last executing test programs:

3.482438601s ago: executing program 5 (id=1585):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/62, 0x3e}, {0x0}], 0x2}, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0)

3.29098375s ago: executing program 1 (id=1588):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ff"], 0xb8}}, 0x0)

3.242328957s ago: executing program 5 (id=1590):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000006)

3.060341355s ago: executing program 0 (id=1592):
r0 = io_uring_setup(0x1a98, &(0x7f00000000c0)={0x0, 0x0, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0), 0x0)

3.010566531s ago: executing program 1 (id=1594):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x200, 0x81, 0x0)

2.927300826s ago: executing program 1 (id=1595):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000))

2.846102715s ago: executing program 1 (id=1597):
unlink(0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)

2.845008665s ago: executing program 5 (id=1598):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="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"], 0x25, 0x558f, &(0x7f00000014c0)="$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")
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x4)
io_submit(r0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='i', 0x1}])

2.642185459s ago: executing program 1 (id=1599):
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2c, 0x0, @empty, @mcast2, {[], {0x2000, 0x0, 0x8}}}}}}, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./file0\x00', 0x2000002, &(0x7f00000002c0)={[{@shortad}, {@mode={'mode', 0x3d, 0x800000}}, {@adinicb}, {@adinicb}, {@uid_forget}, {@gid_ignore}, {@volume={'volume', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {}]}, 0xfc, 0xc2d, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)

2.618965218s ago: executing program 0 (id=1601):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)

2.294537581s ago: executing program 0 (id=1603):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x203)

1.997930124s ago: executing program 0 (id=1605):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)

1.996807079s ago: executing program 1 (id=1606):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "0c959905"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.880756361s ago: executing program 4 (id=1609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xb42c7bfada83288d}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x5, 0x400, 0x7}}]}}}]}, 0x6c}}, 0x0)

1.676831287s ago: executing program 4 (id=1611):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0)

1.567963801s ago: executing program 0 (id=1612):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6)

1.564837708s ago: executing program 5 (id=1613):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})

1.524473999s ago: executing program 4 (id=1614):
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setresuid(0x0, r0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="89000000120081ae08060c0f006b3f007f03e3f70000000000e2ffca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e747033a0093b837dc6cc01e32ef6a80277bec001208000300ff000000bdad446b9bbc7a46e3988285dcdf12f213d3f868fece14955f947ee2b49e33538afa8af92347510f0b56a20ff27fff70fdd02f0fa5", 0x89}], 0x1}, 0x0)

1.514570271s ago: executing program 3 (id=1615):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1, 0x3}}]}}]}, 0x44}}, 0x0)

1.392165083s ago: executing program 4 (id=1617):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.35605366s ago: executing program 0 (id=1618):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000080)=@v2, 0x9, 0x0)

1.235740691s ago: executing program 2 (id=1619):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = io_uring_setup(0x282, &(0x7f0000000140))
r2 = dup3(r0, r1, 0x0)
ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0)

1.167059563s ago: executing program 3 (id=1620):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

1.042626541s ago: executing program 2 (id=1621):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)

954.834803ms ago: executing program 3 (id=1622):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x40, 0x0, 0x1, 0x301, 0xd, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0)

800.528728ms ago: executing program 2 (id=1623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0)

786.373259ms ago: executing program 5 (id=1624):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40086604, 0x0)

718.681052ms ago: executing program 3 (id=1625):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2, 0x7fff}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20)

591.336538ms ago: executing program 2 (id=1626):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00')
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)

424.214159ms ago: executing program 3 (id=1627):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="787a921db1f55b43e2e03b9aecf42de7acb15f41c2d4baea30eda9a9b4d756ddf13d1d9fc4f97c8dbc98e475750489262ad4da693ffa86dfb57c4df5a709db6b2e580acb7b424a05dcde983d1878e310bc48725943bbfcb96a7e8c22298eee", 0x5f}, {&(0x7f0000000140)="2580de7e87a7cc538dd408abb40738689c39f990a44c549c8bbb7195ee22cca517e80cdad45dd5f93be89f3dda8596b10ed91025227ea1b74acbb2ac8a4791b53c0e49a513057b5e97e99f8eb412704cc9582900a0d481def95f9a490611d77f827c36067ed08d7b347064b129460c22f41dd97b75e82baa55a527cce0a75257535b7c61df25bd7b38004ce2230918303662633d54fe86d130934fe768cdb12d", 0xa0}, {&(0x7f0000000240)="82", 0x1}, {&(0x7f0000000500)="f44ff3567351", 0x6}], 0x4, 0x0, 0x0, 0x8048000}], 0x1, 0x0)

422.483337ms ago: executing program 5 (id=1628):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x10)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
mount(0x0, 0x0, 0x0, 0x10010, 0x0)

282.841495ms ago: executing program 2 (id=1629):
r0 = syz_clone(0x85840100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
syz_read_part_table(0x5c5, &(0x7f0000000b80)="$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")
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)

237.06757ms ago: executing program 3 (id=1630):
r0 = io_uring_setup(0x669, &(0x7f00000002c0))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r1, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80)
close_range(r0, 0xffffffffffffffff, 0x0)

236.345507ms ago: executing program 4 (id=1631):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r2)

156.764605ms ago: executing program 4 (id=1632):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlink(&(0x7f0000000100)='./file1\x00')

0s ago: executing program 2 (id=1633):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@delalloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz")
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

