last executing test programs:

1m20.269446942s ago: executing program 1 (id=411):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)

1m19.592489623s ago: executing program 1 (id=421):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000001"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m19.373220254s ago: executing program 1 (id=426):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x0, 0x1, 0x10001})

1m19.288491868s ago: executing program 1 (id=427):
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1000, 0x0)

1m19.141971525s ago: executing program 1 (id=428):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m18.60603296s ago: executing program 1 (id=432):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x280000000000)

1m18.316072753s ago: executing program 32 (id=432):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x280000000000)

1m2.187880933s ago: executing program 2 (id=535):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="14080400030200000c002b8008000100", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

1m1.963948113s ago: executing program 2 (id=537):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

1m1.753774573s ago: executing program 2 (id=539):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)

1m1.501120255s ago: executing program 2 (id=541):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x2000084c, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESOCT=r2, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0xc1, 0x14f6, &(0x7f0000004080)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x18, 0x0)

1m0.663837145s ago: executing program 2 (id=547):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0)
read$dsp(r0, 0x0, 0x0)

59.774641866s ago: executing program 2 (id=555):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x64, 0x5, {0xb, 0x1, 0x5, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}]}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054)

59.300968508s ago: executing program 33 (id=555):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x64, 0x5, {0xb, 0x1, 0x5, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}]}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054)

7.363877693s ago: executing program 6 (id=955):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6)

6.924103653s ago: executing program 6 (id=960):
syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="e6b9560b9eb60651c8d861e16cafb4b5006725db63a742488f27db28a3b869f9a114e3f806c42595dd30b03d1acb2a404a6d705dcf1efd2e1fa0042e335f582178d72a1d22166abbfc7955582faa65f8d8f80263129df5b788f53846f8c88e9050f753551f19ad50976b889736158a98f148ec0baee53bfde9dd1bf4dffde3e44cc05b6b969ab5c530d4c8f5488ec6231315fd02386e30ce86a388410478a2ead75ba02275faf3839d05fbdadd6f7eece5190eb4bc079f6c5ddff08d4cda7d0cd232bcd711777e46720665", @ANYRES16], 0x7, 0x2ce, &(0x7f00000007c0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
rmdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

6.378711889s ago: executing program 6 (id=963):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})

5.839205584s ago: executing program 0 (id=966):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

5.266940681s ago: executing program 0 (id=968):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000008c0)=ANY=[@ANYBLOB='fmask=00000000000000000000016,dmask=00000000000000000000020,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d616363656c74adc23e3c1cbd69632c696f636861727365743d63703836392c6e616d65636173653d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,namecase=1,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.183658205s ago: executing program 6 (id=970):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x201, 0x0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="ace163", 0x3}, {&(0x7f0000000140)}], 0x2)

4.945949376s ago: executing program 6 (id=971):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0xc00)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

4.384297203s ago: executing program 0 (id=973):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x3, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

3.989569892s ago: executing program 0 (id=975):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010002, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x24, 0x628f, &(0x7f0000012f40)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x127a628, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYBLOB="225591329ad1ba7d0f657bbc8cef0b86b8d8557e093c0e4d287db250cb2e2f0eec2ae27a11464d02c6151566110a8fb43227bcf035f9cd4f347ffeafa0fc44a44a4cc0d60fa5c54b123939211ecf5de969ebbd989f25bbebbb188926cc7c7f0462818ebc4a83a75a87772c33bc408963c67a3b5f2e33c2cbedd9d2eef6b43a71b90b67c0e935f29a4879965f3968fe720aa7601eaac4b8af73346e100c185efcda4023f8e22a5bb36397fd1e377925f69b443a9ce77e3ba66565da919582bde5a2799acdd59915fa", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040))
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a)

2.457726864s ago: executing program 4 (id=987):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd2c, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0)

2.176369067s ago: executing program 4 (id=990):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x8, "3dacf5cc5998"}]}}}}}}}}, 0x0)

2.032465314s ago: executing program 3 (id=991):
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/172, 0xac}], 0x1)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xfffffffb})

1.995233325s ago: executing program 0 (id=992):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000100)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6a9310b27e0cfa1bd1b9681010191b1621ede21d1a35bee936310009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2ce65cd0930600000000000000da3f94de97f6296b9bc0a0aa770b55886711c66f3ab753b61da8860d40048d7d", 0x0, 0xfffff7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.89182663s ago: executing program 4 (id=993):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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")
unshare(0x22020400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x500, 0x18, 0x4, 0x1000000000000})

1.787482005s ago: executing program 5 (id=994):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x6})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6})

1.699931859s ago: executing program 6 (id=995):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000089170800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1.68880003s ago: executing program 3 (id=996):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000013c0)='./file1\x00', 0xa18cd6, &(0x7f0000001040)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {}, {@shortname_winnt}, {@rodir}, {@utf8no}]}, 0x81, 0x2aa, &(0x7f0000001400)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)

1.500547489s ago: executing program 0 (id=997):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3008000, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000023c0)={{}, {0x1, 0x5}, [], {0x4, 0x5}, [], {0x10, 0x7}}, 0x24, 0x2)
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)

1.222335522s ago: executing program 5 (id=998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x5f, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x6, 0x3}}, 0x4, @random=0x7, 0xb403, @val, @val, @val={0x3, 0x1, 0x5}, @val={0x4, 0x6, {0xff, 0x3, 0xff81, 0x5}}, @val={0x6, 0x2, 0x3}, @val={0x2d, 0x1a, {0x2000, 0x1, 0x5, 0x0, {0x7, 0xff, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0xb00, 0x8000, 0x1}}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0)

1.05095116s ago: executing program 3 (id=999):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x5d6, @loopback, 0xf}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18)

878.981968ms ago: executing program 5 (id=1000):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7ffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]})

692.885907ms ago: executing program 4 (id=1001):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1})

672.498968ms ago: executing program 3 (id=1002):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000004001a"], 0x34}}, 0x0)

612.58138ms ago: executing program 5 (id=1003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000400), 0x0}, 0x20)

396.138401ms ago: executing program 3 (id=1004):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x3, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200006d1}, 0x20000010)

299.452675ms ago: executing program 5 (id=1005):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='<kern\\+> /new_domain\n', 0x15)

223.645409ms ago: executing program 4 (id=1006):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37)

129.891683ms ago: executing program 3 (id=1007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/8, 0x8)

50.265637ms ago: executing program 5 (id=1008):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}}, 0x2000850)

0s ago: executing program 4 (id=1009):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

kernel console output (not intermixed with test programs):

