last executing test programs:

7m46.361383777s ago: executing program 1 (id=563):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUjYpDBRuwGC9Uk7uqg1NwipADBxfBoCGNTTFR08tgSwtdpCDVDv4DOtVRBZ1EFJyLg+Cg59JNmqE4iINE7vJU8G/weQ33ue8H7p6HbzvshRng9+5ykwoJh/18RNDApIw6pUb52szfTW6MgotmXjf5zOREuLh0q9HptBbyF/Lk/imAH0n3twpfcFQxECrI593lZkNuBAwrdNVsQK5G8SFOnZ77iAk9zpHrOAwL61xS9KRQgwOlfvduKVxcOj3fbcy15lq3fX/mfPlsuXzOL92c77TKrxD3gSiesIIbkAkYc1dI1bm/pfcxLYjbVpEjxQHpOhtbzqkT0wOUu8MQ4V1hQOarbufVFU6SvRZfvsph4SlOwFSNMYUmOaiKXFYvxdOf9M+UIrvqOGeadzqza1eV/EpvVmQnK942qYKHX/SYiVfDId6zFjEVUY3YjNj+xqS8iU/Z26tejZ/PzXSM45DmXqPfX/DS8EF08Pgg4OdgPPmdSu6Vg7fmGxN82XuxLMuyLMuyLMuy/gN/AgAA//96xWPy")
openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x800, 0x0)

7m45.98390802s ago: executing program 1 (id=566):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m45.696435621s ago: executing program 1 (id=571):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x2, 0x4, 0x7fffffff})

7m45.467211275s ago: executing program 1 (id=574):
syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@gid}]}, 0x1, 0x2db, &(0x7f0000000200)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

7m45.148089894s ago: executing program 1 (id=576):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x1, 0x0, @mcast2, 0xa}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000360000000008"], 0x18}}], 0x1, 0x0)

7m44.613888148s ago: executing program 1 (id=582):
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
pipe2$watch_queue(0x0, 0x80)

7m43.808764176s ago: executing program 32 (id=582):
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
pipe2$watch_queue(0x0, 0x80)

5m24.558192721s ago: executing program 2 (id=2155):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x4, 0x4)

5m24.263021329s ago: executing program 2 (id=2158):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x10, 0x84, 0x5}], 0x20}, 0x24048800)

5m23.910086837s ago: executing program 2 (id=2161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff8a, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)

5m23.562490389s ago: executing program 2 (id=2164):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xe0, 0xc2e, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy7FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEAPEiXR7966oz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7yWxqv3HfVL7f5bt8eGR7avdjhVNfuq8uVP/fSZs+e+9MLQ+W5eas98QP377bPx2ujVi42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291ojoBjZuv35q8fn2hceb5s5s+vj34/sATxwYvDD178plu2bHhkZHRjSL13vK1e25Ix04zPA5FEScjxXPf+2lqRUQRez8X9Qc79lsdrjpxourE2PBI1ZHpdmtmsfzwSvdEFBGNnkrN7jnafiyi1v9A+7CzZsRS2fyywSfK7o3OteZb16anGlda84vtxfbszJXUaW3Zn0YUcT5FLEfE6sDdu+uPImqR4jtH19K1iOjrnocvVhODd25HsY993IWynY3+iOXiERizA2wging1UvzsneMxka8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfM94tFUiyL+shz/C2tpsroedK8rl77W+MrM9dmest3ryke8P9x1pXhI94fDW/LBOODXpnoU0aqu+Gvp3n+zAwAAAAAAAAAAAAAAAMD9djiK+EykeOU//qSaVxzVvPSjF4b+cPBX+3rKPf0h+0kR8XxELBW7m5N7KE8MvJKupPSQ5xI/zupRxJ/m+X/fetiNAQAAAAAAAAAAAAAAAAAAeKwV8ZNI8eK7x9Ny9K4p3p650bjaujbdWRW2u/Zvd8309fX19UbqZDPneM6lnMs5V3Ku5owi18/ZzDmecynncs6VnKs5oy/Xz9nMOZ5zKedyzpWcqzmjluvnbOYcz7mUcznnSs7VnHFA1u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIX0SKb39jLUWKiGbEeHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1LyzrRYRqfq343j5y7loHirzk9EcKvOlaF7M2aqy1vzWQ2g/e9OfivhxpBiov31nwPP493fe3fkaxFvf3Hj32Von+7ofDr4/8MSxoxeGRn7j6Z1ep+0acOJSe+bW7cbY8MjIaM/mWj76J3u2DebjFven60TEwhtvvt6anp6av/cX5VdgD9UfoRep9rj01IvqRdQORDMeTt95DJT3//cixe+++5/dG37n/l+PX+m8u3OHj5//2cb9/8WtO9rl/b+2tV6+/5f39O3u/0/2bHsx/26kvxZRX7w5138sor7wxpsn2zdbN6ZuTM2cO3Xqy0NDXz57qv9QRP16e3qq59V9OV0AAAAAAAAAAAAAAAAAD04q4vcjRevHa6kREber+VqDF4aePflMX/RV8602zdt+bfTqxcbLszfn5qcWFqYmG2Mz7YnZyandHq5eTfcaGx7Zl858qMP73P7D9Zdn596Yb9/448VtPz9Sv3htYXG+NbH9x3E4iohm75YTVYPHhkeqRk+3WzNV1SvbTqb/6PpTEf8VKSbONdLn87Y8/3/rDP9N8/+Xtu5on+b/f6JnW3nMlIr4eaT4nb96Oj5ftfNI3HXOcrm/ixQnzn8ul4tDZbluGzrPFejMDCzL/l+k+KdfbC7bnQ/55EbZ07s+sY+IcvyPRorv/8V34zfzts3Pf9h+/I9s3dE+jf9TPduObHpewZ67Th7/k5HipSffjt/K2z7o+R/dZ28cz4XvPJ9jn8b/Uz3bBvNxf/v+dB0AAAAAAAAAAOCR1p+K+PtI8cORWnohb9vN3/+b3Lqjffr7X5/u2TZ5f9Yr+tAXez6pAAAAAHBA9KcifhIpbiy+fWcO9eb53z3zP39vY/7ncNryafXnfL9WPTfgfv75X6/BfNzxvXcbAAAAAAAAAAAAAAAAAAAADpSUinghr6c+Xs3nn9xxPfWVSPHK/zyXy6VjZbnuOvCD1a/1y7MzJy9OT89OtBZb16anGqNzrYmpsu5TkWLtbz+X6xbV+urd9eY7a7xvrMU+HylG/qFbtrMWe3dt8qc2yp4uy34iUvz3P24u213H+lMbZc+UZf8mUnz9X7Yve2yj7Nmy7HcjxY++3uiWPVKW7T4f9dMbZZ+fmC32YVQAAAAAAAAAAAAAAAAAAAB43PSnIv48UvzvzeU7c/nz+v/9PW8rb32zZ73/LW5X6/wPVuv/7/T6Xtb/r54rsLTTUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRoq5y2tpZaB831G/1J65dXtseGT7aodTVbOvKl/+1E+fOXvuSy8Mne/mB9e/3z4Tr41evdh4efbm3PzUwsLUZGNspj0xOzm16z3stf5WJ6oT0Lj5+q3J69cXGmeeP7vp49uD7w88cWzwwtCzJ5/plh0bHhkZ7SlT67/no98l7bD9UBTx15Hiue/9NP1wIKKIvZ+LD/nu7LfDVSdOVJ0YGx6pOjLdbs0slh9e6Z6IIqLRU6nZPUcPYCz2pBmxVDa/bPCJsnujc6351rXpqcaV1vxie7E9O3MldVpb9qcRRZxPEcsRsTpw9+76o4jXI8V3jq6lfx2I6Ouehy9eHv3qqTM7t6PYxz7uQtnORn/EcvEIjNkBNhBF/HOk+Nk7x+PfBiJq0fmJL0S8WuYPIt6Kznin8otxLuK9bb5HPJpqUcT/l+N/YS29M1BeD7rXlUtfa3xl5vpsT9nudeWRvz88SAf82lSPIn5UXfHX0r/77xoAAAAAAAAAAAAAAADgACni1yPFi+8eT9X84DtzitszNxpXW9emO9P6unP/unOm19fX1xupk82c4zmXci7nXMm5mjOKXD9ns8z6+vp4fr+UcznnSs7VnNGX6+ds5hzPuZRzOedKztWcUcv1czZzjudcyrmccyXnas44IHP3AAAAAAAAAAAAAAAAAACAj5ei+ifFt7+xltYHOutLj0cnV6wH+rH3ywAAAP//Iun4rQ==")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5m23.029662878s ago: executing program 2 (id=2169):
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0xf4240, 0x0, 0x0)

5m22.373696679s ago: executing program 2 (id=2177):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x8a002, 0x0)
write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="fd"], 0x8)

5m21.805730047s ago: executing program 33 (id=2177):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x8a002, 0x0)
write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="fd"], 0x8)

5m3.55784368s ago: executing program 6 (id=2383):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c", 0x0, 0x1004003, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m2.22518062s ago: executing program 6 (id=2392):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000000040)=@tcp, 0x2}, 0x20)

5m1.950920047s ago: executing program 6 (id=2396):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x535, &(0x7f0000000400)="$eJzs3cFvI1cZAPBvvHE22c02KXCASi2FFmUrWDtpaBtxKEVCcKqEKPclJE4UxYmj2Gk3UQXZvwAJIUDiBBcuSPwBSGglLhwRUiU4g1QEQrAFCQ7QQbbHSXDGiVOceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImM6WF7IpDtpT83XvPXx7uTklkaZv/DWJJFvW2VeSzW9mm01ExFe/HPGN5GTc+t7+xlK1WtnJ6uXG5na5vrd/Z31zaa2yVtlaWJh/efGVxZcW5wbSzlsR8eoX//i9b//kS6/+4jNv/eHun29/s5nWVLb+eDvOaey0le2mF69PdG2w8wGDPYqa7Sl2KpP9bXP/AvMBAKC35jn+hyLikxHxQkzHtdNPZwEAAIDHUPr5qfh3EpHmG++xHAAAAHiMFFpjYJNCKRsLMBWFQqnUHsP7kbhRqNbqjU+v1na3VtpjZWeiWFhdr1bmsrHCM1FMmvX5Vvmo/mJXfSEinoyI705Ptuql5Vp1ZdhffgAAAMAVcbPr+v8f0+3rfwAAAGDEzAw7AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xnlzb3ej9uadlUp9o7S5u1xaru1sl9ZqtbXWM/s2z9pftVbb/mxs7d4rNyr1Rrm+t393s7a71bi7HhOX0iAAAADghCc//uB3SUQcfG6yNTWNDzsp4FKMHZaSbJ7T+3//RHv+7iUlBVyKa3285t3r+cudJ8Djbax7QY++Doye4rATAIYuOWN9z8E7v87mnxhsPgAAwODNfiz//v/Z9wUOCpeQHnCBdGK4uro+59Pp821+MNBkgEvVuv/f70AeJwswUop9jQAERtn/ff//TGl6roQAAICBm2pNSaGUfb03FYVCqRRxq/WzAMVkdb1amYuIJyLit9PF6836fGvL5MxrBgAAAAAAAAAAAAAAAAAAAAAAAACgLU2TSAEAAICRFlH4U/LL9rP8Z6efn+r+fmA8+VfrJ4HHI+KtH77x/XtLjcbOfHP53w6XN36QLX9xGN9gAAAAAN061+mt+T+HnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+a9h28vd6Y+Xj45qLh/+UJEzOTFH4uJ1nwiihFx4+9JjB3bLomIawOIf3A/Ij6aFz9ppnUYMi/+IN6EM+LHTPYu5MW/OYD4cJU9aB5/Xsvrf4V4tjXP739jEf9T/6B6H//i8Ph3rUf/v9VnjKfe+Vm5Z/z7EU+N5R9/OvGTHvGf6zP+17+2v99rXfqjiNnO50/riHc8wlGp3NjcLtf39u+sby6tVdYqWwsL8y8vvrL40uJceXW9Wsn+zY3xnad//v5p7b+R+/mXZNn0bv/zOfvL+0z6zzv3Hn64Uzk4Gf/2cznxf/Xj7BUn4xeyOJ/Kys31s53yQbt83DM//c0zp7V/5aj9xfP8/9/utdNuJzrK0/3+6QAAF6C+t7+xVK1Wdka20LxKfwTSUHgEC98a6A7TNE2bfSpn1YOI6Gc/SQy4pYX8fI4Kx48AcXzVsI9MAADAoB2d/Q87EwAAAAAAAAAAAAAAAAAAALi6LuMpa90xjx6BnAziEdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx3wAAAP//mB7UAQ==")
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0)

5m0.899940802s ago: executing program 6 (id=2405):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

5m0.487611319s ago: executing program 6 (id=2409):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

4m59.957543139s ago: executing program 6 (id=2416):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@utf8no}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x1, 0x276, &(0x7f0000000640)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4m53.094118462s ago: executing program 4 (id=2478):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16)

4m52.811723778s ago: executing program 4 (id=2481):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

4m52.596708648s ago: executing program 4 (id=2484):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000007c0))

4m52.435785453s ago: executing program 4 (id=2486):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000016c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@errors_continue}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}], [{@appraise}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

4m51.974881079s ago: executing program 4 (id=2491):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "1280c1a7993aeb6c460bc3248b5a71352c785e4368b4fcc782ba5d6396fe9fdc", "f41af0ab978316a01758909dd274df3fe261fb530f63dedce471c90814830ebc", "9a46cb165a83699432ee5acc6bab59e04a0a996591a8be5ff5eb12143a576911", "856ffce7319432263571fa8b9e59187f3a48bb631ffaf8ee756a3285f3d23aa6", "34203ff2d6abfb7ec6acd7198b7f7e15bb1b751323cdb644bf49c7f833d86bc5", "8b5dbeb337afd02fcb6f58e4"}})

4m51.508478012s ago: executing program 4 (id=2496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)

4m50.970790817s ago: executing program 34 (id=2496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)

4m44.803425031s ago: executing program 35 (id=2416):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@utf8no}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x1, 0x276, &(0x7f0000000640)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni")
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

