: USB disconnect, device number 56
[  696.867356][T23550] loop8: detected capacity change from 0 to 128
[  696.920269][T23550] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  696.977968][T23550] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  697.108345][T23561] loop7: detected capacity change from 0 to 2048
[  697.131535][T23561] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  697.159321][T22742] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  697.189425][T23563] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  697.210796][T20902] udevd[20902]: incorrect nilfs2 checksum on /dev/loop7
[  697.258714][T23561] NILFS error (device loop7): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  697.275595][ T5928] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  697.300369][ T5928] ath9k_htc: Failed to initialize the device
[  697.309621][T23561] Remounting filesystem read-only
[  697.330088][ T5807] usb 2-1: ath9k_htc: USB layer deinitialized
[  697.678399][T23576] loop5: detected capacity change from 0 to 64
[  698.241245][ T5928] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  698.456066][ T5928] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  698.475308][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.499228][ T5928] usb 8-1: config 0 descriptor??
[  698.692522][T23612] loop8: detected capacity change from 0 to 1024
[  698.761280][ T5928] usb 8-1: Cannot read MAC address
[  698.777835][ T5928] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71
[  698.814068][ T5928] usb 8-1: USB disconnect, device number 3
[  698.817473][T23612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  698.875310][T23619] loop1: detected capacity change from 0 to 256
[  698.884901][T23619] exfat: Deprecated parameter 'utf8'
[  698.891204][T23619] exfat: Deprecated parameter 'namecase'
[  698.952869][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  698.954526][T23619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  699.003932][T23621] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  699.025789][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.351325][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7771'.
[  700.055039][T23657] QAT: failed to copy from user cfg_data.
[  700.271449][ T1078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  700.439294][T23666] loop5: detected capacity change from 0 to 4096
[  700.529281][T23666] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  700.545168][T23666] ntfs3: loop5: Failed to load $Extend (-22).
[  700.556771][T23666] ntfs3: loop5: Failed to initialize $Extend.
[  701.038806][T23687] loop7: detected capacity change from 0 to 256
[  701.069505][T23683] loop8: detected capacity change from 0 to 4096
[  701.115359][T23687] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  701.147256][T23661] loop1: detected capacity change from 0 to 40427
[  701.177924][T23661] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  701.228430][T23661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  701.266507][T23661] F2FS-fs (loop1): invalid crc value
[  701.319625][T23661] F2FS-fs (loop1): Found nat_bits in checkpoint
[  701.490466][T23661] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  701.506485][T23661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  701.840489][ T5925] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  702.049414][ T5925] usb 6-1: config 0 has an invalid interface number: 110 but max is 0
[  702.066538][ T5925] usb 6-1: config 0 has no interface number 0
[  702.080879][ T5925] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  702.128081][ T5925] usb 6-1: config 0 interface 110 has no altsetting 0
[  702.160276][ T5925] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  702.190728][T23714] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615)
[  702.193885][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.228723][ T5925] usb 6-1: Product: syz
[  702.240298][ T5925] usb 6-1: Manufacturer: syz
[  702.244955][ T5925] usb 6-1: SerialNumber: syz
[  702.291327][ T5925] usb 6-1: config 0 descriptor??
[  702.304633][T23699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  702.382037][T23719] loop1: detected capacity change from 0 to 512
[  702.396588][T23721] loop8: detected capacity change from 0 to 512
[  702.424462][T23719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.7815: missing EA_INODE flag
[  702.500864][T23719] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.7815: error while reading EA inode 11 err=-117
[  702.527734][T23721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.531473][T23719] EXT4-fs (loop1): 1 orphan inode deleted
[  702.548438][T23719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.568463][T23699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  702.578227][ T5925] cdc_subset: probe of 6-1:0.110 failed with error -22
[  702.756404][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.782385][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.886007][   T27] usb 6-1: USB disconnect, device number 6
[  703.320461][ T5800] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  703.448461][T23754] loop1: detected capacity change from 0 to 736
[  703.519950][ T5800] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  703.536176][ T5800] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.545039][ T5800] usb 9-1: Product: syz
[  703.549239][ T5800] usb 9-1: Manufacturer: syz
[  703.555987][ T5800] usb 9-1: SerialNumber: syz
[  703.633338][T23754] rock: directory entry would overflow storage
[  703.643818][T23754] rock: sig=0x3b10, size=4, remaining=3
[  703.649949][T23759] netlink: 'syz.7.7834': attribute type 2 has an invalid length.
[  704.032920][ T5800] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  704.066151][ T5800] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  704.091782][ T5800] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  704.103548][ T5800] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  704.114452][ T5800] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  704.127942][ T5800] lan78xx: probe of 9-1:1.0 failed with error -71
[  704.144568][ T5800] usb 9-1: USB disconnect, device number 2
[  704.254681][T23774] loop5: detected capacity change from 0 to 2048
[  704.327431][T23774] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  704.339476][T23774] UDF-fs: Scanning with blocksize 512 failed
[  704.373719][T23774] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  704.389681][T23774] UDF-fs: Scanning with blocksize 1024 failed
[  704.444589][T23774] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=515, location=515
[  704.479810][T23774] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  704.500390][T23774] UDF-fs: Scanning with blocksize 2048 failed
[  704.511639][T23774] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=259, location=259
[  704.544704][T23774] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=515, location=515
[  704.560408][T23774] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  704.568110][T23774] UDF-fs: Scanning with blocksize 4096 failed
[  704.594364][T23774] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  704.645079][T23786] loop1: detected capacity change from 0 to 512
[  704.706816][T23786] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  704.721961][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  704.775815][T23786] EXT4-fs (loop1): orphan cleanup on readonly fs
[  704.800507][T23786] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.7847: Block bitmap for bg 0 marked uninitialized
[  704.856849][T23792] loop7: detected capacity change from 0 to 8
[  704.922025][T23786] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  704.984729][T23786] EXT4-fs (loop1): 1 orphan inode deleted
[  704.994130][T23786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  705.101052][T23786] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  705.145028][T23786] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  705.237434][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.256209][   T28] audit: type=1326 audit(2000000258.610:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.5.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  705.330452][   T28] audit: type=1326 audit(2000000258.610:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.5.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  705.378250][   T28] audit: type=1326 audit(2000000258.630:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.5.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  705.460767][   T28] audit: type=1326 audit(2000000258.630:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.5.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  705.559722][   T28] audit: type=1326 audit(2000000258.640:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23799 comm="syz.5.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  705.655635][T23793] loop8: detected capacity change from 0 to 32768
[  705.687185][T23810] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7858'.