tered promiscuous mode
[   73.379813][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.391475][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.401625][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.412271][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.426656][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.441194][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.453737][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.469605][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.502191][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.514800][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.528573][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.540202][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.572666][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.590469][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.606826][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.658115][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.676024][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.690266][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.702670][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.713297][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.722600][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.732069][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.751663][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.764417][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.775139][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.786088][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.807814][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.819586][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.839619][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.862339][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.897397][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.908208][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.927345][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.937903][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.964376][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.976295][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.990196][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.002059][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.015257][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.027838][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.065415][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.077299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.097887][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.109130][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.123101][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.135895][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.164788][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.176843][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.187807][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.199807][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.231433][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.255667][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.412634][ T3103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.434271][ T3103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.474507][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.482021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.483311][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.515847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.528071][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.543542][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.568677][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.587584][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.604791][ T4194] device veth0_vlan entered promiscuous mode
[   74.621413][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.622413][ T4190] device veth0_vlan entered promiscuous mode
[   74.644922][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.656551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.667992][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.681399][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.692903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.705329][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.715022][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.726949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.769457][ T4190] device veth1_vlan entered promiscuous mode
[   74.782264][ T4194] device veth1_vlan entered promiscuous mode
[   74.788456][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.810458][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.850140][ T3103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.860287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.876714][ T3103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.903979][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.981348][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.993353][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.004354][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.014711][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.030782][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.081770][ T4190] device veth0_macvtap entered promiscuous mode
[   75.114264][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.137936][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.152411][ T1109] Bluetooth: hci0: command 0x0419 tx timeout
[   75.174980][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.202800][ T4190] device veth1_macvtap entered promiscuous mode
[   75.229505][ T4245] Bluetooth: hci1: command 0x0419 tx timeout
[   75.247331][ T4194] device veth0_macvtap entered promiscuous mode
[   75.298111][ T4194] device veth1_macvtap entered promiscuous mode
[   75.316094][ T4245] Bluetooth: hci2: command 0x0419 tx timeout
[   75.330459][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.353055][ T4245] Bluetooth: hci3: command 0x0419 tx timeout
[   75.363167][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.389163][ T4245] Bluetooth: hci4: command 0x0419 tx timeout
[   75.412489][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.428608][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.457872][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.462948][ T4275] loop0: detected capacity change from 0 to 8
[   75.483680][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.540161][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.599656][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.625723][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.642382][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.677347][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.711785][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.758079][ T4275] SQUASHFS error: zlib decompression failed, data probably corrupt
[   75.767188][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.779873][ T4275] SQUASHFS error: Failed to read block 0x4e8: -5
[   75.796967][ T4275] SQUASHFS error: zlib decompression failed, data probably corrupt
[   75.804039][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.806517][ T4286] capability: warning: `syz.1.9' uses 32-bit capabilities (legacy support in use)
[   75.835191][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.853628][ T4275] SQUASHFS error: Failed to read block 0x4ee: -5
[   75.873150][   T26] audit: type=1800 audit(1790220533.944:2): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7" name="file1" dev="loop0" ino=5 res=0 errno=0
[   75.907533][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.931075][ T4283] loop3: detected capacity change from 0 to 4096
[   75.949533][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.971032][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.998828][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.014862][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.035134][ T4283] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[   76.060451][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.089098][ T4283] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   76.118839][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.165634][ T4283] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[   76.191953][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.217692][ T4283] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   76.243702][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.273692][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.301026][ T4283] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   76.330843][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.373242][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.391594][ T4283] ntfs: volume version 3.1.
[   76.419682][ T4283] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[   76.443950][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.473035][ T4283] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[   76.508276][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.529609][ T4283] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   76.555416][ T4283] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   76.571261][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.583131][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.610175][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.643729][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.665882][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.709819][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.740395][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.808264][ T4301] Zero length message leads to an empty skb
[   76.814832][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.840228][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.853041][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.929323][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.982969][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.007264][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.018717][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.035193][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.047637][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.096785][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.120793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.150649][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.177224][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.208837][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.228829][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.492284][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.517558][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.564683][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.640553][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.673705][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.712458][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.744806][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   77.749883][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.784884][ T4322] netlink: 76 bytes leftover after parsing attributes in process `syz.1.24'.
[   77.802073][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.823478][ T4320] loop3: detected capacity change from 0 to 8192
[   77.848724][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.884937][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.894067][ T4310] loop0: detected capacity change from 0 to 32768
[   77.906930][ T4320] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   77.921152][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.935147][ T4320] REISERFS (device loop3): using ordered data mode
[   77.943247][ T4320] reiserfs: using flush barriers
[   77.957758][ T4320] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   78.009831][ T4320] REISERFS (device loop3): checking transaction log (loop3)
[   78.045319][ T4325] loop1: detected capacity change from 0 to 512
[   78.060137][ T4310] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.19 (4310)
[   78.092941][ T4320] REISERFS (device loop3): Using r5 hash to sort names
[   78.147580][ T4320] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   78.165575][ T4325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.190096][ T4310] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   78.237737][ T4310] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   78.291798][ T4325] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.321530][ T4310] BTRFS info (device loop0): use zstd compression, level 3
[   78.362874][ T4310] BTRFS info (device loop0): using free space tree
[   78.386356][ T4310] BTRFS info (device loop0): has skinny extents
[   78.420325][ T4325] EXT4-fs (loop1): 1 truncate cleaned up
[   78.426789][ T4325] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[   78.808097][ T4310] BTRFS info (device loop0): enabling ssd optimizations
[   78.823917][ T4357] syz.3.27 (4357) used greatest stack depth: 19728 bytes left
[   79.745590][ T4391] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.989564][ T4400] batman_adv: batadv0: Adding interface: gretap1
[   80.016730][ T4400] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.054903][ T4388] loop2: detected capacity change from 0 to 32768
[   80.066688][ T4400] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   80.319326][ T4388] XFS (loop2): Mounting V5 Filesystem
[   80.473748][ T4388] XFS (loop2): Ending clean mount
[   80.499825][ T4426] rnbd_client L211: map_device: Parameters missing
[   80.717536][ T4436] loop1: detected capacity change from 0 to 512
[   80.838403][ T4436] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback.
[   80.881018][ T4436] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.884796][ T4190] XFS (loop2): Unmounting Filesystem
[   81.175170][ T4449] loop3: detected capacity change from 0 to 256
[   81.276007][ T4449] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   81.357560][ T4454] loop0: detected capacity change from 0 to 512
[   81.366219][ T4449] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.380799][ T4455] <
[   81.447881][ T4454] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.63: bad orphan inode 11862016
[   81.620896][ T4461] 
[   81.667932][ T4454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   81.757179][ T4454] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.045073][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'.
[   82.065142][ T4482] =======================================================
[   82.065142][ T4482] WARNING: The mand mount option has been deprecated and
[   82.065142][ T4482]          and is ignored by this kernel. Remove the mand
[   82.065142][ T4482]          option from the mount to silence this warning.
[   82.065142][ T4482] =======================================================
[   82.115503][    C1] vkms_vblank_simulate: vblank timer overrun
[   82.879271][ T4468] loop4: detected capacity change from 0 to 40427
[   82.955765][ T4501] loop0: detected capacity change from 0 to 128
[   82.970279][ T4468] F2FS-fs (loop4): invalid crc value
[   83.083995][ T4501] FAT-fs (loop0): Directory bread(block 1048) failed
[   83.113897][ T4468] F2FS-fs (loop4): Found nat_bits in checkpoint
[   83.122578][ T4501] FAT-fs (loop0): Directory bread(block 1049) failed
[   83.122648][ T4501] FAT-fs (loop0): Directory bread(block 1050) failed
[   83.122681][ T4501] FAT-fs (loop0): Directory bread(block 1051) failed
[   83.122714][ T4501] FAT-fs (loop0): Directory bread(block 1052) failed
[   83.122745][ T4501] FAT-fs (loop0): Directory bread(block 1053) failed
[   83.122776][ T4501] FAT-fs (loop0): Directory bread(block 1054) failed
[   83.279580][ T4501] FAT-fs (loop0): Directory bread(block 1055) failed
[   83.335783][ T4501] FAT-fs (loop0): Directory bread(block 1048) failed
[   83.369218][ T4501] FAT-fs (loop0): Directory bread(block 1049) failed