, retrying with spare superblock (blocksize = 1024)
[  160.777190][ T7616] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  160.807712][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.814884][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.902833][ T7610] syz.4.819: attempt to access beyond end of device
[  160.902833][ T7610] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  160.905738][ T7619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.932184][ T7618] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.964309][    T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  160.974555][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.992049][    T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  161.003857][    T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  161.011873][    T8] usb 2-1: Manufacturer: syz
[  161.018453][ T7610] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0
[  161.034682][ T7084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.059290][    T8] usb 2-1: config 0 descriptor??
[  161.133194][ T7610] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0
[  161.175439][ T7628] loop3: detected capacity change from 0 to 1024
[  161.268760][ T7625] pim6reg: entered allmulticast mode
[  161.292469][ T7627] pim6reg: left allmulticast mode
[  161.292893][ T7628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.310590][    T8] rc_core: IR keymap rc-hauppauge not found
[  161.324753][    T8] Registered IR keymap rc-empty
[  161.331431][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  161.354852][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17
[  161.457517][ T7628] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  161.462033][ T7238] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  161.501526][ T7238] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  161.615676][ T7238] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  161.651035][    C0] igorplugusb 2-1:0.0: receive overflow invalid: 33
[  161.694738][ T7238] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  161.708115][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.771394][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.850253][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  161.998590][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.018813][ T7238] 8021q: adding VLAN 0 to HW filter on device team0
[  162.036869][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.044033][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.099584][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.105639][ T7657] loop4: detected capacity change from 0 to 256
[  162.106835][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.145559][    T8] usb 2-1: USB disconnect, device number 12
[  162.180892][ T7084] veth0_vlan: entered promiscuous mode
[  162.197328][ T7084] veth1_vlan: entered promiscuous mode
[  162.285075][ T7657] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  162.309857][ T7657] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  162.323939][ T7084] veth0_macvtap: entered promiscuous mode
[  162.350521][ T7084] veth1_macvtap: entered promiscuous mode
[  162.394096][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.442998][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.482206][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.493996][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.522267][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.539364][ T7664] loop5: detected capacity change from 0 to 4096
[  162.548545][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.564132][ T7664] NILFS (loop5): invalid segment: Checksum error in segment payload
[  162.582478][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.583188][ T7664] NILFS (loop5): trying rollback from an earlier position
[  162.609848][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.639391][ T7664] NILFS (loop5): recovery complete
[  162.655691][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.685677][ T7672] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.718056][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.782623][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.819813][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.862774][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.892218][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.918388][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.943071][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.985525][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.007490][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.038372][ T7681] loop4: detected capacity change from 0 to 256
[  163.085508][ T7084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.132241][ T7084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.141719][ T7084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.154618][ T7681] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  163.187256][ T7084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.412672][    T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  163.533561][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.568492][    T8] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config
[  163.568543][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  163.570571][    T8] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  163.570611][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.570637][    T8] usb 2-1: Product: syz
[  163.570657][    T8] usb 2-1: Manufacturer: syz
[  163.570677][    T8] usb 2-1: SerialNumber: syz
[  163.583795][    T8] usb 2-1: config 0 descriptor??
[  163.651958][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.651987][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.710349][ T7238] veth0_vlan: entered promiscuous mode
[  163.724015][ T2510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.724040][ T2510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.725663][ T7238] veth1_vlan: entered promiscuous mode
[  163.803933][    T8] redrat3 2-1:0.0: Couldn't find all endpoints
[  163.814150][ T7238] veth0_macvtap: entered promiscuous mode
[  163.815160][    T8] usb 2-1: USB disconnect, device number 13
[  163.825813][ T7238] veth1_macvtap: entered promiscuous mode
[  163.870611][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.870641][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.870657][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.182086][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.182090][ T7702] syz.5.842 (7702): /proc/7701/oom_adj is deprecated, please use /proc/7701/oom_score_adj instead.
[  164.206085][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.230814][ T7705] loop4: detected capacity change from 0 to 512
[  164.252836][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.258065][ T7705] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  164.280648][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.307806][ T7705] EXT4-fs (loop4): invalid journal inode
[  164.317919][ T7706] loop0: detected capacity change from 0 to 512
[  164.318180][ T7705] EXT4-fs (loop4): can't get journal size
[  164.325133][ T5294] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  164.341761][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.353907][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.371254][ T7705] EXT4-fs (loop4): 1 truncate cleaned up
[  164.377163][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.388907][ T7705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.392340][ T7706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  164.401131][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.433013][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.446922][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.457455][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.467550][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.478660][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.489009][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.499611][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.509529][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.520665][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.530640][ T7238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.532268][ T5294] usb 2-1: Using ep0 maxpacket: 16
[  164.541120][ T7238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.557975][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.576007][ T7238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.584799][ T7238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.593833][ T7238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.602668][ T7238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.631907][ T5294] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85
[  164.643822][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31265, setting to 1024
[  164.655115][ T5294] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  164.658376][ T7706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  164.665173][ T5294] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  164.665212][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  164.697002][ T7706] System zones: 1-12
[  164.702844][ T7706] EXT4-fs (loop0): 1 truncate cleaned up
[  164.709422][ T7706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.714349][ T5294] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  164.741929][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.757371][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.758798][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.772229][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  164.798393][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  164.810823][ T5294] usb 2-1: Product: syz
[  164.842378][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.850560][ T5294] usb 2-1: Manufacturer: syz
[  164.869979][ T5294] usb 2-1: SerialNumber: syz
[  164.886760][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'.
[  164.895683][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'.
[  164.906194][    T9] usb 4-1: config 0 descriptor??
[  164.923318][ T5294] usb 2-1: config 0 descriptor??
[  164.952920][ T7084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.957902][ T5294] usb 2-1: NFC: intf ffff88806a36a000 id ffffffff8f31a4c0
[  164.988452][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.997459][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.110925][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.127666][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.284777][ T5388] usb 2-1: USB disconnect, device number 14
[  165.330626][    T9] konepure 0003:1E7D:2DB4.001A: unknown main item tag 0x0
[  165.379484][ T7724] loop2: detected capacity change from 0 to 1024
[  165.397078][    T9] konepure 0003:1E7D:2DB4.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0
[  165.414610][ T7724] hfsplus: unable to parse mount options
[  165.569485][ T5388] usb 4-1: USB disconnect, device number 7
[  165.590750][ T7730] loop4: detected capacity change from 0 to 1024
[  165.773985][   T11] hfsplus: b-tree write err: -5, ino 4
[  166.122732][ T5335] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  166.161706][   T29] audit: type=1326 audit(1728496698.304:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.1.855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf617dff9 code=0x0
[  166.183291][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.312571][ T5335] usb 5-1: Using ep0 maxpacket: 32
[  166.319821][ T7729] loop5: detected capacity change from 0 to 32768
[  166.328458][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  166.344099][ T7729] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.851 (7729)
[  166.356661][ T5335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  166.364688][ T7739] netlink: 37 bytes leftover after parsing attributes in process `syz.3.856'.
[  166.389018][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  166.394180][ T7729] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.430346][ T7729] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  166.430340][ T5335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  166.430382][ T5335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  166.453424][ T7726] loop0: detected capacity change from 0 to 32768
[  166.483804][ T7729] BTRFS info (device loop5): using free-space-tree
[  166.522272][ T5335] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  166.531724][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.543296][ T5335] usb 5-1: config 0 descriptor??
[  166.547046][ T7726] JBD2: Ignoring recovery information on journal
[  166.595383][ T7724] loop2: detected capacity change from 0 to 32768
[  166.603467][ T7724] tmpfs: Unknown parameter 'wsync'
[  166.663315][ T7726] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  166.769818][ T7726] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  166.802819][ T5335] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  166.890624][ T7726] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  166.942562][ T7726] OCFS2: File system is now read-only.
[  166.948277][ T7726] (syz.0.850,7726,1):ocfs2_trim_mainbm:7610 ERROR: status = -30
[  166.968444][ T5228] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.016809][ T7761] loop2: detected capacity change from 0 to 2048
[  167.058984][   T29] audit: type=1326 audit(1728496699.184:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f25374fa7 code=0x7ffc0000
[  167.081740][   T29] audit: type=1326 audit(1728496699.184:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f25319959 code=0x7ffc0000
[  167.103739][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.110538][   T29] audit: type=1326 audit(1728496699.184:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f25374fa7 code=0x7ffc0000
[  167.124029][ T7761] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  167.132559][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.133577][   T29] audit: type=1326 audit(1728496699.184:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f25319959 code=0x7ffc0000
[  167.172223][   T29] audit: type=1326 audit(1728496699.184:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f25374fa7 code=0x7ffc0000
[  167.195976][   T29] audit: type=1326 audit(1728496699.184:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f25319959 code=0x7ffc0000
[  167.198044][ T7766] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  167.217954][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.218259][   T29] audit: type=1326 audit(1728496699.184:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f25374fa7 code=0x7ffc0000
[  167.259465][   T29] audit: type=1326 audit(1728496699.184:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f25319959 code=0x7ffc0000
[  167.282789][   T29] audit: type=1326 audit(1728496699.184:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f25374fa7 code=0x7ffc0000
[  167.360358][ T5503] udevd[5503]: incorrect nilfs2 checksum on /dev/loop2
[  167.379327][ T7769] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.433921][ T7084] ocfs2: Unmounting device (7,0) on (node local)
[  167.501490][ T7761] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952
[  167.604353][ T7761] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15)
[  167.637795][ T7761] Remounting filesystem read-only
[  167.647940][ T7761] NILFS (loop2): error -5 truncating bmap (ino=15)
[  167.660470][ T7776] futex_wake_op: syz.3.865 tries to shift op by 32; fix this program
[  167.790425][ T7773] loop0: detected capacity change from 0 to 1024
[  167.854114][ T7761] syz.2.858 (7761) used greatest stack depth: 18544 bytes left
[  167.866470][ T7784] loop5: detected capacity change from 0 to 2048
[  167.910582][ T7773] hfsplus: bad catalog entry type
[  167.923059][ T7238] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  168.071782][  T182] hfsplus: b-tree write err: -5, ino 4
[  168.136889][ T7789] dccp_invalid_packet: P.Data Offset(68) too large
[  168.469058][ T7800] sp0: Synchronizing with TNC
[  168.542471][ T5388] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  168.656448][ T7803] unknown channel width for channel at 909000KHz?