4m35.15508435s ago: executing program 5 (id=2609):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002f80)={0x0, 0x5, @start={0x0, 0x0, "2e490eb94cd50f354055836b40ab2509e16fdc3a8ce35396a8b95fc38ae145639fd3a9df8eba13e5eba3020ba7b3aa03d2e0da6e1a8e69fe2d0f3b494384247d86102980c2b1aaad548ae8c55fc20735701b9b5a3d52959798b481acc879441a158149dcd96ffe16f4a0411a904991fce3a384eba46a96c9007cb1386bdb311fc52acc494ffc435004f10543201550099662237c1d4522a64a70c6e22e3e1bd2410e8ab15b98ed69a4ba7dbe3840d3b9675052e6001f6671ba3ae440a94b56e06e3ff78ea30cf878d11b179f72aa8848538e048f5be29e9b51d3be7011769f3f3e06e43e36ed8b7289c3d2f979d4a6c945b4810a8b37147a3b7a12b6628583f4f402ef32658ab211cc2a21d79bcb5ec4c25a294bdd70f60d6fc4db77e34471b2f4b443e6e2fd10e9b5c5c9c93f34518d145cc38689510f17d302a2e1fb98ba984c5e2f92753d743aa0d04405a103f085f531e516aeba02a9fc680dc9e2762d465b962728379f8717d2322c7186c61e4402af3e016fa172f045e0be5c229a2739ad06027e9d078cf8e8cb0cb705a3f4f2b224368351ff7dc61317ae9542ea9c6e038013c9004d15394e8a2fa81894c5a8ddc55c70d2e2f60ea065b110cd1d434cdea2dbe8e89ab257481883e16b4b1a4a09e88f15f8c756a55da6a64dda8505bf48293b8c93791dd13d1237315121703c0e3d3738ad0e97ffcf215a9e7a643b04391770c7d3d13cfd23d3e100c3bbb5c18bb108215aa11ccc617e44e44c7ac2ffbea6dff47d350ff89af4b0679312366df3e70c9a4eb18742490535757940ba8b5abc16853ca7419e2bdf3485a1446728e1153e2dd5aeb63adaa707fa1e60eb1ece03ea32ecbef043fe80d44e74077f0eb537d1b40c8a3530d132f6b752cc2abe17ac8eccbb83875d9447eb6510cd9dfa1a87741d0c0705ba0723144f3b29207a03dca4f934fcadd251fbdc0d57491f0d899fdb511c95e4aeeecf37f7225cafda2927a236e0d0f9eaaee28042595f1927ef638e80527f63b2d4f950efbc9c6be075d531df123b175b9762eac6632a8f9c226ba658d1b51f674103f466706cf3b14a98ef92d19a773bb94ddf92de4e1ea3548bfd71e63a43f63707148b4c199b24018340ab2e521aeee7791eb68fd5c2158ec3363bd71bd060cb5964c2de33517473d8254387d92310061bfeaf4a1f090040dcc7a2bc51227d183d95960a24385c2ad148a3b887bf8265fc7fa2c57c25ad79f84fc7a3e3cc6008daf7b793e6ba74c3f91db3b21c74eaf59afb35eba35a3e1adb33181ecb9a5a603729e7feca65e9594a19ea5a8141a68b4b29b6532bae15abe9f353b337a5aa3a5fc4bf83858f7ba3b1c813f0a3adb7e01a41bebe41a0b289682812d852c13eca6c3ea3dc8198c62ef2e12b87df774b7ee0b15692b08f1d04ac5883df8f012a7245f82cb1ff98921d", "a5e7ee6ef270ac0cfb3614d177a709c174c7a817a16a5dadb0229afd452f73e50c98928b0fbae87fd76764a40c9199387285f878948ec6f83b95940b3fc94fc9b4f4ec0d73038bb6e34e705fb2ab11d2511fd9f23260b9791486234217b0a49b73f84e4550f93e5951c0e6c40e32f2a245d5532100a9e0cb1c877ce35458ecccfcb2db6654b9428bc9c953ae5bcf936b65395fbdf02b107575a52fb5fb31606fbf6069c63994bcca2b65f347ff9878ee9910bb1c4d924547163e4a7d19951cdf12a37aa42a0ead39c7039445b27465d49d26d37fe9d6d1938be8ffb75e1834e4955fb05586b6d14f70797cb34ea30fee328c997f6f9230ec7fb32b93faa9a58d808c6153264f525075d10d2232f887523c8a95dc3e2a68ce69aa103ef81adde9926db157f921acb70cc94a8a60d4afc6646f4b668560a9a41b4247d97a3e70ab738ae18fda7e552a22ca31b776e521217fd45c2e116769fb22d700bbf8a13de26dc85b923f12f398c8322977ce14228ad5b6ef854c64858b73ede4e7474ede21f560c33b9b1f5f6fa0df9c0aa68a93c4e7cd13a7c0b97b20bf1a3ec78681121b45884a66d8efda5b947ea66f91c2d31dc0e1dd8204cf2bc7ef64c11d18473b317558932118cd350bc33cecc375685dbfc3de03837f22c5401f8277573fcf2817f11211c91ae50cbd36e5271993913053b030b9108caf9dd01ad662d6fe678d6a70743225ca984883172ec9d67dedfd58c425379cb2eb0fd6d5054cb0d3fa0b78f6ea4176f77fe8270f095d99a6212cb63c53ac7cc338c48939a590797c42ff36a5dbbbc94736b63c54aa5f4c85d3c2503a75b553d5d2ab072abb5d4fecac8bc7096e434e9fbd74643136a878620263b2a916e0fcfd9dbfa3bb622f6fa742f92e226742ff4034e35cf2d792f178e08651a7edd858ca62179a0435eadbd3f65348b8d4db86aa4b705e6f2f7af1729753633a1e7b7cc79269efe1b8c1bd20365d47150e272d7b43287c87d628cf500be98106c97a94cbf99852934020401c62345a719e45583cc1ae8f0a7230d227d23b8d5151cf02f52a5a8163669a224bf300f0b319f7f3a5497ac8350d1d616e7656267a2c9080b810e05fc262ace26c99cd0ffc3eca62aa6024d6d96a4aff2539cea99fca692b4dc91274100ec1bbb2db06c115eca9323295883502b558df1c8c3131c33f5a2b5c782336ef7f3e59f52a6042dd9cc8dba3272320d937dd8f4774fec7529e4b8279088bdd0f4275a09240ebf5205b6dda1eaa54cc6d06ed8f4356085e9e6ecec85fead8ff9e39b00c30e98cfadb897db3d7208c396536ec61c1f517d21d1502ecee1346923570ea7393b079c02c96b0bb8fba2b31210b2f90d242c032fe0594739200ce9c6a6cbe701e2f2ddee1ca0416b32a6939312f4ac6cab0261c2884450512b7e26da9483ab65339ee8016"}, [0x2, 0x1, 0x8, 0x0, 0x9, 0x7fff, 0x1000, 0x5, 0x6, 0x8001, 0x6, 0x8001, 0x1, 0x0, 0x7fff, 0x6, 0x9, 0x6, 0x7, 0xc, 0x7fff, 0x1, 0xffffffffffffff83, 0x3, 0x1, 0x3, 0x0, 0x7, 0x7, 0x2, 0x12b, 0x4, 0x5, 0xffffffffffffffff, 0x8, 0x3, 0xc, 0x7fffffff, 0x4, 0x2, 0x2, 0x9, 0xbb0, 0xdf9, 0x7, 0x9, 0xfffffffffffffa2c, 0x8, 0x9, 0x3, 0x3b9c, 0x579, 0x3, 0x5, 0x7fffffff, 0x81, 0x7fffffffffffffff, 0xf6, 0x8, 0x7, 0x9, 0x2a30, 0xc, 0x100000000]})

4m33.165882841s ago: executing program 5 (id=2614):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x101001)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000003c0)=""/204)

4m32.211108467s ago: executing program 5 (id=2620):
r0 = socket$inet6(0xa, 0x3, 0x7)
getsockopt(r0, 0x1, 0x4, &(0x7f0000000440)=""/46, &(0x7f00000004c0)=0x2e)

4m31.993790878s ago: executing program 5 (id=2622):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1008c, &(0x7f0000000240)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@errors_remount}, {@discard}, {@dmask={'dmask', 0x3d, 0x4}}]}, 0x5, 0x1518, &(0x7f0000002280)="$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")
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)

4m31.750200145s ago: executing program 5 (id=2624):
r0 = openat$fuse(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4004e502, 0x0)

4m30.488732065s ago: executing program 5 (id=2628):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'wg2\x00', &(0x7f0000000cc0)=@ethtool_per_queue_op={0x1b, 0x4}})

4m29.704718719s ago: executing program 36 (id=2628):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'wg2\x00', &(0x7f0000000cc0)=@ethtool_per_queue_op={0x1b, 0x4}})

6.989059146s ago: executing program 8 (id=5673):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002f80)={0x2, 0x5, @start={0x0, 0x0, "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", "a5e7ee6ef270ac0cfb3614d177a709c174c7a817a16a5dadb0229afd452f73e50c98928b0fbae87fd76764a40c9199387285f878948ec6f83b95940b3fc94fc9b4f4ec0d73038bb6e34e705fb2ab11d2511fd9f23260b9791486234217b0a49b73f84e4550f93e5951c0e6c40e32f2a245d5532100a9e0cb1c877ce35458ecccfcb2db6654b9428bc9c953ae5bcf936b65395fbdf02b107575a52fb5fb31606fbf6069c63994bcca2b65f347ff9878ee9910bb1c4d924547163e4a7d19951cdf12a37aa42a0ead39c7039445b27465d49d26d37fe9d6d1938be8ffb75e1834e4955fb05586b6d14f70797cb34ea30fee328c997f6f9230ec7fb32b93faa9a58d808c6153264f525075d10d2232f887523c8a95dc3e2a68ce69aa103ef81adde9926db157f921acb70cc94a8a60d4afc6646f4b668560a9a41b4247d97a3e70ab738ae18fda7e552a22ca31b776e521217fd45c2e116769fb22d700bbf8a13de26dc85b923f12f398c8322977ce14228ad5b6ef854c64858b73ede4e7474ede21f560c33b9b1f5f6fa0df9c0aa68a93c4e7cd13a7c0b97b20bf1a3ec78681121b45884a66d8efda5b947ea66f91c2d31dc0e1dd8204cf2bc7ef64c11d18473b317558932118cd350bc33cecc375685dbfc3de03837f22c5401f8277573fcf2817f11211c91ae50cbd36e5271993913053b030b9108caf9dd01ad662d6fe678d6a70743225ca984883172ec9d67dedfd58c425379cb2eb0fd6d5054cb0d3fa0b78f6ea4176f77fe8270f095d99a6212cb63c53ac7cc338c48939a590797c42ff36a5dbbbc94736b63c54aa5f4c85d3c2503a75b553d5d2ab072abb5d4fecac8bc7096e434e9fbd74643136a878620263b2a916e0fcfd9dbfa3bb622f6fa742f92e226742ff4034e35cf2d792f178e08651a7edd858ca62179a0435eadbd3f65348b8d4db86aa4b705e6f2f7af1729753633a1e7b7cc79269efe1b8c1bd20365d47150e272d7b43287c87d628cf500be98106c97a94cbf99852934020401c62345a719e45583cc1ae8f0a7230d227d23b8d5151cf02f52a5a8163669a224bf300f0b319f7f3a5497ac8350d1d616e7656267a2c9080b810e05fc262ace26c99cd0ffc3eca62aa6024d6d96a4aff2539cea99fca692b4dc91274100ec1bbb2db06c115eca9323295883502b558df1c8c3131c33f5a2b5c782336ef7f3e59f52a6042dd9cc8dba3272320d937dd8f4774fec7529e4b8279088bdd0f4275a09240ebf5205b6dda1eaa54cc6d06ed8f4356085e9e6ecec85fead8ff9e39b00c30e98cfadb897db3d7208c396536ec61c1f517d21d1502ecee1346923570ea7393b079c02c96b0bb8fba2b31210b2f90d242c032fe0594739200ce9c6a6cbe701e2f2ddee1ca0416b32a6939312f4ac6cab0261c2884450512b7e26da9483ab65339ee8016"}, [0x2, 0x1, 0x8, 0x0, 0x9, 0x7fff, 0x1000, 0x5, 0x6, 0x8001, 0x6, 0x8, 0x1, 0x0, 0x7fff, 0x6, 0x7ff, 0x6, 0x7, 0xc, 0x7fff, 0x1, 0xffffffffffffff83, 0x3, 0x1, 0x3, 0x0, 0x7, 0x7, 0x2, 0x12b, 0x4, 0x5, 0xffffffffffffffff, 0x8, 0x3, 0xc, 0x7fffffff, 0x4, 0x2, 0x2, 0x9, 0xbb0, 0xdf9, 0x7, 0x9, 0xfffffffffffffa2c, 0x8, 0x9, 0x3, 0x3ba0, 0x579, 0x3, 0x5, 0x7fffffff, 0x81, 0x7fffffffff7fffff, 0xf6, 0x8, 0x7, 0xfad, 0x2a30, 0xc, 0x100000000]})

4.195256071s ago: executing program 8 (id=5703):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffa}]})
process_mrelease(0xffffffffffffffff, 0x0)

3.63909773s ago: executing program 8 (id=5710):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80300000800000028f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r0)

3.361843089s ago: executing program 3 (id=5713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

3.279849038s ago: executing program 8 (id=5716):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

2.970881989s ago: executing program 3 (id=5719):
syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa223405d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72ed6abb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6a"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff04010009050a3a00000000000905"], 0x0)

2.954577682s ago: executing program 0 (id=5721):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000))

2.746357302s ago: executing program 8 (id=5722):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0xff, 0x59d5, &(0x7f00000007c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

2.734355685s ago: executing program 9 (id=5723):
r0 = syz_open_dev$dri(&(0x7f00000010c0), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000))

2.607439684s ago: executing program 0 (id=5725):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x2, 0x103, 0x6, {0x5, 0x7, 0x7ff, 0x3}})

2.514602611s ago: executing program 9 (id=5726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.367043418s ago: executing program 0 (id=5727):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000))

2.231730328s ago: executing program 9 (id=5729):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.135789902s ago: executing program 0 (id=5730):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xa, 0x2, 0x1, "444900e1b0faa9b0071c937f7f00002e0c040000000000feffffffffffffff00", 0x30324c4a})

2.001117069s ago: executing program 9 (id=5732):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)

1.88140529s ago: executing program 0 (id=5733):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001dc"], 0x0, 0x0, 0x0}, 0x0)

1.823083578s ago: executing program 9 (id=5734):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect(0x0, 0x49, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x79, 0x16, 0xae, 0x20, 0x4e2, 0x1424, 0x8a0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x66, 0xb9, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}]}}]}}]}}, 0x0)

1.144304503s ago: executing program 3 (id=5740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x6, 0x0, 0x0, 0xdb, 0x6, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, [0xffffffff, 0x89ff]}})

898.097334ms ago: executing program 3 (id=5741):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$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")
statx(0xffffffffffffff9c, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080))

897.441892ms ago: executing program 7 (id=5742):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)

738.215975ms ago: executing program 7 (id=5743):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
pidfd_send_signal(r0, 0x32, &(0x7f00000000c0)={0x1d, 0x2, 0x6}, 0x0)

541.430904ms ago: executing program 8 (id=5744):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
epoll_create(0x1)

524.66891ms ago: executing program 3 (id=5745):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0xf, 0x0, @val=@perf_event={0x6}}, 0x18)

522.439747ms ago: executing program 7 (id=5746):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20c3, 0x1ef)
execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={[], 0xffffffffffffff7b}, 0x0)

341.248853ms ago: executing program 7 (id=5747):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl(r0, 0xffffffff, 0x0)

315.749459ms ago: executing program 9 (id=5748):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a0001032bbd7000fbdbdf2502000000e6ffffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8014)

289.151014ms ago: executing program 3 (id=5749):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008)

169.89512ms ago: executing program 0 (id=5750):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a)

117.457059ms ago: executing program 7 (id=5751):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

0s ago: executing program 7 (id=5752):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendto(r0, 0x0, 0x4d, 0x0, &(0x7f0000000480)=@llc={0x1a, 0x200, 0x0, 0x0, 0x0, 0x0, @local}, 0x80)

kernel console output (not intermixed with test programs):