[  705.687956][T23793] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.7849 (23793)
[  705.747762][T23810] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7858'.
[  705.757563][T23793] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  705.791115][T23793] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  705.820745][T23793] BTRFS info (device loop8): force zlib compression, level 3
[  705.828207][T23793] BTRFS info (device loop8): force clearing of disk cache
[  705.836338][T23793] BTRFS info (device loop8): setting nodatasum
[  705.899218][T23793] BTRFS info (device loop8): allowing degraded mounts
[  705.912522][T23793] BTRFS info (device loop8): enabling disk space caching
[  705.940253][T23793] BTRFS info (device loop8): disk space caching is enabled
[  705.991857][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  706.161194][T23793] BTRFS info (device loop8): auto enabling async discard
[  706.181082][T23793] BTRFS info (device loop8): rebuilding free space tree
[  706.247182][T23793] BTRFS info (device loop8): disabling free space tree
[  706.260496][T23793] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  706.280551][T23793] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  706.469559][T23845] loop5: detected capacity change from 0 to 2048
[  706.500563][T23845] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  706.510773][T22742] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  706.550559][T23847] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  706.603993][ T5903] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  706.820292][ T5903] usb 8-1: Using ep0 maxpacket: 16
[  706.838534][ T5903] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  706.847664][T23851] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  706.873393][ T5903] usb 8-1: config 0 has no interface number 0
[  706.903889][   T28] audit: type=1326 audit(2000000260.240:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.5.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  706.913108][ T5903] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  706.990235][ T5903] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.001547][   T28] audit: type=1326 audit(2000000260.240:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.5.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  707.042987][ T5903] usb 8-1: Product: syz
[  707.067632][ T5903] usb 8-1: Manufacturer: syz
[  707.076763][ T5903] usb 8-1: SerialNumber: syz
[  707.113281][ T5903] usb 8-1: config 0 descriptor??
[  707.118563][   T28] audit: type=1326 audit(2000000260.240:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.5.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  707.185888][   T28] audit: type=1326 audit(2000000260.240:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.5.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  707.266544][   T28] audit: type=1326 audit(2000000260.240:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.5.7869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e39aeb9 code=0x7ffc0000
[  707.329628][T23861] loop5: detected capacity change from 0 to 16
[  707.358826][ T5903] usb 8-1: selecting invalid altsetting 1
[  707.369269][ T5903] speedtch 8-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  707.380545][ T5903] speedtch 8-1:0.1: usbatm_usb_probe: bind failed: -22!
[  707.387577][ T5903] speedtch: probe of 8-1:0.1 failed with error -22
[  707.405417][T23861] erofs: (device loop5): mounted with root inode @ nid 36.
[  707.440434][ T5903] usb 8-1: USB disconnect, device number 4
[  707.817195][T23869] loop8: detected capacity change from 0 to 512
[  707.888784][T23869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  707.943573][T23869] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  707.968678][T23859] loop1: detected capacity change from 0 to 32768
[  707.979355][T23859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7872 (23859)
[  708.030390][T23859] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  708.047866][T23859] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  708.063060][T23859] BTRFS info (device loop1): allowing degraded mounts
[  708.070711][T23859] BTRFS info (device loop1): metadata ratio 4
[  708.077259][T23859] BTRFS info (device loop1): turning on sync discard
[  708.088704][T23869] EXT4-fs error (device loop8): ext4_acquire_dquot:6949: comm syz.8.7878: Failed to acquire dquot type 0
[  708.112360][T23859] BTRFS info (device loop1): turning off discard
[  708.118775][T23859] BTRFS info (device loop1): turning on sync discard
[  708.161388][T23859] BTRFS info (device loop1): disabling tree log
[  708.167712][T23859] BTRFS info (device loop1): using free space tree
[  708.203014][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.450474][T23859] BTRFS info (device loop1): enabling ssd optimizations
[  708.690651][ T5774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  708.802857][T23907] loop8: detected capacity change from 0 to 2048
[  708.909104][T23907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  709.209621][T23919] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7893'.
[  709.280651][T23919] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7893'.
[  709.759704][T23929] loop5: detected capacity change from 0 to 4096
[  709.805758][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7900'.
[  710.421595][ T5800] IPVS: starting estimator thread 0...
[  710.491320][T10756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  710.520441][T23950] IPVS: using max 22 ests per chain, 52800 per kthread
[  710.588135][T23925] loop7: detected capacity change from 0 to 40427
[  710.648188][T23925] F2FS-fs (loop7): heap/no_heap options were deprecated
[  710.648298][T23925] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x5
[  710.649321][T23925] F2FS-fs (loop7): invalid crc value
[  710.658712][T23925] F2FS-fs (loop7): Found nat_bits in checkpoint
[  710.724060][T23925] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  710.921163][T22630] syz-executor: attempt to access beyond end of device
[  710.921163][T22630] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  710.923036][T22630] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  711.142088][T23969] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7917'.