[   83.434935][ T4468] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   83.757519][ T4194] attempt to access beyond end of device
[   83.757519][ T4194] loop4: rw=2049, want=45104, limit=40427
[   83.781984][ T4519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'.
[   83.852766][ T4522] loop0: detected capacity change from 0 to 128
[   84.228259][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'.
[   84.810053][ T4552] vivid-004: disconnect
[   84.826172][ T4549] vivid-004: reconnect
[   85.180025][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   85.204008][ T4573] loop1: detected capacity change from 0 to 128
[   85.290750][ T4564] mpoa:mpoad_close: (<unknown>) going down
[   85.537641][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'.
[   85.794823][ T4596] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.980461][ T4604] loop4: detected capacity change from 0 to 136
[   86.119978][ T4609] kAFS: bad VL server IP address
[   86.320083][ T4612] loop2: detected capacity change from 0 to 2048
[   86.350620][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.456895][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,usrjquota=,abort,noload,,errors=continue. Quota mode: none.
[   86.477547][    C1] vkms_vblank_simulate: vblank timer overrun
[   86.487001][ T4612] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.539957][   T26] kauditd_printk_skb: 9 callbacks suppressed
[   86.539972][   T26] audit: type=1800 audit(1790220544.614:5): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.130" name="file0" dev="loop2" ino=13 res=0 errno=0
[   86.597778][ T4612] fs-verity: sha512 using implementation "sha512-avx2"
[   86.661503][ T4624] Attempt to restore checkpoint with obsolete wellknown handles
[   86.769099][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   86.799054][   T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   86.845272][ T1323] cfg80211: failed to load regulatory.db
[   87.019186][   T23] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.03
[   87.059754][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.093649][   T23] usb 4-1: Product: syz
[   87.098339][   T23] usb 4-1: Manufacturer: syz
[   87.129253][   T23] usb 4-1: SerialNumber: syz
[   87.400241][ T4649] loop1: detected capacity change from 0 to 64
[   87.467182][   T23] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   87.505019][ T4612] fs-verity (loop2, inode 13): Error -4 building Merkle tree
[   87.685238][ T4651] loop4: detected capacity change from 0 to 4096
[   87.827885][   T23] usb 4-1: USB disconnect, device number 2
[   87.846166][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.991983][   T23] usblp0: removed
[   88.186803][ T4669] loop2: detected capacity change from 0 to 64
[   88.319971][ T4669] attempt to access beyond end of device
[   88.319971][ T4669] loop2: rw=0, want=1026, limit=64
[   88.342351][ T4669] Buffer I/O error on dev loop2, logical block 512, async page read
[   88.357024][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.364684][ T4669] attempt to access beyond end of device
[   88.364684][ T4669] loop2: rw=0, want=113154, limit=64
[   88.384165][ T4669] Buffer I/O error on dev loop2, logical block 56576, async page read
[   88.479926][ T4658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.681096][ T4677] hub 5-0:1.0: USB hub found
[   88.707108][ T4677] hub 5-0:1.0: 1 port detected
[   88.818573][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.880177][ T4659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.988988][ T4674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.157'.
[   89.330171][ T4706] netlink: 'syz.3.174': attribute type 6 has an invalid length.
[   89.431748][ T4713] loop2: detected capacity change from 0 to 1024
[   89.638872][ T4245] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.649795][ T4713] hfsplus: invalid length 1280 has been corrected to 255
[   89.792152][ T4725] loop3: detected capacity change from 0 to 256
[   89.816856][ T4725] exfat: Deprecated parameter 'namecase'
[   89.824422][ T4725] exfat: Deprecated parameter 'namecase'
[   89.946197][ T4725] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   89.999174][ T4245] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.056862][ T4245] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.148426][ T4245] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.177030][ T4245] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   90.177199][ T4740] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.197652][ T4737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   90.249419][ T4245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.297312][ T4245] usb 2-1: config 0 descriptor??
[   90.560383][ T4757] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   90.815907][ T4245] hid-multitouch 0003:0EEF:72C4.0001: unbalanced collection at end of report description
[   90.870961][ T4245] hid-multitouch: probe of 0003:0EEF:72C4.0001 failed with error -22
[   91.085182][ T4245] usb 2-1: USB disconnect, device number 2
[   91.170860][ T4782] loop2: detected capacity change from 0 to 512
[   91.277562][ T4782] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   91.396389][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[   91.431371][ T4782] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   91.546167][ T4795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'.
[   91.762045][   T26] audit: type=1400 audit(1790220549.834:6): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=4799 comm="syz.1.216" name="foo" offset=35
[   92.255345][ T4800] loop0: detected capacity change from 0 to 32768
[   92.404258][ T4800] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   92.450227][ T4797] loop4: detected capacity change from 0 to 32768
[   92.465024][ T4809] loop1: detected capacity change from 0 to 256
[   92.490684][ T4810] loop3: detected capacity change from 0 to 4096
[   92.526567][ T4800] JBD2: Ignoring recovery information on journal
[   92.611814][ T4797] (syz.4.213,4797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.633690][ T4797] (syz.4.213,4797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.699805][ T4797] (syz.4.213,4797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[   92.766614][ T4800] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   92.878508][ T4812] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.936936][ T4810] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   93.048216][ T4810] NILFS (loop3): mounting fs with errors
[   93.065997][ T4797] JBD2: Ignoring recovery information on journal
[   93.106747][ T4815] loop1: detected capacity change from 0 to 2048
[   93.253169][ T4815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.287492][ T4816] (syz.0.215,4816,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[   93.308062][ T4797] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   93.570707][ T4797] (syz.4.213,4797,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[   93.644047][ T4797] (syz.4.213,4797,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[   93.693795][ T4797] (syz.4.213,4797,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[   93.745045][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[   93.822850][ T4797] (syz.4.213,4797,1):ocfs2_quota_read:201 ERROR: status = -5
[   93.834679][ T4797] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1
[   93.941785][ T4797] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   94.070256][ T4797] (syz.4.213,4797,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[   94.133472][ T4797] (syz.4.213,4797,1):ocfs2_symlink:1886 ERROR: status = -5
[   94.278527][ T4797] (syz.4.213,4797,1):ocfs2_symlink:2072 ERROR: status = -5
[   94.307841][ T4845] loop2: detected capacity change from 0 to 128
[   94.653236][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[   95.076235][ T4880] netlink: 116 bytes leftover after parsing attributes in process `syz.0.243'.
[   95.309356][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.327335][ T4890] bonding: no command found in bonding_masters - use +ifname or -ifname
[   95.362346][ T4888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.246'.
[   95.449922][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.249'.
[   95.502543][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.249'.
[   95.638946][ T4226] usb 2-1: Using ep0 maxpacket: 16
[   95.769185][ T4226] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[   95.789222][ T4226] usb 2-1: config 0 has no interface number 0
[   95.827860][ T4226] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   95.871974][ T4226] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   95.987759][ T4922] loop0: detected capacity change from 0 to 1024
[   96.081540][   T26] audit: type=1400 audit(1790220551.159:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name=66226F pid=4926 comm="syz.3.264"
[   96.098979][ T4226] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   96.132220][ T4928] loop2: detected capacity change from 0 to 512
[   96.155329][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.188079][ T4226] usb 2-1: Product: syz
[   96.194429][ T4226] usb 2-1: Manufacturer: syz
[   96.200196][ T4226] usb 2-1: SerialNumber: syz
[   96.230590][ T4226] usb 2-1: config 0 descriptor??
[   96.265768][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.279205][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.310233][ T4928] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.265: invalid indirect mapped block 256 (level 2)
[   96.350152][ T4928] EXT4-fs (loop2): Remounting filesystem read-only
[   96.359291][ T4928] EXT4-fs (loop2): 2 truncates cleaned up
[   96.368245][ T4928] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback.
[   96.506902][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.529189][ T4878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.639983][ T4946] netlink: 'syz.4.272': attribute type 2 has an invalid length.
[   96.828550][    T7] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[   96.922823][ T4955] device team_slave_0 entered promiscuous mode
[   96.932680][ T4955] device team_slave_1 entered promiscuous mode
[   96.988544][ T4955] device macvlan2 entered promiscuous mode
[   97.017519][ T4955] device team0 entered promiscuous mode
[   97.057222][ T4955] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   97.078665][ T4956] fido_id[4956]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   97.174705][ T4958] loop2: detected capacity change from 0 to 2048
[   97.225510][ T4958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.239418][ T4226] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   97.280860][ T4226] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   97.317298][ T4226] asix: probe of 2-1:0.251 failed with error -71
[   97.353045][ T4226] usb 2-1: USB disconnect, device number 3
[   97.550077][ T4963] netlink: 'syz.4.280': attribute type 5 has an invalid length.
[   97.751094][ T4969] loop0: detected capacity change from 0 to 512
[   97.961406][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   98.022391][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   98.107215][ T4976] netlink: 'syz.1.286': attribute type 18 has an invalid length.
[   98.150926][ T4976] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.161468][ T4976] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.172077][ T4976] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.181698][ T4976] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.278308][ T4979] pimreg: tun_chr_ioctl cmd 1074025677
[   98.369102][ T4979] pimreg: linktype set to 1
[   98.397237][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   98.490467][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   98.540487][ T4978] netlink: 'syz.1.286': attribute type 18 has an invalid length.
[   98.815180][ T4966] loop2: detected capacity change from 0 to 32768
[   99.044687][ T4966] XFS (loop2): Mounting V5 Filesystem
[   99.244687][ T4966] XFS (loop2): Ending clean mount
[   99.264620][ T4985] loop4: detected capacity change from 0 to 131072
[   99.370108][ T4985] F2FS-fs (loop4): Found nat_bits in checkpoint
[   99.438734][ T4985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   99.480491][ T5009] loop1: detected capacity change from 0 to 2048
[   99.539580][ T4190] XFS (loop2): Unmounting Filesystem
[   99.548082][ T4985] F2FS-fs (loop4): inode (7) has corrupted xattr
[   99.580230][ T5009] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   99.686334][ T5009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.875833][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.164174][ T4231] usb 1-1: Using ep0 maxpacket: 8
[  100.310516][ T4231] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  100.330426][ T4231] usb 1-1: config 179 has no interface number 0
[  100.358024][ T4231] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  100.390080][ T5026] loop4: detected capacity change from 0 to 512
[  100.419040][ T4231] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  100.449797][ T4231] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  100.515874][ T5026] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  100.549473][ T4231] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  100.566294][ T5026] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.588389][ T5031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'.
[  100.628834][ T4231] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  100.684932][ T4231] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  100.720621][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.819702][ T5014] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  100.949177][ T5035] loop1: detected capacity change from 0 to 136
[  101.054954][ T5035] rock: directory entry would overflow storage
[  101.136172][ T5035] rock: sig=0x4f50, size=4, remaining=3
[  101.156819][ T1323] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9
[  101.190417][ T5035] iso9660: Corrupted directory entry in block 2 of inode 1472
[  101.201686][ T5041] rnbd_client L211: map_device: Parameters missing
[  101.420060][ T4231] usb 1-1: USB disconnect, device number 2
[  101.438861][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  101.451233][ T4231] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  101.785118][ T5016] loop3: detected capacity change from 0 to 32768
[  101.866196][ T5061] device-mapper: ioctl: name not supplied when creating device
[  102.018915][ T5016] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  102.187379][ T5016] (syz.3.297,5016,0):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume.
[  102.267790][ T5016] (syz.3.297,5016,0):ocfs2_group_add:505 ERROR: status = -22
[  102.407320][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  102.424573][ T5075] bonding: bond0 is being created...
[  102.461882][ T5075] bonding: bond0 already exists
[  102.474316][ T5049] loop2: detected capacity change from 0 to 32768
[  102.585589][ T5049] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  102.602035][ T5049] JBD2: Ignoring recovery information on journal
[  102.708658][ T5049] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  102.901862][ T5049] syz.2.312 (5049) used greatest stack depth: 18720 bytes left
[  103.031371][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[  103.050063][ T5086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  103.269225][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.491398][ T5097] bond0: option slaves: invalid value (-veth0)
[  103.549016][ T4231] usb 5-1: Using ep0 maxpacket: 16
[  103.569393][ T5103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  103.689445][ T4231] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.716612][ T4231] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.765381][ T4231] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.816534][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.848831][ T4231] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  103.858116][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.927158][ T4231] usb 5-1: config 0 descriptor??