.611545][T16815] ipt_ECN: cannot use operation on non-tcp rule
[  468.705261][   T25] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  468.746649][   T25] usb 8-1: USB disconnect, device number 5
[  468.903475][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'.
[  469.178069][T16833] loop9: detected capacity change from 0 to 64
[  469.552406][T16845] openvswitch: netlink: Duplicate key (type 32).
[  469.573300][T16849] loop8: detected capacity change from 0 to 8
[  469.871085][T16852] loop7: detected capacity change from 0 to 4096
[  469.898691][T16852] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  469.982653][T16858] loop9: detected capacity change from 0 to 1024
[  470.039710][T16852] ntfs3(loop7): Failed to load $Extend (-22).
[  470.042382][T16858] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  470.062249][T16852] ntfs3(loop7): Failed to initialize $Extend.
[  470.111075][T16852] ntfs3(loop7): ino=5, "/" indx_read
[  470.222157][T16858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.539883][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.889839][T16878] loop8: detected capacity change from 0 to 4096
[  470.935359][T16885] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4134'.
[  471.007168][T16853] loop3: detected capacity change from 0 to 32768
[  471.092102][T16853] ERROR: (device loop3): diAllocAG: error reading iag
[  471.092102][T16853] 
[  471.156780][T16853] ERROR: (device loop3): remounting filesystem as read-only
[  471.190618][T16853] ialloc: diAlloc returned -5!
[  472.183999][T16921] overlay: Bad value for 'workdir'
[  472.406761][T16930] loop8: detected capacity change from 0 to 256
[  472.536529][T16935] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4159'.
[  472.600809][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'.
[  472.729189][T16930] FAT-fs (loop8): Directory bread(block 64) failed
[  472.770172][T16930] FAT-fs (loop8): Directory bread(block 65) failed
[  472.797884][T16930] FAT-fs (loop8): Directory bread(block 66) failed
[  472.811902][T16930] FAT-fs (loop8): Directory bread(block 67) failed
[  472.819643][T16930] FAT-fs (loop8): Directory bread(block 68) failed
[  472.828296][T16930] FAT-fs (loop8): Directory bread(block 69) failed
[  472.837338][T16930] FAT-fs (loop8): Directory bread(block 70) failed
[  472.844394][T16930] FAT-fs (loop8): Directory bread(block 71) failed
[  472.851810][T16930] FAT-fs (loop8): Directory bread(block 72) failed
[  472.890138][T16930] FAT-fs (loop8): Directory bread(block 73) failed
[  473.473197][T16963] loop9: detected capacity change from 0 to 256
[  473.619167][T16963] FAT-fs (loop9): Directory bread(block 64) failed
[  473.625740][T16963] FAT-fs (loop9): Directory bread(block 65) failed
[  473.679660][T16963] FAT-fs (loop9): Directory bread(block 66) failed
[  473.686233][T16963] FAT-fs (loop9): Directory bread(block 67) failed
[  473.728848][T16963] FAT-fs (loop9): Directory bread(block 68) failed
[  473.778703][T16963] FAT-fs (loop9): Directory bread(block 69) failed
[  473.785381][T16963] FAT-fs (loop9): Directory bread(block 70) failed
[  473.819973][T16963] FAT-fs (loop9): Directory bread(block 71) failed
[  473.837345][T16963] FAT-fs (loop9): Directory bread(block 72) failed
[  473.854269][T16963] FAT-fs (loop9): Directory bread(block 73) failed
[  473.984306][T16963] syz.9.4172: attempt to access beyond end of device
[  473.984306][T16963] loop9: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  474.069133][T16963] syz.9.4172: attempt to access beyond end of device
[  474.069133][T16963] loop9: rw=0, sector=1160, nr_sectors = 4 limit=256
[  474.123190][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  474.123207][   T29] audit: type=1800 audit(1738648304.502:133): pid=16963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4172" name="file0" dev="loop9" ino=76 res=0 errno=0
[  474.360947][T16959] loop3: detected capacity change from 0 to 32768
[  474.459610][T16953] loop7: detected capacity change from 0 to 32768
[  474.495716][T16959] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  474.541741][T16959] (syz.3.4170,16959,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8
[  474.566921][T16959] (syz.3.4170,16959,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  474.582554][T16959] (syz.3.4170,16959,1):ocfs2_mknod:298 ERROR: status = -2
[  474.590594][T16959] (syz.3.4170,16959,1):ocfs2_mknod:502 ERROR: status = -2
[  474.599145][T16959] (syz.3.4170,16959,1):ocfs2_create:675 ERROR: status = -2
[  474.822439][ T5848] ocfs2: Unmounting device (7,3) on (node local)
[  474.835107][T16953] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,read_only,reconstruct_alloc,nocow
[  474.884245][T16953] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  474.893156][T16953] bcachefs (loop7): Version upgrade required:
[  474.893156][T16953] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  474.893156][T16953] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  474.893156][T16953]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  474.978732][T16953] bcachefs (loop7): dropping and reconstructing all alloc info
[  475.069804][T16953] bcachefs (loop7): accounting_read... done
[  475.108805][T16953] bcachefs (loop7): alloc_read... done
[  475.114382][T16953] bcachefs (loop7): stripes_read... done
[  475.157320][T16953] bcachefs (loop7): snapshots_read... done
[  475.166888][ T5894] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  475.195139][T16953] bcachefs (loop7): done starting filesystem
[  475.343906][T12394] bcachefs (loop7): shutting down
[  475.355788][ T5894] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  475.379939][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.435334][ T5894] usb 1-1: config 0 descriptor??
[  475.454660][T12394] bcachefs (loop7): shutdown complete
[  475.493852][ T5894] gspca_main: sunplus-2.14.0 probing 055f:c420
[  475.650300][T17005] loop8: detected capacity change from 0 to 64
[  475.664467][T17003] netlink: 'syz.9.4187': attribute type 28 has an invalid length.
[  475.684114][T17003] netlink: 'syz.9.4187': attribute type 3 has an invalid length.
[  475.712211][T17003] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4187'.
[  475.924536][ T5894] gspca_sunplus: reg_w_riv err -71
[  475.935613][ T5894] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  475.975870][ T5894] usb 1-1: USB disconnect, device number 25
[  476.209588][T17018] loop8: detected capacity change from 0 to 256
[  477.393925][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'.
[  477.688832][T17017] loop9: detected capacity change from 0 to 32768
[  477.742077][T17017] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[  477.808423][T17017] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[  477.919200][T17017] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms
[  477.992801][   T25] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[  478.010265][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[  478.219795][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 209ms
[  478.284046][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[  478.292810][T17017] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[  478.463996][ T5956] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  478.590692][ T5851] Bluetooth: hci3: unexpected event for opcode 0x1005
[  478.643567][ T5956] usb 1-1: Using ep0 maxpacket: 16
[  478.660025][ T5956] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping
[  478.675305][ T5956] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  478.691671][ T5956] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  478.722115][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  478.793536][ T5956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  478.821526][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.829563][ T5956] usb 1-1: Product: syz
[  478.863051][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4219'.
[  478.874278][ T5956] usb 1-1: Manufacturer: syz
[  478.878910][ T5956] usb 1-1: SerialNumber: syz
[  479.117923][T17076] netlink: 'syz.7.4223': attribute type 2 has an invalid length.
[  479.138683][ T5956] usb 1-1: 0:2 : does not exist
[  479.143667][T17076] netlink: 'syz.7.4223': attribute type 1 has an invalid length.
[  479.178021][ T5956] usb 1-1: unit 4 not found!
[  479.181019][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4223'.
[  479.260922][ T5956] usb 1-1: USB disconnect, device number 26
[  479.566334][T17089] cgroup2: Unexpected value for 'nsdelegate'
[  479.692730][ T6310] udevd[6310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.920943][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4234'.
[  480.037553][T17105] loop7: detected capacity change from 0 to 512
[  480.151691][T17105] EXT4-fs: Ignoring removed i_version option
[  480.157737][T17105] EXT4-fs: Ignoring removed nobh option
[  480.168971][T17109] loop8: detected capacity change from 0 to 256
[  480.278211][T17117] netlink: 'syz.9.4239': attribute type 21 has an invalid length.
[  480.303644][T17105] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.311840][T17109] FAT-fs (loop8): Directory bread(block 64) failed
[  480.341766][T17105] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.429529][T17109] FAT-fs (loop8): Directory bread(block 65) failed
[  480.436287][T17109] FAT-fs (loop8): Directory bread(block 66) failed
[  480.438288][T17122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4243'.
[  480.472904][T17109] FAT-fs (loop8): Directory bread(block 67) failed
[  480.503620][T17105] EXT4-fs error (device loop7): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.7.4236: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0
[  480.513552][T17109] FAT-fs (loop8): Directory bread(block 68) failed
[  480.575023][T17105] EXT4-fs error (device loop7) in ext4_delete_entry:2758: Corrupt filesystem
[  480.588405][T17109] FAT-fs (loop8): Directory bread(block 69) failed
[  480.635457][T17109] FAT-fs (loop8): Directory bread(block 70) failed
[  480.657671][T17109] FAT-fs (loop8): Directory bread(block 71) failed
[  480.666966][T17109] FAT-fs (loop8): Directory bread(block 72) failed
[  480.700814][T17109] FAT-fs (loop8): Directory bread(block 73) failed
[  480.702416][T12394] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  480.920458][T17132] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615)
[  480.962427][T17132] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  481.012649][   T29] audit: type=1800 audit(1738648311.392:134): pid=17109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4238" name="file1" dev="loop8" ino=78 res=0 errno=0
[  481.033164][    C1] vkms_vblank_simulate: vblank timer overrun
[  481.494290][T17152] loop7: detected capacity change from 0 to 512
[  481.574247][T17152] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  481.611333][T17152] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4258: invalid indirect mapped block 2683928664 (level 1)
[  481.680865][T17152] EXT4-fs (loop7): 1 truncate cleaned up
[  481.701221][T17152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.835119][T12394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.865525][T17163] ip6gre1: entered allmulticast mode
[  481.975964][T17168] xt_l2tp: invalid flags combination: 0
[  482.383765][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4270'.
[  482.803165][T17195] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4279'.
[  483.048142][T17197] bridge3: entered promiscuous mode
[  484.057761][T17234] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  484.538827][T17207] loop3: detected capacity change from 0 to 32768
[  484.615338][T17207] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  484.805661][T17230] loop7: detected capacity change from 0 to 32768
[  484.848965][T17230] (syz.7.4296,17230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  484.879878][T17230] (syz.7.4296,17230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  484.973194][T17207] XFS (loop3): Ending clean mount
[  484.991434][T17207] XFS (loop3): Quotacheck needed: Please wait.
[  484.994488][T17230] JBD2: Ignoring recovery information on journal
[  485.102470][T17207] XFS (loop3): Quotacheck: Done.
[  485.168635][T17230] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  485.222462][ T5848] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  485.277879][T17252] loop9: detected capacity change from 0 to 8
[  485.308035][T17252] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  485.360570][T17232] loop8: detected capacity change from 0 to 32768
[  485.399423][T17252] cramfs: Error -3 while decompressing!
[  485.419733][T17252] cramfs: ffffffff9a53cae8(26)->ffff888056764000(4096)
[  485.454053][T17252] cramfs: Error -5 while decompressing!
[  485.473336][T17232] ERROR: (device loop8): diRead: i_ino != di_number
[  485.473336][T17232] 
[  485.492334][T17252] cramfs: ffffffff9a53cb02(26)->ffff8880523f4000(4096)
[  485.529510][T17252] cramfs: Error -3 while decompressing!
[  485.551619][T17232] loop8: detected capacity change from 0 to 512
[  485.563081][T17252] cramfs: ffffffff9a53cb1c(16)->ffff888059121000(4096)
[  485.570003][T17252] cramfs: Error -3 while decompressing!
[  485.589190][T17232] EXT4-fs: Ignoring removed nomblk_io_submit option
[  485.643067][T17232] ext4: Unexpected value for 'discard'
[  485.660704][T17252] cramfs: ffffffff9a53cae8(26)->ffff888056764000(4096)
[  485.714368][T12394] ocfs2: Unmounting device (7,7) on (node local)
[  485.738647][   T29] audit: type=1800 audit(1738648316.138:135): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4303" name="file2" dev="loop9" ino=348 res=0 errno=0
[  486.462409][T17268] netlink: 'syz.7.4305': attribute type 1 has an invalid length.
[  487.199183][T17284] netlink: 'syz.9.4318': attribute type 1 has an invalid length.
[  487.230955][T17284] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4318'.
[  487.407103][T17266] loop8: detected capacity change from 0 to 32768
[  487.506072][T17266] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  487.892536][T12512] ocfs2: Unmounting device (7,8) on (node local)
[  488.012312][T17277] loop7: detected capacity change from 0 to 32768
[  488.066147][T17277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4313 (17277)
[  488.169814][T17277] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  488.218486][T17277] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  488.260685][T17277] BTRFS info (device loop7): using free-space-tree
[  488.581412][T17327] loop9: detected capacity change from 0 to 64
[  488.719677][T12394] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  489.622444][T17353] loop7: detected capacity change from 0 to 1024
[  489.719224][T17353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.788635][T17361] loop9: detected capacity change from 0 to 8
[  489.921705][T17353] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  489.968494][T17353] /dev/loop7: Can't open blockdev
[  490.115879][T12394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.188822][T17373] SET target dimension over the limit!
[  490.287930][   T58] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  490.309553][T17375] netlink: 'syz.8.4353': attribute type 1 has an invalid length.
[  490.327587][T17375] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4353'.
[  490.487391][   T58] usb 1-1: Using ep0 maxpacket: 16
[  490.504203][   T58] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  490.534141][   T58] usb 1-1: config 0 has no interface number 0
[  490.571984][   T58] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  490.613480][   T58] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  490.643123][   T58] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  490.709325][   T58] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  490.721555][   T58] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  490.744780][   T58] usb 1-1: Product: syz
[  490.763332][   T58] usb 1-1: SerialNumber: syz
[  490.801353][   T58] usb 1-1: config 0 descriptor??
[  490.807450][T17367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  490.821296][   T58] cm109 1-1:0.8: invalid payload size 1024, expected 4
[  490.826933][T17392] netlink: zone id is out of range
[  490.843198][T17392] netlink: zone id is out of range
[  490.861743][T17393] (syz.7.4361,17393,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  490.867494][T17392] netlink: zone id is out of range
[  490.871715][   T58] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input22
[  490.896805][T17392] netlink: set zone limit has 8 unknown bytes
[  490.928306][T17393] (syz.7.4361,17393,0):ocfs2_fill_super:1177 ERROR: status = -22
[  491.145680][    C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  491.363094][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  491.372219][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  491.386195][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  491.393705][ T5956] usb 1-1: USB disconnect, device number 27
[  491.399742][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  491.399767][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  491.501711][ T5956] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  491.781765][T17419] ax25_connect(): syz.3.4373 uses autobind, please contact jreuter@yaina.de
[  492.356774][ T5956] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  492.551253][ T5956] usb 1-1: config 0 has an invalid interface number: 186 but max is 1
[  492.570377][ T5956] usb 1-1: config 0 has no interface number 1
[  492.599610][ T5956] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[  492.624899][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.648910][ T5956] usb 1-1: Product: syz
[  492.653116][ T5956] usb 1-1: Manufacturer: syz
[  492.665991][ T5956] usb 1-1: SerialNumber: syz
[  492.695876][ T5956] usb 1-1: config 0 descriptor??
[  492.718765][ T5956] hub 1-1:0.186: Invalid hub with more than one config or interface
[  492.753335][ T5956] hub 1-1:0.186: probe with driver hub failed with error -22
[  492.830863][T17453] misc userio: Invalid payload size
[  492.884958][   T58] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  492.928728][T17455] loop7: detected capacity change from 0 to 1024
[  492.973057][ T5894] usb 1-1: USB disconnect, device number 28
[  493.056051][   T58] usb 10-1: Using ep0 maxpacket: 32
[  493.065281][   T58] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  493.093359][T17455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.127743][   T58] usb 10-1: config 0 has no interface number 0
[  493.191725][   T58] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  493.222185][   T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.253626][   T58] usb 10-1: Product: syz
[  493.267782][   T58] usb 10-1: Manufacturer: syz
[  493.283652][   T58] usb 10-1: SerialNumber: syz
[  493.321683][   T58] usb 10-1: config 0 descriptor??
