last executing test programs:

19.13220362s ago: executing program 4 (id=949):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x5, {0x5, 0x5, "00f49e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

18.066900854s ago: executing program 1 (id=954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
r1 = socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0xffffffffffffffdc, r2, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x4e, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xe46}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x58}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

15.08974324s ago: executing program 1 (id=958):
openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x1)
getdents64(r0, 0x0, 0x31)

14.96936988s ago: executing program 4 (id=959):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x24, 0x0, &(0x7f0000000000))

13.778874365s ago: executing program 4 (id=961):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000140)={[{@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@usrjquota}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@nobarrier}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001340)="$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")
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000"], 0x24}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r4, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
msgget$private(0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000008, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x11, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x32314247})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card3/oss_mixer\x00', 0x541480, 0x0)

10.797415191s ago: executing program 4 (id=964):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = fanotify_init(0x1a, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r0, 0x541, 0x1023, r1, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

10.537391292s ago: executing program 1 (id=967):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$sndpcmp(0x0, 0x3, 0x5f3100)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet6_tcp(0xa, 0x1, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80b, 0x6)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={<r2=>r1, 0xdb, "aefcb1b2943504a97f6ec9e4e0d3a33e19d8545de83a3af10f819af393f06930f173c610a29d223b6f39ba331b2dbd0fef25608c1e5a1047750db175c7111f12620e290a78a65e76a3d5a57579d2a75b443149c36100de5d78f6862e0011f6e0cf732a4b387615c34a3f047025fb043ce0a3aa996a4f7ad32413986e9b6e871f18a998448d7929bc2cc24d2efeab4c8296611ca6e720cca0fb800f885c20f1fbe70c5324c647c28e62e0d7f22ac59a434a75ba3dec7b7571a1031f8393c7f92d8d43f88ccb9f426115f387a738b398c3441819ecf8d3b095c42ea0"}, &(0x7f0000000080)=0xe3)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r1, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {r2, @in={{0x2, 0x4e22, @multicast2}}, 0x80, 0x81, 0x6, 0x8, 0x4}}, &(0x7f00000003c0)=0xb0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000640)={0x7, @win={{0xc, 0x1004100, 0x0, 0x400006}, 0x3, 0x8, 0x0, 0xb5d, 0x0, 0x2}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
read(r5, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3ff, 0x1000}}, 0x30)

8.242767045s ago: executing program 2 (id=972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007"], 0x28}}, 0x0)

8.201661128s ago: executing program 4 (id=973):
timer_create(0x3, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd, 0xfffffffffffffffb, 0x8001, 0x7fffffff, 0x18, 0x1, {0x3}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0x0, 0x8, 0x0, 0x7, 0x2, 0x3, 0xd7a, [{0x7fffffff, 0x7f0, 0x8, 0x8}, {0xb, 0x3, 0x4, 0x4b}, {0x35c, 0x5, 0x2, 0xf}, {0x6, 0x0, 0xbd, 0x5a57eb3c}, {0xfff, 0x4, 0x7, 0x9}, {0xc1b, 0xffffffff, 0x100, 0x6}, {0x9, 0x6, 0xd82f, 0x5}, {0x4, 0x8, 0x0, 0x5}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x8}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)

8.025423961s ago: executing program 2 (id=974):
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000080)={0x2, 0x654f, 0x0, 0xbe, 0x1, [0x5, 0x8, 0x100, 0x1ff]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.490401284s ago: executing program 0 (id=978):
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f0000000040)})

6.489048764s ago: executing program 1 (id=979):
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x115440)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000240)=0xc)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=r3)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x1, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
r7 = syz_io_uring_setup(0x31, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x3, 0x70}, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40})
io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)

6.441071128s ago: executing program 3 (id=980):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

6.402337461s ago: executing program 4 (id=981):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x3e)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x100000004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c00"], 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

6.348010296s ago: executing program 0 (id=982):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04b731489c0804"], 0x7)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
socket(0xb, 0x6, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, 0x0, &(0x7f0000000540)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
syz_emit_vhci(0x0, 0x7)