[  104.283725][ T5131] loop2: detected capacity change from 0 to 4096
[  104.299934][ T5133] loop1: detected capacity change from 0 to 1024
[  104.368615][ T5131] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  104.553043][ T5139] loop3: detected capacity change from 0 to 1024
[  104.745216][ T4231] usb 5-1: USB disconnect, device number 2
[  104.811124][ T5145] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  104.906571][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.917239][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.689235][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.826991][ T5149] loop1: detected capacity change from 0 to 32768
[  106.089686][ T4226] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  106.124184][ T4226] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  106.172588][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.483950][ T4226] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[  106.674052][ T5203] Attempt to restore checkpoint with obsolete wellknown handles
[  106.691985][ T5206] loop4: detected capacity change from 0 to 512
[  106.719885][ T4226] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 6a:81:47:7d:32:00
[  106.881066][ T5209] loop3: detected capacity change from 0 to 2048
[  106.906810][ T5206] EXT4-fs (loop4): Test dummy encryption mode enabled
[  106.915839][ T5206] EXT4-fs (loop4): Ignoring removed bh option
[  106.924012][ T5206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.939754][ T5206] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.382: inode has both inline data and extents flags
[  106.955128][ T5206] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.382: couldn't read orphan inode 15 (err -117)
[  106.974940][ T5206] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none.
[  107.041014][ T5222] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.092344][    T7] usb 3-1: USB disconnect, device number 2
[  107.098579][   T26] audit: type=1800 audit(1790220562.169:8): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.382" name="file3" dev="loop4" ino=16 res=0 errno=0
[  107.140663][    T7] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[  107.241127][   T26] audit: type=1804 audit(1790220562.189:9): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.382" name="/newroot/67/bus/file2" dev="loop4" ino=16 res=1 errno=0
[  108.100272][ T5255] loop3: detected capacity change from 0 to 8
[  108.166213][ T5257] loop0: detected capacity change from 0 to 512
[  108.218915][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.228436][ T5255] SQUASHFS error: lzo decompression failed, data probably corrupt
[  108.237966][ T5223] loop1: detected capacity change from 0 to 32768
[  108.262429][ T5257] EXT4-fs (loop0): Ignoring removed bh option
[  108.298913][ T5255] SQUASHFS error: Failed to read block 0x144: -5
[  108.314291][ T5223] (syz.1.385,5223,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.333401][ T5255] SQUASHFS error: Unable to read metadata cache entry [142]
[  108.349979][ T5257] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,stripe=0x000000000000f7b2,grpquota,,errors=continue. Quota mode: writeback.
[  108.386157][ T5255] SQUASHFS error: Unable to read inode 0x11f
[  108.393362][ T5257] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.404141][ T5223] (syz.1.385,5223,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.456763][ T5257] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.396: resize_inode disabled but reserved GDT blocks non-zero
[  108.474836][ T5223] JBD2: Ignoring recovery information on journal
[  108.755882][ T5244] loop4: detected capacity change from 0 to 32768
[  108.804451][ T5223] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.849431][    T7] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  108.921284][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.950112][    T7] usb 3-1: Product: syz
[  108.981350][    T7] usb 3-1: Manufacturer: syz
[  108.986390][    T7] usb 3-1: SerialNumber: syz
[  108.986802][ T5244] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  109.012749][ T5244] JBD2: Ignoring recovery information on journal
[  109.092224][    T7] usb 3-1: config 0 descriptor??
[  109.220631][    T7] ch341 3-1:0.0: ch341-uart converter detected
[  109.325826][ T5244] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  109.362530][ T5289] loop0: detected capacity change from 0 to 256
[  109.377689][ T5272] loop3: detected capacity change from 0 to 32768
[  109.494304][ T5289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  109.571946][ T5272] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  109.571946][ T5272] 
[  109.610870][ T5285] syz.1.385 (5285) used greatest stack depth: 17744 bytes left
[  109.629150][ T5291] (syz.4.391,5291,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  109.652949][ T5272] ERROR: (device loop3): remounting filesystem as read-only
[  109.696633][ T5272] xtLookup: xtSearch returned -5
[  109.702259][ T5272] free_index: error reading directory table
[  109.742958][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[  109.803803][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  109.879835][    T7] usb 3-1: failed to send control message: -71
[  109.887543][    T7] ch341-uart: probe of ttyUSB0 failed with error -71
[  109.915703][    T7] usb 3-1: USB disconnect, device number 3
[  109.938869][    T7] ch341 3-1:0.0: device disconnected
[  110.306193][ T5301] tap0: tun_chr_ioctl cmd 1074025677
[  110.328375][ T5301] tap0: linktype set to 270
[  110.551798][ T5313] netlink: 'syz.1.411': attribute type 10 has an invalid length.
[  110.765546][ T5313] team0 (unregistering): Port device team_slave_0 removed
[  110.805861][ T5313] team0 (unregistering): Port device team_slave_1 removed
[  110.902725][ T5316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'.
[  111.230701][ T5340] binder: 5338:5340 ioctl c0306201 200000000080 returned -14
[  111.280941][ T5311] loop2: detected capacity change from 0 to 32768
[  111.373363][ T5344] loop3: detected capacity change from 0 to 2048
[  111.381153][ T5339] loop4: detected capacity change from 0 to 4096
[  111.402535][ T5311] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.409 (5311)
[  111.420322][ T5339] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  111.448260][ T5344] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  111.477336][ T5344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.507382][ T5311] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  111.538040][ T5311] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  111.587772][ T5311] BTRFS info (device loop2): use zstd compression, level 3
[  111.647079][ T5311] BTRFS info (device loop2): using free space tree
[  111.672297][ T5311] BTRFS info (device loop2): has skinny extents
[  112.065854][ T5311] BTRFS info (device loop2): enabling ssd optimizations
[  112.115632][ T5376] loop4: detected capacity change from 0 to 1024
[  112.256354][   T26] audit: type=1800 audit(1790220567.329:10): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.409" name="file1" dev="loop2" ino=260 res=0 errno=0
[  112.305422][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.377862][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.615933][ T5385] misc userio: No port type given on /dev/userio
[  112.726882][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.738981][ T5390] process 'syz.3.438' launched '/dev/fd/3' with NULL argv: empty string added
[  112.792235][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.288282][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.328866][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.487749][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.507698][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.932805][ T5399] chnl_net:caif_netlink_parms(): no params data found
[  114.084738][ T5435] capability: warning: `syz.0.452' uses deprecated v2 capabilities in a way that may be insecure
[  114.164395][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.172079][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.181631][ T5399] device bridge_slave_0 entered promiscuous mode
[  114.191860][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.199312][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.207838][ T5399] device bridge_slave_1 entered promiscuous mode
[  114.264550][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.320926][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.478314][   T26] audit: type=1800 audit(1790220569.549:11): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.455" name="addr_adrfam" dev="configfs" ino=36521 res=0 errno=0
[  114.643007][ T5453] set_capacity_and_notify: 1 callbacks suppressed
[  114.643024][ T5453] loop2: detected capacity change from 0 to 8
[  114.764140][ T5399] team0: Port device team_slave_0 added
[  114.823820][ T5399] team0: Port device team_slave_1 added
[  115.031369][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.049328][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.159014][ T4226] Bluetooth: hci1: command 0x0409 tx timeout
[  115.220316][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.272319][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.287180][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.327081][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.486812][ T5477] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  115.652935][ T5399] device hsr_slave_0 entered promiscuous mode
[  115.696062][ T5399] device hsr_slave_1 entered promiscuous mode
[  115.709516][ T5399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.751072][ T5399] Cannot create hsr debugfs directory
[  115.890688][ T5447] loop0: detected capacity change from 0 to 40427
[  115.948311][ T5486] scsi_strcpy_devinfo: vendor string '��b~�s�b��%`Q���ʮ��~�G|�\�D�5�X����2�
�a��E' is too long
[  115.963026][ T5447] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  115.998079][  T155] batman_adv: batadv0: Removing interface: gretap1
[  116.046800][ T5447] F2FS-fs (loop0): invalid crc value
[  116.054982][ T5447] F2FS-fs (loop0): Found nat_bits in checkpoint
[  116.242034][ T5447] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  116.292929][ T5447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  116.613928][ T5447] attempt to access beyond end of device
[  116.613928][ T5447] loop0: rw=2049, want=45104, limit=40427
[  116.657750][ T5508] loop4: detected capacity change from 0 to 64
[  116.723937][ T5399] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  116.798729][ T5399] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  116.851960][ T5399] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  116.968026][ T5399] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  117.229760][ T4265] Bluetooth: hci1: command 0x041b tx timeout
[  117.478047][    C0] vkms_vblank_simulate: vblank timer overrun
[  117.485851][ T5528] smpboot: CPU 1 is now offline
[  117.601205][  T155] device hsr_slave_0 left promiscuous mode
[  117.640183][  T155] device hsr_slave_1 left promiscuous mode
[  117.717676][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.753359][ T5533] loop2: detected capacity change from 0 to 512
[  117.797116][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.819937][ T5533] EXT4-fs (loop2): Ignoring removed oldalloc option
[  117.901672][ T5533] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  117.923859][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.973702][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.111146][  T155] device bridge_slave_1 left promiscuous mode
[  118.151099][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.400029][  T155] device bridge_slave_0 left promiscuous mode
[  118.407180][ T5546] vxcan0: tx address claim with dest, not broadcast
[  118.447105][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.635514][  T155] device veth1_macvtap left promiscuous mode
[  118.691174][  T155] device veth0_macvtap left promiscuous mode
[  118.741595][  T155] device veth1_vlan left promiscuous mode
[  118.776642][  T155] device veth0_vlan left promiscuous mode
[  119.170156][ T3103] Bluetooth: hci5: Frame reassembly failed (-84)
[  119.309641][ T1107] Bluetooth: hci1: command 0x040f tx timeout
[  119.408864][ T1323] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.441071][ T5545] loop2: detected capacity change from 0 to 40427
[  119.487160][ T5545] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  119.528001][ T5545] F2FS-fs (loop2): invalid crc value
[  119.565050][ T5545] F2FS-fs (loop2): Found nat_bits in checkpoint
[  119.697346][ T5545] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  119.737943][ T5545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  119.840272][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.876167][ T5545] attempt to access beyond end of device
[  119.876167][ T5545] loop2: rw=2049, want=45104, limit=40427
[  119.927619][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.938343][ T1323] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  119.963995][ T1323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.986435][ T1323] usb 5-1: Product: syz
[  119.994871][ T1323] usb 5-1: Manufacturer: syz
[  120.001222][ T1323] usb 5-1: SerialNumber: syz
[  120.022100][ T1323] usb 5-1: config 0 descriptor??
[  120.064065][ T1323] ch341 5-1:0.0: ch341-uart converter detected
[  120.202253][  T155] bond0 (unregistering): Released all slaves
[  120.381558][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.534260][ T5399] 8021q: adding VLAN 0 to HW filter on device team0
[  120.611793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.664104][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.751899][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.768958][ T1323] usb 5-1: failed to send control message: -71
[  120.789964][ T1323] ch341-uart: probe of ttyUSB0 failed with error -71
[  120.806721][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.875006][ T1323] usb 5-1: USB disconnect, device number 3
[  120.894233][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.901438][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.927607][ T5568] loop0: detected capacity change from 0 to 128
[  120.944094][ T1323] ch341 5-1:0.0: device disconnected
[  121.009239][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.053874][ T5568] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  121.103638][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.182256][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.191268][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.229101][ T1323] Bluetooth: hci5: command 0x1003 tx timeout
[  121.244757][  T146] Bluetooth: hci5: sending frame failed (-49)
[  121.344058][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.411638][ T4225] Bluetooth: hci1: command 0x0419 tx timeout
[  121.440739][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.537808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.615071][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.684931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.739875][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.783483][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.807884][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.836358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.874928][ T5399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.914562][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.938232][ T5590] tap0: tun_chr_ioctl cmd 1074025677
[  121.956344][ T5590] tap0: linktype set to 786
[  121.968528][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.994912][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.036379][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.740967][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.824679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.864309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.309662][ T4394] Bluetooth: hci5: command 0x1001 tx timeout