[  493.352819][T12394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.365474][   T58] smsc95xx v2.0.0
[  493.369158][   T58] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  493.434363][   T58] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22
[  493.608908][T17473] loop8: detected capacity change from 0 to 1024
[  493.642216][    T9] usb 10-1: USB disconnect, device number 5
[  493.737651][T17473] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.768743][T17473] EXT4-fs error (device loop8): ext4_lookup:1813: comm syz.8.4399: inode #12: comm syz.8.4399: iget: illegal inode #
[  493.789130][T17473] EXT4-fs (loop8): Remounting filesystem read-only
[  493.836852][T12512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.525790][T17507] netlink: 'syz.3.4414': attribute type 3 has an invalid length.
[  494.592761][T17507] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4414'.
[  494.628785][   T29] audit: type=1326 audit(1738648325.038:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.9.4416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x0
[  494.881420][T17520] IPv6: Can't replace route, no match found
[  494.941386][T17523] loop7: detected capacity change from 0 to 8
[  495.391275][T17538] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  496.073106][T17564] netlink: 'syz.0.4443': attribute type 2 has an invalid length.
[  496.099704][T17564] f�����: entered promiscuous mode
[  496.141992][T17567] loop7: detected capacity change from 0 to 256
[  496.207887][T17567] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  496.827277][T17587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4454'.
[  496.851843][T17589] netlink: 'syz.3.4455': attribute type 10 has an invalid length.
[  496.920850][T17589] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  497.180198][ T5894] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  497.375259][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  497.389907][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42737, setting to 1024
[  497.440010][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  497.469995][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  497.498226][ T5894] usb 1-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a
[  497.525538][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.575498][ T5894] usb 1-1: Product: syz
[  497.591998][ T5894] usb 1-1: Manufacturer: syz
[  497.610490][ T5894] usb 1-1: SerialNumber: syz
[  497.639024][ T5894] usb 1-1: config 0 descriptor??
[  497.742571][T17570] loop8: detected capacity change from 0 to 32768
[  497.813808][T17570] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  497.853127][ T5894] usb 1-1: USB disconnect, device number 29
[  497.888746][T17619] loop9: detected capacity change from 0 to 164
[  497.960938][T17619] Unable to read rock-ridge attributes
[  498.022305][T17619] Unable to read rock-ridge attributes
[  498.047602][T17570] XFS (loop8): Ending clean mount
[  498.075796][T17570] XFS (loop8): Quotacheck needed: Please wait.
[  498.175400][T17570] XFS (loop8): Quotacheck: Done.
[  498.349528][T17631] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  498.440653][T12512] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  498.604283][T17638] loop9: detected capacity change from 0 to 512
[  498.647213][T17638] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  498.754471][T17638] EXT4-fs (loop9): orphan cleanup on readonly fs
[  498.848552][ T5894] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  498.863779][T17638] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #3: comm syz.9.4475: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  498.895377][T17646] netlink: 'syz.7.4480': attribute type 11 has an invalid length.
[  498.930996][T17638] EXT4-fs error (device loop9): ext4_quota_enable:7104: comm syz.9.4475: Bad quota inode: 3, type: 0
[  498.972911][T17638] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  499.017702][T17638] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  499.038628][ T5894] usb 4-1: Using ep0 maxpacket: 16
[  499.048749][T17638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  499.057480][ T5894] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9
[  499.090566][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.107237][ T5894] usb 4-1: Product: syz
[  499.114109][ T5894] usb 4-1: Manufacturer: syz
[  499.147278][ T5894] usb 4-1: SerialNumber: syz
[  499.190792][ T5894] usb 4-1: config 0 descriptor??
[  499.198585][T17638] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  499.227524][T17638] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  499.267064][T17654] loop8: detected capacity change from 0 to 128
[  499.319714][T17654] FAT-fs (loop8): Directory bread(block 3236) failed
[  499.327000][T17654] FAT-fs (loop8): Directory bread(block 3237) failed
[  499.342969][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.345665][T17654] FAT-fs (loop8): Directory bread(block 3238) failed
[  499.386107][T17654] FAT-fs (loop8): Directory bread(block 3239) failed
[  499.394450][T17654] FAT-fs (loop8): Directory bread(block 3240) failed
[  499.434547][ T5894] speedtch 4-1:0.0: speedtch_bind: wrong device class 141
[  499.447012][T17654] FAT-fs (loop8): Directory bread(block 3241) failed
[  499.464295][ T5894] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  499.498390][T17654] FAT-fs (loop8): Directory bread(block 3242) failed
[  499.505219][T17654] FAT-fs (loop8): Directory bread(block 3243) failed
[  499.594506][T17654] FAT-fs (loop8): Directory bread(block 3236) failed
[  499.609864][T17654] FAT-fs (loop8): Directory bread(block 3237) failed
[  499.665406][ T5894] usb 4-1: USB disconnect, device number 14
[  500.134925][T17680] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4494'.
[  500.267793][T17684] loop7: detected capacity change from 0 to 764
[  500.274993][T17684] iso9660: Unknown parameter '�����'
[  500.390898][T17691] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4499'.
[  500.836506][ T5895] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  501.046314][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  501.103914][ T5895] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  501.123149][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.153918][ T5895] usb 1-1: Product: syz
[  501.179535][ T5895] usb 1-1: Manufacturer: syz
[  501.184186][ T5895] usb 1-1: SerialNumber: syz
[  501.228996][ T5895] usb 1-1: config 0 descriptor??
[  501.249703][ T5895] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  501.257168][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.264539][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.546014][   T25] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  501.649204][ T5895] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  501.695387][ T5895] usb 1-1: USB disconnect, device number 30
[  501.723464][   T25] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  501.740515][   T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  501.771210][   T25] usb 8-1: config 0 has no interface number 0
[  501.788197][   T25] usb 8-1: config 0 interface 52 has no altsetting 0
[  501.807971][   T25] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  501.825696][   T25] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  501.846049][   T25] usb 8-1: Product: syz
[  501.857276][   T25] usb 8-1: SerialNumber: syz
[  501.897473][   T25] usb 8-1: config 0 descriptor??
[  501.931741][T17704] loop8: detected capacity change from 0 to 32768
[  502.001015][T17704] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  502.178157][T17716] loop3: detected capacity change from 0 to 32768
[  502.239556][T17716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4511 (17716)
[  502.324385][T17716] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  502.345612][ T5895] usb 8-1: USB disconnect, device number 6
[  502.356152][T17704] XFS (loop8): Ending clean mount
[  502.364074][T17716] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  502.406452][T17704] XFS (loop8): Quotacheck needed: Please wait.
[  502.415459][T17716] BTRFS info (device loop3): using free-space-tree
[  502.641138][T17704] XFS (loop8): Quotacheck: Done.
[  502.694105][T17763] loop9: detected capacity change from 0 to 256
[  502.776323][T17763] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  502.862500][ T5848] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  502.892267][T12512] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  503.404468][T17776] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4530'.
[  504.154356][T17801] loop9: detected capacity change from 0 to 64
[  504.861959][T17822] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4549'.
[  505.278419][T17840] loop9: detected capacity change from 0 to 256
[  505.358261][T17840] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  506.259271][T17873] xt_TCPMSS: Only works on TCP SYN packets
[  506.544661][T17883] netlink: 'syz.8.4572': attribute type 21 has an invalid length.
[  506.565143][T17882] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4573'.
[  506.589459][T17883] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4572'.
[  506.741140][ T5894] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  506.833631][T17889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4575'.
[  506.975760][ T5894] usb 8-1: config 0 has an invalid interface number: 46 but max is 0
[  507.004848][ T5894] usb 8-1: config 0 has no interface number 0
[  507.044711][ T5894] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  507.121080][ T5894] usb 8-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  507.130469][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.152307][ T5894] usb 8-1: Product: syz
[  507.156508][ T5894] usb 8-1: Manufacturer: syz
[  507.190788][ T5894] usb 8-1: SerialNumber: syz
[  507.211885][ T5894] usb 8-1: config 0 descriptor??
[  507.257903][T17879] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  507.268392][ T5894] ums-karma 8-1:0.46: USB Mass Storage device detected
[  507.326491][T17865] loop9: detected capacity change from 0 to 32768
[  507.441080][ T5894] ums-karma 8-1:0.46: probe with driver ums-karma failed with error -5
[  507.570646][ T5894] usb 8-1: USB disconnect, device number 7
[  507.835064][T17865] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  507.911204][T17865] bcachefs (loop9): recovering from clean shutdown, journal seq 10
[  507.932934][T17865] bcachefs (loop9): Version upgrade required:
[  507.932934][T17865] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  507.932934][T17865] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  507.932934][T17865]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  508.042737][T17865] bcachefs (loop9): dropping and reconstructing all alloc info
[  508.101126][T17865] bcachefs (loop9): accounting_read... done
[  508.147387][T17865] bcachefs (loop9): alloc_read... done
[  508.159899][T17865] bcachefs (loop9): stripes_read... done
[  508.165647][T17865] bcachefs (loop9): snapshots_read... done
[  508.214095][T17865] bcachefs (loop9): check_allocations... done
[  508.392037][T17865] bcachefs (loop9): going read-write
[  508.453568][T17865] bcachefs (loop9): done starting filesystem
[  508.471566][T17947] netlink: 'syz.8.4591': attribute type 2 has an invalid length.
[  508.694205][T17955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.733042][T17865] bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX
[  508.733084][T17865] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0  compress lz4 ptr: 0:34:8 gen 0, shutting down
[  508.908763][   T25] bcachefs (loop9): going read-only
[  508.909484][T17865] bcachefs (loop9): inconsistency detected - emergency read only at journal seq 10
[  508.932250][   T25] bcachefs (loop9): flushing journal and stopping allocators, journal seq 10
[  508.952040][T17865] 5 transaction updates for bch2_write_index_default journal seq 0
[  508.952085][T17865]   update: btree=extents cached=0 bch2_trans_update+0x1e29/0x2550
[  508.952096][T17865]     old u64s 5 type deleted 536870913:8:U32_MAX len 0 ver 0
[  508.952108][T17865]     new u64s 6 type inline_data 536870913:8:U32_MAX len 8 ver 0: datalen 8: 0000000000000000
[  508.952120][T17865]   update: btree=extents cached=0 bch2_trans_update+0x186f/0x2550
[  508.952133][T17865]     old u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0  compress lz4 ptr: 0:34:8 gen 0
[  508.952147][T17865]     new u64s 7 type extent 536870913:24:U32_MAX len 16 ver 0: durability: 1 crc: c_size 8 size 24 offset 8 nonce 0 csum none 0:0  compress lz4 ptr: 0:34:8 gen 0
[  508.952163][T17865]   update: btree=inodes cached=1 bch2_extent_update_i_size_sectors+0xccb/0x11a0
[  508.952175][T17865]     old u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: 
[  508.952185][T17865]     mode=100755
[  508.952194][T17865]     flags=(15300000)
[  508.952203][T17865]     journal_seq=5
[  508.952212][T17865]     hash_seed=b68791a594a6d5ae
[  508.952222][T17865]     hash_type=siphash
[  508.952231][T17865]     bi_size=9000
[  508.952241][T17865]     bi_sectors=24
[  508.952250][T17865]     bi_version=0
[  508.952260][T17865]     bi_atime=2780562352
[  508.952270][T17865]     bi_ctime=2780562352
[  508.952280][T17865]     bi_mtime=2780562352
[  508.952290][T17865]     bi_otime=2780562352
[  508.952300][T17865]     bi_uid=0
[  508.952309][T17865]     bi_gid=0
[  508.952319][T17865]     bi_nlink=1
[  508.952327][T17865]     bi_generation=0
[  508.952337][T17865]     bi_dev=0
[  508.952346][T17865]     bi_data_checksum=0
[  508.952356][T17865]     bi_compression=0
[  508.952366][T17865]     bi_project=0
[  508.952375][T17865]     bi_background_compression=0
[  508.952386][T17865]     bi_data_replicas=0
[  508.952396][T17865]     bi_promote_target=0
[  508.952406][T17865]     bi_foreground_target=0
[  508.952416][T17865]     bi_background_target=0
[  508.952425][T17865]     bi_erasure_code=0
[  508.952435][T17865]     bi_fields_set=0
[  508.952445][T17865]     bi_dir=4096
[  508.952454][T17865]     bi_dir_offset=1896155912177158345
[  508.952464][T17865]     bi_subvol=0
[  508.952474][T17865]     bi_parent_subvol=0
[  508.952484][T17865]     bi_nocow=0
[  508.952494][T17865]     bi_depth=0
[  508.952503][T17865]     bi_inodes_32bit=0
[  508.952513][T17865]     new u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: 
[  508.952523][T17865]     mode=100755
[  508.952533][T17865]     flags=(15300000)
[  508.952542][T17865]     journal_seq=5
[  508.952551][T17865]     hash_seed=b68791a594a6d5ae
[  508.952561][T17865]     hash_type=siphash
[  508.952571][T17865]     bi_size=9000
[  508.952580][T17865]     bi_sectors=24
[  508.952588][T17865]     bi_version=0
[  508.952596][T17865]     bi_atime=2780562352
[  508.952605][T17865]     bi_ctime=2780562352
[  508.952614][T17865]     bi_mtime=2780562352
[  508.952624][T17865]     bi_otime=2780562352
[  508.952633][T17865]     bi_uid=0
[  508.952643][T17865]     bi_gid=0
[  508.952651][T17865]     bi_nlink=1
[  508.952661][T17865]     bi_generation=0
[  508.952670][T17865]     bi_dev=0
[  508.952679][T17865]     bi_data_checksum=0
[  508.952688][T17865]     bi_compression=0
[  508.952697][T17865]     bi_project=0
[  508.952705][T17865]     bi_background_compression=0
[  508.952716][T17865]     bi_data_replicas=0
[  508.952725][T17865]     bi_promote_target=0
[  508.952735][T17865]     bi_foreground_target=0
[  508.952745][T17865]     bi_background_target=0
[  508.952754][T17865]     bi_erasure_code=0
[  508.952764][T17865]     bi_fields_set=0
[  508.952772][T17865]     bi_dir=4096
[  508.952782][T17865]     bi_dir_offset=1896155912177158345
[  508.952792][T17865]     bi_subvol=0
[  508.952802][T17865]     bi_parent_subvol=0
[  508.952812][T17865]     bi_nocow=0
[  508.952822][T17865]     bi_depth=0
[  508.952831][T17865]     bi_inodes_32bit=0
[  508.952840][T17865]   update: btree=alloc cached=0 bch2_trans_start_alloc_update+0xa65/0xdd0
[  508.952853][T17865]     old u64s 5 type deleted 0:34:0 len 0 ver 0
[  508.952863][T17865]     new u64s 13 type alloc_v4 0:34:0 len 0 ver 0: 
[  508.952875][T17865]     gen 0 oldest_gen 0 data_type free
[  508.952886][T17865]     journal_seq_nonempty 0
[  508.952896][T17865]     journal_seq_empty    0
[  508.952907][T17865]     need_discard         0
[  508.952916][T17865]     need_inc_gen         0
[  508.952925][T17865]     dirty_sectors        0
[  508.952935][T17865]     stripe_sectors       0
[  508.952952][T17865]     cached_sectors       0
[  508.952963][T17865]     stripe               0
[  508.952972][T17865]     stripe_redundancy    0
[  508.952983][T17865]     io_time[READ]        0
[  508.952992][T17865]     io_time[WRITE]       0
[  508.953003][T17865]     fragmentation     0
[  508.953012][T17865]     bp_start          8
[  508.953021][T17865]   
[  508.953031][T17865]   update: btree=alloc cached=1 bch2_trans_start_alloc_update+0xa65/0xdd0
[  508.953043][T17865]     old u64s 5 type deleted 0:34:0 len 0 ver 0
[  508.953054][T17865]     new u64s 13 type alloc_v4 0:34:0 len 0 ver 0: 
[  508.953065][T17865]     gen 0 oldest_gen 0 data_type free
[  508.953074][T17865]     journal_seq_nonempty 0
[  508.953082][T17865]     journal_seq_empty    0
[  508.953091][T17865]     need_discard         0
[  508.953100][T17865]     need_inc_gen         0
[  508.953110][T17865]     dirty_sectors        0
[  508.953119][T17865]     stripe_sectors       0
[  508.953129][T17865]     cached_sectors       0
[  508.953139][T17865]     stripe               0
[  508.953148][T17865]     stripe_redundancy    0
[  508.953158][T17865]     io_time[READ]        0
[  508.953167][T17865]     io_time[WRITE]       0
[  508.953176][T17865]     fragmentation     0
[  508.953186][T17865]     bp_start          8
[  508.953196][T17865]   
[  508.953205][T17865] 
[  509.012797][   T25] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 10
[  509.014287][   T25] bcachefs (loop9): unclean shutdown complete, journal seq 10
[  509.590498][T17983] loop3: detected capacity change from 0 to 512
[  509.700451][T17983] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  509.700761][T17983] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  509.700808][T17983] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4604: Failed to acquire dquot type 1
[  509.705266][T17983] EXT4-fs (loop3): 1 truncate cleaned up
[  509.706851][T17983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.706966][T17983] ext4 filesystem being mounted at /1019/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  509.739906][T17984] xt_CT: No such helper "pptp"
[  510.007382][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.457361][T18008] loop3: detected capacity change from 0 to 4096
[  510.491642][T18008] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  510.638046][T18008] ntfs3(loop3): ino=19, mi_enum_attr