6.318146328s ago: executing program 2 (id=983):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r4=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r3, 0xee01, r4)
keyctl$setperm(0x5, r3, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0)

4.225931895s ago: executing program 32 (id=981):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x3e)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x100000004)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c00"], 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

4.219835585s ago: executing program 0 (id=985):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x24, 0x0, &(0x7f0000000000))

4.219522845s ago: executing program 2 (id=986):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$packet(0x11, 0x3, 0x300)
io_uring_enter(0xffffffffffffffff, 0x67bc, 0x76ee, 0x4, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd_index=0x5, 0x5, 0x7, 0xfffffff8, 0x10})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.993412033s ago: executing program 3 (id=987):
r0 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000005c0)=0xc)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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")
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.317633707s ago: executing program 0 (id=988):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20)

3.125852542s ago: executing program 0 (id=989):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x2, 0x62a6, &(0x7f0000009900)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiPXXd8B/MzevHEgMRBSJzVh4xhjnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4VV8UArQHlArSpVgvaBviAqVB6iKqCAVKmtgK1mzv//35nZ2Zld73h95pzPR4Kfd+bMnP858z9n5reb7xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmt39htlP1bIsq9Vq+Q2bsuxF9XrTxKbGLa+9seMDAAAA1u7njf9/4dZ0w+EVPKhpmX+669tfXVhYWMjeN/yno59bWEh3TGTZ6IYsa9wXXf3B+2vNywRPZuO1oaafh3qsfrjH/SM97h/tcf9Yj/s39Lh/vMf9S3bAEjdltfRk2xr/3JTv0uy2bLRx37YOj3qytmGovu/SY7Na4zELoyeyuexUNptNtyyfL1trLP/1u+vremsW1zXUtK4t9Rnyk8ePxzHUwj7e1rKuxeeMfvT6bOKnP3n8+F9feP6OTrXnbmh5vnycO7bWx/mJcEs+1lq2Ie2TOM6hpnFu6fCaDLeMs9Z4XP3f7eN8YYXjHF4c5rpqf83Hs6HGv7/T2E8jtazDftoSbvufe7Isu7w47PZllqwrG8o2ttwytPj6jOczsv4c9an00myk+zxdqLXM07vTv5efp/U6s611nrYfE/H1vzs8bmSZMTS/TD96Yqzpdf/ZwrXM06i+1csdK+1zsN/HSlHmYJwX32ls9FMd5+C2sP2Pb19+DnacOx3mYNrupjm4tdccHBobbow5vQi1xmMWz5W7WpYfbqyp1qjPbe8+B6cunD43Nf+xj983