[  711.293680][T23972] netlink: 'syz.8.7918': attribute type 2 has an invalid length.
[  711.310814][T23972] netlink: 723 bytes leftover after parsing attributes in process `syz.8.7918'.
[  711.752607][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  711.921615][T23995] ieee802154 phy0 wpan0: encryption failed: -22
[  712.035190][T23999] loop5: detected capacity change from 0 to 47
[  712.106036][T24001] netlink: 'syz.8.7930': attribute type 3 has an invalid length.
[  712.134286][T24001] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.7930'.
[  712.434121][T24007] loop5: detected capacity change from 0 to 4096
[  712.450864][T24007] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  712.495774][T24007] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  712.553262][T24007] ntfs3: loop5: failed to convert "c46c" to macinuit
[  712.630281][   T27] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  712.662231][ T5800] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  712.822752][   T27] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  712.833491][   T27] usb 2-1: config 1 has no interface number 0
[  712.839676][   T27] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  712.850757][ T5800] usb 8-1: Using ep0 maxpacket: 8
[  712.856664][   T27] usb 2-1: config 1 interface 105 has no altsetting 0
[  712.868261][ T5800] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  712.890329][ T5800] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.911359][   T27] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  712.931641][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.940088][ T5800] usb 8-1: config 0 has no interface number 0
[  712.946715][ T5800] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  712.958494][   T27] usb 2-1: Product: syz
[  712.963188][   T27] usb 2-1: Manufacturer: syz
[  712.967863][   T27] usb 2-1: SerialNumber: syz
[  712.974876][ T5800] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.006427][ T5800] usb 8-1: config 0 interface 52 has no altsetting 0
[  713.020924][ T5800] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  713.044515][ T5800] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  713.085576][ T5800] usb 8-1: Manufacturer: syz
[  713.124447][ T5800] usb 8-1: config 0 descriptor??
[  713.142967][ T5800] hub 8-1:0.52: bad descriptor, ignoring hub
[  713.152747][ T5800] hub: probe of 8-1:0.52 failed with error -5
[  713.258543][   T27] aqc111: probe of 2-1:1.105 failed with error -22
[  713.365428][ T5800] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input39
[  713.493323][ T5800] usb 2-1: USB disconnect, device number 57
[  713.705697][T24031] loop8: detected capacity change from 0 to 32768
[  713.730247][T24031] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  713.740788][   T27] usb 8-1: USB disconnect, device number 5
[  713.766256][T24031] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  713.824915][T24031] (syz.8.7945,24031,1):ocfs2_read_blocks:239 ERROR: status = -12
[  713.833116][T24031] (syz.8.7945,24031,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  713.936423][T22742] ocfs2: Unmounting device (7,8) on (node local)
[  714.566474][T24060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7958'.
[  714.683409][T24063] loop7: detected capacity change from 0 to 64
[  714.745128][T24063] Trying to free block not in datazone
[  714.767544][T24063] Trying to free block not in datazone
[  714.780337][T24063] Trying to free block not in datazone
[  714.785859][T24063] Trying to free block not in datazone
[  714.827515][T24063] Trying to free block not in datazone
[  714.828638][T24068] loop5: detected capacity change from 0 to 1024
[  714.833432][T24063] minix_free_block (loop7:6): bit already cleared
[  714.870497][T24063] Trying to free block not in datazone
[  714.895979][T24068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  714.953920][T24073] loop8: detected capacity change from 0 to 64
[  714.984973][T24068] EXT4-fs error (device loop5): ext4_get_first_dir_block:3606: inode #11: comm syz.5.7961: directory missing '..'
[  715.050219][T24068] EXT4-fs (loop5): Remounting filesystem read-only
[  715.146098][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.241347][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  716.256207][T24115] binder: 24113:24115 ioctl c018620c 200000000380 returned -1
[  716.415656][T24120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7985'.
[  716.945434][T24140] loop8: detected capacity change from 0 to 16
[  716.950705][T24139] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7996'.
[  716.963451][T24140] erofs: (device loop8): mounted with root inode @ nid 36.
[  717.104923][T24144] openvswitch: netlink: EtherType 0 is less than min 600
[  717.513708][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  717.691272][   T27] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  717.890283][   T27] usb 8-1: Using ep0 maxpacket: 16
[  717.911694][   T27] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  717.937870][   T27] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  717.962302][   T27] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  717.972356][   T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.985479][   T27] usb 8-1: Product: syz
[  717.989704][   T27] usb 8-1: Manufacturer: syz
[  717.999679][   T27] usb 8-1: SerialNumber: syz
[  718.187217][T24160] loop8: detected capacity change from 0 to 32768
[  718.242005][   T27] usb 8-1: 0:2 : does not exist
[  718.247010][   T27] usb 8-1: unit 9 not found!
[  718.275641][   T27] usb 8-1: 4:0: cannot get min/max values for control 1 (id 4)
[  718.295941][   T27] usb 8-1: 4:0: cannot get min/max values for control 2 (id 4)
[  718.305200][T24160] XFS (loop8): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  718.330832][   T27] usb 8-1: 4:0: cannot get min/max values for control 4 (id 4)
[  718.363648][   T27] usb 8-1: 4:0: cannot get min/max values for control 5 (id 4)
[  718.420824][T24160] XFS (loop8): ro->rw transition prohibited on norecovery mount
[  718.421936][   T27] usb 8-1: 4:0: cannot get min/max values for control 6 (id 4)
[  718.511317][   T27] usb 8-1: USB disconnect, device number 6
[  718.546734][T22742] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  718.556204][T24194] kAFS: unparsable volume name
[  718.624940][T20880] udevd[20880]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  718.880336][T24197] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8020'.