[  510.638083][T18008] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  510.689753][T18008] ntfs3(loop3): failed to convert "c46c" to cp860
[  510.701533][T18008] ntfs3(loop3): ino=20, mi_enum_attr
[  511.208111][T18037] ieee802154 phy0 wpan0: encryption failed: -90
[  511.590766][T18050] netlink: 'syz.0.4627': attribute type 10 has an invalid length.
[  511.590791][T18050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4627'.
[  511.638838][T18050] batman_adv: batadv0: Adding interface: vlan1
[  511.638857][T18050] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.638887][T18050] batman_adv: batadv0: Interface activated: vlan1
[  512.218181][T18067] CIFS mount error: No usable UNC path provided in device string!
[  512.218181][T18067] 
[  512.218205][T18067] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  512.970254][T17865] bcachefs (loop9): /file3 offset 0: write error: btree update error: bucket_ref_update
[  513.016772][   T25] bcachefs (loop9): finished waiting for writes to stop
[  513.023751][   T25] bcachefs (loop9): done going read-only, filesystem not clean
[  513.100218][T18054] loop7: detected capacity change from 0 to 32768
[  513.135575][T18085] loop3: detected capacity change from 0 to 2048
[  513.150181][T12798] bcachefs (loop9): shutting down
[  513.215590][T18054] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  513.221249][T18085]  loop3: p1 < > p2 p3 p4 < p5 >
[  513.248231][T14666] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  513.267924][T18085] loop3: p2 size 458752 extends beyond EOD, truncated
[  513.314864][T18085] loop3: p3 start 4284289 is beyond EOD, truncated
[  513.324392][T18085] loop3: p5 size 458752 extends beyond EOD, truncated
[  513.343664][T12798] bcachefs (loop9): shutdown complete
[  513.424803][T14666] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  513.434157][T14666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.443505][T14666] usb 9-1: Product: syz
[  513.449124][T14666] usb 9-1: Manufacturer: syz
[  513.453749][T14666] usb 9-1: SerialNumber: syz
[  513.476890][T14666] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  513.514798][ T5900] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  513.625281][T18054] XFS (loop7): Ending clean mount
[  513.678545][T18054] XFS (loop7): Quotacheck needed: Please wait.
[  513.812018][T18054] XFS (loop7): Quotacheck: Done.
[  513.898576][T12394] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  513.995918][   T25] usb 9-1: USB disconnect, device number 7
[  514.605324][ T5900] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  514.612954][ T5900] ath9k_htc: Failed to initialize the device
[  514.669512][   T25] usb 9-1: ath9k_htc: USB layer deinitialized
[  514.736722][T18129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4661'.
[  515.164477][T18144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4669'.
[  516.551789][T18186] netlink: 'syz.7.4687': attribute type 1 has an invalid length.
[  516.580603][T18187] loop9: detected capacity change from 0 to 512
[  516.634222][T18187] EXT4-fs: Ignoring removed nobh option
[  516.741611][T18187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.770893][T18187] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.824338][T18195] loop8: detected capacity change from 0 to 256
[  516.831617][T18195] exfat: Deprecated parameter 'utf8'
[  516.849843][T18195] exfat: Deprecated parameter 'utf8'
[  516.853226][T18196] PKCS8: Unsupported PKCS#8 version
[  516.862577][T18195] exfat: Deprecated parameter 'utf8'
[  516.865705][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.928614][T18195] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  517.219175][T18203] openvswitch: netlink: IP tunnel dst address not specified
[  517.572861][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4696'.
[  517.702602][ T5956] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  517.832319][ T5900] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  517.866017][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.897587][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.922352][ T5956] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  517.951850][T18198] loop3: detected capacity change from 0 to 32768
[  517.958664][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.979000][T18198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4692 (18198)
[  518.021603][ T5956] usb 9-1: config 0 descriptor??
[  518.033687][ T5900] usb 10-1: too many configurations: 241, using maximum allowed: 8
[  518.074097][T18198] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  518.094884][ T5900] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  518.121583][T18198] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  518.134568][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.150234][ T5900] usb 10-1: Product: syz
[  518.162389][ T5900] usb 10-1: Manufacturer: syz
[  518.172003][ T5900] usb 10-1: SerialNumber: syz
[  518.199759][T18198] BTRFS info (device loop3): using free-space-tree
[  518.242701][ T5895] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  518.248642][ T5956] usbhid 9-1:0.0: can't add hid device: -71
[  518.258068][ T5900] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  518.288287][ T5956] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  518.329210][ T5956] usb 9-1: USB disconnect, device number 8
[  518.332276][T18228] bridge0: port 3(bond0) entered blocking state
[  518.359224][T18228] bridge0: port 3(bond0) entered disabled state
[  518.382366][T18228] bond0: entered allmulticast mode
[  518.410553][T18228] bond_slave_0: entered allmulticast mode
[  518.470099][T18228] bond_slave_1: entered allmulticast mode
[  518.505480][T18228] bond0: entered promiscuous mode
[  518.518714][    C1] usb 10-1: ath9k_htc: invalid pkt_len (fffb)
[  518.526224][T18228] bond_slave_0: entered promiscuous mode
[  518.543315][T18228] bond_slave_1: entered promiscuous mode
[  518.574361][T18228] bridge0: port 3(bond0) entered blocking state
[  518.580830][T18228] bridge0: port 3(bond0) entered forwarding state
[  518.623976][T18243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4701'.
[  518.639860][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4701'.
[  518.721252][ T5956] usb 10-1: USB disconnect, device number 6
[  519.078945][ T5848] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.171068][T18256] netlink: 'syz.0.4706': attribute type 4 has an invalid length.
[  519.246367][T18256] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4706'.
[  519.319142][ T5895] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  519.354655][ T5895] ath9k_htc: Failed to initialize the device
[  519.401354][ T5956] usb 10-1: ath9k_htc: USB layer deinitialized
[  519.835447][T18268] loop8: detected capacity change from 0 to 256
[  520.038702][T18273] netlink: 4160 bytes leftover after parsing attributes in process `syz.0.4714'.
[  520.059511][T18268] FAT-fs (loop8): Directory bread(block 64) failed
[  520.087161][T18268] FAT-fs (loop8): Directory bread(block 65) failed
[  520.128606][T18268] FAT-fs (loop8): Directory bread(block 66) failed
[  520.161536][T18268] FAT-fs (loop8): Directory bread(block 67) failed
[  520.168236][T18268] FAT-fs (loop8): Directory bread(block 68) failed
[  520.233817][T18268] FAT-fs (loop8): Directory bread(block 69) failed
[  520.271173][T18268] FAT-fs (loop8): Directory bread(block 70) failed
[  520.277829][T18268] FAT-fs (loop8): Directory bread(block 71) failed
[  520.298235][T18268] FAT-fs (loop8): Directory bread(block 72) failed
[  520.340748][T18268] FAT-fs (loop8): Directory bread(block 73) failed
[  520.748110][T18292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4720'.
[  520.772737][   T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  520.873283][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4722'.
[  520.891896][T18299] Unsupported ieee802154 address type: 0
[  520.960196][   T25] usb 10-1: Using ep0 maxpacket: 8
[  520.971880][   T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  521.019993][   T25] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  521.051264][   T25] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  521.082219][T18251] loop7: detected capacity change from 0 to 32768
[  521.097952][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.139929][   T25] usb 10-1: Product: syz
[  521.147854][T18251] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  521.156242][   T25] usb 10-1: Manufacturer: syz
[  521.162316][T18251] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  521.180009][   T25] usb 10-1: SerialNumber: syz
[  521.191068][   T25] usb 10-1: config 0 descriptor??
[  521.260744][T18311] loop3: detected capacity change from 0 to 64
[  521.429075][T18251] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  521.652354][T18251] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  521.659148][ T5900] usb 10-1: USB disconnect, device number 7
[  522.911445][T18347] loop3: detected capacity change from 0 to 1024
[  523.072876][T18313] loop8: detected capacity change from 0 to 40427
[  523.119892][T18313] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  523.126890][T18313] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  523.168913][T18313] F2FS-fs (loop8): invalid crc value
[  523.244995][T18313] F2FS-fs (loop8): Found nat_bits in checkpoint
[  523.633273][T18313] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  523.688200][T18313] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  523.800032][T18365] loop9: detected capacity change from 0 to 4096
[  524.034704][T18376] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4748'.
[  524.434197][T18384] loop9: detected capacity change from 0 to 256
[  524.778046][T18392] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  524.877588][T18397] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  525.405326][T18418] netlink: 'syz.9.4764': attribute type 1 has an invalid length.
[  525.450833][T18418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4764'.
[  525.640835][T18423] overlayfs: workdir and upperdir must be separate subtrees
[  525.765842][T18428] geneve2: entered promiscuous mode
[  525.796400][T18428] geneve2: entered allmulticast mode
[  526.124896][T18437] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4771'.
[  526.180671][T18437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.766089][T18411] loop3: detected capacity change from 0 to 32768
[  526.774079][T18411] btrfs: Deprecated parameter 'usebackuproot'
[  526.836208][T18411] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  526.889737][T18411] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4760 (18411)
[  526.906990][T18455] loop9: detected capacity change from 0 to 4096
[  526.944682][T18455] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  527.090167][T18411] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  527.166097][T18411] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  527.179075][T18455] ntfs3(loop9): ino=19, mi_enum_attr
[  527.184411][T18455] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  527.215786][T18411] BTRFS info (device loop3): disk space caching is enabled
[  527.246110][T18411] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  527.272409][T18455] ntfs3(loop9): failed to convert "c46c" to maccyrillic
[  527.291425][T18455] ntfs3(loop9): ino=20, mi_enum_attr
[  527.741336][T18411] btrfs: Deprecated parameter 'usebackuproot'
[  527.795692][T18411] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  527.839927][T18411] BTRFS warning (device loop3 state M): remount supports changing free space tree only from RO to RW
[  527.915717][T18411] BTRFS info (device loop3 state M): enabling free space tree
[  527.973294][T18411] BTRFS info (device loop3 state M): force clearing of disk cache
[  528.038773][T18411] BTRFS info (device loop3 state M): trying to use backup root at mount time
[  528.093818][T18411] BTRFS info (device loop3 state M): disabling disk space caching
[  528.120215][T18511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4794'.
[  528.271878][ T5848] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  528.594244][T18524] loop7: detected capacity change from 0 to 4096
[  528.659139][T18524] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  528.918635][T18524] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  528.981224][T18524] ntfs3(loop7): ino=1b, mi_enum_attr
[  528.990160][T18524] ntfs3(loop7): ino=1b, mi_enum_attr
[  529.311293][T18546] loop3: detected capacity change from 0 to 256
[  529.530699][T18546] FAT-fs (loop3): Directory bread(block 64) failed
[  529.550758][T18546] FAT-fs (loop3): Directory bread(block 65) failed
[  529.581527][T18546] FAT-fs (loop3): Directory bread(block 66) failed
[  529.621910][T18546] FAT-fs (loop3): Directory bread(block 67) failed
[  529.653990][T18546] FAT-fs (loop3): Directory bread(block 68) failed
[  529.667970][T18546] FAT-fs (loop3): Directory bread(block 69) failed
[  529.678697][T18546] FAT-fs (loop3): Directory bread(block 70) failed
[  529.691526][T18546] FAT-fs (loop3): Directory bread(block 71) failed
[  529.699901][T18546] FAT-fs (loop3): Directory bread(block 72) failed
[  529.714853][T18546] FAT-fs (loop3): Directory bread(block 73) failed
[  530.406944][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4828'.
[  530.658396][T18592] netlink: 'syz.8.4833': attribute type 4 has an invalid length.
[  531.046820][T18606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4840'.
[  531.415706][   T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  531.556355][T18626] loop3: detected capacity change from 0 to 16
[  531.599349][T18626] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  531.604619][   T25] usb 8-1: config 0 has an invalid interface number: 11 but max is 0
[  531.635958][   T25] usb 8-1: config 0 has no interface number 0
[  531.643053][   T25] usb 8-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024
[  531.683181][   T25] usb 8-1: config 0 interface 11 has no altsetting 0
[  531.689936][   T25] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  531.722165][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.776250][   T25] usb 8-1: config 0 descriptor??
[  531.803912][T18611] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  531.814164][   T25] keyspan 8-1:0.11: Keyspan 2 port adapter converter detected
[  531.828395][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81
[  531.861211][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82
[  531.921224][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1
[  531.954196][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2
[  531.989308][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 85
[  532.010867][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 5
[  532.059909][   T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  532.095549][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83
[  532.126517][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84
[  532.162975][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3
[  532.205829][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4
[  532.224278][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 86
[  532.253362][   T25] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 6
[  532.274140][   T25] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  532.338244][   T25] usb 8-1: USB disconnect, device number 8
[  532.402064][   T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  532.463899][   T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  532.482134][   T25] keyspan 8-1:0.11: device disconnected
[  532.508768][T18621] loop9: detected capacity change from 0 to 32768
[  532.546331][T18621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4848 (18621)
[  532.548020][T18648] tmpfs: Bad value for 'mpol'
[  532.662225][T18621] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  532.742978][T18621] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  532.784274][T18621] BTRFS info (device loop9): using free-space-tree
[  533.117008][T12798] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  533.132731][T18674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4866'.
[  533.191910][T18678] netlink: 'syz.7.4868': attribute type 5 has an invalid length.
[  533.597865][T18686] loop7: detected capacity change from 0 to 128
[  533.854468][T18692] loop9: detected capacity change from 0 to 256
[  533.862888][T12394] sysv_free_block: flc_count > flc_size
[  533.902458][T12394] sysv_free_block: flc_count > flc_size
[  533.908056][T12394] sysv_free_block: flc_count > flc_size
[  533.933741][T12394] sysv_free_block: flc_count > flc_size
[  533.939338][T12394] sysv_free_block: flc_count > flc_size
[  533.966903][T12394] sysv_free_block: flc_count > flc_size
[  533.980244][T12394] sysv_free_block: flc_count > flc_size
[  534.009055][T12394] sysv_free_block: flc_count > flc_size
[  534.034559][T12394] sysv_free_block: flc_count > flc_size
[  534.091963][T12394] sysv_free_block: flc_count > flc_size
[  534.100598][T12394] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  534.149365][T18646] loop8: detected capacity change from 0 to 32768
[  534.342611][T18706] loop7: detected capacity change from 0 to 1024
[  534.369804][T18706] EXT4-fs: Ignoring removed orlov option
[  534.466898][T18706] EXT4-fs (loop7): Test dummy encryption mode enabled
[  534.484458][T18646] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,read_only,reconstruct_alloc,no_data_io
[  534.508233][T18646] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[  534.516904][T18706] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  534.527462][T18646] bcachefs (loop8): Version upgrade required:
[  534.527462][T18646] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  534.527462][T18646] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  534.527462][T18646]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  534.647748][T18646] bcachefs (loop8): dropping and reconstructing all alloc info
[  534.664298][T18706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  534.747376][T18723] xt_time: invalid argument - start or stop time greater than 23:59:59
[  534.773222][T18646] bcachefs (loop8): error validating btree node on loop8 at btree dirents level 0/0
[  534.773264][T18646]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0  
[  534.773279][T18646]   node offset 0/24: got wrong btree node: got
[  534.773290][T18646]   btree=dirents level=0 seq 9aa2895a59ce4bdf 1
[  534.773301][T18646]   min: POS_MIN
[  534.773310][T18646]   max: SPOS_MAX
[  534.908451][T18712] loop3: detected capacity change from 0 to 4096
[  534.926491][T18712] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  534.987014][T12394] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.008210][T18712] ntfs3(loop3): ino=19, mi_enum_attr
[  535.008246][T18712] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  535.142512][T18712] ntfs3(loop3): ino=5, "/" indx_read