[  168.709324][ T5388] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  168.733743][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  168.760730][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  168.802169][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  168.829242][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  168.857596][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  168.891089][ T5292] usb 5-1: USB disconnect, device number 12
[  168.904973][ T5292] usblp0: removed
[  168.918509][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  168.947224][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  168.971270][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.019700][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.044313][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  169.059245][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.076203][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.101703][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  169.125957][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.146260][ T7792] loop3: detected capacity change from 0 to 32768
[  169.157784][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.204510][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  169.228223][ T7792] JBD2: Ignoring recovery information on journal
[  169.231192][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.311865][ T7819] netlink: 'syz.1.884': attribute type 11 has an invalid length.
[  169.340898][ T7792] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  169.370669][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.393627][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  169.396453][ T7801] loop2: detected capacity change from 0 to 32768
[  169.434293][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.461967][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.473246][ T5388] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  169.492346][ T5388] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.503398][ T5388] usb 6-1: config 0 interface 0 has no altsetting 0
[  169.516428][ T5388] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  169.523201][ T5240] ocfs2: Unmounting device (7,3) on (node local)
[  169.525713][ T5388] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  169.544849][ T5388] usb 6-1: Product: syz
[  169.549038][ T5388] usb 6-1: Manufacturer: syz
[  169.557291][ T5388] usb 6-1: SerialNumber: syz
[  169.575658][ T5388] usb 6-1: config 0 descriptor??
[  169.616804][ T5388] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  169.663769][    T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  169.844998][    T8] usb 2-1: Using ep0 maxpacket: 32
[  169.868232][    T8] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  169.880004][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.901671][    T8] usb 2-1: config 0 descriptor??
[  169.925428][    T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  169.958546][    T9] usb 6-1: USB disconnect, device number 9
[  169.979701][    T9] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  170.302380][ T7835] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  170.337305][    T8] gspca_vc032x: reg_w err -71
[  170.342029][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.361197][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.378762][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.397010][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.432821][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.448421][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.465981][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.473389][ T7831] loop4: detected capacity change from 0 to 32768
[  170.530684][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.556115][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.581999][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.619891][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.646082][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.681951][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.708024][ T7831] 
[  170.708024][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  170.708024][ T7831] 
[  170.712285][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.738745][ T7831] non-latin1 character 0x3ff found in JFS file name
[  170.776273][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.781470][ T7831] mount with iocharset=utf8 to access
[  170.791558][ T7831] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  170.791558][ T7831] 
[  170.818769][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.822253][ T7831] ERROR: (device loop4): remounting filesystem as read-only
[  170.828802][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.875553][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  170.911469][    T8] gspca_vc032x: Unknown sensor...
[  170.928896][ T7839] loop0: detected capacity change from 0 to 32768
[  170.935938][    T8] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  171.000077][    T8] usb 2-1: USB disconnect, device number 15
[  171.100860][ T7849] openvswitch: netlink: Missing key (keys=20040, expected=80)
[  171.396412][ T7857] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.900'.
[  171.452295][ T7857] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  171.607011][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.653206][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.886507][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.893757][ T7863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.923697][ T7845] loop5: detected capacity change from 0 to 32768
[  171.930829][ T7845] XFS: noikeep mount option is deprecated.
[  171.974139][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.981329][ T7863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.050389][ T7845] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  172.111870][ T7845] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.226495][ T7881] loop1: detected capacity change from 0 to 64
[  172.285685][ T7872] loop2: detected capacity change from 0 to 4096
[  172.352898][ T7872] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  172.397220][ T7885] sctp: [Deprecated]: syz.0.911 (pid 7885) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.397220][ T7885] Use struct sctp_sack_info instead
[  172.419643][ T7853] loop3: detected capacity change from 0 to 32768
[  172.481503][ T7865] loop4: detected capacity change from 0 to 32768
[  172.624496][ T7853] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  172.670594][ T7872] ntfs3(loop2): failed to convert "c46c" to cp775
[  172.733716][ T7853] XFS (loop3): Ending clean mount
[  172.743404][ T7853] XFS (loop3): Quotacheck needed: Please wait.
[  172.814989][ T7853] XFS (loop3): Quotacheck: Done.
[  172.899428][ T7845] XFS (loop5): Ending clean mount
[  173.026841][ T5228] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.035876][ T5240] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  173.750780][ T7926] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  173.781555][ T7926] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.925'.
[  173.819455][ T7926] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  173.852237][ T7926] netlink: 'syz.0.925': attribute type 2 has an invalid length.
[  173.926187][ T7935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.234166][ T7947] loop1: detected capacity change from 0 to 1024
[  174.437514][ T2545] hfsplus: b-tree write err: -5, ino 4
[  174.466443][ T7930] loop4: detected capacity change from 0 to 40427
[  174.484226][ T7930] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  174.490952][ T7930] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  174.517454][ T7930] F2FS-fs (loop4): Found nat_bits in checkpoint
[  174.680100][ T7930] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  174.692537][ T7930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  175.030295][ T7951] loop2: detected capacity change from 0 to 40427
[  175.062471][ T7951] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  175.063872][ T5241] syz-executor: attempt to access beyond end of device
[  175.063872][ T5241] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.070222][ T7951] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  175.083153][ T7969] loop0: detected capacity change from 0 to 256
[  175.100835][ T7969] exfat: Deprecated parameter 'namecase'
[  175.106849][ T7969] exfat: Deprecated parameter 'utf8'
[  175.122279][ T7951] F2FS-fs (loop2): invalid crc value
[  175.168860][ T5241] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.331875][ T7951] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  175.347397][ T7969] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  175.422663][ T7951] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  175.513236][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'.
[  175.697062][ T7986] raw_sendmsg: syz.1.953 forgot to set AF_INET. Fix it!
[  175.776012][ T7951] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  175.805305][ T7951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.962046][ T7980] loop5: detected capacity change from 0 to 32768
[  176.158405][ T7994] loop5: detected capacity change from 0 to 1024
[  176.225866][   T47] hfsplus: b-tree write err: -5, ino 4
[  176.275633][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'.
[  176.922669][ T8010] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  176.985995][ T8010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  177.049260][ T8013] netlink: 9 bytes leftover after parsing attributes in process `syz.0.964'.
[  177.099548][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.964'.
[  177.143435][ T8013] netlink: 9 bytes leftover after parsing attributes in process `syz.0.964'.
[  177.253369][ T8019] ubi0: attaching mtd0
[  177.281240][ T8019] ubi0: scanning is finished
[  177.298032][ T8019] ubi0: empty MTD device detected
[  177.597883][ T8004] loop4: detected capacity change from 0 to 32768
[  177.612381][ T8004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.945 (8004)
[  177.627826][ T8004] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.655910][ T8004] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  177.720539][ T8004] BTRFS info (device loop4): using free-space-tree
[  177.765381][ T8019] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  177.798299][ T8019] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  177.820663][ T8019] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  177.823095][ T8003] loop1: detected capacity change from 0 to 32768
[  177.830773][ T8019] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  177.890063][ T8003] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  177.952446][ T8019] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  177.992436][ T8019] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  178.042863][ T8019] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2226966552
[  178.174801][ T8062] loop3: detected capacity change from 0 to 64
[  178.187296][ T8019] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  178.215567][ T5241] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.237312][ T8020] ubi0: detaching mtd0
[  178.276855][ T8020] ubi0: mtd0 is detached
[  178.283779][ T8003] XFS (loop1): Ending clean mount
[  178.416466][ T8033] loop5: detected capacity change from 0 to 32768
[  178.472078][ T8031] loop0: detected capacity change from 0 to 32768
[  178.491324][ T8031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.971 (8031)
[  178.536530][ T8031] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.559354][ T8033] 
[  178.559354][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.559354][ T8033] 
[  178.620117][ T8031] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  178.657054][ T8031] BTRFS info (device loop0): using free-space-tree
[  178.688242][ T8033] 
[  178.688242][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.688242][ T8033] 
[  178.708190][ T5239] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  178.717284][ T8033] 
[  178.717284][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.717284][ T8033] 
[  178.758557][ T8076] 
[  178.758557][ T8076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.758557][ T8076] 
[  178.818751][ T8033] 
[  178.818751][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.818751][ T8033] 
[  178.878509][ T8033] 
[  178.878509][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.878509][ T8033] 
[  178.958109][ T8076] 
[  178.958109][ T8076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.958109][ T8076] 
[  178.980362][ T8033] 
[  178.980362][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.980362][ T8033] 
[  178.990971][ T8033] 
[  178.990971][ T8033]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.990971][ T8033] 
[  179.027895][  T111] 
[  179.027895][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  179.027895][  T111] 
[  179.372418][ T5228] 
[  179.372418][ T5228]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  179.372418][ T5228] 
[  179.389316][ T5228] 
[  179.389316][ T5228]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  179.389316][ T5228] 
[  179.515335][ T7084] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.603913][ T8091] syz.3.980 (8091) used greatest stack depth: 18240 bytes left
[  180.098098][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.986'.
[  180.161358][ T8110] loop1: detected capacity change from 0 to 512
[  180.182554][ T8111] loop5: detected capacity change from 0 to 512
[  180.187014][ T8110] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  180.199156][ T8066] loop2: detected capacity change from 0 to 32768
[  180.221552][ T8066] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.977 (8066)
[  180.242483][ T8110] EXT4-fs (loop1): 1 truncate cleaned up
[  180.253657][ T8110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.267339][ T8111] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.981: corrupted in-inode xattr: invalid ea_ino
[  180.290796][ T8111] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.981: couldn't read orphan inode 15 (err -117)
[  180.337730][ T8111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.370981][ T8066] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  180.404126][ T8066] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  180.455752][ T8066] BTRFS info (device loop2): using free-space-tree
[  180.473831][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  180.473851][   T29] audit: type=1800 audit(1728496712.624:40): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.981" name="bus" dev="loop5" ino=18 res=0 errno=0
[  180.629979][ T8123] loop0: detected capacity change from 0 to 256
[  180.736624][ T5239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.753618][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.887704][ T8148] loop1: detected capacity change from 0 to 256
[  180.928295][ T8148] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  180.953012][ T8123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4e1f5d09, utbl_chksum : 0xe619d30d)
[  181.040043][ T8148] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  181.071687][ T8123] exFAT-fs (loop0): error, in sector 160, dentry 12 should be unused, but 0x85
[  181.081059][ T8123] exFAT-fs (loop0): Filesystem has been set read-only
[  181.225500][ T8159] loop4: detected capacity change from 0 to 2048
[  181.325894][ T7238] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  181.337622][ T8159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.590756][ T8188] loop5: detected capacity change from 0 to 1024
[  182.600990][ T8178] loop0: detected capacity change from 0 to 32768
[  182.654638][ T8154] loop3: detected capacity change from 0 to 32768
[  182.693384][ T8188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.886677][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[  182.918223][ T8178] ERROR: (device loop0): diAllocAG: numfree > numinos
[  182.918223][ T8178] 
[  182.991424][ T8196] hsr0: entered promiscuous mode
[  183.031029][ T8178] ialloc: diAlloc returned -5!
[  183.051876][ T8196] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  183.053616][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.244184][ T8199] delete_channel: no stack
[  183.818840][ T8220] loop1: detected capacity change from 0 to 128