[  719.587709][T24225] netlink: 'syz.7.8034': attribute type 13 has an invalid length.
[  719.622997][T24225] gretap0: refused to change device tx_queue_len
[  719.644137][T24225] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  720.424066][T24256] loop5: detected capacity change from 0 to 256
[  720.467428][T24260] loop8: detected capacity change from 0 to 512
[  720.502964][T24260] EXT4-fs (loop8): orphan cleanup on readonly fs
[  720.523265][T24260] EXT4-fs error (device loop8): ext4_do_update_inode:5248: inode #15: comm syz.8.8052: corrupted inode contents
[  720.578103][T24260] EXT4-fs (loop8): Remounting filesystem read-only
[  720.613882][T24260] EXT4-fs (loop8): 1 orphan inode deleted
[  720.621747][T24260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  720.822750][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.290630][ T5807] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  721.501528][ T5807] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  721.520326][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.538676][ T5807] usb 6-1: Product: syz
[  721.543658][ T5807] usb 6-1: Manufacturer: syz
[  721.548307][ T5807] usb 6-1: SerialNumber: syz
[  721.574256][ T5807] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  721.625375][   T27] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  721.694015][T24295] loop1: detected capacity change from 0 to 8192
[  721.768170][T24295] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  721.818950][T24295] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  721.819132][T24301] loop7: detected capacity change from 0 to 4096
[  721.851359][T24295] FAT-fs (loop1): Filesystem has been set read-only
[  721.870774][T24301] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  721.945263][    C1] usb 6-1: ath9k_htc: invalid pkt_len (fd7e)
[  721.998327][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  722.365542][ T5800] usb 6-1: USB disconnect, device number 7
[  722.505940][T24312] netlink: 'syz.8.8075': attribute type 3 has an invalid length.
[  722.529780][T24312] netlink: 201372 bytes leftover after parsing attributes in process `syz.8.8075'.
[  722.637544][T10756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  722.710392][   T27] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  722.717500][   T27] ath9k_htc: Failed to initialize the device
[  722.771386][ T5800] usb 6-1: ath9k_htc: USB layer deinitialized
[  723.184669][T24335] loop7: detected capacity change from 0 to 512
[  723.253396][T24335] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  723.311214][T24335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12d, mo2=0002]
[  723.320420][T24335] System zones: 1-12
[  723.337129][T24335] EXT4-fs (loop7): orphan cleanup on readonly fs
[  723.340663][T24342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8090'.
[  723.374497][T24335] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.8087: bg 0: block 361: padding at end of block bitmap is not set
[  723.402217][T24335] EXT4-fs (loop7): Remounting filesystem read-only
[  723.409016][T24335] EXT4-fs (loop7): 1 truncate cleaned up
[  723.429613][T24335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  723.552747][T24335] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.8087: error -117 reading directory block
[  723.659240][T24348] loop5: detected capacity change from 0 to 512
[  723.743818][T24348] EXT4-fs error (device loop5): ext4_orphan_get:1424: comm syz.5.8094: bad orphan inode 13
[  723.770806][T24348] ext4_test_bit(bit=12, block=4) = 1
[  723.776137][T24348] is_bad_inode(inode)=0
[  723.783872][T24348] NEXT_ORPHAN(inode)=0
[  723.787997][T24348] max_ino=32
[  723.792839][T22630] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  723.807350][T24348] i_nlink=1
[  723.819406][T24348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.867426][T24341] loop8: detected capacity change from 0 to 32768
[  723.932393][T24341] JBD2: Ignoring recovery information on journal
[  723.940718][T24348] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.8094: Hash code is SIPHASH, but hash not in dirent
[  723.953475][T24348] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8094: Corrupt directory, running e2fsck is recommended
[  723.967204][T24348] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.8094: Hash code is SIPHASH, but hash not in dirent
[  724.000284][T24348] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.8094: Corrupt directory, running e2fsck is recommended
[  724.103244][T24341] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  724.232436][T20867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.425769][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  724.425784][   T28] audit: type=1800 audit(2000000277.780:244): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8091" name="file0" dev="loop8" ino=17058 res=0 errno=0
[  724.616914][T24370] loop7: detected capacity change from 0 to 2048
[  724.656336][T22742] ocfs2: Unmounting device (7,8) on (node local)
[  724.663286][T24373] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  724.953244][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8107'.
[  725.000611][T24380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8107'.
[  725.009775][T24380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8107'.
[  725.718446][T24408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8120'.
[  725.830598][ T5928] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  726.004240][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8127'.
[  726.013614][T24420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8127'.
[  726.023887][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8127'.
[  726.045145][ T5928] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  726.061051][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.069120][ T5928] usb 6-1: Product: syz
[  726.070781][T24420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8127'.
[  726.084620][ T5928] usb 6-1: Manufacturer: syz
[  726.095076][ T5928] usb 6-1: SerialNumber: syz
[  726.119535][ T5928] usb 6-1: config 0 descriptor??
[  726.143831][ T5928] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  726.230516][ T5807] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  726.432329][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.450256][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.472120][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  726.493025][ T5807] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  726.503075][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.515397][ T5807] usb 8-1: config 0 descriptor??