[  535.206825][T18646] bcachefs (loop8): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  535.265672][T18646] bcachefs (loop8): flagging btree dirents lost data
[  535.319172][T18646] bcachefs (loop8): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[  535.401335][T18646] error reading btree root btree=dirents level=0: btree_node_read_error, fixing
[  535.477232][T18646] bcachefs (loop8): scan_for_btree_nodes...
[  535.477352][T18646] bcachefs (loop8): error starting kthread: -4
[  535.506327][T18646] bcachefs (loop8): bch2_fs_recovery(): error EINTR
[  535.541252][T18646] bcachefs (loop8): bch2_fs_start(): error starting filesystem EINTR
[  535.561504][T18646] bcachefs (loop8): shutting down
[  535.673035][T18646] bcachefs (loop8): shutdown complete
[  536.381163][T18767] tracefs: Unknown parameter 'F�q҄��}�Gf�D�+81\��E��Mvݺ�0Ť�O� �^�M��'
[  536.483233][T18728] loop9: detected capacity change from 0 to 40427
[  536.541068][T18728] F2FS-fs (loop9): heap/no_heap options were deprecated
[  536.581721][T18728] F2FS-fs (loop9): invalid crc value
[  536.587071][T18728] F2FS-fs (loop9): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  536.639604][T18728] F2FS-fs (loop9): Found nat_bits in checkpoint
[  536.801188][T18728] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  537.402225][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'.
[  537.792016][T18802] netlink: 'syz.0.4925': attribute type 39 has an invalid length.
[  538.042977][T18809] openvswitch: netlink: Missing key (keys=40, expected=100)
[  538.498653][T18646] bcachefs: bch2_fs_get_tree() error: EINTR
[  539.372876][T18846] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.789030][T18826] loop3: detected capacity change from 0 to 32768
[  539.836267][T18826] read_mapping_page failed!
[  539.861356][T18826] ERROR: (device loop3): txCommit: 
[  539.861356][T18826] 
[  539.934393][T18826] ERROR: (device loop3): remounting filesystem as read-only
[  540.102512][T18862] loop8: detected capacity change from 0 to 1764
[  540.370962][T18828] loop9: detected capacity change from 0 to 32768
[  540.399835][T18828] XFS: attr2 mount option is deprecated.
[  540.522668][T18828] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  540.787505][T18828] XFS (loop9): Ending clean mount
[  540.802174][T18828] XFS (loop9): Quotacheck needed: Please wait.
[  540.996630][T18828] XFS (loop9): Quotacheck: Done.
[  541.033965][T18893] loop3: detected capacity change from 0 to 16
[  541.066688][T18893] erofs (device loop3): mounted with root inode @ nid 36.
[  541.186979][T18899] loop8: detected capacity change from 0 to 1024
[  541.206134][T12798] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  542.834390][T18944] netlink: 'syz.8.4981': attribute type 12 has an invalid length.
[  542.892353][T18947] xt_HMARK: spi-set and port-set can't be combined
[  542.893394][T18948] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4983'.
[  543.183435][T18956] loop9: detected capacity change from 0 to 1024
[  543.483985][ T1098] hfsplus: b-tree write err: -5, ino 4
[  544.146780][   T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  544.363503][   T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  544.376770][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  544.429446][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  544.467698][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.475734][   T25] usb 4-1: Product: syz
[  544.490923][T18999] can: request_module (can-proto-3) failed.
[  544.496797][   T25] usb 4-1: Manufacturer: syz
[  544.501445][   T25] usb 4-1: SerialNumber: syz
[  544.543596][   T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  544.747742][   T25] usb 4-1: USB disconnect, device number 15
[  545.375789][T19029] netlink: 404 bytes leftover after parsing attributes in process `syz.8.5020'.
[  545.468058][T19029] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5020'.
[  545.507277][T19029] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5020'.
[  545.533242][T19029] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5020'.
[  545.604663][T19037] xt_ecn: cannot match TCP bits for non-tcp packets
[  545.634174][T19007] loop9: detected capacity change from 0 to 32768
[  545.662973][T19007] XFS: attr2 mount option is deprecated.
[  545.746753][T19007] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  546.083054][T19007] XFS (loop9): Ending clean mount
[  546.093157][T19059] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5030'.
[  546.136122][T19007] XFS (loop9): Quotacheck needed: Please wait.
[  546.315683][T19007] XFS (loop9): Quotacheck: Done.
[  546.537049][T12798] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  547.014840][T19055] loop8: detected capacity change from 0 to 32768
[  547.093931][T19055] (syz.8.5029,19055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  547.180954][T19055] (syz.8.5029,19055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  547.219298][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5045'.
[  547.308409][T19055] JBD2: Ignoring recovery information on journal
[  547.347372][T19083] loop7: detected capacity change from 0 to 4096
[  547.362804][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5046'.
[  547.389520][T19090] netlink: 'syz.9.5038': attribute type 9 has an invalid length.
[  547.417483][T19083] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  547.439059][T19090] netlink: 244 bytes leftover after parsing attributes in process `syz.9.5038'.
[  547.446350][T19055] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  547.461375][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'.
[  547.591599][T19083] ntfs3(loop7): ino=19, mi_enum_attr
[  547.614424][T19083] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  547.722044][T19083] ntfs3(loop7): failed to convert "c46c" to maccroatian
[  547.763865][T19083] ntfs3(loop7): ino=20, mi_enum_attr
[  547.785425][T12512] ocfs2: Unmounting device (7,8) on (node local)
[  547.856033][T19101] binfmt_misc: register: failed to install interpreter file ./file0
[  548.514870][   T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  548.724535][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  548.776833][   T25] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  548.794322][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  548.806699][   T25] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  548.819548][   T25] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  548.854599][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.889876][   T25] usb 8-1: config 0 descriptor??
[  549.117165][   T25] hdpvr 8-1:0.0: firmware version 0x0 dated 
[  549.154276][   T25] hdpvr 8-1:0.0: untested firmware, the driver might not work.
[  549.323687][   T25] hdpvr 8-1:0.0: device init failed
[  549.344787][ T5895] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  549.362794][   T25] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12
[  549.425086][   T25] usb 8-1: USB disconnect, device number 9
[  549.529079][ T5895] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  549.572525][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.614890][ T5895] usb 1-1: Product: syz
[  549.619098][ T5895] usb 1-1: Manufacturer: syz
[  549.623709][ T5895] usb 1-1: SerialNumber: syz
[  549.636670][T19107] loop9: detected capacity change from 0 to 40427
[  549.671719][ T5895] r8152-cfgselector 1-1: Unknown version 0x0000
[  549.696516][ T5895] r8152-cfgselector 1-1: config 0 descriptor??
[  549.719521][T19107] F2FS-fs (loop9): invalid crc value
[  549.741093][T19107] F2FS-fs (loop9): Found nat_bits in checkpoint
[  549.882945][T19107] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  550.219608][   T25] r8152-cfgselector 1-1: USB disconnect, device number 31
[  550.277265][T19150] loop8: detected capacity change from 0 to 4096
[  550.343991][T19150] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  550.474621][T19150] ntfs3(loop8): Failed to load $Extend (-22).
[  550.481034][T19150] ntfs3(loop8): Failed to initialize $Extend.
[  550.538952][T19150] ntfs3(loop8): ino=1e, mi_enum_attr
[  550.967806][ T5956] IPVS: starting estimator thread 0...
[  551.084228][T19165] IPVS: using max 25 ests per chain, 60000 per kthread
[  551.270100][T19148] loop7: detected capacity change from 0 to 32768
[  551.293872][T19148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5074 (19148)
[  551.311539][T19148] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  551.311629][T19148] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  551.311684][T19148] BTRFS info (device loop7): using free-space-tree
[  551.851603][T12394] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  551.945787][T19204] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  552.312963][T19216] loop9: detected capacity change from 0 to 16
[  552.373453][T19216] erofs (device loop9): mounted with root inode @ nid 36.
[  552.420070][T19219] loop8: detected capacity change from 0 to 256
[  552.524305][T19219] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  552.556707][T19221] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5101'.
[  553.477470][T19249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  553.486508][T19247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5114'.
[  553.650287][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5116'.
[  553.696832][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5116'.
[  553.723644][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5116'.
[  553.751153][T19253] netlink: 512 bytes leftover after parsing attributes in process `syz.9.5118'.
[  553.987199][T19262] netlink: 'syz.0.5121': attribute type 1 has an invalid length.
[  554.007377][   T29] audit: type=1326 audit(1738648384.458:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.9.5123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  554.045322][T19262] netlink: 'syz.0.5121': attribute type 2 has an invalid length.
[  554.077807][T19267] $H�: renamed from bond0 (while UP)
[  554.101519][   T29] audit: type=1326 audit(1738648384.478:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.9.5123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  554.188972][T19267] $H�: entered promiscuous mode
[  554.205536][   T29] audit: type=1326 audit(1738648384.488:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.9.5123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  554.222580][T19267] bond_slave_0: entered promiscuous mode
[  554.272811][T19267] bond_slave_1: entered promiscuous mode
[  554.286335][T19267] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  554.299056][   T29] audit: type=1326 audit(1738648384.488:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.9.5123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  554.354876][   T29] audit: type=1326 audit(1738648384.488:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19263 comm="syz.9.5123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  554.757103][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5132'.
[  555.412806][T19258] loop7: detected capacity change from 0 to 32768
[  555.518305][ T5894] XFS (loop7): Metadata CRC error detected at xfs_sb_read_verify+0x305/0x440, xfs_sb block 0x0 
[  555.589000][ T5894] XFS (loop7): Unmount and run xfs_repair
[  555.642596][ T5894] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  555.671778][ T5894] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  555.680713][ T5894] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  555.711507][ T5894] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  555.720566][ T5894] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40  ....... ......$@
[  555.735862][ T5894] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  555.781488][ T5894] 00000050: 00 00 00 02 00 00 20 00 00 00 00 07 00 00 00 00  ...... .........
[  555.790483][ T5894] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  555.862920][ T5894] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  555.888716][T19258] XFS (loop7): SB validate failed with error -74.
[  555.898629][T19324] netlink: 'syz.8.5149': attribute type 2 has an invalid length.
[  556.402886][ T5900] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  556.611554][ T5900] usb 10-1: Using ep0 maxpacket: 8
[  556.639305][ T5900] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  556.651096][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.712027][ T5900] usb 10-1: Product: syz
[  556.717681][ T5900] usb 10-1: Manufacturer: syz
[  556.727462][ T5900] usb 10-1: SerialNumber: syz
[  556.754709][ T5900] usb 10-1: config 0 descriptor??
[  556.796201][ T5900] gspca_main: se401-2.14.0 probing 047d:5003
[  556.877181][T19349] openvswitch: netlink: Duplicate or invalid key (type 0).
[  556.922536][T19349] openvswitch: netlink: Actions may not be safe on all matching packets
[  557.043424][   T29] audit: type=1326 audit(1738648387.499:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19351 comm="syz.7.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9af8cda9 code=0x7ffc0000
[  557.136443][   T29] audit: type=1326 audit(1738648387.539:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19351 comm="syz.7.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f2f9af8cda9 code=0x7ffc0000
[  557.193758][ T5900] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  557.237244][   T29] audit: type=1326 audit(1738648387.539:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19351 comm="syz.7.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9af8cda9 code=0x7ffc0000
[  557.240260][ T5900] se401 10-1:0.0: probe with driver se401 failed with error -71
[  557.319641][   T29] audit: type=1326 audit(1738648387.539:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19351 comm="syz.7.5165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9af8cda9 code=0x7ffc0000
[  557.362735][ T5900] usb 10-1: USB disconnect, device number 8
[  557.569212][T19364] loop3: detected capacity change from 0 to 512
[  557.672469][T19364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.725107][T19364] ext4 filesystem being mounted at /1144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  557.886003][T19364] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6
[  557.946379][T19364] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.5170: Failed to acquire dquot type 1
[  558.129636][T19381] xt_CT: No such helper "syz1"
[  558.138451][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.547900][T19397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.584517][T19426] loop8: detected capacity change from 0 to 4096
[  559.608618][T19426] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  559.722935][T19438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5203'.
[  559.963042][T19436] loop3: detected capacity change from 0 to 4096
[  559.994649][T19436] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  560.036378][T19414] loop9: detected capacity change from 0 to 32768
[  560.210588][T19436] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  560.308710][T19455] loop8: detected capacity change from 0 to 8
[  560.482568][T19459] netlink: 'syz.0.5211': attribute type 6 has an invalid length.
[  560.522932][T19414] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  560.533010][T19459] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5211'.
[  560.553940][T19414] bcachefs (loop9): recovering from clean shutdown, journal seq 10
[  560.574533][T19414] bcachefs (loop9): Version upgrade required:
[  560.574533][T19414] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  560.574533][T19414] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  560.574533][T19414]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  560.838634][T19414] bcachefs (loop9): dropping and reconstructing all alloc info
[  560.905385][T19465] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5215'.
[  560.921457][T19469] loop8: detected capacity change from 0 to 256
[  560.933353][T19414] bcachefs (loop9): accounting_read... done
[  560.946449][T19414] bcachefs (loop9): alloc_read... done
[  560.959565][T19414] bcachefs (loop9): stripes_read... done
[  560.965645][T19414] bcachefs (loop9): snapshots_read... done
[  561.021661][T19414] bcachefs (loop9): done starting filesystem
[  561.342764][T12798] bcachefs (loop9): shutting down
[  561.442658][T19480] netlink: 'syz.3.5221': attribute type 16 has an invalid length.
[  561.478725][T12798] bcachefs (loop9): shutdown complete
[  561.823960][T19492] tmpfs: Bad value for 'mpol'
[  561.875816][T19461] loop7: detected capacity change from 0 to 32768
[  562.011376][T19499] nfs: Deprecated parameter 'nointr'
[  562.662146][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  562.668506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  562.778280][T19461] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,compression=lz4,background_compression=lz4,metadata_target=invalid label 1791,journal_flush_disabled,norecovery,reconstruct_alloc
[  562.800903][T19527] loop8: detected capacity change from 0 to 1024
[  562.879143][T19461] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  562.915227][T19461] bcachefs (loop7): Version upgrade required:
[  562.915227][T19461] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  562.915227][T19461] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  562.915227][T19461]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  562.928180][T19527] hfsplus: xattr searching failed
[  563.069226][T19461] bcachefs (loop7): dropping and reconstructing all alloc info
[  563.154503][T19461] bcachefs (loop7): error validating btree node at btree inodes level 0/0
[  563.154549][T19461]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0  
[  563.154565][T19461]   node offset 16/24 bset u64s 110 bset byte offset 280: keys out of order: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0, fixing
[  563.319802][T19461] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 670014898176:4098:U32_MAX len 0 ver 0: (unpack error)
[  563.319825][T19461]   nonzero k.p.inode: delete?, fixing
[  563.399337][T19461] bcachefs (loop7): btree_node_read_work: rewriting btree node at due to error
[  563.399337][T19461]   btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0
[  563.540810][T19461] bcachefs (loop7): accounting_read... done
[  563.604422][T19544] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  563.605058][T19461] bcachefs (loop7): alloc_read... done
[  563.642434][T19461] bcachefs (loop7): stripes_read... done
[  563.655497][T19461] bcachefs (loop7): snapshots_read... done
[  563.670098][T19461] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean
[  563.722662][T19461] bcachefs (loop7): done starting filesystem
[  563.862980][T12394] bcachefs (loop7): shutting down
[  563.917468][T19548] team0: Port device batadv0 removed