[  183.830309][ T8219] loop3: detected capacity change from 0 to 256
[  183.846187][ T8221] program syz.0.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.870350][ T8220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  183.920630][ T8219] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  183.975749][ T8228] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  183.993762][ T8221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  184.003413][ T8220] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  184.008824][ T8230] loop2: detected capacity change from 0 to 128
[  184.065175][ T8230] affs: No valid root block on device loop2
[  184.147028][ T5239] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.215794][ T8230] loop2: detected capacity change from 0 to 4096
[  184.593950][ T8244] netem: incorrect ge model size
[  184.599293][ T8244] netem: change failed
[  184.642750][ T5335] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  184.842733][ T8254] program syz.3.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.846460][ T5335] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  184.903190][ T5335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.944788][ T5335] usb 6-1: config 0 descriptor??
[  184.973007][ T5335] gspca_main: cpia1-2.14.0 probing 0813:0001
[  185.054049][ T8260] program syz.1.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.302575][ T8238] loop4: detected capacity change from 0 to 32768
[  185.317864][ T8238] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1034 (8238)
[  185.339848][   T29] audit: type=1326 audit(1728496717.484:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cd77dff9 code=0x7ffc0000
[  185.391678][ T8272] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  185.394647][ T5335] cpia1 6-1:0.0: unexpected state after lo power cmd: 99
[  185.407793][ T8272] netlink: 'syz.0.1050': attribute type 3 has an invalid length.
[  185.416168][ T8272] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1050'.
[  185.429744][ T8272] NCSI netlink: No device for ifindex 813332851
[  185.446245][ T8238] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  185.469763][   T29] audit: type=1326 audit(1728496717.524:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cd77dff9 code=0x7ffc0000
[  185.502506][ T8238] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  185.532222][ T8238] BTRFS info (device loop4): disk space caching is enabled
[  185.552703][ T5292] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  185.581161][ T8238] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  185.595466][   T29] audit: type=1326 audit(1728496717.524:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f95cd77dff9 code=0x7ffc0000
[  185.670769][   T29] audit: type=1326 audit(1728496717.524:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cd77dff9 code=0x7ffc0000
[  185.694281][   T29] audit: type=1326 audit(1728496717.524:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8265 comm="syz.2.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95cd77dff9 code=0x7ffc0000
[  185.716891][ T5292] usb 2-1: Using ep0 maxpacket: 8
[  185.724361][ T5292] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  185.733695][ T5292] usb 2-1: config 179 has no interface number 0
[  185.739985][ T5292] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  185.783488][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'.
[  185.818439][ T5335] gspca_cpia1: usb_control_msg 02, error -71
[  185.825526][ T5335] gspca_cpia1: usb_control_msg 05, error -71
[  185.831584][ T5335] cpia1 6-1:0.0: unexpected systemstate: 99
[  185.840622][ T5335] usb 6-1: USB disconnect, device number 10
[  185.863559][ T5292] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  185.900996][ T5292] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  185.922475][ T5292] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  185.952426][ T5292] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  185.976809][ T5292] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  185.996740][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.151596][ T8238] BTRFS info (device loop4): rebuilding free space tree
[  186.206502][ T8267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  186.303759][ T8238] BTRFS info (device loop4): disabling free space tree
[  186.348395][ T8238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.409768][ T8238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.560185][ T5292] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19
[  186.885555][ T5241] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  187.032319][ T8304] loop2: detected capacity change from 0 to 32768
[  187.052280][    T9] usb 2-1: USB disconnect, device number 16
[  187.052294][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  187.052335][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  187.075151][    T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  187.132462][   T29] audit: type=1800 audit(1728496719.274:46): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1058" name="bus" dev="loop2" ino=7 res=0 errno=0
[  187.194642][ T8307] loop5: detected capacity change from 0 to 1024
[  187.553013][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1064'.
[  187.562295][ T8315] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  187.748169][ T8322] loop5: detected capacity change from 0 to 1024
[  187.820758][ T8328] vlan2: entered allmulticast mode
[  187.835545][ T8322] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  187.939453][ T8322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.259549][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.506709][ T8343] loop5: detected capacity change from 0 to 512
[  188.630223][ T8343] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.866869][ T8343] EXT4-fs (loop5): 1 truncate cleaned up
[  188.873643][ T8343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.909176][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'.
[  188.990025][ T8326] loop1: detected capacity change from 0 to 32768
[  189.061568][ T8326] JBD2: Ignoring recovery information on journal
[  189.181767][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.199959][ T8354] loop4: detected capacity change from 0 to 512
[  189.231956][ T8345] loop0: detected capacity change from 0 to 40427
[  189.274974][ T8345] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  189.284011][ T8345] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  189.294937][ T8326] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  189.323369][ T8354] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  189.397906][ T8362] loop5: detected capacity change from 0 to 64
[  189.478132][ T8354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002]
[  189.492854][ T8354] EXT4-fs (loop4): orphan cleanup on readonly fs
[  189.500495][ T8368] loop3: detected capacity change from 0 to 64
[  189.500586][ T8354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1076: bg 0: block 361: padding at end of block bitmap is not set
[  189.542468][ T8354] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  189.552758][ T8354] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.1076: attempt to clear invalid blocks 33619980 len 1
[  189.569938][ T8345] F2FS-fs (loop0): Found nat_bits in checkpoint
[  189.604283][ T5239] ocfs2: Unmounting device (7,1) on (node local)
[  189.794048][ T8354] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1076: invalid indirect mapped block 1811939328 (level 0)
[  189.861458][ T8354] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1076: invalid indirect mapped block 2185560079 (level 1)
[  189.910014][ T8345] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  189.930910][ T8354] EXT4-fs (loop4): 1 truncate cleaned up
[  189.943456][ T8345] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  189.953893][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  190.107967][ T7084] syz-executor: attempt to access beyond end of device
[  190.107967][ T7084] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.171749][ T7084] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  190.215471][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  191.003341][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  191.207281][    T9] usb 3-1: Using ep0 maxpacket: 32
[  191.249957][ T8390] loop1: detected capacity change from 0 to 40427
[  191.274625][ T8397] loop5: detected capacity change from 0 to 32768
[  191.290156][ T8390] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  191.300363][ T8390] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  191.387583][    T9] usb 3-1: config index 0 descriptor too short (expected 26, got 18)
[  191.397350][    T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  191.436827][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.463042][    T9] usb 3-1: config 0 descriptor??
[  191.472691][ T8397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1095 (8397)
[  191.526832][ T8417] CUSE: unknown device info "Ðju|:©¾iÎò|Êl�
[  191.526832][ T8417] ‚ï›D Í^M¢`­ÒESæ«ÇšÇP²2EQ¬©xÉíÿy;óvØ£¹‚+½:‰yâðGYü™2z€&ü
[  191.526832][ T8417] Z9ü,v¢’Ïu3~ÚcÙYÓšrº(‹%ÝÀÔÀÓoÖ)j´�†WœeÃ-¤ÂÈ7µ#"�j-hÈò0u  Á} ß»’oœL¬ð�xÏ-�XzATÑ	„"
[  191.554639][    T9] as10x_usb: device has been detected
[  191.581080][    T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  191.601875][ T8413] loop3: detected capacity change from 0 to 32768
[  191.615345][ T8390] F2FS-fs (loop1): Found nat_bits in checkpoint
[  191.653543][ T8397] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.682223][ T8397] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  191.704930][    T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  191.737408][ T8397] BTRFS info (device loop5): using free-space-tree
[  191.758696][ T8417] CUSE: DEVNAME unspecified
[  191.854383][    T9] as10x_usb: error during firmware upload part1
[  191.916233][    T9] Registered device nBox DVB-T Dongle
[  192.120096][    T9] usb 3-1: USB disconnect, device number 7
[  192.160497][    T9] Unregistered device nBox DVB-T Dongle
[  192.162163][    T9] as10x_usb: device has been disconnected
[  192.174751][ T8390] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  192.181808][ T8390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  192.607917][ T8449] loop0: detected capacity change from 0 to 40427
[  192.698650][ T8449] F2FS-fs (loop0): invalid crc value
[  192.706110][ T5228] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.772673][ T5239] syz-executor: attempt to access beyond end of device
[  192.772673][ T5239] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.797887][ T8449] F2FS-fs (loop0): Found nat_bits in checkpoint
[  192.854152][ T5239] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  193.071525][ T8449] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.418309][ T8477] loop5: detected capacity change from 0 to 1764
[  193.520482][ T8480] loop4: detected capacity change from 0 to 512
[  193.556257][ T8480] EXT4-fs: Ignoring removed nomblk_io_submit option
[  193.843640][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  193.849992][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  193.973565][ T8480] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  194.013387][ T8491] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1125'.
[  194.022745][ T8480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[  194.030922][ T8480] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  194.055552][ T8491] netlink: 'syz.5.1125': attribute type 1 has an invalid length.
[  194.107711][ T8480] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  194.116831][ T8491] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1125'.
[  194.124667][ T8485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.133683][ T8480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  194.182296][ T8480] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  194.285369][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.516118][ T8511] syz_tun: entered promiscuous mode
[  194.591848][ T8511] syz_tun: left promiscuous mode
[  194.632217][ T5335] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  194.771933][ T8520] tipc: Failed to obtain node identity
[  194.800868][ T8520] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  194.809402][ T5335] usb 3-1: Using ep0 maxpacket: 8
[  194.826450][ T5335] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  194.852256][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.880792][ T5335] usb 3-1: Product: syz
[  194.903945][ T5335] usb 3-1: Manufacturer: syz
[  194.920668][ T5335] usb 3-1: SerialNumber: syz
[  194.951016][ T5335] usb 3-1: config 0 descriptor??
[  194.974103][ T5335] gspca_main: se401-2.14.0 probing 047d:5003
[  195.038489][ T8526] loop5: detected capacity change from 0 to 16
[  195.109738][ T8526] erofs: (device loop5): mounted with root inode @ nid 36.
[  195.191771][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.263189][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.500104][ T5335] gspca_se401: ExtraFeatures: 5
[  195.511434][ T5335] gspca_se401: Frame size: 39x0 bayer
[  195.522510][ T5335] gspca_se401: Frame size: 0x0 1/16th janggu
[  195.626447][ T8507] loop3: detected capacity change from 0 to 40427
[  195.642876][ T8507] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  195.650682][ T8507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  195.691870][ T8518] loop1: detected capacity change from 0 to 32768
[  195.699030][ T8507] F2FS-fs (loop3): invalid crc value
[  195.712897][ T5335] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  195.750322][ T8518] JBD2: Ignoring recovery information on journal
[  195.767572][ T5335] usb 3-1: USB disconnect, device number 8
[  195.799695][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  195.812695][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  195.818729][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  195.824872][ T4617] Bluetooth: hci3: command 0x0406 tx timeout
[  195.869847][ T8507] F2FS-fs (loop3): Found nat_bits in checkpoint
[  195.918519][ T8518] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  196.041553][ T8523] loop4: detected capacity change from 0 to 40427
[  196.058060][ T8523] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  196.065992][ T8523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  196.086159][ T8523] F2FS-fs (loop4): invalid crc value
[  196.097746][ T8507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  196.108232][ T8523] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  196.108904][ T8507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.126363][ T8523] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  196.190890][   T29] audit: type=1804 audit(1728496728.334:47): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1133" name="/newroot/208/bus/bus" dev="loop3" ino=455 res=1 errno=0
[  196.249755][ T5239] ocfs2: Unmounting device (7,1) on (node local)
[  196.255568][ T8523] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  196.263332][ T8523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.450613][ T8547] loop0: detected capacity change from 0 to 1024
[  196.481750][ T1288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  196.558883][ T1288] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  196.617984][ T8547] Process accounting resumed
[  196.731970][ T8559] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  197.230327][ T8577] program syz.5.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.002437][ T8612] loop1: detected capacity change from 0 to 128
[  198.059076][ T8612] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  198.153917][ T8612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.256510][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'.
[  198.438102][ T8628] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1180'.
[  198.486495][ T8628] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  198.502617][ T5335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.542381][ T5294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.582444][ T5294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.672453][ T5294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.718872][ T8636] loop5: detected capacity change from 0 to 128