[  123.348359][  T146] Bluetooth: hci5: sending frame failed (-49)
[  123.802199][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.873119][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.066419][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.090631][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.108494][ T5616] loop2: detected capacity change from 0 to 32768
[  124.175356][ T5399] device veth0_vlan entered promiscuous mode
[  124.222710][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.266711][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.365158][ T5399] device veth1_vlan entered promiscuous mode
[  124.595481][ T5399] device veth0_macvtap entered promiscuous mode
[  124.733475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.798652][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.855387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.943559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.005962][ T5399] device veth1_macvtap entered promiscuous mode
[  125.065164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.137137][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.284851][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.339717][ T5669] loop2: detected capacity change from 0 to 1024
[  125.364750][ T5664] loop4: detected capacity change from 0 to 8192
[  125.389500][ T1323] Bluetooth: hci5: command 0x1009 tx timeout
[  125.396288][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.508070][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.581716][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.620325][   T26] audit: type=1800 audit(1790220580.699:12): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file1" dev="loop2" ino=1 res=0 errno=0
[  125.678907][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.774953][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.815802][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.858211][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.924318][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.012454][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.026959][ T5664] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  126.121703][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.135517][ T5664] REISERFS (device loop4): using ordered data mode
[  126.195750][ T5664] reiserfs: using flush barriers
[  126.206982][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.247081][ T5664] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.290713][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.342540][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.363025][ T5664] REISERFS (device loop4): checking transaction log (loop4)
[  126.397319][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.464999][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.522485][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.575752][ T5399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.627739][ T5399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.654823][ T5664] REISERFS (device loop4): Using tea hash to sort names
[  126.685384][ T5664] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  126.702219][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.721693][ T5683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.524'.
[  126.745630][ T5664] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  126.868598][ T5683] bond0 (unregistering): Released all slaves
[  127.065182][ T5685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'.
[  127.098002][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  127.148620][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.246379][ T5399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.282385][ T5399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.309401][ T5399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.334611][ T5399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.758905][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.766941][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.948321][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  128.040811][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.156567][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.250509][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[  128.267690][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  128.739795][ T5720] loop5: detected capacity change from 0 to 1024
[  128.913912][ T5720] hfsplus: xattr exists yet
[  129.280746][ T5734] loop5: detected capacity change from 0 to 1764
[  129.366801][ T5737] loop2: detected capacity change from 0 to 256
[  129.505142][ T5737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d)
[  130.740451][ T5730] loop4: detected capacity change from 0 to 32768
[  130.978903][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  131.055299][ T5730] XFS (loop4): Mounting V5 Filesystem
[  131.103478][  T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.306354][ T5730] XFS (loop4): Ending clean mount
[  131.344727][  T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.388436][ T5730] XFS (loop4): Quotacheck needed: Please wait.
[  131.399030][ T1107] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  131.472755][ T1107] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  131.545655][ T1107] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  131.615729][ T1107] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  131.743301][  T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.761912][ T1107] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  131.858459][ T1107] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  131.926787][ T1107] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  131.984950][ T1107] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  132.124848][ T5730] XFS (loop4): Quotacheck: Done.
[  132.182094][  T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.240966][ T4194] XFS (loop4): Unmounting Filesystem
[  132.249196][ T1107] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  132.311929][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.353591][ T1107] usb 6-1: Product: syz
[  132.358233][ T1107] usb 6-1: Manufacturer: syz
[  132.378270][ T1107] usb 6-1: SerialNumber: syz
[  132.445913][ T1107] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected
[  132.546030][ T1107] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  132.614625][ T1107] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  132.646657][ T5763] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb
[  132.784299][ T1107] usb 6-1: USB disconnect, device number 2
[  132.866897][ T1107] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  132.913061][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.919567][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.988680][ T1107] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  133.011697][ T5805] chnl_net:caif_netlink_parms(): no params data found
[  133.169358][ T1107] ti_usb_3410_5052 6-1:2.0: device disconnected
[  133.532709][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.624166][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.634085][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.648382][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.659293][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.673609][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.689416][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.698696][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.708342][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.722096][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.746636][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.759450][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  133.776977][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'.
[  133.811452][ T5805] device bridge_slave_0 entered promiscuous mode
[  134.184547][ T1107] Bluetooth: hci2: command 0x0409 tx timeout
[  134.229608][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.263748][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.335916][ T5805] device bridge_slave_1 entered promiscuous mode
[  134.574415][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.765387][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.905916][ T5876] loop0: detected capacity change from 0 to 128
[  135.024791][ T5805] team0: Port device team_slave_0 added
[  135.032241][ T5876] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.193339][ T5805] team0: Port device team_slave_1 added
[  135.199757][ T5876] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.229020][ T4265] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  135.364859][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.391083][ T5876] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  135.423204][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.499845][ T4265] usb 4-1: Using ep0 maxpacket: 8
[  135.619179][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.639132][ T4265] usb 4-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.729074][ T4265] usb 4-1: config 0 interface 0 has no altsetting 0
[  135.775209][ T4265] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  135.828966][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.883519][ T4265] usb 4-1: config 0 descriptor??
[  135.896770][ T5895] loop0: detected capacity change from 0 to 64
[  136.141821][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.178432][ T5899] loop5: detected capacity change from 0 to 1024
[  136.185487][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.273574][ T1323] Bluetooth: hci2: command 0x041b tx timeout
[  136.390547][ T4265] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0
[  136.413273][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.439224][ T4265] lenovo 0003:17EF:6067.0004: unknown main item tag 0x0
[  136.477618][ T4265] lenovo 0003:17EF:6067.0004: item fetching failed at offset 2/41
[  136.535085][ T4265] lenovo 0003:17EF:6067.0004: hid_parse failed
[  136.562104][ T4265] lenovo: probe of 0003:17EF:6067.0004 failed with error -22
[  136.633384][ T4265] usb 4-1: USB disconnect, device number 3
[  136.942778][ T5805] device hsr_slave_0 entered promiscuous mode
[  136.986870][ T5805] device hsr_slave_1 entered promiscuous mode
[  137.043071][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.106986][ T5917] loop5: detected capacity change from 0 to 512
[  137.119729][ T5805] Cannot create hsr debugfs directory
[  137.218193][ T5917] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  137.357958][ T5917] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.391464][ T5927] loop3: detected capacity change from 0 to 256
[  137.401605][ T5926] loop0: detected capacity change from 0 to 16
[  137.537155][ T5926] erofs: (device loop0): mounted with root inode @ nid 36.
[  137.600472][   T26] audit: type=1800 audit(1790220592.679:13): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.593" name="file1" dev="loop5" ino=15 res=0 errno=0
[  137.914815][ T5937] loop3: detected capacity change from 0 to 256
[  137.925837][   T26] audit: type=1800 audit(1790220592.849:14): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.595" name="file1" dev="loop0" ino=86 res=0 errno=0
[  138.084761][ T5937] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  138.303687][  T155] device hsr_slave_0 left promiscuous mode
[  138.897485][ T5946] loop4: detected capacity change from 0 to 131072
[  138.907661][ T1107] Bluetooth: hci2: command 0x040f tx timeout
[  138.933450][ T5946] F2FS-fs (loop4): invalid crc value
[  138.964268][ T5946] F2FS-fs (loop4): Found nat_bits in checkpoint
[  138.994856][ T5946] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  139.034755][ T5946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  139.062997][  T155] device hsr_slave_1 left promiscuous mode
[  139.146382][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.209478][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.290352][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.297925][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.429984][  T155] device bridge_slave_1 left promiscuous mode
[  139.462687][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.495129][  T155] device bridge_slave_0 left promiscuous mode
[  139.544264][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.599381][ T1107] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  139.627957][  T155] device veth1_macvtap left promiscuous mode
[  139.647517][  T155] device veth0_macvtap left promiscuous mode
[  139.674949][  T155] device veth1_vlan left promiscuous mode
[  139.702194][  T155] device veth0_vlan left promiscuous mode
[  140.019290][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.061137][ T1107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  140.122280][ T1107] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  140.177726][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.238559][ T1107] usb 4-1: config 0 descriptor??
[  140.309913][ T1107] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  140.369301][ T1107] dvb-usb: bulk message failed: -22 (3/0)
[  140.459384][ T1107] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  140.504014][ T1107] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  140.529477][ T5959] dvb-usb: bulk message failed: -22 (4/0)
[  140.556838][ T1107] usb 4-1: media controller created
[  140.591995][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.667800][ T1107] dvb-usb: bulk message failed: -22 (6/0)
[  140.707841][ T1107] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  140.797499][ T1107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10
[  140.886773][ T1107] dvb-usb: schedule remote query interval to 150 msecs.
[  140.926997][ T1107] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  140.997980][ T1107] usb 4-1: USB disconnect, device number 4
[  141.026041][ T4265] Bluetooth: hci2: command 0x0419 tx timeout
[  141.178707][ T1107] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  141.484961][  T155] team0 (unregistering): Port device team_slave_1 removed
[  141.548616][  T155] team0 (unregistering): Port device team_slave_0 removed
[  141.616198][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.661260][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.807561][ T6007] loop3: detected capacity change from 0 to 256
[  141.943718][  T155] bond0 (unregistering): Released all slaves
[  142.490742][ T5805] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  142.572954][ T5805] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  142.707780][ T5805] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  142.788069][ T5805] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  143.476238][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.620513][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.699287][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.787231][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[  143.869156][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.939485][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  144.039720][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.046839][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.220428][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  144.228683][ T6060] loop5: detected capacity change from 0 to 8192
[  144.319460][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  144.422947][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  144.516876][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.524081][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.653640][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  144.713132][ T6082] loop4: detected capacity change from 0 to 512
[  144.730378][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  144.785420][ T6082] EXT4-fs (loop4): Test dummy encryption mode enabled
[  144.835842][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'.