[  563.970611][T19548] bridge_slave_0: left allmulticast mode
[  563.976304][T19548] bridge_slave_0: left promiscuous mode
[  563.985526][T12394] bcachefs (loop7): shutdown complete
[  564.011696][T19548] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.076789][T19548] bridge_slave_1: left allmulticast mode
[  564.120481][T19548] bridge_slave_1: left promiscuous mode
[  564.135893][T19548] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.184651][T19548] bond0: (slave bond_slave_0): Releasing backup interface
[  564.208890][T19548] bond0: (slave bond_slave_1): Releasing backup interface
[  564.291175][T19548] team0: Port device team_slave_0 removed
[  564.347015][T19548] team0: Port device team_slave_1 removed
[  564.362261][T19548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.362608][T19558] loop9: detected capacity change from 0 to 256
[  564.370804][T19548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.404421][T19548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.448927][T19548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.624188][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  564.624205][   T29] audit: type=1326 audit(1738648395.072:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19561 comm="syz.9.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  564.757617][T19564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5260'.
[  564.766856][   T29] audit: type=1326 audit(1738648395.112:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19561 comm="syz.9.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  564.845904][   T29] audit: type=1326 audit(1738648395.132:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19561 comm="syz.9.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  564.938155][   T29] audit: type=1326 audit(1738648395.132:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19561 comm="syz.9.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  564.976801][T19566] loop9: detected capacity change from 0 to 2048
[  565.018832][   T29] audit: type=1326 audit(1738648395.132:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19561 comm="syz.9.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  565.080874][T19571] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  565.230688][T19573] loop3: detected capacity change from 0 to 512
[  565.271887][T19573] EXT4-fs (loop3): orphan cleanup on readonly fs
[  565.288434][T19573] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  565.326221][T19573] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  565.356447][T19573] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5265: attempt to clear invalid blocks 2 len 1
[  565.387896][T19573] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5265: invalid indirect mapped block 1819239214 (level 0)
[  565.452371][T19573] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5265: invalid indirect mapped block 1819239214 (level 1)
[  565.514988][T19573] EXT4-fs (loop3): 1 truncate cleaned up
[  565.546055][T19573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  565.649129][T19573] EXT4-fs error (device loop3): ext4_lookup:1810: inode #2: comm syz.3.5265: 'file1' linked to parent dir
[  565.673083][T19584] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5267'.
[  565.697984][T19584] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5267'.
[  565.761025][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.254831][T19602] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  566.473273][T19605] netlink: 'syz.9.5279': attribute type 4 has an invalid length.
[  566.497287][T19605] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5279'.
[  566.761835][T19613] loop8: detected capacity change from 0 to 128
[  566.827723][T19613] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  567.043957][T12512] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  567.781934][T19608] loop3: detected capacity change from 0 to 32768
[  567.868003][T19608] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  567.963026][T19648] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5295'.
[  568.344390][T19608] XFS (loop3): Ending clean mount
[  568.594866][T19671] loop9: detected capacity change from 0 to 16
[  568.601997][ T5848] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  568.634367][T19671] erofs (device loop9): mounted with root inode @ nid 36.
[  569.051362][T19679] loop8: detected capacity change from 0 to 512
[  569.080958][T19679] EXT4-fs: inline encryption not supported
[  569.218816][T19679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.326839][T19679] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.623457][T12512] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.015576][T19703] loop8: detected capacity change from 0 to 4096
[  570.062601][T19703] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  570.197985][T19703] ntfs3(loop8): $Secure::$SII is corrupted.
[  570.204050][T19703] ntfs3(loop8): Failed to initialize $Secure (-22).
[  570.390710][T19689] loop9: detected capacity change from 0 to 32768
[  570.408360][T19689] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5315 (19689)
[  570.469686][T19713] netlink: 'syz.0.5326': attribute type 1 has an invalid length.
[  570.495695][T19689] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  570.534962][T19711] loop7: detected capacity change from 0 to 4096
[  570.585564][T19689] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  570.641976][T19689] BTRFS info (device loop9): disk space caching is enabled
[  570.665152][T19689] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  570.696127][T19717] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  570.734567][T19711] NILFS (loop7): vblocknr = 9 has abnormal lifetime: start cno (= 1080863910568919042) > current cno (= 3)
[  570.789915][T19711] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=16)
[  570.826981][T19732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5329'.
[  570.862504][T19711] Remounting filesystem read-only
[  570.865892][T19689] BTRFS info (device loop9): rebuilding free space tree
[  570.891227][T19696] loop3: detected capacity change from 0 to 32768
[  570.898308][T19711] NILFS (loop7): error -5 truncating bmap (ino=16)
[  570.956435][T19696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5318 (19696)
[  570.999316][T19689] BTRFS info (device loop9): disabling free space tree
[  571.010992][T19689] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  571.022236][T19689] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  571.033414][T12394] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  571.088321][T19696] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  571.126472][T19696] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  571.156358][T19696] BTRFS info (device loop3): using free-space-tree
[  571.347008][T19689] BTRFS error (device loop9): balance: mixed groups data and metadata options must be the same
[  571.496586][T19696] BTRFS info (device loop3): checking UUID tree
[  571.520050][T12798] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  571.714924][T19765] loop8: detected capacity change from 0 to 2048
[  571.828049][ T5848] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  571.890127][T19765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  573.077965][T19793] loop9: detected capacity change from 0 to 512
[  573.102685][T19793] EXT4-fs (loop9): Test dummy encryption mode enabled
[  573.189924][T19793] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[  573.196456][T19771] loop7: detected capacity change from 0 to 32768
[  573.244897][T19793] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.5349: attempt to clear invalid blocks 2 len 1
[  573.295862][T19771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5340 (19771)
[  573.339197][T19793] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  573.390855][T19793] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5349: invalid indirect mapped block 1819239214 (level 0)
[  573.457501][T19793] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5349: invalid indirect mapped block 1819239214 (level 1)
[  573.496104][T19771] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  573.559336][T19771] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  573.619322][T19808] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5355'.
[  573.643615][T19793] EXT4-fs (loop9): 1 truncate cleaned up
[  573.677899][T19793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.844819][T19771] BTRFS info (device loop7): rebuilding free space tree
[  573.904164][T19793] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  573.959683][T19771] BTRFS info (device loop7): disabling free space tree
[  574.015567][T19771] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  574.068895][T19771] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  574.102286][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.525785][T12394] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  574.960567][T19851] netlink: 'syz.9.5369': attribute type 11 has an invalid length.
[  574.995561][T19851] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5369'.
[  575.280971][T19862] loop3: detected capacity change from 0 to 256
[  575.497472][T19871] netlink: 'syz.0.5377': attribute type 9 has an invalid length.
[  575.507477][T19870] loop9: detected capacity change from 0 to 64
[  575.535365][ T5895] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  575.574070][T19870] hfs: filesystem is marked locked, mounting read-only.
[  575.642820][T19870] /dev/loop9: Can't open blockdev
[  575.695114][ T5900] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  575.704868][ T5895] usb 8-1: Using ep0 maxpacket: 32
[  575.737008][ T5895] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.761340][ T5895] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  575.781437][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.797701][ T5895] usb 8-1: Product: syz
[  575.807545][ T5895] usb 8-1: Manufacturer: syz
[  575.818939][ T5895] usb 8-1: SerialNumber: syz
[  575.843300][ T5895] usb 8-1: config 0 descriptor??
[  575.859001][T19875] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  575.881997][ T5895] usb 8-1: bad CDC descriptors
[  575.899183][ T5900] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  575.911429][ T5895] usb 8-1: unsupported MDLM descriptors
[  575.926549][ T5900] usb 4-1: config 5 has no interface number 0
[  575.944848][ T5900] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  575.983127][ T5900] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  576.019910][ T5900] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid maxpacket 13625, setting to 64
[  576.053055][ T5900] usb 4-1: config 5 interface 123 has no altsetting 0
[  576.106138][ T5900] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  576.137578][ T5895] usb 8-1: USB disconnect, device number 10
[  576.144835][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.152869][ T5900] usb 4-1: Product: syz
[  576.185234][ T5900] usb 4-1: Manufacturer: syz
[  576.189880][ T5900] usb 4-1: SerialNumber: syz
[  576.245310][T19862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  576.344735][T19885] xt_CT: No such helper "snmp_trap"
[  576.495407][ T5900] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  576.561395][ T5900] usb 4-1: USB disconnect, device number 16
[  577.846824][T19937] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5407'.
[  577.852204][T19938] netlink: 30 bytes leftover after parsing attributes in process `syz.7.5409'.
[  577.864167][T19937] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5407'.
[  577.865940][ T5895] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  578.085404][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  578.104713][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  578.143995][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  578.191165][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  578.229371][ T5895] usb 1-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce
[  578.245820][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.281635][ T5895] usb 1-1: Product: syz
[  578.287514][ T5895] usb 1-1: Manufacturer: syz
[  578.302195][ T5895] usb 1-1: SerialNumber: syz
[  578.389507][ T5895] usb 1-1: config 0 descriptor??
[  578.396345][T19951] loop9: detected capacity change from 0 to 512
[  578.428701][ T5895] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  578.429914][T19953] netlink: 'syz.3.5417': attribute type 15 has an invalid length.
[  578.461473][T19951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  578.480474][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24
[  578.490595][T19953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5417'.
[  578.571203][T19951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.626383][T19951] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  578.846669][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.004199][T19971] netlink: 'syz.7.5423': attribute type 11 has an invalid length.
[  579.032183][ T5894] usb 1-1: USB disconnect, device number 32
[  579.056639][ T5894] xpad 1-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  579.320671][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5426'.
[  579.425618][   T29] audit: type=1326 audit(1738648409.877:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19983 comm="syz.9.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  579.472778][   T29] audit: type=1326 audit(1738648409.877:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19983 comm="syz.9.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  579.567856][   T29] audit: type=1326 audit(1738648409.907:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19983 comm="syz.9.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  579.656201][   T29] audit: type=1326 audit(1738648409.907:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19983 comm="syz.9.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  579.729437][T19989] loop9: detected capacity change from 0 to 1764
[  579.749801][   T29] audit: type=1326 audit(1738648409.907:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19983 comm="syz.9.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7278cda9 code=0x7ffc0000
[  579.979108][T19999] netlink: 'syz.8.5436': attribute type 10 has an invalid length.
[  580.062775][T19999] 8021q: adding VLAN 0 to HW filter on device team0
[  580.126177][T19999] bond0: (slave team0): Enslaving as an active interface with an up link
[  580.461863][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5442'.
[  580.525060][   T29] audit: type=1400 audit(1738648410.977:156): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A07 pid=20016 comm="syz.3.5445"
[  580.753979][   T29] audit: type=1326 audit(1738648411.217:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.8.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a68d8cda9 code=0x7ffc0000
[  580.807092][   T29] audit: type=1326 audit(1738648411.217:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.8.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a68d8cda9 code=0x7ffc0000
[  580.841111][   T29] audit: type=1326 audit(1738648411.217:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.8.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8a68d8cda9 code=0x7ffc0000
[  580.903577][T20028] openvswitch: netlink: IPv4 tunnel dst address is zero
[  580.978875][   T29] audit: type=1326 audit(1738648411.227:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.8.5448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a68d8cda9 code=0x7ffc0000
[  581.169901][T20038] ieee802154 phy0 wpan0: encryption failed: -22
[  581.664955][T20054] netlink: 'syz.7.5463': attribute type 30 has an invalid length.
[  581.929773][T20063] netlink: 'syz.7.5468': attribute type 30 has an invalid length.
[  581.954826][T20063] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  581.972949][T20063] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  582.063231][T20060] hfs: unable to load iocharset "io#harset"
[  582.315037][T20074] xt_addrtype: ipv6 does not support BROADCAST matching
[  582.349045][T20072] xt_l2tp: v2 sid > 0xffff: 262144
[  582.581458][T20042] loop9: detected capacity change from 0 to 32768
[  582.674774][T20042] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  582.695474][T20042] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  582.850439][T20098] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.5482'.
[  582.860515][T20098] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.5482'.
[  582.878232][T20042] XFS (loop9): Ending clean mount
[  582.929670][T20042] XFS (loop9): Quotacheck needed: Please wait.
[  583.026340][T20042] XFS (loop9): Quotacheck: Done.
[  583.159642][ T5851] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260
[  583.316371][T12798] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  583.522772][   T25] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  583.705403][   T25] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  583.728912][   T25] usb 1-1: config 0 has no interface number 0
[  583.770537][   T25] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  583.830104][   T25] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  583.850414][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.894183][   T25] usb 1-1: Product: syz
[  583.911893][   T25] usb 1-1: Manufacturer: syz
[  583.929178][   T25] usb 1-1: SerialNumber: syz
[  583.953159][   T25] usb 1-1: config 0 descriptor??
[  583.973053][T20111] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  584.000458][   T25] usb-storage 1-1:0.20: USB Mass Storage device detected
[  584.034756][   T25] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  584.219898][   T25] scsi host1: usb-storage 1-1:0.20
[  584.421142][   T25] usb 1-1: USB disconnect, device number 33
[  584.849288][T20156] loop8: detected capacity change from 0 to 2048
[  584.880517][T20159] loop9: detected capacity change from 0 to 1024
[  584.900493][T20159] EXT4-fs: Ignoring removed nobh option
[  584.941272][T20156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  584.954801][T20159] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  584.987099][T20161] loop3: detected capacity change from 0 to 2048
[  585.024119][T20159] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #11: comm syz.9.5509: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  585.086815][T20161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  585.086858][T20165] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  585.102148][T20159] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.5509: couldn't read orphan inode 11 (err -117)
[  585.169148][T20159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.407802][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.413947][T20173] loop7: detected capacity change from 0 to 16