[  726.531397][ T5807] hub 8-1:0.0: USB hub found
[  726.586619][ T5928] sonixb 6-1:0.0: Error writing register 01: -71
[  726.619539][ T5928] sonixb: probe of 6-1:0.0 failed with error -71
[  726.650192][ T5928] usb 6-1: USB disconnect, device number 8
[  726.656774][T24436] loop8: detected capacity change from 0 to 256
[  726.682677][T24436] exfat: Deprecated parameter 'utf8'
[  726.728941][T24436] exfat: Deprecated parameter 'namecase'
[  726.768339][ T5807] hub 8-1:0.0: 9 ports detected
[  726.773712][T24436] exfat: Deprecated parameter 'namecase'
[  726.781581][ T5807] hub 8-1:0.0: insufficient power available to use all downstream ports
[  726.851657][T24436] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  726.982890][ T5807] hub 8-1:0.0: hub_hub_status failed (err = -71)
[  726.989315][ T5807] hub 8-1:0.0: config failed, can't get hub status (err -71)
[  727.070370][ T5807] usb 8-1: USB disconnect, device number 7
[  727.331940][T24452] loop8: detected capacity change from 0 to 1024
[  727.341015][T24452] EXT4-fs: Ignoring removed nomblk_io_submit option
[  727.383563][T24452] EXT4-fs: Ignoring removed nomblk_io_submit option
[  727.415605][T24452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  727.447956][T24452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  727.519948][T24452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  727.754209][   T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  727.776611][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.945805][T24471] __nla_validate_parse: 1 callbacks suppressed
[  727.945823][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8149'.
[  727.987903][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8149'.
[  728.180323][T24479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8153'.
[  728.194740][T24480] netlink: 'syz.7.8156': attribute type 15 has an invalid length.
[  728.546326][T24494] loop8: detected capacity change from 0 to 64
[  729.229819][T24488] loop1: detected capacity change from 0 to 32768
[  729.309212][T24488] ERROR: (device loop1): diAllocAG: error reading iag
[  729.309212][T24488] 
[  729.327290][T24488] ialloc: diAlloc returned -5!
[  729.557125][T24524] loop1: detected capacity change from 0 to 512
[  729.566786][T24523] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8177'.
[  729.662623][T24524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  729.690415][T24524] ext4 filesystem being mounted at /2199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  729.722775][T24520] loop5: detected capacity change from 0 to 4096
[  729.868305][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.023621][T24531] loop8: detected capacity change from 0 to 4096
[  730.092566][T24531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  730.156251][T22742] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.392693][T24545] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8183'.
[  730.561755][T24548] loop1: detected capacity change from 0 to 1024
[  730.770778][ T1144] hfsplus: b-tree write err: -5, ino 4
[  730.923187][T24562] loop1: detected capacity change from 0 to 256
[  730.982830][T24565] tmpfs: Group quota block hardlimit too large.
[  731.026722][T24562] FAT-fs (loop1): Directory bread(block 64) failed
[  731.062341][T24562] FAT-fs (loop1): Directory bread(block 65) failed
[  731.089394][T24562] FAT-fs (loop1): Directory bread(block 66) failed
[  731.119518][T24562] FAT-fs (loop1): Directory bread(block 67) failed
[  731.140498][T24562] FAT-fs (loop1): Directory bread(block 68) failed
[  731.147092][T24562] FAT-fs (loop1): Directory bread(block 69) failed
[  731.201219][T24562] FAT-fs (loop1): Directory bread(block 70) failed
[  731.207816][T24562] FAT-fs (loop1): Directory bread(block 71) failed
[  731.221513][T24571] netlink: 'syz.7.8196': attribute type 1 has an invalid length.
[  731.229626][T24562] FAT-fs (loop1): Directory bread(block 72) failed
[  731.236941][T24571] netlink: 232 bytes leftover after parsing attributes in process `syz.7.8196'.
[  731.250375][T24562] FAT-fs (loop1): Directory bread(block 73) failed
[  731.406062][T24575] ieee802154 phy0 wpan0: encryption failed: -22
[  732.233011][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  732.320452][  T786] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  732.347886][T24609] loop1: detected capacity change from 0 to 4096
[  732.463172][T24609] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  732.520395][  T786] usb 6-1: Using ep0 maxpacket: 32
[  732.541157][  T786] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  732.573361][  T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.613369][  T786] usb 6-1: config 0 descriptor??
[  732.636547][  T786] gspca_main: nw80x-2.14.0 probing 055f:d001
[  733.036813][  T786] gspca_nw80x: reg_r err -71
[  733.047084][  T786] nw80x: probe of 6-1:0.0 failed with error -71
[  733.067048][  T786] usb 6-1: USB disconnect, device number 9
[  733.165668][T24633] netlink: 'syz.1.8235': attribute type 27 has an invalid length.
[  733.184518][T24633] netlink: 'syz.1.8235': attribute type 3 has an invalid length.
[  733.220431][T24633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8235'.
[  733.419774][T24639] loop7: detected capacity change from 0 to 4096
[  733.443887][T24639] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  733.512235][   T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  733.604637][T24645] xt_CT: You must specify a L4 protocol and not use inversions on it
[  734.310764][T24610] Bluetooth: hci5: command 0x0406 tx timeout
[  734.317310][T24610] Bluetooth: hci4: command 0x0406 tx timeout
[  735.245306][T24715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  735.270634][T24713] ieee802154 phy0 wpan0: encryption failed: -90
[  735.346581][T24718] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8269'.
[  736.760287][ T5800] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  736.972818][ T5800] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  736.972847][ T5800] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  736.972863][ T5800] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  736.972880][ T5800] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  736.972899][ T5800] usb 6-1: config 1 has no interface number 1
[  736.972934][ T5800] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  736.974929][ T5800] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  737.118240][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.127065][ T5800] usb 6-1: Product: syz
[  737.137161][ T5800] usb 6-1: Manufacturer: syz
[  737.139620][T24788] loop7: detected capacity change from 0 to 256
[  737.175397][ T5800] usb 6-1: SerialNumber: syz
[  737.398435][T24792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8313'.