[  144.878681][ T6082] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  144.947493][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  145.036843][ T6082] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.643: bad orphan inode 16
[  145.053117][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  145.114185][ T6091] loop3: detected capacity change from 0 to 128
[  145.128595][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  145.152229][ T6082] ext4_test_bit(bit=15, block=4) = 0
[  145.157564][ T6082] EXT4-fs (loop4): 1 orphan inode deleted
[  145.223188][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  145.261696][ T6091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.281662][ T6082] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x000000000000ee01,inode_readahead_blks=0x0000000000000100,test_dummy_encryption,stripe=0x0000000000000001,init_itable=0x0000000000000008,mb_optimize_scan=0x000000000000,errors=continue. Quota mode: none.
[  145.364350][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  145.392920][ T6091] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.419539][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  145.506835][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.554643][ T6091] fscrypt (loop3, inode 12): Unsupported encryption flags (0x13)
[  145.604248][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  145.641540][ T6101] loop0: detected capacity change from 0 to 128
[  145.676803][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  145.744335][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  145.801831][ T6101] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none.
[  145.842822][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  145.895711][ T6101] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.957278][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.650'.
[  146.274602][ T6112] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11
[  146.844592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  146.895719][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  146.992865][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.745647][ T6149] loop5: detected capacity change from 0 to 1024
[  147.986765][ T6149] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  148.165919][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.232199][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.251619][ T6149] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none.
[  148.348640][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.405067][ T6129] loop4: detected capacity change from 0 to 32768
[  148.427635][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.505317][ T5805] device veth0_vlan entered promiscuous mode
[  148.573774][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.609510][ T6129] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  148.661494][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.723832][ T5805] device veth1_vlan entered promiscuous mode
[  148.808244][ T6167] loop3: detected capacity change from 0 to 1024
[  148.934098][ T5805] device veth0_macvtap entered promiscuous mode
[  149.059713][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  149.129459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  149.145694][ T4194] ocfs2: Unmounting device (7,4) on (node local)
[  149.219591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.298080][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.417943][ T5805] device veth1_macvtap entered promiscuous mode
[  149.478617][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.525057][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'.
[  149.537224][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.638256][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'.
[  149.657541][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.749995][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.909003][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.009626][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.084587][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.146095][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.185378][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.237356][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.319602][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.399890][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  150.489589][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  150.597780][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.666725][ T6203] loop0: detected capacity change from 0 to 512
[  150.700207][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.776642][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.792404][ T6205] loop5: detected capacity change from 0 to 1756
[  150.814094][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.844051][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.865371][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.883949][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.896628][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.923459][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.988205][ T6205] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  151.059173][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.105733][ T6205] UDF-fs: Scanning with blocksize 512 failed
[  151.162781][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.234711][ T6205] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  151.261938][ T5805] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.326363][ T6214] loop3: detected capacity change from 0 to 164
[  151.343207][ T6205] UDF-fs: Scanning with blocksize 1024 failed
[  151.368479][ T5805] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.396034][ T6219] loop4: detected capacity change from 0 to 64
[  151.459731][ T6205] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  151.489428][ T5805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.498208][ T5805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.645772][ T6221] loop0: detected capacity change from 0 to 128
[  151.919902][ T6221] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  152.124774][ T6221] hpfs: filesystem error: improperly stopped
[  152.149355][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.202121][ T6221] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  152.217438][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.286137][ T6221] hpfs: You really don't want any checks? You are crazy...
[  152.312175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.404942][ T6221] hpfs: Code page index out of array
[  152.456415][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.487684][ T6221] hpfs: code page support is disabled
[  152.518985][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.555108][ T6221] hpfs: hpfs_map_4sectors(): unaligned read
[  152.573887][ T6237] loop5: detected capacity change from 0 to 2048
[  152.605618][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.637877][ T6221] hpfs: hpfs_map_4sectors(): unaligned read
[  152.674314][ T6221] hpfs: filesystem error: unable to find root dir
[  152.794100][ T6237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.966442][ T6249] loop3: detected capacity change from 0 to 512
[  152.988600][   T26] audit: type=1800 audit(1790220608.059:15): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.688" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  153.047711][ T6221] hpfs: hpfs_map_4sectors(): unaligned read
[  153.197455][ T6249] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.332352][ T6249] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.537551][ T6263] loop5: detected capacity change from 0 to 2048
[  153.647350][ T6263] UDF-fs: bad mount option "fscontext=root" or missing value
[  153.814895][ T6263] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5399] was attempted by ""[6263]
[  154.244685][ T6281] loop4: detected capacity change from 0 to 1024
[  154.279053][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  154.709061][ T4231] usb 7-1: unable to get BOS descriptor or descriptor too short
[  154.829010][ T4231] usb 7-1: unable to read config index 0 descriptor/start: -71
[  154.837182][ T4231] usb 7-1: can't read configurations, error -71
[  154.860870][ T6302] program syz.5.711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.919647][ T6305] syz.0.712 (6305): /proc/6304/oom_adj is deprecated, please use /proc/6304/oom_score_adj instead.
[  155.461238][ T6321] loop0: detected capacity change from 0 to 128
[  155.496339][ T6319] kvm [6316]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81
[  156.129510][ T6334] net_ratelimit: 512 callbacks suppressed
[  156.129526][ T6334] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  156.326548][ T6306] loop3: detected capacity change from 0 to 32768
[  156.343657][ T6301] loop4: detected capacity change from 0 to 32768
[  156.479003][ T6306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.713 (6306)
[  156.498666][ T6301] 
[  156.498666][ T6301]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  156.498666][ T6301] 
[  156.535817][ T6340] loop0: detected capacity change from 0 to 1024
[  156.633592][ T6306] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  156.665702][ T6301] ERROR: (device loop4): diWrite: ixpxd invalid
[  156.665702][ T6301] 
[  156.711854][ T6340] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  156.753475][ T6306] BTRFS info (device loop3): setting nodatasum
[  156.809039][ T6301] ERROR: (device loop4): txCommit: 
[  156.809039][ T6301] 
[  156.834643][ T6340] EXT4-fs (loop0): Ignoring removed oldalloc option
[  156.848861][ T6306] BTRFS info (device loop3): force zlib compression, level 3
[  156.951535][ T6306] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  156.993437][ T6301] 
[  156.993437][ T6301]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  156.993437][ T6301] 
[  157.088961][ T6306] BTRFS info (device loop3): use lzo compression, level 0
[  157.096320][ T6306] BTRFS info (device loop3): turning on flush-on-commit
[  157.107367][ T6340] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,oldalloc,noblock_validity,delalloc,grpjquota=,,errors=continue. Quota mode: none.
[  157.130379][ T6360] loop5: detected capacity change from 0 to 64
[  157.173085][ T6362] loop6: detected capacity change from 0 to 256
[  157.195491][ T6301] 
[  157.195491][ T6301]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  157.195491][ T6301] 
[  157.289006][ T6306] BTRFS info (device loop3): enabling auto defrag
[  157.307625][ T6360] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  157.373079][ T6340] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.435423][ T6306] BTRFS info (device loop3): max_inline at 0
[  157.528870][ T6306] BTRFS info (device loop3): using free space tree
[  157.638956][ T6306] BTRFS info (device loop3): has skinny extents
[  157.682929][ T6360] gfs2: path_lookup on c::: returned error -2
[  158.023149][ T6306] BTRFS error (device loop3): open_ctree failed: -12
[  158.140506][ T6390] loop0: detected capacity change from 0 to 512
[  158.275758][ T6390] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  158.324036][ T6390] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  158.413136][ T6390] System zones: 0-1, 15-15, 18-18, 34-34
[  158.489679][ T6390] EXT4-fs (loop0): orphan cleanup on readonly fs
[  158.496427][ T6390] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  158.625015][ T4278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4278)
[  158.642448][ T6390] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  158.743090][ T6390] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  158.792537][ T6390] EXT4-fs (loop0): 1 truncate cleaned up
[  158.798262][ T6390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.998304][ T6406] loop5: detected capacity change from 0 to 512
[  159.093478][ T6390] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  159.294100][ T6406] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.345561][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.737'.
[  159.362030][ T6406] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.584415][ T6428] loop6: detected capacity change from 0 to 128
[  160.352089][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.359826][ T4389] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  160.369568][ T6447] UHID_CREATE from different security context by process 326 (syz.3.741), this is not allowed.
[  160.421814][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.472637][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.519643][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.548359][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.585853][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.615600][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.636408][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.676738][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.701519][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.730954][ T4389] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.747011][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.771271][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.785381][ T4389] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  160.813932][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.832960][ T4389] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  160.848869][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.868957][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.885289][ T4389] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.913097][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.942658][ T4389] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  160.952827][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.976242][ T4389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.991994][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.006180][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.031247][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.061907][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.091308][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.111943][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.141224][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.171354][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.191075][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.212602][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.240503][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.258406][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.285741][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.307002][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.328873][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.354708][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.373598][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.391913][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.418267][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.436539][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.459063][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.467005][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.505782][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.528073][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.538957][ T4389] gud: probe of 6-1:1.0 failed with error -71
[  161.565422][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.583381][ T4389] usb 6-1: USB disconnect, device number 3