[  198.759922][ T8636] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.786642][ T5335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  198.946747][ T8636] ext4 filesystem being mounted at /223/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  199.034676][ T8640] loop3: detected capacity change from 0 to 4096
[  199.069087][ T8634] loop4: detected capacity change from 0 to 32768
[  199.095247][ T8640] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  199.119306][ T5294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  199.145763][ T8634] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1184 (8634)
[  199.235050][ T5388] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  199.342797][ T5335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  199.357962][ T5228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.400104][ T8634] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  199.418566][ T8634] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  199.422407][ T5335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  199.452325][ T8634] BTRFS info (device loop4): using free-space-tree
[  199.512438][ T5335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  199.728261][ T8650] mkiss: ax0: crc mode is auto.
[  200.172809][   T29] audit: type=1800 audit(1728496732.294:48): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1184" name="bus" dev="loop4" ino=263 res=0 errno=0
[  200.365358][ T8675] loop0: detected capacity change from 0 to 1024
[  200.398388][ T5241] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  200.523387][ T8682] openvswitch: netlink: Actions may not be safe on all matching packets
[  200.651005][   T12] hfsplus: b-tree write err: -5, ino 4
[  200.796715][ T8690] input: syz1 as /devices/virtual/input/input21
[  201.239784][ T8660] loop2: detected capacity change from 0 to 32768
[  201.344830][ T8672] loop5: detected capacity change from 0 to 32768
[  201.353492][ T8672] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1187 (8672)
[  201.430140][ T8672] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.442038][ T8672] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  201.479337][ T8672] BTRFS info (device loop5): using free-space-tree
[  201.726840][ T8672] BTRFS info (device loop5): rebuilding free space tree
[  201.815180][   T29] audit: type=1800 audit(1728496733.964:49): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1187" name="bus" dev="loop5" ino=263 res=0 errno=0
[  201.974262][ T5228] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.131343][ T8688] loop4: detected capacity change from 0 to 32768
[  202.211095][ T8688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1196 (8688)
[  202.314131][ T8729] loop0: detected capacity change from 0 to 512
[  202.362831][ T8688] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.364532][ T8729] EXT4-fs: Ignoring removed bh option
[  202.431395][ T8688] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  202.478220][ T8688] BTRFS info (device loop4): disk space caching is enabled
[  202.555632][ T8688] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  202.691619][ T8729] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.1209: invalid block
[  202.815439][ T8713] loop3: detected capacity change from 0 to 32768
[  202.855471][ T8713] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1205 (8713)
[  203.039532][ T8730] loop5: detected capacity change from 0 to 40427
[  203.047469][ T8730] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  203.065707][ T8730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  203.075420][ T8729] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1209: couldn't read orphan inode 15 (err -117)
[  203.173012][ T8729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.210120][ T8713] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.352365][ T8713] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  203.362562][ T8730] F2FS-fs (loop5): Found nat_bits in checkpoint
[  203.365467][ T8713] BTRFS info (device loop3): disk space caching is enabled
[  203.377087][ T8713] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  203.402435][ T8688] BTRFS info (device loop4): rebuilding free space tree
[  203.418073][ T8688] BTRFS info (device loop4): disabling free space tree
[  203.426092][ T8688] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  203.436525][ T8688] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  203.600186][ T8773] tun0: tun_chr_ioctl cmd 1074025678
[  203.607648][ T8773] tun0: group set to 0
[  203.621448][ T8730] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  203.633486][ T8730] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  203.661762][ T7084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.679404][   T29] audit: type=1804 audit(1728496735.824:50): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1207" name="/newroot/225/bus/file0" dev="loop5" ino=10 res=1 errno=0
[  203.917843][ T8688] syz.4.1196 (8688) used greatest stack depth: 18224 bytes left
[  204.014833][ T5241] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  204.032501][ T8713] BTRFS info (device loop3): rebuilding free space tree
[  204.106907][ T8713] BTRFS info (device loop3): disabling free space tree
[  204.114019][ T8713] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  204.123808][ T8713] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  204.522602][ T5240] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.012801][    T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  205.062219][ T5297] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  205.192324][    T8] usb 6-1: Using ep0 maxpacket: 16
[  205.204112][    T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  205.221907][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  205.234128][ T5297] usb 5-1: Using ep0 maxpacket: 32
[  205.250726][ T5297] usb 5-1: config index 0 descriptor too short (expected 26, got 18)
[  205.260246][ T5297] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  205.271306][    T8] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  205.280500][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.298849][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.307876][    T8] usb 6-1: Product: syz
[  205.324882][ T5297] usb 5-1: config 0 descriptor??
[  205.337089][    T8] usb 6-1: Manufacturer: syz
[  205.341714][    T8] usb 6-1: SerialNumber: syz
[  205.357262][ T5297] as10x_usb: device has been detected
[  205.365599][    T8] usb 6-1: config 0 descriptor??
[  205.381249][ T5297] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  205.393903][    T8] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  205.422531][    T8] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  205.455228][ T5297] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  205.475642][ T5297] as10x_usb: error during firmware upload part1
[  205.511645][ T5297] Registered device nBox DVB-T Dongle
[  205.599824][ T3200] usb 5-1: USB disconnect, device number 13
[  205.641298][ T3200] Unregistered device nBox DVB-T Dongle
[  205.647221][ T3200] as10x_usb: device has been disconnected
[  205.711513][ T8815] loop2: detected capacity change from 0 to 32768
[  205.734799][ T8815] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1230 (8815)
[  205.755033][ T5294] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  205.766639][ T8815] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.778759][ T8815] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  205.788304][ T8815] BTRFS info (device loop2): using free-space-tree
[  205.866085][ T8813] loop1: detected capacity change from 0 to 32768
[  205.903291][   T29] audit: type=1800 audit(1728496738.054:51): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1229" name="bus" dev="loop1" ino=7 res=0 errno=0
[  205.946083][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.957963][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.968850][ T5294] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  205.978445][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.000534][    T8] em28xx 6-1:0.0: chip ID is em28174
[  206.008223][ T5294] usb 4-1: config 0 descriptor??
[  206.239919][    T8] usb 6-1: USB disconnect, device number 11
[  206.267726][    T8] em28xx 6-1:0.0: Disconnecting em28xx
[  206.272710][ T7238] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.289168][    T8] em28xx 6-1:0.0: Freeing device
[  206.463996][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.471404][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.486528][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.498055][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.536026][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.562378][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.587457][ T5294] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  206.617655][ T5294] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  206.901475][ T3200] usb 4-1: USB disconnect, device number 8
[  206.969481][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'.
[  207.178436][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'.
[  207.381709][ T8857] loop1: detected capacity change from 0 to 4096
[  207.462315][ T8857] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  207.478844][ T8871] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  207.603181][ T8847] loop4: detected capacity change from 0 to 32768
[  207.851211][ T8863] loop5: detected capacity change from 0 to 40427
[  207.894934][ T8847] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  207.901947][ T8863] F2FS-fs (loop5): invalid crc value
[  207.941908][ T8879] loop2: detected capacity change from 0 to 128
[  208.004899][ T8863] F2FS-fs (loop5): Found nat_bits in checkpoint
[  208.050544][ T8857] ntfs3(loop1): Inode r=19 is not in use!
[  208.097177][   T29] audit: type=1800 audit(1728496740.234:52): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1236" name="bus" dev="loop4" ino=17059 res=0 errno=0
[  208.112266][ T8857] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  208.129270][ T8847] syz.4.1236 (8847) used greatest stack depth: 17208 bytes left
[  208.173657][ T8857] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  208.285712][ T8863] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  208.301129][ T5241] ocfs2: Unmounting device (7,4) on (node local)
[  208.321628][ T8857] ntfs3(loop1): ino=1d, "file1" attr_set_size
[  208.385024][ T8896] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  208.495379][ T8896] macvtap1: entered promiscuous mode
[  208.533075][ T8896] macvtap1: entered allmulticast mode
[  208.538693][ T8896] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  208.622701][ T5228] syz-executor: attempt to access beyond end of device
[  208.622701][ T5228] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.648581][ T5228] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  208.813570][ T8909] loop2: detected capacity change from 0 to 256
[  208.939894][ T8910] loop0: detected capacity change from 0 to 1024
[  208.970258][ T8910] EXT4-fs: Ignoring removed mblk_io_submit option
[  209.032467][ T5388] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  209.092646][ T8910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.202470][    T8] IPVS: starting estimator thread 0...
[  209.302357][ T8918] IPVS: using max 16 ests per chain, 38400 per kthread
[  209.385197][ T7084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.601892][ T8904] loop1: detected capacity change from 0 to 32768
[  209.745612][ T5388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.745661][ T5388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.745702][ T5388] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  209.745732][ T5388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.748907][ T5388] usb 5-1: config 0 descriptor??
[  209.787310][ T8904] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.181047][ T5388] hid (null): global environment stack underflow
[  210.190488][ T5388] uclogic 0003:5543:0522.001C: global environment stack underflow
[  210.222234][ T5388] uclogic 0003:5543:0522.001C: item 0 1 1 11 parsing failed
[  210.260982][ T5388] uclogic 0003:5543:0522.001C: parse failed
[  210.297375][ T8904] XFS (loop1): Ending clean mount
[  210.312270][ T5388] uclogic 0003:5543:0522.001C: probe with driver uclogic failed with error -22
[  210.393981][ T5388] usb 5-1: USB disconnect, device number 14
[  210.498523][ T8956] nbd: nbd2 already in use
[  210.543338][ T5239] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.865876][ T8947] loop0: detected capacity change from 0 to 40427
[  211.117101][ T8947] F2FS-fs (loop0): Found nat_bits in checkpoint
[  211.382276][ T8947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  211.443330][ T8951] loop5: detected capacity change from 0 to 40427
[  211.524304][ T8990] serio: Serial port ttynull
[  211.551200][ T8951] F2FS-fs (loop5): Found nat_bits in checkpoint
[  211.729670][ T7084] syz-executor: attempt to access beyond end of device
[  211.729670][ T7084] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.772856][ T8951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  211.797023][ T7084] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  212.009732][ T5228] syz-executor: attempt to access beyond end of device
[  212.009732][ T5228] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.056316][ T9006] loop1: detected capacity change from 0 to 1024
[  212.090491][ T5228] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  212.180554][ T9006] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  212.202660][   T29] audit: type=1326 audit(1728496744.324:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.4.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa187b7dff9 code=0x0
[  212.213690][ T9006] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  212.262852][ T9006] EXT4-fs (loop1): invalid journal inode
[  212.268598][ T9006] EXT4-fs (loop1): can't get journal size
[  212.336503][ T9006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.499653][ T9006] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 37: comm syz.1.1296: path /228/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  212.553237][ T9006] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1296: path /228/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0
[  212.711528][ T5239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.190037][ T9036] 9pnet_virtio: no channels available for device syz
[  213.425910][ T9020] loop3: detected capacity change from 0 to 32768
[  213.616501][ T9051] loop1: detected capacity change from 0 to 512
[  213.662364][ T9056] loop0: detected capacity change from 0 to 16
[  213.681406][ T9051] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1316: corrupted in-inode xattr: invalid ea_ino
[  213.690681][ T9056] erofs: (device loop0): mounted with root inode @ nid 36.
[  213.748181][ T9051] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1316: couldn't read orphan inode 15 (err -117)
[  213.804948][ T9051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.853893][ T9056] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  213.923892][ T9056] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  213.966833][ T9056] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 123 of nid 36
[  213.996503][ T9069] loop3: detected capacity change from 0 to 512
[  214.009551][ T9070] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  214.048526][ T9069] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  214.059389][ T5239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.119056][ T9069] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1315: iget: bad extended attribute block 19
[  214.152331][ T5388] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  214.190325][ T9069] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1315: couldn't read orphan inode 15 (err -117)
[  214.229149][ T9069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.310315][ T9069] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  214.341534][ T5388] usb 3-1: Using ep0 maxpacket: 8
[  214.348514][ T5388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.377663][ T9079] loop4: detected capacity change from 0 to 512