[  737.444721][ T5800] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  737.466043][ T5800] usb 6-1: MIDIStreaming interface descriptor not found
[  737.564546][ T5800] usb 6-1: USB disconnect, device number 10
[  737.752198][ T5807] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  737.946327][ T5807] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  737.961215][ T5807] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  737.971317][ T5807] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  737.980611][ T5807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.994909][T24796] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  738.000379][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  738.028648][ T5807] usb 9-1: Quirk or no altest; falling back to MIDI 1.0
[  738.139593][T24815] openvswitch: netlink: Actions may not be safe on all matching packets
[  738.197544][T24813] loop1: detected capacity change from 0 to 1764
[  738.303699][T24813] iso9660: Corrupted directory entry in block 2 of inode 1920
[  738.547426][ T5807] usb 9-1: USB disconnect, device number 3
[  739.036457][T24837] loop7: detected capacity change from 0 to 16
[  739.053934][T24837] erofs: (device loop7): mounted with root inode @ nid 36.
[  739.090827][T24837] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  739.154163][T24837] erofs: (device loop7): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  739.170347][T24837] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  739.192479][T24837] erofs: (device loop7): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  739.211826][T24837] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  739.240270][T24837] erofs: (device loop7): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  739.268545][T24837] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  739.282701][ T1323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  739.293154][T24843] loop5: detected capacity change from 0 to 128
[  739.335958][T24837] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[  739.401062][T24837] erofs: (device loop7): z_erofs_read_folio: read error -95 @ 0 of nid 89
[  739.459161][   T28] audit: type=1800 audit(2000000292.810:245): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8326" name="file2" dev="loop7" ino=89 res=0 errno=0
[  740.122350][T24873] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  740.474353][T24885] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  740.821722][T24891] xt_CT: No such helper "snmp"
[  740.923941][T24898] loop7: detected capacity change from 0 to 2048
[  741.036479][T24898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  741.205635][T24904] xt_recent: Unsupported userspace flags (000000b1)
[  741.400942][T24914] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  741.467287][T24914] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  741.832265][   T29] INFO: task syz-executor:5763 blocked for more than 143 seconds.
[  741.862211][   T29]       Not tainted syzkaller #0
[  741.878018][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  741.904539][T24932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  741.906307][   T29] task:syz-executor    state:D stack:21320 pid:5763  ppid:1      flags:0x00004004
[  741.948264][   T29] Call Trace:
[  741.954579][   T29]  <TASK>
[  741.957721][   T29]  __schedule+0x1553/0x45a0
[  741.979251][   T29]  ? asan.module_dtor+0x20/0x20
[  741.988305][   T29]  ? mark_lock+0x94/0x320
[  742.000958][   T29]  ? lock_chain_count+0x20/0x20
[  742.009564][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  742.022890][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  742.031140][   T29]  schedule+0xbd/0x170
[  742.035282][   T29]  io_schedule+0x80/0xd0
[  742.039551][   T29]  folio_wait_bit_common+0x714/0xfa0
[  742.050197][   T29]  ? folio_wait_bit+0x30/0x30
[  742.055158][   T29]  ? filemap_get_entry+0x379/0x3f0
[  742.065034][   T29]  ? _compound_head+0x120/0x120
[  742.069922][   T29]  ? find_lock_entries+0xc3e/0xfe0
[  742.076544][   T29]  __filemap_get_folio+0xbc/0xbb0
[  742.085917][   T29]  truncate_inode_pages_range+0x46b/0xfb0
[  742.091995][   T29]  ? mapping_evict_folio+0x510/0x510
[  742.097311][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  742.108657][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  742.114459][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  742.119770][   T29]  evict+0x4dd/0x8d0
[  742.131057][   T29]  ? proc_nr_inodes+0x230/0x230
[  742.135959][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  742.145709][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  742.152782][   T29]  evict_inodes+0x606/0x6a0
[  742.157585][   T29]  ? clear_inode+0x150/0x150
[  742.162459][   T29]  generic_shutdown_super+0x97/0x2b0
[  742.167958][   T29]  kill_block_super+0x44/0x90
[  742.172721][   T29]  deactivate_locked_super+0x97/0x100
[  742.178219][   T29]  cleanup_mnt+0x43b/0x4d0
[  742.182756][   T29]  task_work_run+0x1d4/0x260
[  742.187505][   T29]  ? task_work_cancel+0x220/0x220
[  742.192688][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  742.198179][   T29]  exit_to_user_mode_loop+0xe6/0x110
[  742.203661][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  742.209370][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  742.215128][   T29]  do_syscall_64+0x61/0xa0
[  742.219561][   T29]  ? clear_bhb_loop+0x40/0x90
[  742.224395][   T29]  ? clear_bhb_loop+0x40/0x90
[  742.229202][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.235495][   T29] RIP: 0033:0x7fd7b0f9c117
[  742.240031][   T29] RSP: 002b:00007ffceb97f128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  742.248565][   T29] RAX: 0000000000000000 RBX: 00007fd7b100471f RCX: 00007fd7b0f9c117
[  742.256724][   T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceb97f1e0
[  742.265077][   T29] RBP: 00007ffceb97f1e0 R08: 00007ffceb9801e0 R09: 00000000ffffffff
[  742.273304][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceb980270
[  742.281409][   T29] R13: 00007fd7b100471f R14: 00000000000913f7 R15: 00007ffceb9802b0
[  742.289499][   T29]  </TASK>
[  742.292597][   T29] INFO: task syz-executor:5770 blocked for more than 143 seconds.