[  585.450669][T20173] erofs (device loop7): mounted with root inode @ nid 36.
[  585.547676][T20177] loop8: detected capacity change from 0 to 64
[  585.769705][T20182] dlm: no locking on control device
[  585.943787][T20178] loop3: detected capacity change from 0 to 8192
[  586.222742][T20197] ntfs3(nbd8): try to read out of volume at offset 0x0
[  586.312124][ T5894] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  586.508015][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  586.562803][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  586.581683][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  586.596662][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.607867][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  586.616279][ T5894] usb 1-1: SerialNumber: syz
[  586.712215][T20191] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  586.729084][ T5894] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  586.987067][   T25] usb 1-1: USB disconnect, device number 34
[  587.459446][T20233] loop9: detected capacity change from 0 to 512
[  587.473023][T20233] EXT4-fs: Ignoring removed mblk_io_submit option
[  587.488797][T20233] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  587.543582][T20233] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  587.563219][T20233] EXT4-fs (loop9): orphan cleanup on readonly fs
[  587.599411][T20233] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.5542: Invalid block bitmap block 0 in block_group 0
[  587.671444][T20233] EXT4-fs (loop9): Remounting filesystem read-only
[  587.678446][T20233] __quota_error: 1 callbacks suppressed
[  587.678461][T20233] Quota error (device loop9): write_blk: dquota write failed
[  587.700129][T20233] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota
[  587.714468][T20233] EXT4-fs (loop9): 1 orphan inode deleted
[  587.744835][T20233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  587.791232][T20242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5546'.
[  587.926475][T12798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.109913][T20254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5553'.
[  588.139345][T20254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5553'.
[  588.531367][ T5900] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  588.708213][ T5900] usb 9-1: unable to get BOS descriptor or descriptor too short
[  588.725107][ T5900] usb 9-1: not running at top speed; connect to a high speed hub
[  588.743955][ T5900] usb 9-1: config 2 has an invalid interface number: 8 but max is 1
[  588.775669][ T5900] usb 9-1: config 2 has an invalid interface number: 3 but max is 1
[  588.793511][ T5900] usb 9-1: config 2 has no interface number 0
[  588.799631][ T5900] usb 9-1: config 2 has no interface number 1
[  588.813643][ T5900] usb 9-1: config 2 interface 8 has no altsetting 0
[  588.833413][ T5900] usb 9-1: string descriptor 0 read error: -22
[  588.840959][ T5900] usb 9-1: New USB device found, idVendor=1199, idProduct=9051, bcdDevice=17.eb
[  588.892335][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.131446][ T5900] qcserial 9-1:2.3: Qualcomm USB modem converter detected
[  589.333963][ T5900] usb 9-1: USB disconnect, device number 9
[  589.349336][ T5900] qcserial 9-1:2.3: device disconnected
[  590.153480][T20316] loop7: detected capacity change from 0 to 8
[  590.269346][T20316] SQUASHFS error: Unable to read inode 0xa7
[  590.365828][T20302] loop9: detected capacity change from 0 to 32768
[  590.403992][T20302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5577 (20302)
[  590.469302][T20302] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  590.498538][T20302] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  590.542813][T20302] BTRFS info (device loop9): using free-space-tree
[  590.588605][T20300] loop3: detected capacity change from 0 to 32768
[  590.608001][T20300] BTRFS: device /dev/loop3 (7:3) using temp-fsid 0a6d7196-d812-40bf-9178-929a65701ed6
[  590.621459][T20300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5576 (20300)
[  590.719156][T20300] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  590.731002][T20300] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  590.796837][T20300] BTRFS info (device loop3): using free-space-tree
[  591.209775][T12798] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  591.615149][ T5848] BTRFS info (device loop3): last unmount of filesystem 0a6d7196-d812-40bf-9178-929a65701ed6
[  592.340383][   T58] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  592.520332][   T58] usb 10-1: Using ep0 maxpacket: 32
[  592.536933][   T58] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  592.572666][   T58] usb 10-1: config 0 has no interface number 0
[  592.631563][   T58] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  592.673872][   T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.690994][   T58] usb 10-1: Product: syz
[  592.695290][   T58] usb 10-1: Manufacturer: syz
[  592.699990][   T58] usb 10-1: SerialNumber: syz
[  592.758193][   T58] usb 10-1: config 0 descriptor??
[  592.777500][   T58] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  592.777531][   T58] usb 10-1: selecting invalid altsetting 1
[  592.777547][   T58] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  592.797785][   T58] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  592.798461][   T58] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  592.798539][   T58] usb 10-1: media controller created
[  592.943185][   T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  593.100275][   T58] usb 10-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  593.123885][   T58] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  593.275260][   T58] DVB: Unable to find symbol mxl5005s_attach()
[  593.347758][   T58] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  593.387892][T20393] loop8: detected capacity change from 0 to 32768
[  593.449165][T20393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5606 (20393)
[  593.469469][T20420] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  593.512380][T20393] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  593.563054][T20393] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  593.610129][T20393] BTRFS info (device loop8): using free-space-tree
[  593.616835][   T58] usb 10-1: USB disconnect, device number 9
[  594.129480][T20409] loop7: detected capacity change from 0 to 32768
[  594.174878][T12512] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  594.195478][T20409] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5614 (20409)
[  594.258814][T20409] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  594.298597][T20409] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  594.341241][T20409] BTRFS info (device loop7): using free-space-tree
[  594.432930][T20450] IPv6: sit1: Disabled Multicast RS
[  594.517503][   T35] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0
[  594.585069][ T8049] BTRFS warning (device loop7): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0
[  594.745595][ T8052] BTRFS warning (device loop7): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0
[  594.895980][ T8052] BTRFS warning (device loop7): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0
[  595.083471][T20482] netlink: 'syz.8.5627': attribute type 21 has an invalid length.
[  595.264805][T20486] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5634'.
[  595.284674][T12394] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  595.490256][T20489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.497502][T20489] IPv6: NLM_F_CREATE should be set when creating new route
[  595.504884][T20489] IPv6: NLM_F_CREATE should be set when creating new route
[  595.512169][T20489] IPv6: NLM_F_CREATE should be set when creating new route
[  596.569616][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'.
[  597.662536][T20509] loop8: detected capacity change from 0 to 32768
[  597.752092][T20509] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  598.168363][T20509] XFS (loop8): Ending clean mount
[  598.194263][T20509] XFS (loop8): Quotacheck needed: Please wait.
[  598.327660][T20509] XFS (loop8): Quotacheck: Done.
[  598.522895][T12512] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  598.597473][T20581] CIFS: iocharset name too long
[  599.517255][T20602] loop3: detected capacity change from 0 to 1024
[  599.695744][   T35] hfsplus: b-tree write err: -5, ino 4
[  599.796217][T20569] loop9: detected capacity change from 0 to 32768
[  599.882287][T20569] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  599.931729][T20569] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  599.968218][T20569] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  599.980049][T20615] tmpfs: Bad value for 'mpol'
[  600.018005][ T5895] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  600.037630][ T5895] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  600.302153][ T5895] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 264ms
[  600.348987][ T5895] gfs2: fsid=syz:syz.0: jid=0: Done
[  600.368843][T20569] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  600.437320][T20598] loop8: detected capacity change from 0 to 32768
[  600.497240][T20598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5673 (20598)
[  600.689055][T20598] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  600.712710][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5697'.
[  600.768838][T20598] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  600.777939][T20598] BTRFS info (device loop8): using free-space-tree
[  600.817952][T20630] loop7: detected capacity change from 0 to 4096
[  600.894398][T20630] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  601.048664][T20630] ntfs3(loop7): ino=19, mi_enum_attr
[  601.054026][T20630] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  601.263333][T12512] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  602.120188][T20675] bond3: entered promiscuous mode
[  602.154014][T20675] bond3: entered allmulticast mode
[  602.205372][T20675] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.868327][   T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  602.894857][T20705] loop7: detected capacity change from 0 to 1024
[  603.058478][   T25] usb 4-1: Using ep0 maxpacket: 16
[  603.076524][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  603.094258][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  603.135028][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB
[  603.171227][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  603.198346][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  603.253069][   T25] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  603.273140][   T25] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  603.311496][   T25] usb 4-1: Product: syz
[  603.315701][   T25] usb 4-1: Manufacturer: syz
[  603.348566][   T25] usb 4-1: SerialNumber: syz
[  603.382751][   T25] usb 4-1: config 0 descriptor??
[  603.400842][   T25] usb 4-1: NFC: intf ffff88802869f000 id ffffffff8f31fda0
[  603.640866][   T58] usb 4-1: USB disconnect, device number 17
[  603.828059][ T5900] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  603.871871][T20706] loop8: detected capacity change from 0 to 32768
[  603.989108][   T25] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  604.008686][ T5900] usb 1-1: Using ep0 maxpacket: 32
[  604.017577][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.048031][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.057827][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  604.104018][T20706] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  604.131896][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.143801][ T5900] usb 1-1: config 0 descriptor??
[  604.149808][T20706] bcachefs (loop8): initializing new filesystem
[  604.160967][ T5900] hub 1-1:0.0: USB hub found
[  604.165945][T20706] bcachefs (loop8): going read-write
[  604.171878][   T25] usb 10-1: Using ep0 maxpacket: 32
[  604.193881][   T25] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  604.208753][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.218778][T20706] bcachefs (loop8): marking superblocks
[  604.231827][   T25] usb 10-1: Product: syz
[  604.236135][   T25] usb 10-1: Manufacturer: syz
[  604.244212][   T25] usb 10-1: SerialNumber: syz
[  604.266238][   T25] usb 10-1: config 0 descriptor??
[  604.388774][ T5900] hub 1-1:0.0: 1 port detected
[  604.399764][T20706] bcachefs (loop8): initializing freespace
[  604.421769][T20706] bcachefs (loop8): done initializing freespace
[  604.478212][T20706] bcachefs (loop8): reading snapshots table
[  604.484216][T20706] bcachefs (loop8): reading snapshots done
[  604.496521][   T25] usb 10-1: USB disconnect, device number 10
[  604.564442][T20706] bcachefs (loop8): done starting filesystem
[  604.597359][ T5900] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  604.611331][ T5900] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  604.679945][T20752] loop3: detected capacity change from 0 to 16
[  604.704568][ T5900] usbhid 1-1:0.0: can't add hid device: -71
[  604.721388][ T5900] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  604.768302][T20752] erofs (device loop3): mounted with root inode @ nid 36.
[  604.775159][ T5900] usb 1-1: USB disconnect, device number 35
[  604.842064][T12512] bcachefs (loop8): shutting down
[  604.850312][T12512] bcachefs (loop8): going read-only
[  604.855925][T12512] bcachefs (loop8): finished waiting for writes to stop
[  604.936427][T12512] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3
[  605.213440][T12512] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  605.276078][T20764] netlink: 'syz.9.5748': attribute type 10 has an invalid length.
[  605.291445][T12512] bcachefs (loop8): clean shutdown complete, journal seq 4
[  605.333246][T12512] bcachefs (loop8): marking filesystem clean
[  605.378872][T20768] netlink: 'syz.0.5750': attribute type 15 has an invalid length.
[  605.407771][T20768] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5750'.
[  605.419247][T20762] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI
[  605.431854][T20762] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f]
[  605.440256][T20762] CPU: 1 UID: 0 PID: 20762 Comm: syz.3.5749 Not tainted 6.14.0-rc1-next-20250204-syzkaller #0
[  605.450483][T20762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  605.460528][T20762] RIP: 0010:qca_close+0x72/0x2e0
[  605.465464][T20762] Code: 64 af f6 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 28 5d f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[  605.485062][T20762] RSP: 0018:ffffc9000cfdfb90 EFLAGS: 00010206
[  605.491119][T20762] RAX: 000000000000002b RBX: ffff888027aa5000 RCX: ffff888077190000
[  605.499081][T20762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
[  605.507035][T20762] RBP: 1ffff11004f54a37 R08: ffffffff8187d8b3 R09: 1ffffffff286073a
[  605.514994][T20762] R10: dffffc0000000000 R11: ffffffff88c8a130 R12: 0000000000000000
[  605.522952][T20762] R13: dffffc0000000000 R14: ffff888027aa51b8 R15: 0000000000000000
[  605.530910][T20762] FS:  0000555589ae7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  605.539824][T20762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  605.546400][T20762] CR2: 000000110c2a28e2 CR3: 000000003133a000 CR4: 00000000003526f0
[  605.554363][T20762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  605.562321][T20762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  605.570280][T20762] Call Trace:
[  605.573545][T20762]  <TASK>
[  605.576468][T20762]  ? __die_body+0x5f/0xb0
[  605.580794][T20762]  ? die_addr+0xb0/0xe0
[  605.584941][T20762]  ? exc_general_protection+0x3dd/0x5d0
[  605.590487][T20762]  ? asm_exc_general_protection+0x26/0x30
[  605.596198][T20762]  ? __pfx_qca_close+0x10/0x10
[  605.600950][T20762]  ? enable_work+0x2e3/0x360
[  605.605530][T20762]  ? qca_close+0x72/0x2e0
[  605.609852][T20762]  hci_uart_tty_close+0x205/0x290
[  605.614869][T20762]  tty_ldisc_kill+0xa3/0x1a0
[  605.619450][T20762]  tty_ldisc_release+0x1a1/0x200
[  605.624378][T20762]  tty_release_struct+0x2b/0xe0
[  605.629218][T20762]  tty_release+0xd06/0x12c0
[  605.633714][T20762]  ? __pfx_tty_release+0x10/0x10
[  605.638639][T20762]  __fput+0x3e9/0x9f0
[  605.642614][T20762]  task_work_run+0x24f/0x310
[  605.647198][T20762]  ? _raw_spin_unlock+0x28/0x50
[  605.652042][T20762]  ? __pfx_task_work_run+0x10/0x10
[  605.657149][T20762]  ? syscall_exit_to_user_mode+0xa3/0x340
[  605.662863][T20762]  syscall_exit_to_user_mode+0x13f/0x340
[  605.668486][T20762]  do_syscall_64+0x100/0x230
[  605.673062][T20762]  ? clear_bhb_loop+0x35/0x90
[  605.677731][T20762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.683611][T20762] RIP: 0033:0x7f6fe138cda9
[  605.688013][T20762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  605.707609][T20762] RSP: 002b:00007ffcebd18fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  605.716008][T20762] RAX: 0000000000000000 RBX: 0000000000093e01 RCX: 00007f6fe138cda9
[  605.723964][T20762] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  605.731920][T20762] RBP: 00007f6fe15a7ba0 R08: 0000000000000001 R09: 00007ffcebd192bf
[  605.739876][T20762] R10: 00007f6fe1200000 R11: 0000000000000246 R12: 0000000000093ea9
[  605.747843][T20762] R13: 00007f6fe15a5fa0 R14: 0000000000000032 R15: ffffffffffffffff
[  605.755813][T20762]  </TASK>
[  605.758827][T20762] Modules linked in:
[  605.763909][T20762] ---[ end trace 0000000000000000 ]---
[  605.798856][T20762] RIP: 0010:qca_close+0x72/0x2e0
[  605.804291][T20762] Code: 64 af f6 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 28 5d f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[  605.805365][T12512] bcachefs (loop8): shutdown complete
[  605.824863][T20762] RSP: 0018:ffffc9000cfdfb90 EFLAGS: 00010206
[  605.836045][T20762] RAX: 000000000000002b RBX: ffff888027aa5000 RCX: ffff888077190000
[  605.850327][T20762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
[  605.859467][T20762] RBP: 1ffff11004f54a37 R08: ffffffff8187d8b3 R09: 1ffffffff286073a
[  605.869242][T20762] R10: dffffc0000000000 R11: ffffffff88c8a130 R12: 0000000000000000
[  605.877272][T20762] R13: dffffc0000000000 R14: ffff888027aa51b8 R15: 0000000000000000
[  605.887190][T20762] FS:  0000555589ae7500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  605.896226][T20762] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  605.902962][T20762] CR2: 00007f6461779178 CR3: 000000003133a000 CR4: 00000000003526f0
[  605.911098][T20762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  605.919171][T20762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  605.927164][T20762] Kernel panic - not syncing: Fatal exception
[  605.933480][T20762] Kernel Offset: disabled
[  605.937792][T20762] Rebooting in 86400 seconds..