[  214.384225][ T5388] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.406792][ T5388] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  214.431868][ T5388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.522602][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.567900][ T9079] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1325: bad orphan inode 4
[  214.585981][ T9079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.629020][ T9079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1325: bg 0: block 3: invalid block bitmap
[  214.667428][ T9071] loop5: detected capacity change from 0 to 32768
[  214.690058][ T5388] usb 3-1: config 0 descriptor??
[  214.726727][ T9071] JBD2: Ignoring recovery information on journal
[  214.843813][ T9089] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1330'.
[  214.887183][ T9071] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  214.918214][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.026279][ T9071] (syz.5.1322,9071,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=32, inode=17057, rec_len=5, name_len=0
[  215.172279][ T5388] hid (null): unknown global tag 0xe
[  215.180391][ T5388] playstation 0003:054C:0CE6.001D: unknown main item tag 0x0
[  215.212521][ T5228] ocfs2: Unmounting device (7,5) on (node local)
[  215.238474][ T5388] playstation 0003:054C:0CE6.001D: unknown global tag 0xe
[  215.267989][ T5388] playstation 0003:054C:0CE6.001D: item 0 0 1 14 parsing failed
[  215.295558][ T5388] playstation 0003:054C:0CE6.001D: Parse failed
[  215.354496][ T5388] playstation 0003:054C:0CE6.001D: probe with driver playstation failed with error -22
[  215.393709][ T5388] usb 3-1: USB disconnect, device number 9
[  215.494843][ T9109] loop1: detected capacity change from 0 to 64
[  215.789933][ T9119] loop3: detected capacity change from 0 to 64
[  215.839351][ T9123] netlink: 'syz.1.1343': attribute type 25 has an invalid length.
[  215.862408][ T9123] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  215.879517][ T9119] hfs: request for non-existent node 1573 in B*Tree
[  215.905121][ T9119] hfs: request for non-existent node 1573 in B*Tree
[  216.628099][  T182] hfs: request for non-existent node 1573 in B*Tree
[  216.669743][  T182] hfs: request for non-existent node 1573 in B*Tree
[  216.773005][ T9139] block nbd2: shutting down sockets
[  217.201017][ T9134] loop4: detected capacity change from 0 to 32768
[  217.270241][ T9134] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1352 (9134)
[  217.486137][ T9166] loop5: detected capacity change from 0 to 24
[  217.659119][ T9162] loop0: detected capacity change from 0 to 40427
[  217.676404][ T9134] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.726403][ T9171] loop5: detected capacity change from 0 to 256
[  217.733668][ T9134] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  217.812198][ T9162] F2FS-fs (loop0): invalid crc value
[  217.903272][ T9171] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  217.927303][ T9162] F2FS-fs (loop0): Found nat_bits in checkpoint
[  218.033569][ T9134] BTRFS info (device loop4): rebuilding free space tree
[  218.170715][ T9162] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  218.182424][ T9134] BTRFS info (device loop4): disabling free space tree
[  218.189464][ T9134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  218.199257][ T9134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  218.200668][ T9162] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  218.312319][ T3200] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  218.485290][ T9202] program syz.5.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.641523][ T3200] usb 3-1: Using ep0 maxpacket: 16
[  218.658799][ T3200] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  218.669773][ T3200] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  218.679315][ T3200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.687612][ T3200] usb 3-1: Product: syz
[  218.691802][ T3200] usb 3-1: Manufacturer: syz
[  218.696698][ T3200] usb 3-1: SerialNumber: syz
[  218.711213][ T3200] usb 3-1: config 0 descriptor??
[  218.721957][ T3200] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  218.735269][ T3200] usb 3-1: Detected FT232R
[  218.975351][ T3200] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  219.200100][ T9181] loop3: detected capacity change from 0 to 40427
[  219.239364][ T3200] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  219.265928][ T9181] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  219.320199][ T9181] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  219.351568][ T9181] F2FS-fs (loop3): invalid crc value
[  219.389258][ T9181] F2FS-fs (loop3): Found nat_bits in checkpoint
[  219.442269][ T5388] usb 3-1: USB disconnect, device number 10
[  219.461985][ T5241] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.512247][ T5388] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  219.542797][ T5388] ftdi_sio 3-1:0.0: device disconnected
[  219.593387][ T9181] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  219.608178][ T9181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  220.075187][ T9227] loop4: detected capacity change from 0 to 256
[  220.176869][ T9214] loop1: detected capacity change from 0 to 32768
[  220.363624][ T9227] FAT-fs (loop4): Directory bread(block 64) failed
[  220.394021][ T9227] FAT-fs (loop4): Directory bread(block 65) failed
[  220.432833][ T9227] FAT-fs (loop4): Directory bread(block 66) failed
[  220.439433][ T9227] FAT-fs (loop4): Directory bread(block 67) failed
[  220.462514][ T9227] FAT-fs (loop4): Directory bread(block 68) failed
[  220.466476][ T9225] loop5: detected capacity change from 0 to 32768
[  220.489595][ T9227] FAT-fs (loop4): Directory bread(block 69) failed
[  220.512431][ T9227] FAT-fs (loop4): Directory bread(block 70) failed
[  220.538562][ T9227] FAT-fs (loop4): Directory bread(block 71) failed
[  220.564725][   T29] audit: type=1800 audit(1728496752.714:54): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1380" name="file1" dev="loop5" ino=4 res=0 errno=0
[  220.566633][ T9227] FAT-fs (loop4): Directory bread(block 72) failed
[  220.612296][ T9227] FAT-fs (loop4): Directory bread(block 73) failed
[  220.673806][ T9232] kernel profiling enabled (shift: 0)
[  220.725623][   T29] audit: type=1800 audit(1728496752.874:55): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1378" name="bus" dev="loop4" ino=1048674 res=0 errno=0
[  220.775935][ T9227] syz.4.1378: attempt to access beyond end of device
[  220.775935][ T9227] loop4: rw=2049, sector=1296, nr_sectors = 4 limit=256
[  220.810123][ T9234] bridge_slave_1: left allmulticast mode
[  220.816117][ T9234] bridge_slave_1: left promiscuous mode
[  220.823324][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.858621][ T9235] syz.4.1378: attempt to access beyond end of device
[  220.858621][ T9235] loop4: rw=2051, sector=1224, nr_sectors = 96 limit=256
[  220.885509][ T9234] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  221.127196][ T9237] loop3: detected capacity change from 0 to 4096
[  221.144981][ T9237] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  221.257387][ T9239] loop4: detected capacity change from 0 to 8
[  221.311574][ T9237] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  221.347840][ T9237] ntfs3(loop3): ino=1e, "file1" attr_set_size
[  221.406840][   T12] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  221.417018][ T5240] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  221.425754][ T5240] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  221.466154][ T5240] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  221.513248][ T2545] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  221.753539][ T9212] loop0: detected capacity change from 0 to 65536
[  221.835065][ T9212] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  221.995271][ T9212] XFS (loop0): Ending clean mount
[  222.027723][ T9212] XFS (loop0): Quotacheck needed: Please wait.
[  222.122048][ T9232] warn_alloc: 3 callbacks suppressed
[  222.122065][ T9232] syz.2.1383: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  222.206190][ T9212] XFS (loop0): Quotacheck: Done.
[  222.266809][ T9274] loop5: detected capacity change from 0 to 16
[  222.280282][ T9232] CPU: 1 UID: 0 PID: 9232 Comm: syz.2.1383 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  222.291022][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  222.301096][ T9232] Call Trace:
[  222.304390][ T9232]  <TASK>
[  222.307331][ T9232]  dump_stack_lvl+0x241/0x360
[  222.312027][ T9232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.317243][ T9232]  ? __pfx__printk+0x10/0x10
[  222.321863][ T9232]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  222.328298][ T9232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.333951][ T9232]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  222.340472][ T9232]  warn_alloc+0x278/0x410
[  222.344819][ T9232]  ? __pfx_warn_alloc+0x10/0x10
[  222.349686][ T9232]  ? profile_init+0xb1/0x100
[  222.354292][ T9232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.359938][ T9232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.365615][ T9232]  ? __get_vm_area_node+0x23d/0x270
[  222.370859][ T9232]  __vmalloc_node_range_noprof+0x691/0x13f0
[  222.376793][ T9232]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  222.383132][ T9232]  ? rcu_is_watching+0x15/0xb0
[  222.387914][ T9232]  ? rcu_is_watching+0x15/0xb0
[  222.392693][ T9232]  ? profile_init+0xb1/0x100
[  222.397297][ T9232]  ? __pfx_sysfs_kf_write+0x10/0x10
[  222.402516][ T9232]  vzalloc_noprof+0x79/0x90
[  222.407030][ T9232]  ? profile_init+0xb1/0x100
[  222.411633][ T9232]  profile_init+0xb1/0x100
[  222.416065][ T9232]  profiling_store+0x6c/0xf0
[  222.420666][ T9232]  kernfs_fop_write_iter+0x3a2/0x500
[  222.425973][ T9232]  vfs_write+0xa6f/0xc90
[  222.430230][ T9232]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  222.436061][ T9232]  ? __pfx_vfs_write+0x10/0x10
[  222.440837][ T9232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.446503][ T9232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  222.452150][ T9232]  ? fdget_pos+0x24e/0x320
[  222.456588][ T9232]  ksys_write+0x183/0x2b0
[  222.460930][ T9232]  ? __pfx_ksys_write+0x10/0x10
[  222.465790][ T9232]  ? do_syscall_64+0x100/0x230
[  222.470567][ T9232]  ? do_syscall_64+0xb6/0x230
[  222.475255][ T9232]  do_syscall_64+0xf3/0x230
[  222.479791][ T9232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.485737][ T9232] RIP: 0033:0x7f95cd77dff9
[  222.490161][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.509898][ T9232] RSP: 002b:00007f95ce52b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  222.518332][ T9232] RAX: ffffffffffffffda RBX: 00007f95cd935f80 RCX: 00007f95cd77dff9
[  222.526318][ T9232] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003
[  222.534300][ T9232] RBP: 00007f95cd7f0296 R08: 0000000000000000 R09: 0000000000000000
[  222.542279][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.550348][ T9232] R13: 0000000000000000 R14: 00007f95cd935f80 R15: 00007ffd8f0918b8
[  222.558520][ T9232]  </TASK>
[  222.561911][    T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  222.569674][ T9274] erofs: (device loop5): mounted with root inode @ nid 36.
[  222.588761][ T9274] overlayfs: failed to get metacopy (-117)
[  222.606265][ T7084] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  222.692227][ T9232] Mem-Info:
[  222.811633][ T9232] active_anon:16396 inactive_anon:0 isolated_anon:0
[  222.811633][ T9232]  active_file:1606 inactive_file:38760 isolated_file:0
[  222.811633][ T9232]  unevictable:768 dirty:571 writeback:0
[  222.811633][ T9232]  slab_reclaimable:9568 slab_unreclaimable:99842
[  222.811633][ T9232]  mapped:25606 shmem:11694 pagetables:954
[  222.811633][ T9232]  sec_pagetables:0 bounce:0
[  222.811633][ T9232]  kernel_misc_reclaimable:0
[  222.811633][ T9232]  free:1311554 free_pcp:1271 free_cma:0
[  222.858349][ T9276] netlink: 'syz.5.1400': attribute type 1 has an invalid length.
[  222.872358][    T8] usb 2-1: Using ep0 maxpacket: 16
[  222.877843][ T9276] netlink: 9324 bytes leftover after parsing attributes in process `syz.5.1400'.
[  222.912631][ T9276] netlink: 'syz.5.1400': attribute type 1 has an invalid length.
[  223.012340][ T9232] Node 0 active_anon:69684kB inactive_anon:0kB active_file:6424kB inactive_file:154668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102424kB dirty:2284kB writeback:0kB shmem:49140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10616kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no
[  223.144460][ T9273] loop3: detected capacity change from 0 to 40427
[  223.145687][ T9232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  223.151164][    T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  223.214588][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.222717][    T8] usb 2-1: Product: syz
[  223.226906][    T8] usb 2-1: Manufacturer: syz
[  223.231518][    T8] usb 2-1: SerialNumber: syz
[  223.242069][ T9232] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  223.252593][ T9278] loop5: detected capacity change from 0 to 256
[  223.277286][    T8] usb 2-1: config 0 descriptor??
[  223.284146][ T9278] exfat: Deprecated parameter 'namecase'
[  223.314127][    T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  223.343432][ T9273] F2FS-fs (loop3): invalid crc value
[  223.358504][ T9232] lowmem_reserve[]: 0 2465 2466 0 0
[  223.361783][ T9273] F2FS-fs (loop3): Found nat_bits in checkpoint
[  223.374403][ T9232] Node 0 DMA32 free:1300872kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:71548kB inactive_anon:0kB active_file:6424kB inactive_file:153848kB unevictable:1536kB writepending:2284kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:4244kB local_pcp:3304kB free_cma:0kB
[  223.385229][ T9278] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  223.472383][ T9232] lowmem_reserve[]: 0 0 0 0 0
[  223.477293][ T9232] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  223.534376][    T8] gp8psk: usb in 128 operation failed.
[  223.542776][    T8] gp8psk: usb in 137 operation failed.
[  223.552293][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  223.565504][ T9251] loop4: detected capacity change from 0 to 32768
[  223.591811][    T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  223.614232][    T8] usb 2-1: media controller created
[  223.622364][ T9232] lowmem_reserve[]: 0 0 0 0 0
[  223.641040][ T9232] Node 1 Normal free:3924680kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB
[  223.734107][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.746362][ T9273] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  223.764557][ T9232] lowmem_reserve[]: 0 0 0 0 0
[  223.769692][ T9232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  223.783198][ T9232] Node 0 DMA32: 193*4kB (UME) 341*8kB (UME) 212*16kB (ME) 168*32kB (UME) 36*64kB (UME) 42*128kB (ME) 17*256kB (M) 121*512kB (UM) 54*1024kB (UME) 4*2048kB (UM) 284*4096kB (ME) = 1313004kB
[  223.804124][ T9232] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  223.816188][ T9232] Node 1 Normal: 170*4kB (UME) 46*8kB (UME) 35*16kB (UME) 186*32kB (UME) 87*64kB (UE) 23*128kB (UE) 10*256kB (UME) 9*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 950*4096kB (M) = 3924680kB
[  223.835154][ T9232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  223.844830][ T9232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  223.867399][    T8] gp8psk_fe: Frontend revision 1 attached
[  223.873793][    T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  223.882785][    T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  223.959107][ T9232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  223.971372][ T9232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  223.971912][ T5240] syz-executor: attempt to access beyond end of device
[  223.971912][ T5240] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.981780][ T9232] 50739 total pagecache pages
[  223.995709][ T5240] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  224.022425][ T9232] 0 pages in swap cache
[  224.026774][ T9232] Free swap  = 124564kB
[  224.031062][ T9232] Total swap = 124996kB
[  224.032412][ T9251] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.035298][ T9232] 2097051 pages RAM
[  224.047987][ T9232] 0 pages HighMem/MovableOnly
[  224.082412][ T9232] 427076 pages reserved
[  224.086638][ T9232] 0 pages cma reserved