[  742.300947][   T29]       Not tainted syzkaller #0
[  742.305910][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  742.314852][   T29] task:syz-executor    state:D stack:21608 pid:5770  ppid:1      flags:0x00004004
[  742.324604][   T29] Call Trace:
[  742.327898][   T29]  <TASK>
[  742.330884][   T29]  __schedule+0x1553/0x45a0
[  742.335513][   T29]  ? asan.module_dtor+0x20/0x20
[  742.340494][   T29]  ? mark_lock+0x94/0x320
[  742.345002][   T29]  ? lock_chain_count+0x20/0x20
[  742.349893][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  742.355126][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  742.360941][   T29]  schedule+0xbd/0x170
[  742.365282][   T29]  io_schedule+0x80/0xd0
[  742.369560][   T29]  folio_wait_bit_common+0x714/0xfa0
[  742.375198][   T29]  ? folio_wait_bit+0x30/0x30
[  742.379907][   T29]  ? filemap_get_entry+0x379/0x3f0
[  742.385607][   T29]  ? _compound_head+0x120/0x120
[  742.390917][   T29]  ? find_lock_entries+0xc3e/0xfe0
[  742.396084][   T29]  __filemap_get_folio+0xbc/0xbb0
[  742.401621][   T29]  truncate_inode_pages_range+0x46b/0xfb0
[  742.407374][   T29]  ? mapping_evict_folio+0x510/0x510
[  742.413158][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  742.418214][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  742.423859][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  742.429187][   T29]  evict+0x4dd/0x8d0
[  742.433858][   T29]  ? proc_nr_inodes+0x230/0x230
[  742.438773][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  742.444703][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  742.449953][   T29]  evict_inodes+0x606/0x6a0
[  742.455696][   T29]  ? clear_inode+0x150/0x150
[  742.460637][   T29]  generic_shutdown_super+0x97/0x2b0
[  742.466343][   T29]  kill_block_super+0x44/0x90
[  742.475077][   T29]  deactivate_locked_super+0x97/0x100
[  742.480844][   T29]  cleanup_mnt+0x43b/0x4d0
[  742.485337][   T29]  task_work_run+0x1d4/0x260
[  742.489976][   T29]  ? task_work_cancel+0x220/0x220
[  742.495106][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  742.500906][   T29]  exit_to_user_mode_loop+0xe6/0x110
[  742.506239][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  742.511903][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  742.517538][   T29]  do_syscall_64+0x61/0xa0
[  742.522117][   T29]  ? clear_bhb_loop+0x40/0x90
[  742.526928][   T29]  ? clear_bhb_loop+0x40/0x90
[  742.531719][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.537786][   T29] RIP: 0033:0x7f075499c117
[  742.542563][   T29] RSP: 002b:00007ffeefb32838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  742.551788][   T29] RAX: 0000000000000000 RBX: 00007f0754a0471f RCX: 00007f075499c117
[  742.559809][   T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeefb328f0
[  742.568944][   T29] RBP: 00007ffeefb328f0 R08: 00007ffeefb338f0 R09: 00000000ffffffff
[  742.577308][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeefb33980
[  742.585375][   T29] R13: 00007f0754a0471f R14: 0000000000090df2 R15: 00007ffeefb339c0
[  742.593583][   T29]  </TASK>
[  742.596735][   T29] 
[  742.596735][   T29] Showing all locks held in the system:
[  742.604615][   T29] 2 locks held by kworker/u4:1/12:
[  742.609781][   T29] 1 lock held by khungtaskd/29:
[  742.614938][   T29]  #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  742.625954][   T29] 5 locks held by kworker/u4:7/1144:
[  742.631798][   T29] 2 locks held by getty/5526:
[  742.636821][   T29]  #0: ffff8880210f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  742.646992][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  742.657700][   T29] 1 lock held by syz-executor/5763:
[  742.663041][   T29]  #0: ffff88802cec60e0 (&type->s_umount_key#83){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  742.686633][   T29] 1 lock held by syz-executor/5770:
[  742.694116][   T29]  #0: ffff88807e4ee0e0 (&type->s_umount_key#83){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  742.704719][   T29] 1 lock held by syz.6.7086/22136:
[  742.709942][   T29]  #0: ffff88807e4ee0e0 (&type->s_umount_key#83){++++}-{3:3}, at: super_lock+0x17f/0x3a0
[  742.724957][   T29] 1 lock held by syz.4.7146/22264:
[  742.730234][   T29]  #0: ffff88807e4ee0e0 (&type->s_umount_key#83){++++}-{3:3}, at: super_lock+0x17f/0x3a0
[  742.740417][   T29] 
[  742.742859][   T29] =============================================
[  742.742859][   T29] 
[  742.756291][   T29] NMI backtrace for cpu 0
[  742.760643][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  742.767836][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  742.777894][   T29] Call Trace:
[  742.781187][   T29]  <TASK>
[  742.784130][   T29]  dump_stack_lvl+0x18c/0x250
[  742.788808][   T29]  ? show_regs_print_info+0x20/0x20
[  742.794015][   T29]  ? load_image+0x400/0x400
[  742.798519][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  742.803458][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  742.809633][   T29]  ? _printk+0xde/0x130
[  742.813811][   T29]  ? load_image+0x400/0x400
[  742.818343][   T29]  ? load_image+0x400/0x400