[  161.600719][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.618517][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.648046][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.673392][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.700559][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.718326][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.737772][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.760845][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.778631][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.797888][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.820577][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.840532][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.871329][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.894256][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.920337][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.938172][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.953089][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.980554][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.997684][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.016092][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.034133][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.070088][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.135111][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.172115][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.207475][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.237543][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.287502][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.327898][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.372123][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.402691][    T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  162.452535][    T7] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  162.658946][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  162.969125][    T7] usb 5-1: Using ep0 maxpacket: 16
[  163.051074][ T6522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.059520][ T6522] IPv6: NLM_F_CREATE should be set when creating new route
[  163.089148][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.238978][    T7] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  163.346941][    T7] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  163.470856][    T7] usb 5-1: Manufacturer: syz
[  163.524073][    T7] usb 5-1: config 0 descriptor??
[  163.559031][ T6541] program syz.6.770 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.609311][    T7] usb 5-1: can't set config #0, error -71
[  163.668945][    T7] usb 5-1: USB disconnect, device number 4
[  163.719119][ T6546] x_tables: duplicate underflow at hook 3
[  163.781771][ T6546] xt_TCPMSS: Only works on TCP SYN packets
[  164.153958][ T6566] scsi_strcpy_devinfo: model string '�
�w�|a�����u���N�Ӥ1����pEw���zdz' is too long
[  164.613470][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  165.347565][ T6552] loop4: detected capacity change from 0 to 32768
[  165.391126][ T6593] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(1)
[  165.507724][ T6552] XFS (loop4): Mounting V5 Filesystem
[  165.648471][ T6552] XFS (loop4): Ending clean mount
[  165.672934][ T6562] loop5: detected capacity change from 0 to 32768
[  165.766240][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.789'.
[  165.857688][ T6562] XFS (loop5): Mounting V5 Filesystem
[  165.899838][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.789'.
[  165.927134][ T4194] XFS (loop4): Unmounting Filesystem
[  166.103543][ T6562] XFS (loop5): Ending clean mount
[  166.647783][ T5399] XFS (loop5): Unmounting Filesystem
[  167.980494][ T6666] debugfs: Directory 'netdev:wlan0' with parent 'phy10' already present!
[  168.027947][ T6673] i2c i2c-0: delete_device: Extra parameters
[  168.414614][ T6687] loop6: detected capacity change from 0 to 1024
[  168.637975][ T6687] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue. Quota mode: writeback.
[  168.944140][ T6687] EXT4-fs error (device loop6): ext4_nfs_get_inode:1433: inode #15: comm syz.6.810: iget: bad extra_isize 288 (inode size 256)
[  169.656737][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.824'.
[  169.672213][ T6713] loop0: detected capacity change from 0 to 8192
[  169.749911][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.824'.
[  169.760854][ T6713] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  169.841289][ T6713] REISERFS (device loop0): using ordered data mode
[  169.858445][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.824'.
[  169.949133][ T6713] reiserfs: using flush barriers
[  169.990741][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.824'.
[  170.025664][ T6738] scsi_strcpy_devinfo: model string '�
�w�|a�����u���N�Ӥ1����pEw���zdz' is too long
[  170.062501][ T6713] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  170.208229][ T6713] REISERFS (device loop0): checking transaction log (loop0)
[  170.308153][ T6745] loop6: detected capacity change from 0 to 8
[  170.325597][ T6713] REISERFS (device loop0): Using r5 hash to sort names
[  170.383123][ T6713] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  170.429621][ T6749] tipc: Started in network mode
[  170.434996][ T6749] tipc: Node identity ac1414aa, cluster identity 4711
[  170.546046][ T6749] tipc: New replicast peer: 172.20.20.187
[  170.558973][ T6713] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  170.624778][ T6753] tipc: New replicast peer: 172.20.20.187
[  170.683529][ T6749] tipc: Enabled bearer <udp:syz0>, priority 10
[  171.662002][ T6793] ip_tables: iptables: counters copy to user failed while replacing table
[  171.750249][ T6796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  171.792097][ T4389] tipc: Node number set to 2886997162
[  172.106816][ T6810] loop3: detected capacity change from 0 to 512
[  172.218348][ T6810] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.288253][ T6810] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.458040][ T6810] EXT4-fs warning (device loop3): ext4_group_add:1676: Can't resize non-sparse filesystem further
[  172.950482][ T6836] loop6: detected capacity change from 0 to 512
[  173.052210][ T6836] EXT4-fs (loop6): Ignoring removed nobh option
[  173.157088][ T6836] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  173.249072][ T6839] option changes via remount are deprecated (pid=6837 comm=syz.3.864)
[  173.269386][ T6836] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  173.322702][ T6839] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  173.356360][ T6836] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #13: comm syz.6.862: inode has both inline data and extents flags
[  173.421747][ T6846] loop5: detected capacity change from 0 to 1024
[  173.495122][ T6836] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.862: couldn't read orphan inode 13 (err -117)
[  173.593654][ T6809] loop4: detected capacity change from 0 to 32768
[  173.620739][ T6846] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.867: lblock 2 mapped to illegal pblock 2 (length 1)
[  173.642486][ T6836] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  173.732515][ T6809] XFS (loop4): Mounting V5 Filesystem
[  173.772407][ T6846] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  173.882031][ T6846] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.867: lblock 0 mapped to illegal pblock 48 (length 1)
[  173.902584][ T6809] XFS (loop4): Ending clean mount
[  173.919447][ T6836] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  173.928052][ T6836] CacheFiles: Lookup cache failed with error -61
[  174.016409][ T6846] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  174.046589][ T6836] CacheFiles: Failed to register: -61
[  174.082129][ T4194] XFS (loop4): Unmounting Filesystem
[  174.095109][ T6846] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.867: Failed to acquire dquot type 0
[  174.176992][ T6866] loop3: detected capacity change from 0 to 1024
[  174.185922][ T6846] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  174.236547][ T6866] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  174.286980][ T6846] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.867: mark_inode_dirty error
[  174.345596][ T6866] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  174.407713][ T6846] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  174.433204][ T6870] batman_adv: batadv0: Adding interface: ip6gretap1
[  174.449184][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  174.503035][ T6870] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.538957][ T6846] EXT4-fs (loop5): 1 orphan inode deleted
[  174.579162][  T155] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  174.607879][ T6846] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none.
[  174.691560][  T155] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  174.707728][ T6870] batman_adv: batadv0: Interface activated: ip6gretap1
[  174.767794][  T155] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[  174.864365][ T6846] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm syz.5.867: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.076793][ T6846] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1
[  175.161713][ T6846] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 16877
[  175.191968][ T6882] ieee802154 phy0 wpan0: encryption failed: -22
[  175.243065][ T6846] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.867: Failed to acquire dquot type 0
[  175.467868][ T6890] device erspan0 entered promiscuous mode
[  175.506123][ T5399] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  175.631208][ T5399] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  175.704874][ T5399] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  175.721195][ T6899] netlink: 32 bytes leftover after parsing attributes in process `syz.6.882'.
[  175.755332][ T6898] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  175.755332][ T6898] 
[  176.080666][ T6906] loop6: detected capacity change from 0 to 1024
[  176.317638][ T6906] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  176.424328][ T6906] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,data_err=ignore,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  176.592082][ T6906] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.803338][   T26] audit: type=1800 audit(1790220631.879:16): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.883" name="file1" dev="loop6" ino=15 res=0 errno=0
[  177.048942][ T6945] tipc: Started in network mode
[  177.055467][ T6945] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  177.237414][ T6957] loop6: detected capacity change from 0 to 256
[  177.949667][ T6979] loop0: detected capacity change from 0 to 512
[  178.074714][ T6979] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.905: iget: bad extended attribute block 134217728
[  178.236906][ T6979] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.905: couldn't read orphan inode 15 (err -117)
[  178.375905][ T6979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.458944][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  178.472681][ T6424] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  178.570047][   T26] audit: type=1800 audit(1790220633.649:17): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.905" name="file0" dev="loop0" ino=13 res=0 errno=0
[  178.590026][    C0] vkms_vblank_simulate: vblank timer overrun
[  178.620289][ T6979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.905: bg 0: block 465: padding at end of block bitmap is not set
[  178.768834][ T6424] usb 6-1: Using ep0 maxpacket: 32
[  178.785298][ T6979] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  178.834129][ T6979] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.905: invalid indirect mapped block 234881024 (level 0)
[  178.889438][ T4229] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.909129][ T6424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.956366][ T4229] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.970978][ T6424] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.994667][ T6979] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.905: invalid indirect mapped block 768 (level 1)
[  179.064162][ T4229] usb 4-1: config 0 interface 0 has no altsetting 0
[  179.071812][ T6424] usb 6-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  179.116375][ T4229] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  179.148862][ T6424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.191723][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.219533][ T6424] usb 6-1: config 0 descriptor??
[  179.258561][ T4229] usb 4-1: config 0 descriptor??
[  179.459315][ T7019] netlink: 476 bytes leftover after parsing attributes in process `syz.6.917'.
[  179.731310][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  179.781386][ T4229] hid-multitouch 0003:0EEF:72C4.0007: collection stack underflow
[  179.806032][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  179.840575][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  179.854275][ T4229] hid-multitouch 0003:0EEF:72C4.0007: item 0 1 0 12 parsing failed
[  179.862719][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  179.913278][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  179.921281][ T4229] hid-multitouch: probe of 0003:0EEF:72C4.0007 failed with error -22
[  179.962520][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  179.992314][ T4229] usb 4-1: USB disconnect, device number 5
[  180.012664][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  180.050974][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  180.071544][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x3
[  180.104452][ T6424] wacom 0003:056A:00FA.0006: unknown main item tag 0x0
[  180.164827][ T6424] wacom 0003:056A:00FA.0006: hidraw0: USB HID v0.02 Joystick [HID 056a:00fa] on usb-dummy_hcd.5-1/input0
[  180.227072][ T6424] usb 6-1: USB disconnect, device number 4
[  180.443869][ T7045] fido_id[7045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  180.593163][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'.
[  180.691378][ T7057] netlink: 7 bytes leftover after parsing attributes in process `syz.5.926'.
[  181.136828][ T7068] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  181.248329][ T7068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  181.313875][ T7079] loop6: detected capacity change from 0 to 2048
[  181.394102][ T7079] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  181.428847][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  181.532851][ T7079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.605615][ T7087] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  181.706829][ T7079] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  181.727145][ T4229] usb 4-1: Using ep0 maxpacket: 32
[  181.839788][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'.
[  181.889373][ T4229] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  181.962784][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.026823][ T7098] loop5: detected capacity change from 0 to 164
[  182.062841][ T4229] usb 4-1: config 0 descriptor??
[  182.150613][ T4229] gspca_main: sunplus-2.14.0 probing 041e:400b
[  182.510613][   T26] audit: type=1400 audit(1790220637.589:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7107 comm="syz.6.941" name="p" offset=58
[  183.009005][ T4229] gspca_sunplus: reg_w_riv err -71
[  183.035847][ T4229] sunplus: probe of 4-1:0.0 failed with error -71
[  183.083445][ T4229] usb 4-1: USB disconnect, device number 6
[  183.168957][   T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  183.495822][ T7144] mmap: syz.4.956 (7144) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  183.569035][   T13] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  183.773756][   T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  183.791426][ T7153] loop4: detected capacity change from 0 to 64
[  183.861825][   T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  183.878474][ T7156] loop6: detected capacity change from 0 to 64
[  184.119110][   T13] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  184.128205][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.264722][   T13] usb 6-1: Product: syz
[  184.302810][   T13] usb 6-1: Manufacturer: syz
[  184.344737][   T13] usb 6-1: SerialNumber: syz
[  184.407707][   T13] usb 6-1: config 0 descriptor??
[  184.466026][ T7160] loop3: detected capacity change from 0 to 8192
[  184.499069][   T13] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8