[  224.362274][    T8] gp8psk: usb in 137 operation failed.
[  224.367800][    T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  224.378461][    T8] gp8psk: found Genpix USB device pID = 201 (hex)
[  224.467928][    T8] usb 2-1: USB disconnect, device number 17
[  224.549687][    T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  224.557152][ T9304] input: syz0 as /devices/virtual/input/input22
[  224.799565][ T9308] loop2: detected capacity change from 0 to 128
[  224.808353][ T9251] XFS (loop4): Ending clean mount
[  224.858649][ T9308] EXT4-fs: Ignoring removed nobh option
[  224.880658][ T9251] XFS (loop4): Quotacheck needed: Please wait.
[  224.900174][ T9308] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.924513][ T9308] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  225.060266][ T9308] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes
[  225.275371][ T9251] XFS (loop4): Quotacheck: Done.
[  225.291500][ T7238] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.357567][ T5241] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.641737][ T9326] loop5: detected capacity change from 0 to 4096
[  225.653356][ T9326] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  225.724702][ T9327] loop3: detected capacity change from 0 to 4096
[  225.747901][ T9314] loop0: detected capacity change from 0 to 32768
[  225.755217][ T9314] XFS: noikeep mount option is deprecated.
[  225.779027][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  225.787277][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  225.802589][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  225.811128][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  225.820450][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  225.839261][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  225.847985][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  225.860656][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  225.869279][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  225.886416][ T9327] ntfs3(loop3): try to read out of volume at offset 0x3fffffe0c00
[  226.000355][ T9314] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  226.112701][ T9326] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  226.122880][ T9314] XFS (loop0): Ending clean mount
[  226.131184][ T9314] XFS (loop0): Quotacheck needed: Please wait.
[  226.148030][ T9326] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  226.181475][ T9314] XFS (loop0): Quotacheck: Done.
[  226.331476][ T7084] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  226.343142][   T11] ntfs3(loop5): ino=1a, ntfs3_write_inode failed, -22.
[  226.388109][ T5228] ntfs3(loop5): ino=1a, ntfs_sync_fs failed, -22.
[  226.540713][ T9342] loop1: detected capacity change from 0 to 32768
[  227.189176][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  227.247873][ T9366] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1433'.
[  227.485776][ T9370] syz.5.1434 uses obsolete (PF_INET,SOCK_PACKET)
[  227.646418][ T9374] loop1: detected capacity change from 0 to 4096
[  227.676098][ T9374] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  227.755582][ T9356] loop4: detected capacity change from 0 to 32768
[  227.776965][ T9356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1430 (9356)
[  227.809291][ T9356] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.837387][ T9356] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  227.856076][ T9356] BTRFS info (device loop4): using free-space-tree
[  227.901381][ T9374] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  228.217910][ T5241] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.603793][ T9419] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  228.643862][ T9419] batman_adv: batadv0: Adding interface: gretap1
[  228.650259][ T9419] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.730742][ T9419] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  229.069505][ T9380] loop5: detected capacity change from 0 to 40427
[  229.123698][ T9380] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  229.198819][ T9380] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  229.217573][ T9380] F2FS-fs (loop5): Image doesn't support compression
[  229.261507][ T9380] F2FS-fs (loop5): invalid crc value
[  229.278158][ T9380] F2FS-fs (loop5): Found nat_bits in checkpoint
[  229.278693][ T9437] loop1: detected capacity change from 0 to 256
[  229.339690][ T9437] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  229.444656][ T9380] F2FS-fs (loop5): Start checkpoint disabled!
[  229.464330][ T9380] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  229.478570][ T9441] tap0: tun_chr_ioctl cmd 1074025677
[  229.487431][ T9380] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  229.496460][ T9441] tap0: linktype set to 774
[  229.936711][ T9457] netlink: 'syz.3.1463': attribute type 10 has an invalid length.
[  229.956293][ T1288] kworker/u8:6: attempt to access beyond end of device
[  229.956293][ T1288] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  230.032840][ T1288] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.100980][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.118170][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.120894][ T1288] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.125408][ T9457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.132337][ T1288] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.144787][ T9457] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  230.152191][ T1288] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  230.181872][ T9461] loop2: detected capacity change from 0 to 16
[  230.245246][ T9461] erofs: (device loop2): mounted with root inode @ nid 36.
[  230.375162][ T9461] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  230.485560][ T7238] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  230.559799][ T7238] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  230.576349][   T29] audit: type=1326 audit(1728496762.724:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.4.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa187b7dff9 code=0x0
[  230.702540][ T7238] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  231.153124][ T9494] loop0: detected capacity change from 0 to 2048
[  231.170450][ T9494] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.238044][ T9494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.344832][ T9503] loop2: detected capacity change from 0 to 128
[  231.346933][ T9494] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1477: bg 0: block 234: padding at end of block bitmap is not set
[  231.399093][ T9503] FAT-fs (loop2): invalid media value (0x00)
[  231.442735][ T9494] EXT4-fs (loop0): Remounting filesystem read-only
[  231.467211][ T9503] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  231.542269][ T9503] FAT-fs (loop2): Can't find a valid FAT filesystem
[  231.545093][ T9512] loop4: detected capacity change from 0 to 128
[  231.598382][ T7084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.608762][ T9512] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  231.662251][ T5294] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  231.672752][ T9512] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  231.721591][ T9515] loop3: detected capacity change from 0 to 1024
[  231.736444][ T9515] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  231.798201][ T9515] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.1484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  231.798885][ T9518] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.851665][ T5294] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  231.883936][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.896916][ T9515] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1484: couldn't read orphan inode 11 (err -117)
[  231.933997][ T5294] usb 2-1: config 0 descriptor??
[  231.963823][ T9515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.010550][ T5241] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.059902][ T9515] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1484: Invalid block bitmap block 0 in block_group 0
[  232.117016][ T9515] Quota error (device loop3): write_blk: dquota write failed
[  232.136154][ T9515] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  232.169191][ T9515] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1484: Failed to acquire dquot type 0
[  232.292593][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.400367][ T5294] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  232.427410][ T5294] [drm] Initialized udl on minor 2
[  232.467187][ T9531] loop4: detected capacity change from 0 to 4096
[  232.486542][ T9531] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  232.506831][ T9531] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  232.545002][ T9531] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  232.583512][ T5294] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  232.608981][ T5294] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  232.682262][ T5297] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.785349][ T3200] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.820010][ T9528] loop0: detected capacity change from 0 to 32768
[  232.828149][ T3200] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  232.838365][ T5294] usb 2-1: USB disconnect, device number 18
[  232.870970][ T5297] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  232.882642][ T9528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1491 (9528)
[  232.883191][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.953446][ T9528] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.982710][ T5297] usb 4-1: config 0 descriptor??
[  232.985127][ T9528] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  233.002227][ T9528] BTRFS info (device loop0): using free-space-tree
[  233.006542][ T5297] gspca_main: sunplus-2.14.0 probing 055f:c420
[  233.284706][ T9560] vcan0: tx drop: invalid sa for name 0x0000000020000000
[  233.543733][ T7084] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.047309][ T9581] loop5: detected capacity change from 0 to 2048
[  234.090317][ T9581] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  234.112563][ T5297] gspca_sunplus: reg_w_riv err -110
[  234.118126][ T5297] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  234.157940][ T9586] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.188407][ T3200] usb 4-1: USB disconnect, device number 9
[  234.195645][ T9584] loop1: detected capacity change from 0 to 2048
[  234.212295][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  234.328106][ T9584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.395999][    T8] usb 3-1: Using ep0 maxpacket: 16
[  234.456237][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.500471][    T8] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  234.522323][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.531953][    T8] usb 3-1: Product: syz
[  234.538189][ T5239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.545270][    T8] usb 3-1: Manufacturer: syz
[  234.551830][    T8] usb 3-1: SerialNumber: syz
[  234.588205][ T9572] loop4: detected capacity change from 0 to 32768
[  234.662291][    T8] usb 3-1: config 0 descriptor??
[  234.786765][ T9604] loop1: detected capacity change from 0 to 128
[  234.861071][ T9604] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  234.881782][    T8] usb 3-1: Not enough endpoints found in device, aborting!
[  234.890231][ T9572] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  234.894362][ T9604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.937795][ T9572] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  234.987019][ T9607] netlink: 'syz.0.1517': attribute type 29 has an invalid length.
[  235.009494][ T9607] netlink: 'syz.0.1517': attribute type 29 has an invalid length.
[  235.019292][ T9607] netlink: 'syz.0.1517': attribute type 29 has an invalid length.
[  235.022965][ T9609] vivid-002: disconnect
[  235.036735][ T9608] vivid-002: reconnect
[  235.071582][ T9572] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  235.104333][ T5294] usb 3-1: USB disconnect, device number 11
[  235.147935][ T3200] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  235.169611][ T3200] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  235.350493][ T3200] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 180ms
[  235.385361][ T3200] gfs2: fsid=syz:syz.0: jid=0: Done
[  235.393441][ T9572] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  235.464059][ T9621] netlink: 'syz.0.1523': attribute type 10 has an invalid length.
[  235.996575][ T9634] loop4: detected capacity change from 0 to 512
[  236.003647][ T9634] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  236.033277][ T9633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1528'.
[  236.292282][    T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  236.492930][    T8] usb 5-1: Using ep0 maxpacket: 16
[  236.529104][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.549211][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.575456][ T9645] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  236.605847][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  236.625901][    T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  236.652292][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.700279][    T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  236.732886][    T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  236.740920][    T8] usb 5-1: Manufacturer: syz
[  236.815396][    T8] usb 5-1: config 0 descriptor??
[  237.004031][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1543'.
[  237.162266][    T8] rc_core: IR keymap rc-hauppauge not found
[  237.210713][    T8] Registered IR keymap rc-empty
[  237.227646][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.274007][ T9675] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  237.283722][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.335482][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  237.392438][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25
[  237.430333][ T9680] loop1: detected capacity change from 0 to 256
[  237.460512][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.492369][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.539231][ T9680] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa833bc7b, utbl_chksum : 0xe619d30d)
[  237.551533][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.588185][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.628595][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.662501][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.712403][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.754396][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.814424][ T9691] netlink: 'syz.5.1554': attribute type 4 has an invalid length.
[  237.825460][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.842050][ T9691] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.1554'.
[  237.865941][ T9694] fuse: Bad value for 'user_id'
[  237.870855][ T9694] fuse: Bad value for 'user_id'
[  237.872216][ T9691] netlink: 18430 bytes leftover after parsing attributes in process `syz.5.1554'.
[  237.893513][    T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  237.923841][    T8] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  237.958635][    T8] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  238.014719][    T8] usb 5-1: USB disconnect, device number 15
[  238.173583][ T9704] loop0: detected capacity change from 0 to 256
[  238.433250][ T9712] bond0: Unable to set up delay as MII monitoring is disabled
[  238.502439][ T9710] loop5: detected capacity change from 0 to 4096
[  238.639128][ T9719] loop4: detected capacity change from 0 to 4096
[  238.671814][ T9710] NILFS (loop5): invalid segment: Checksum error in segment payload
[  238.688220][ T9710] NILFS (loop5): trying rollback from an earlier position
[  238.777276][ T9723] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.942697][ T9710] NILFS (loop5): recovery complete
[  238.957167][ T9731] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.368352][   T29] audit: type=1800 audit(1728496771.464:57): pid=9710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1562" name="file1" dev="loop5" ino=12 res=0 errno=0