[  742.822858][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  742.829446][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  742.835440][   T29]  watchdog+0xf3d/0xf80
[  742.839629][   T29]  ? watchdog+0x1e1/0xf80
[  742.843960][   T29]  kthread+0x2fa/0x390
[  742.848025][   T29]  ? hungtask_pm_notify+0x90/0x90
[  742.853074][   T29]  ? kthread_blkcg+0xd0/0xd0
[  742.857656][   T29]  ret_from_fork+0x48/0x80
[  742.862074][   T29]  ? kthread_blkcg+0xd0/0xd0
[  742.866669][   T29]  ret_from_fork_asm+0x11/0x20
[  742.871443][   T29]  </TASK>
[  742.875243][   T29] Sending NMI from CPU 0 to CPUs 1:
[  742.880651][    C1] NMI backtrace for cpu 1
[  742.880662][    C1] CPU: 1 PID: 1078 Comm: kworker/u4:6 Not tainted syzkaller #0
[  742.880677][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  742.880687][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  742.880707][    C1] RIP: 0010:__asan_memset+0x5/0x40
[  742.880737][    C1] Code: 0f 1f 44 00 00 f3 0f 1e fa 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 bc ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00
[  742.880749][    C1] RSP: 0018:ffffc900046ff4c8 EFLAGS: 00000246
[  742.880761][    C1] RAX: ffffc900046ffaa8 RBX: ffffc900046ff5e0 RCX: ffff888023cd8000
[  742.880773][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900046ff5f8
[  742.880783][    C1] RBP: ffffc900046ff5f8 R08: ffff888023cd8000 R09: 0000000000000003
[  742.880793][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900046ff5a8
[  742.880803][    C1] R13: dffffc0000000000 R14: ffffffff88723ed2 R15: ffffffff8f89d92a
[  742.880814][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  742.880826][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  742.880836][    C1] CR2: 00007f1542dde2f8 CR3: 000000002e529000 CR4: 00000000003506e0
[  742.880850][    C1] Call Trace:
[  742.880856][    C1]  <TASK>
[  742.880862][    C1]  unwind_next_frame+0x1648/0x2970
[  742.880883][    C1]  ? skb_release_data+0x634/0x800
[  742.880905][    C1]  ? skb_release_data+0x634/0x800
[  742.880925][    C1]  ? stack_trace_save+0x100/0x100
[  742.880943][    C1]  arch_stack_walk+0x144/0x190
[  742.880961][    C1]  ? consume_skb+0xb2/0x110
[  742.880983][    C1]  stack_trace_save+0xaa/0x100
[  742.881000][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  742.881017][    C1]  ? chacha_block_generic+0xc8/0xdd0
[  742.881041][    C1]  kasan_set_track+0x4e/0x70
[  742.881057][    C1]  ? kasan_set_track+0x4e/0x70
[  742.881071][    C1]  ? kasan_save_free_info+0x2e/0x50
[  742.881088][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  742.881103][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  742.881117][    C1]  ? __kmem_cache_free+0xba/0x1e0
[  742.881136][    C1]  ? skb_release_data+0x634/0x800
[  742.881179][    C1]  ? __kmem_cache_free+0xba/0x1e0
[  742.881197][    C1]  kasan_save_free_info+0x2e/0x50
[  742.881215][    C1]  ____kasan_slab_free+0x126/0x1e0
[  742.881233][    C1]  slab_free_freelist_hook+0x130/0x1a0
[  742.881247][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  742.881265][    C1]  ? skb_release_data+0x634/0x800
[  742.881285][    C1]  __kmem_cache_free+0xba/0x1e0
[  742.881307][    C1]  skb_release_data+0x634/0x800
[  742.881336][    C1]  consume_skb+0xb2/0x110
[  742.881356][    C1]  nsim_dev_trap_report_work+0x76f/0xb00
[  742.881381][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  742.881399][    C1]  process_scheduled_works+0xa5d/0x15d0
[  742.881431][    C1]  ? assign_work+0x430/0x430
[  742.881451][    C1]  ? assign_work+0x3d0/0x430
[  742.881470][    C1]  worker_thread+0xa55/0xfc0
[  742.881500][    C1]  kthread+0x2fa/0x390
[  742.881514][    C1]  ? pr_cont_work+0x560/0x560
[  742.881530][    C1]  ? kthread_blkcg+0xd0/0xd0
[  742.881545][    C1]  ret_from_fork+0x48/0x80
[  742.881561][    C1]  ? kthread_blkcg+0xd0/0xd0
[  742.881575][    C1]  ret_from_fork_asm+0x11/0x20
[  742.881601][    C1]  </TASK>
[  742.889500][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  743.211970][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  743.219516][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  743.229590][   T29] Call Trace:
[  743.232866][   T29]  <TASK>
[  743.235796][   T29]  dump_stack_lvl+0x18c/0x250
[  743.240478][   T29]  ? show_regs_print_info+0x20/0x20
[  743.245676][   T29]  ? load_image+0x400/0x400
[  743.250182][   T29]  panic+0x2dc/0x730
[  743.254197][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  743.259852][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  743.264365][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  743.270523][   T29]  watchdog+0xf7c/0xf80
[  743.274687][   T29]  ? watchdog+0x1e1/0xf80
[  743.279021][   T29]  kthread+0x2fa/0x390
[  743.283082][   T29]  ? hungtask_pm_notify+0x90/0x90
[  743.288104][   T29]  ? kthread_blkcg+0xd0/0xd0
[  743.292688][   T29]  ret_from_fork+0x48/0x80
[  743.297106][   T29]  ? kthread_blkcg+0xd0/0xd0
[  743.301689][   T29]  ret_from_fork_asm+0x11/0x20
[  743.306478][   T29]  </TASK>
[  743.309615][   T29] Kernel Offset: disabled
[  743.313928][   T29] Rebooting in 86400 seconds..