[  184.564348][ T7160] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  184.628852][ T5805] hfs: node 4:3 still has 1 user(s)!
[  184.651375][ T7173] loop4: detected capacity change from 0 to 128
[  184.676761][ T7160] REISERFS (device loop3): using ordered data mode
[  184.740336][ T7160] reiserfs: using flush barriers
[  184.810586][   T26] audit: type=1800 audit(1790220639.889:19): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.965" name="file1" dev="loop4" ino=1048656 res=0 errno=0
[  184.834383][ T7160] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.985677][   T13] usb 6-1: USB disconnect, device number 5
[  185.045253][ T7181] device batadv_slave_0 entered promiscuous mode
[  185.053381][ T7160] REISERFS (device loop3): checking transaction log (loop3)
[  185.093390][ T7181] device batadv_slave_0 left promiscuous mode
[  185.491345][ T7160] REISERFS (device loop3): Using rupasov hash to sort names
[  185.589508][ T7160] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  185.623495][ T7191] loop0: detected capacity change from 0 to 256
[  185.749548][ T7191] exfat: Deprecated parameter 'namecase'
[  185.777095][ T7191] exfat: Deprecated parameter 'namecase'
[  185.789169][   T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  185.856590][ T7191] exfat: Deprecated parameter 'namecase'
[  186.002524][ T7191] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  186.189079][   T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  186.271758][   T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  186.325776][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.371985][   T13] usb 5-1: config 0 descriptor??
[  186.870223][   T13] logitech 0003:046D:C24F.0008: unbalanced delimiter at end of report description
[  186.967761][   T13] logitech 0003:046D:C24F.0008: parse failed
[  187.045494][   T13] logitech: probe of 0003:046D:C24F.0008 failed with error -22
[  187.109307][   T13] usb 5-1: USB disconnect, device number 5
[  187.537777][ T7203] loop6: detected capacity change from 0 to 40427
[  187.587090][ T7239] loop5: detected capacity change from 0 to 1024
[  187.610547][ T7236] netlink: 165 bytes leftover after parsing attributes in process `syz.3.980'.
[  187.658962][ T7203] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  187.665855][ T7203] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  187.846173][ T7203] F2FS-fs (loop6): invalid crc value
[  187.993601][ T7203] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  188.393971][ T7217] loop0: detected capacity change from 0 to 32768
[  188.507127][ T7262] loop5: detected capacity change from 0 to 256
[  188.529726][ T7203] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  188.618875][ T7203] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  188.962538][ T7276] program syz.0.992 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  188.974772][ T7279] loop4: detected capacity change from 0 to 128
[  189.140979][ T7281] loop3: detected capacity change from 0 to 256
[  189.204299][ T7279] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  189.312808][ T7279] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  189.433326][ T7289] loop0: detected capacity change from 0 to 512
[  189.594502][ T7289] EXT4-fs (loop0): Ignoring removed nobh option
[  189.751132][ T7289] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  189.965723][ T7289] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.170337][ T7289] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.997: corrupted inode contents
[  190.424650][ T7289] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.997: mark_inode_dirty error
[  190.554321][ T7289] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.997: corrupted inode contents
[  190.764324][ T7312] 
[  190.766697][ T7312] ======================================================
[  190.773737][ T7312] WARNING: possible circular locking dependency detected
[  190.780792][ T7312] syzkaller #0 Not tainted
[  190.785382][ T7312] ------------------------------------------------------
[  190.792585][ T7312] syz.0.997/7312 is trying to acquire lock:
[  190.798582][ T7312] ffff888073b3cce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  190.807719][ T7312] 
[  190.807719][ T7312] but task is already holding lock:
[  190.815531][ T7312] ffff88805d42be48 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[  190.824929][ T7312] 
[  190.824929][ T7312] which lock already depends on the new lock.
[  190.824929][ T7312] 
[  190.835387][ T7312] 
[  190.835387][ T7312] the existing dependency chain (in reverse order) is:
[  190.844836][ T7312] 
[  190.844836][ T7312] -> #5 (&ei->i_data_sem){++++}-{3:3}:
[  190.852770][ T7312]        down_read+0x44/0x2e0
[  190.857464][ T7312]        ext4_map_blocks+0x350/0x1a50
[  190.863846][ T7312]        ext4_append+0x22d/0x560
[  190.868989][ T7312]        ext4_init_new_dir+0x2a7/0x910
[  190.874463][ T7312]        ext4_mkdir+0x4c3/0xc90
[  190.879407][ T7312]        vfs_mkdir+0x386/0x570
[  190.884177][ T7312]        do_mkdirat+0x1dd/0x5c0
[  190.889108][ T7312]        __x64_sys_mkdir+0x6a/0x80
[  190.894452][ T7312]        do_syscall_64+0x4c/0xa0
[  190.899600][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.906033][ T7312] 
[  190.906033][ T7312] -> #4 (jbd2_handle){++++}-{0:0}:
[  190.913339][ T7312]        wait_transaction_locked+0x1bb/0x270
[  190.919924][ T7312]        add_transaction_credits+0x104/0xcb0
[  190.926024][ T7312]        start_this_handle+0x723/0x1560
[  190.931576][ T7312]        jbd2__journal_start+0x2b7/0x5a0
[  190.937560][ T7312]        jbd2_journal_start+0x26/0x30
[  190.942989][ T7312]        ocfs2_start_trans+0x3b2/0x6f0
[  190.948479][ T7312]        ocfs2_symlink+0x11b4/0x2780
[  190.953767][ T7312]        vfs_symlink+0x245/0x3d0
[  190.958820][ T7312]        do_symlinkat+0x1ab/0x6b0
[  190.963869][ T7312]        __x64_sys_symlinkat+0x95/0xa0
[  190.970019][ T7312]        do_syscall_64+0x4c/0xa0
[  190.975165][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.981786][ T7312] 
[  190.981786][ T7312] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  190.991238][ T7312]        down_read+0x44/0x2e0
[  190.996572][ T7312]        ocfs2_start_trans+0x3a6/0x6f0
[  191.002255][ T7312]        ocfs2_reserve_local_alloc_bits+0xb35/0x2630
[  191.009038][ T7312]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  191.016378][ T7312]        ocfs2_symlink+0x1169/0x2780
[  191.021964][ T7312]        vfs_symlink+0x245/0x3d0
[  191.027216][ T7312]        do_symlinkat+0x1ab/0x6b0
[  191.033427][ T7312]        __x64_sys_symlinkat+0x95/0xa0
[  191.039975][ T7312]        do_syscall_64+0x4c/0xa0
[  191.044934][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.051443][ T7312] 
[  191.051443][ T7312] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  191.059008][ T7312]        ocfs2_start_trans+0x2a7/0x6f0
[  191.064583][ T7312]        ocfs2_acquire_dquot+0x6c0/0xb30
[  191.070843][ T7312]        dqget+0x713/0xbb0
[  191.075304][ T7312]        __dquot_initialize+0x3a9/0xd00
[  191.081201][ T7312]        ocfs2_get_init_inode+0x144/0x1b0
[  191.086921][ T7312]        ocfs2_mknod+0x93c/0x25f0
[  191.092166][ T7312]        ocfs2_mkdir+0x192/0x420
[  191.097202][ T7312]        vfs_mkdir+0x386/0x570
[  191.101971][ T7312]        do_mkdirat+0x1dd/0x5c0
[  191.106825][ T7312]        __x64_sys_mkdirat+0x85/0x90
[  191.112267][ T7312]        do_syscall_64+0x4c/0xa0
[  191.117250][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.123682][ T7312] 
[  191.123682][ T7312] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  191.132569][ T7312]        down_write+0x38/0x60
[  191.137271][ T7312]        ocfs2_create_local_dquot+0x199/0x18d0
[  191.143785][ T7312]        ocfs2_acquire_dquot+0x822/0xb30
[  191.149435][ T7312]        dqget+0x713/0xbb0
[  191.154173][ T7312]        __dquot_initialize+0x3a9/0xd00
[  191.159897][ T7312]        ocfs2_get_init_inode+0x144/0x1b0
[  191.165747][ T7312]        ocfs2_mknod+0x93c/0x25f0
[  191.171228][ T7312]        ocfs2_mkdir+0x192/0x420
[  191.176497][ T7312]        vfs_mkdir+0x386/0x570
[  191.181716][ T7312]        do_mkdirat+0x1dd/0x5c0
[  191.186570][ T7312]        __x64_sys_mkdirat+0x85/0x90
[  191.191856][ T7312]        do_syscall_64+0x4c/0xa0
[  191.196797][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.203216][ T7312] 
[  191.203216][ T7312] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  191.211118][ T7312]        __lock_acquire+0x2c66/0x7b50
[  191.216587][ T7312]        lock_acquire+0x19e/0x400
[  191.221615][ T7312]        __mutex_lock_common+0x1e5/0x2400
[  191.227599][ T7312]        mutex_lock_nested+0x17/0x20
[  191.232999][ T7312]        dquot_commit+0x5a/0x410
[  191.238903][ T7312]        ext4_write_dquot+0x1f0/0x360
[  191.244948][ T7312]        mark_all_dquot_dirty+0xf9/0x400
[  191.250594][ T7312]        __dquot_alloc_space+0x5cb/0xe10
[  191.256564][ T7312]        ext4_mb_new_blocks+0xf80/0x47c0
[  191.262436][ T7312]        ext4_ext_map_blocks+0x17d1/0x63d0
[  191.268857][ T7312]        ext4_map_blocks+0x97f/0x1a50
[  191.274246][ T7312]        ext4_getblk+0x176/0x670
[  191.279191][ T7312]        ext4_bread+0x26/0x180
[  191.283966][ T7312]        ext4_append+0x2bb/0x560
[  191.288919][ T7312]        ext4_init_new_dir+0x2a7/0x910
[  191.294809][ T7312]        ext4_mkdir+0x4c3/0xc90
[  191.299693][ T7312]        vfs_mkdir+0x386/0x570
[  191.304462][ T7312]        do_mkdirat+0x1dd/0x5c0
[  191.309316][ T7312]        __x64_sys_mkdirat+0x85/0x90
[  191.314602][ T7312]        do_syscall_64+0x4c/0xa0
[  191.319539][ T7312]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.325953][ T7312] 
[  191.325953][ T7312] other info that might help us debug this:
[  191.325953][ T7312] 
[  191.336176][ T7312] Chain exists of:
[  191.336176][ T7312]   &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem
[  191.336176][ T7312] 
[  191.348859][ T7312]  Possible unsafe locking scenario:
[  191.348859][ T7312] 
[  191.356306][ T7312]        CPU0                    CPU1
[  191.361668][ T7312]        ----                    ----
[  191.367031][ T7312]   lock(&ei->i_data_sem);
[  191.371465][ T7312]                                lock(jbd2_handle);
[  191.378046][ T7312]                                lock(&ei->i_data_sem);
[  191.384996][ T7312]   lock(&dquot->dq_lock);
[  191.389438][ T7312] 
[  191.389438][ T7312]  *** DEADLOCK ***
[  191.389438][ T7312] 
[  191.397587][ T7312] 4 locks held by syz.0.997/7312:
[  191.403065][ T7312]  #0: ffff88802b7ca460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  191.412214][ T7312]  #1: ffff88805d4297e0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  191.423177][ T7312]  #2: ffff88805d42be48 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[  191.434542][ T7312]  #3: ffffffff8c4418b8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  191.443829][ T7312] 
[  191.443829][ T7312] stack backtrace:
[  191.449918][ T7312] CPU: 0 PID: 7312 Comm: syz.0.997 Not tainted syzkaller #0
[  191.457601][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  191.467676][ T7312] Call Trace:
[  191.471083][ T7312]  <TASK>
[  191.474044][ T7312]  dump_stack_lvl+0x188/0x250
[  191.478741][ T7312]  ? load_image+0x410/0x410
[  191.483380][ T7312]  ? show_regs_print_info+0x20/0x20
[  191.488612][ T7312]  ? print_circular_bug+0x12b/0x1a0
[  191.493859][ T7312]  check_noncircular+0x296/0x330
[  191.498803][ T7312]  ? add_chain_block+0x9b0/0x9b0
[  191.503741][ T7312]  ? lockdep_lock+0xf1/0x1f0
[  191.508343][ T7312]  ? mark_lock+0x94/0x320
[  191.512689][ T7312]  ? _find_first_zero_bit+0xd1/0xf0
[  191.517907][ T7312]  __lock_acquire+0x2c66/0x7b50
[  191.522883][ T7312]  ? check_path+0x21/0x40
[  191.527220][ T7312]  ? verify_lock_unused+0x140/0x140
[  191.532417][ T7312]  ? lockdep_lock+0xf1/0x1f0
[  191.537009][ T7312]  ? lockdep_unlock+0x143/0x2e0
[  191.542087][ T7312]  ? lockdep_lock+0x1f0/0x1f0
[  191.546794][ T7312]  lock_acquire+0x19e/0x400
[  191.551328][ T7312]  ? dquot_commit+0x5a/0x410
[  191.555927][ T7312]  ? __might_sleep+0xf0/0xf0
[  191.560522][ T7312]  ? read_lock_is_recursive+0x10/0x10
[  191.565918][ T7312]  ? verify_lock_unused+0x140/0x140
[  191.571270][ T7312]  __mutex_lock_common+0x1e5/0x2400
[  191.576506][ T7312]  ? dquot_commit+0x5a/0x410
[  191.581119][ T7312]  ? dquot_commit+0x5a/0x410
[  191.585831][ T7312]  ? __might_sleep+0xf0/0xf0
[  191.590445][ T7312]  ? mutex_lock_io_nested+0x60/0x60
[  191.595650][ T7312]  mutex_lock_nested+0x17/0x20
[  191.600429][ T7312]  dquot_commit+0x5a/0x410
[  191.604856][ T7312]  ext4_write_dquot+0x1f0/0x360
[  191.609732][ T7312]  mark_all_dquot_dirty+0xf9/0x400
[  191.614964][ T7312]  __dquot_alloc_space+0x5cb/0xe10
[  191.620084][ T7312]  ext4_mb_new_blocks+0xf80/0x47c0
[  191.625211][ T7312]  ? memset+0x1e/0x40
[  191.629193][ T7312]  ? ext4_mb_pa_callback+0xd0/0xd0
[  191.634306][ T7312]  ? ext4_inode_to_goal_block+0x313/0x450
[  191.640047][ T7312]  ext4_ext_map_blocks+0x17d1/0x63d0
[  191.645379][ T7312]  ? ext4_ext_map_blocks+0x343f/0x63d0
[  191.650956][ T7312]  ? ext4_ext_release+0x10/0x10
[  191.655823][ T7312]  ? rwsem_write_trylock+0x135/0x1c0
[  191.661133][ T7312]  ? ext4_es_lookup_extent+0x5fd/0x9f0
[  191.666619][ T7312]  ext4_map_blocks+0x97f/0x1a50
[  191.671513][ T7312]  ? ext4_issue_zeroout+0x250/0x250
[  191.676740][ T7312]  ext4_getblk+0x176/0x670
[  191.681165][ T7312]  ? ext4_get_block_unwritten+0x30/0x30
[  191.686717][ T7312]  ? __brelse+0x55/0x90
[  191.690872][ T7312]  ext4_bread+0x26/0x180
[  191.695114][ T7312]  ext4_append+0x2bb/0x560
[  191.699530][ T7312]  ? ext4_init_new_dir+0x910/0x910
[  191.704642][ T7312]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  191.710801][ T7312]  ext4_init_new_dir+0x2a7/0x910
[  191.715781][ T7312]  ext4_mkdir+0x4c3/0xc90
[  191.720144][ T7312]  ? ext4_symlink+0xcd0/0xcd0
[  191.724822][ T7312]  ? inode_permission+0xef/0x480
[  191.729851][ T7312]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  191.734881][ T7312]  ? security_inode_mkdir+0xb3/0x100
[  191.740170][ T7312]  vfs_mkdir+0x386/0x570
[  191.744418][ T7312]  do_mkdirat+0x1dd/0x5c0
[  191.748754][ T7312]  ? vfs_mkdir+0x570/0x570
[  191.753172][ T7312]  __x64_sys_mkdirat+0x85/0x90
[  191.757939][ T7312]  do_syscall_64+0x4c/0xa0
[  191.762360][ T7312]  ? clear_bhb_loop+0x30/0x80
[  191.767040][ T7312]  ? clear_bhb_loop+0x30/0x80
[  191.771718][ T7312]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.777648][ T7312] RIP: 0033:0x7f7822114fc7
[  191.782066][ T7312] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.801884][ T7312] RSP: 002b:00007f782034ce58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  191.810592][ T7312] RAX: ffffffffffffffda RBX: 00007f782034cee0 RCX: 00007f7822114fc7
[  191.818759][ T7312] RDX: 00000000000001ff RSI: 0000200000000200 RDI: 00000000ffffff9c
[  191.826736][ T7312] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  191.835926][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000200
[  191.844533][ T7312] R13: 00007f782034cea0 R14: 0000000000000000 R15: 0000000000000000
[  191.852524][ T7312]  </TASK>
[  191.855635][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.868338][ T4392] Bluetooth: hci3: command 0x0406 tx timeout
[  192.055671][ T7332] loop6: detected capacity change from 0 to 16
[  192.091466][ T7332] erofs: (device loop6): mounted with root inode @ nid 36.
[  192.649345][ T7312] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.997: corrupted inode contents
[  192.663714][ T7312] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.997: mark_inode_dirty error
[  192.676616][ T7312] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.997: corrupted inode contents
[  192.690430][ T7312] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.997: mark_inode_dirty error
[  192.702094][ T7312] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.997: corrupted inode contents
[  192.717674][ T7312] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.997: mark_inode_dirty error
[  194.353690][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.360040][ T1420] ieee802154 phy1 wpan1: encryption failed: -22