[  239.395938][ T9742] loop4: detected capacity change from 0 to 512
[  239.626247][ T9742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.705676][ T9742] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  239.975173][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1581'.
[  239.992687][ T9761] netlink: 'syz.0.1581': attribute type 1 has an invalid length.
[  240.017826][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.498663][ T9777] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1588'.
[  240.558367][   T29] audit: type=1326 audit(1728496772.704:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  240.632510][   T29] audit: type=1326 audit(1728496772.734:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  240.673249][ T6233] udevd[6233]: failed to send result of seq 15255 to main daemon: Connection refused
[  240.841330][   T29] audit: type=1326 audit(1728496772.744:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  240.872017][ T9793] loop1: detected capacity change from 0 to 512
[  240.919766][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.932840][ T9793] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.936476][ T9791] vivid-007: disconnect
[  240.970738][   T29] audit: type=1326 audit(1728496772.744:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  240.999188][ T5239] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.000435][   T29] audit: type=1326 audit(1728496772.754:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  241.032040][   T29] audit: type=1326 audit(1728496772.754:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb38d7dff9 code=0x7ffc0000
[  241.055260][   T29] audit: type=1326 audit(1728496772.754:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb38d74fa7 code=0x7ffc0000
[  241.058680][ T9790] vivid-007: reconnect
[  241.079567][   T29] audit: type=1326 audit(1728496772.764:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb38d19959 code=0x7ffc0000
[  241.106267][   T29] audit: type=1326 audit(1728496772.764:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.5.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcb38d74fa7 code=0x7ffc0000
[  241.480994][ T9808] loop1: detected capacity change from 0 to 2048
[  241.536634][ T9808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.603342][ T9799] loop5: detected capacity change from 0 to 40427
[  241.630070][ T9799] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  241.638096][ T9799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  241.666852][ T9799] F2FS-fs (loop5): invalid crc value
[  241.708475][ T9799] F2FS-fs (loop5): Found nat_bits in checkpoint
[  241.834883][ T9799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  241.841966][ T9799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  241.862643][ T9824] loop0: detected capacity change from 0 to 256
[  241.903167][ T9824] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  241.917472][ T9820] loop3: detected capacity change from 0 to 4096
[  241.943085][ T9820] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  241.960289][ T9824] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  241.984354][ T9824] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  242.005173][ T9820] ntfs3(loop3): Failed to load $Extend (-22).
[  242.011292][ T9820] ntfs3(loop3): Failed to initialize $Extend.
[  242.182536][ T3200] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  242.225322][ T9834] input: syz0 as /devices/virtual/input/input26
[  242.358894][ T3200] usb 2-1: Using ep0 maxpacket: 16
[  242.396041][ T3200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.427874][ T3200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.457445][ T3200] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  242.470311][ T3200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.495543][ T3200] usb 2-1: config 0 descriptor??
[  242.733330][ T9849] [U] 
[  242.920634][ T9858] loop5: detected capacity change from 0 to 128
[  242.964112][ T9859] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1623'.
[  243.064376][ T9858] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  243.082774][ T9858] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.164924][ T3200] razer 0003:1532:011B.001E: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0
[  243.196466][ T9858] EXT4-fs warning (device loop5): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled.
[  243.302837][ T5228] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.302989][ T9844] loop0: detected capacity change from 0 to 32768
[  243.335075][ T9844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1618 (9844)
[  243.413408][ T9869] loop2: detected capacity change from 0 to 2048
[  243.456254][    T8] usb 2-1: USB disconnect, device number 19
[  243.471272][ T9844] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.510118][ T9869] Alternate GPT is invalid, using primary GPT.
[  243.531321][ T9844] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  243.542383][ T9869]  loop2: p1 p2 p3
[  243.569082][ T9877] loop4: detected capacity change from 0 to 512
[  243.585739][ T9844] BTRFS info (device loop0): using free-space-tree
[  243.716415][ T9886] loop2: detected capacity change from 0 to 512
[  243.744234][ T9878] 
[  243.745596][ T9877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.746585][ T9878] ======================================================
[  243.746597][ T9878] WARNING: possible circular locking dependency detected
[  243.759168][ T9877] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  243.765961][ T9878] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted
[  243.765980][ T9878] ------------------------------------------------------
[  243.765991][ T9878] syz.3.1630/9878 is trying to acquire lock:
[  243.766006][ T9878] ffff88805ff43258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x5b/0x310
[  243.814893][ T9878] 
[  243.814893][ T9878] but task is already holding lock:
[  243.822253][ T9878] ffff888030b07928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0
[  243.831247][ T9878] 
[  243.831247][ T9878] which lock already depends on the new lock.
[  243.831247][ T9878] 
[  243.841650][ T9878] 
[  243.841650][ T9878] the existing dependency chain (in reverse order) is:
[  243.850666][ T9878] 
[  243.850666][ T9878] -> #3 (&d->lock){+.+.}-{3:3}:
[  243.857735][ T9878]        lock_acquire+0x1ed/0x550
[  243.862779][ T9878]        __mutex_lock+0x136/0xd70
[  243.867806][ T9878]        __rfcomm_dlc_close+0x226/0x6a0
[  243.873360][ T9878]        rfcomm_dlc_close+0xf1/0x190
[  243.878646][ T9878]        __rfcomm_sock_close+0x121/0x250
[  243.884290][ T9878]        rfcomm_sock_shutdown+0xb8/0x240
[  243.889929][ T9878]        rfcomm_sock_release+0x59/0x120
[  243.895488][ T9878]        sock_close+0xbe/0x240
[  243.900259][ T9878]        __fput+0x241/0x880
[  243.904771][ T9878]        task_work_run+0x251/0x310
[  243.909885][ T9878]        get_signal+0x15e8/0x1740
[  243.914915][ T9878]        arch_do_signal_or_restart+0x96/0x860
[  243.920991][ T9878]        syscall_exit_to_user_mode+0xc9/0x370
[  243.927071][ T9878]        do_syscall_64+0x100/0x230
[  243.932187][ T9878]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.938626][ T9878] 
[  243.938626][ T9878] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[  243.946033][ T9878]        lock_acquire+0x1ed/0x550
[  243.951069][ T9878]        __mutex_lock+0x136/0xd70
[  243.956100][ T9878]        rfcomm_dlc_exists+0xa6/0x380
[  243.961562][ T9878]        rfcomm_dev_ioctl+0xb53/0x2220
[  243.967052][ T9878]        rfcomm_sock_ioctl+0x86/0xd0
[  243.972364][ T9878]        sock_do_ioctl+0x15a/0x460
[  243.977496][ T9878]        sock_ioctl+0x626/0x8e0
[  243.982357][ T9878]        __se_sys_ioctl+0xfb/0x170
[  243.987483][ T9878]        do_syscall_64+0xf3/0x230
[  243.992597][ T9878]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.999028][ T9878] 
[  243.999028][ T9878] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}:
[  244.006954][ T9878]        lock_acquire+0x1ed/0x550
[  244.011993][ T9878]        __mutex_lock+0x136/0xd70
[  244.017018][ T9878]        rfcomm_dev_ioctl+0x237/0x2220
[  244.022488][ T9878]        rfcomm_sock_ioctl+0x86/0xd0
[  244.027789][ T9878]        sock_do_ioctl+0x15a/0x460
[  244.032911][ T9878]        sock_ioctl+0x626/0x8e0
[  244.037772][ T9878]        __se_sys_ioctl+0xfb/0x170
[  244.042900][ T9878]        do_syscall_64+0xf3/0x230
[  244.047926][ T9878]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.054353][ T9878] 
[  244.054353][ T9878] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}:
[  244.063754][ T9878]        validate_chain+0x18ef/0x5920
[  244.069130][ T9878]        __lock_acquire+0x1384/0x2050
[  244.074531][ T9878]        lock_acquire+0x1ed/0x550
[  244.079566][ T9878]        lock_sock_nested+0x48/0x100
[  244.084861][ T9878]        rfcomm_sk_state_change+0x5b/0x310
[  244.090682][ T9878]        __rfcomm_dlc_close+0x271/0x6a0
[  244.096321][ T9878]        rfcomm_dlc_close+0xf1/0x190
[  244.101608][ T9878]        __rfcomm_sock_close+0x121/0x250
[  244.107246][ T9878]        rfcomm_sock_shutdown+0xb8/0x240
[  244.112887][ T9878]        rfcomm_sock_release+0x59/0x120
[  244.118437][ T9878]        sock_close+0xbe/0x240
[  244.123209][ T9878]        __fput+0x241/0x880
[  244.127721][ T9878]        task_work_run+0x251/0x310
[  244.132838][ T9878]        get_signal+0x15e8/0x1740
[  244.137872][ T9878]        arch_do_signal_or_restart+0x96/0x860
[  244.143951][ T9878]        syscall_exit_to_user_mode+0xc9/0x370
[  244.150031][ T9878]        do_syscall_64+0x100/0x230
[  244.155142][ T9878]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.161571][ T9878] 
[  244.161571][ T9878] other info that might help us debug this:
[  244.161571][ T9878] 
[  244.171798][ T9878] Chain exists of:
[  244.171798][ T9878]   sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock
[  244.171798][ T9878] 
[  244.185729][ T9878]  Possible unsafe locking scenario:
[  244.185729][ T9878] 
[  244.193174][ T9878]        CPU0                    CPU1
[  244.198544][ T9878]        ----                    ----
[  244.203899][ T9878]   lock(&d->lock);
[  244.207716][ T9878]                                lock(rfcomm_mutex);
[  244.214394][ T9878]                                lock(&d->lock);
[  244.220727][ T9878]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM);
[  244.226885][ T9878] 
[  244.226885][ T9878]  *** DEADLOCK ***
[  244.226885][ T9878] 
[  244.235018][ T9878] 3 locks held by syz.3.1630/9878:
[  244.240121][ T9878]  #0: ffff88805d13b208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  244.250372][ T9878]  #1: ffffffff8fe5fdc8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x3b/0x190
[  244.259803][ T9878]  #2: ffff888030b07928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x226/0x6a0
[  244.269142][ T9878] 
[  244.269142][ T9878] stack backtrace:
[  244.275024][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.3.1630 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  244.285702][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  244.295757][ T9878] Call Trace:
[  244.299029][ T9878]  <TASK>
[  244.301957][ T9878]  dump_stack_lvl+0x241/0x360
[  244.306642][ T9878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.311843][ T9878]  ? __pfx__printk+0x10/0x10
[  244.316451][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.322176][ T9878]  print_circular_bug+0x13a/0x1b0
[  244.327208][ T9878]  check_noncircular+0x36a/0x4a0
[  244.332149][ T9878]  ? add_lock_to_list+0x1e8/0x2f0
[  244.337178][ T9878]  ? __pfx_check_noncircular+0x10/0x10
[  244.342647][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.348286][ T9878]  ? lockdep_lock+0x123/0x2b0
[  244.352982][ T9878]  validate_chain+0x18ef/0x5920
[  244.357853][ T9878]  ? __pfx_validate_chain+0x10/0x10
[  244.363128][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.368761][ T9878]  ? register_lock_class+0x102/0x980
[  244.374064][ T9878]  ? __pfx_register_lock_class+0x10/0x10
[  244.379711][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.385350][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.390985][ T9878]  ? mark_lock+0x9a/0x360
[  244.395316][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.400963][ T9878]  ? __lock_acquire+0x1384/0x2050
[  244.406007][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.412076][ T9878]  ? mark_lock+0x9a/0x360
[  244.416436][ T9878]  __lock_acquire+0x1384/0x2050
[  244.421318][ T9878]  lock_acquire+0x1ed/0x550
[  244.425839][ T9878]  ? rfcomm_sk_state_change+0x5b/0x310
[  244.431307][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.436947][ T9878]  ? __pfx_lock_acquire+0x10/0x10
[  244.442019][ T9878]  ? trace_contention_end+0x3c/0x120
[  244.447314][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.452957][ T9878]  ? __mutex_lock+0x2ef/0xd70
[  244.457637][ T9878]  ? detach_timer+0x16c/0x320
[  244.462336][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.467974][ T9878]  ? __timer_delete+0x2e0/0x380
[  244.472834][ T9878]  ? __rfcomm_dlc_close+0x226/0x6a0
[  244.478039][ T9878]  ? __pfx___mutex_lock+0x10/0x10
[  244.483069][ T9878]  lock_sock_nested+0x48/0x100
[  244.487851][ T9878]  ? rfcomm_sk_state_change+0x5b/0x310
[  244.493321][ T9878]  rfcomm_sk_state_change+0x5b/0x310
[  244.498618][ T9878]  __rfcomm_dlc_close+0x271/0x6a0
[  244.503655][ T9878]  rfcomm_dlc_close+0xf1/0x190
[  244.508424][ T9878]  __rfcomm_sock_close+0x121/0x250
[  244.513550][ T9878]  rfcomm_sock_shutdown+0xb8/0x240
[  244.518670][ T9878]  rfcomm_sock_release+0x59/0x120
[  244.523793][ T9878]  sock_close+0xbe/0x240
[  244.528041][ T9878]  ? __pfx_sock_close+0x10/0x10
[  244.532900][ T9878]  __fput+0x241/0x880
[  244.536905][ T9878]  task_work_run+0x251/0x310
[  244.541504][ T9878]  ? __pfx_task_work_run+0x10/0x10
[  244.546624][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.552275][ T9878]  get_signal+0x15e8/0x1740
[  244.556801][ T9878]  ? __pfx_task_work_add+0x10/0x10
[  244.562095][ T9878]  ? __pfx_get_signal+0x10/0x10
[  244.566961][ T9878]  ? srso_alias_return_thunk+0x5/0xfbef5
[  244.572602][ T9878]  arch_do_signal_or_restart+0x96/0x860
[  244.578161][ T9878]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  244.584324][ T9878]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  244.590324][ T9878]  ? syscall_exit_to_user_mode+0xa3/0x370
[  244.596065][ T9878]  syscall_exit_to_user_mode+0xc9/0x370
[  244.601628][ T9878]  do_syscall_64+0x100/0x230
[  244.606314][ T9878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.612229][ T9878] RIP: 0033:0x7f4f2537dff9
[  244.616641][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.636251][ T9878] RSP: 002b:00007f4f2619c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  244.644676][ T9878] RAX: fffffffffffffffc RBX: 00007f4f25535f80 RCX: 00007f4f2537dff9
[  244.652652][ T9878] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000005
[  244.660626][ T9878] RBP: 00007f4f253f0296 R08: 0000000000000000 R09: 0000000000000000
[  244.668600][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.676570][ T9878] R13: 0000000000000000 R14: 00007f4f25535f80 R15: 00007ffe0046e4b8
[  244.684639][ T9878]  </TASK>
[  244.729367][ T9886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e028, mo2=0003]
[  244.741963][ T9886] System zones: 1-12
[  244.743438][ T5241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.747593][ T9886] EXT4-fs (loop2): ext4_process_orphan: truncating inode 11 to 99999999 bytes
[  244.765914][ T9886] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1633: invalid indirect mapped block 8 (level 2)
[  244.784633][ T9886] EXT4-fs (loop2): Remounting filesystem read-only
[  244.791274][ T9886] EXT4-fs (loop2): 1 truncate cleaned up
[  244.798808][ T9886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.814791][ T9874] loop5: detected capacity change from 0 to 32768
[  244.843599][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  244.843621][   T29] audit: type=1800 audit(1728496776.994:85): pid=9874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1628" name="bus" dev="loop5" ino=7 res=0 errno=0
[  244.843836][ T7238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.891705][ T7084] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.632179][ T5242] Bluetooth: hci0: command 0x0405 tx timeout