d/rYydmTs2f27No1vWffvgMHDkydmDs1O53//zXu7eLbmA2lY2Br2HfxGHh127LNU3Xhi2NLzr/XehyOdzkON7Ut2+/jcKR942rrc0AundP5sfGe+k4fvzKULXOMNV6fnWs/DtN2Nx2HI03HYcf3lA7H4cgKjsP6Mud2ruwzy0jT/zqNYfn3grXNwU1Nc7D980j7HOz355GizMHxMC++t3P594ItYbxPTa7288jwkjmYNjece+q3pM/74wcapdO8vLN+x81j2cX52fP3P3bswoXzu7JQ1sXLmuZK+3zd2LRN2ZL5OrTq+Xp47q6n7uxw+6awr8bvq//f+LKvVX2Zvfd3f60a726d92fLrbuzUPos7M+FDeu0Pzu9m9f351iWff5bTzz8jcc//4Zl92e93/zE1No/i6e+tOn8O7rM+Tf2/b/I15ee6snh0ZH8+B1Oe2e05Xzc+lKNNM5dtca6X5jqcT4eyY7HMY3egPPxbV3Ox5vblu33+Xi0fePi+bjW67cda9P+eo6HeXJquvv5uL7M5t2rnZMjXc/H94RaC/v/NaFTSH1R09xZbt6mdY2MjIbtGolraJ2ne1qWHw29WX1dz+xe2eeG9nm64578uYbT1i1ar3k60bZsv+dp+t3XcvO01uu3b9em/fUcD/Pitj3d52l9mWf3rv3ceVP8Z9O5c6zXHBwdHquPeTRNwsb5Plu4Kc7B+7Pj2dnsVDbTuHesMZ9qjXVNPrCyOTgW/rfe58rNXebgjrZl+z0H0/vYcnOvNrJ04/ug/fUcD/Pi6Qe6z8H6Mm/c39/PrjvCLWmZps+u7b9fW+53Xne27abecyW2Jav/nVd9nN/a3/13s/VlTh1YbZ/ZfT/dG265ucN+aj9+lzumZrLV7qdrP6bq43z+wPL7qT6e+jKfO7jC+XQ4y7JLH3mw8fve8PeVv7v43a+2/N2l0990Ln3kwR+/+MQ/rmb8AAy+X+RlY/5e1/SXqZX8/R8AAAAYCLHvHwo10f8DAABAacS+P/5X4Yn+HwAAAEoj9v0joSYV6f83v/H5uV9cylIyfyGI96fd8FC+XMy4ToefJxYW1W9/8Muz//0Pl1a27qEsy3720B90XH7zQ3FcuYkwzqtvar19ia/et6J1H330Ulpvc379C+H54/asdBp0iuBOZ1n29Vs/01jPxPuvNOqzDx1t1IcvP/VkfZkXDuY/x8c/97J8+b8I4d/DJ461PP65sB9+GOr02zrvj/i4r1x5zZb9711cX3xcbestjc1++gP588bvyfnsk/nycT8vN/5vfPqZr9SXf+xVncd/aajz+J8Jz/vlUP/3Ffnyza9B/ef4uE+G8cf1xcfd/6Vvdhz/1U/ly597c77c0VDj+neEn7e9+fm55v31WO1Yy3Zlb8mXi+uf/u4fN+6Pzxefv33840eutOyP9vnx7L/lzzPVtny8Pa4n+vu29defp3l+xvU/80dHW/Zzr/Vfffi5V9Sft33997Ytd+4jOxvrX3y+1m9s+stPfqbj+uJ4Dv/tuZbtOfzucByH9T/9gTAfw/3/dzV/vvZvVzj67tbzT1z+C5suNW3P4jeSvvWn+fqvvu5ko24Yv2njzS968S2XX1nfd1n2nQ358/Va/8m/Otsy/i/enu+PeH9cY9yeXuL6z3908szZ+YtzM2mvPn5r47tz3p6PJ4731nBubf/5yNkLH5w9PzE9MZ1lE+X9Cr1r9qVQf5yXy92XXlhyBt35aHg97/zzr2/c/q+fjrf/+3vy26+8LX/fenVY7rPh9k3h9Vvd+pd6+u7bG8d37dkwwoWl3xe8Flu2/deBFS0Ytr/9c0Gc7+de/sHGfqjf13jfiMf1Gsf//Zn8eb4W9utC+Gbmrbcvrq95+fjdCFceyY/3Ne+/cJqLr+vfhNf7HT/Mnz+OK27v98PnmG9ubj3fxfnxtUtD7c/f+BaPy+F8kl3O749Lxf195YXbOw4vfg9JdvmOxs9/kp7njlVt5nLmPzY/dWruzMXHpi7Mzl+Ymv/Yx4+cPnvxzIUjje/yPPKhXo9fPD9tbJyfZmb37c0aZ6uzebnObvT4zz16fGb/9PaZ2RPHLp648Oi52fMnj8/PH5+dmd9+7MSJ2Y/2evzczKFduw/u2b978uTczKEDBw/uOTg5d+ZsfRj5oHrYN/3hyTPnjzQeMn9o78FdDzywd3ry9NmZ2UP7p6cnL/Z6fOO9abL+6N+fPD976tiFudOzk/NzH589tOvgvn27e34b4OlzJ+Ynps5fPDN1cX72/FS+LRMXGjfX3/t6PZ5ymv+P/PNsu1r+RXzZu+7dl76fte7LTyz7VPkibV8g+nz4Lpp/fsm5Ayv5Ofb9o6EmFen/AQAAoApi3z8WaqL/BwAAgNKIff+GUBP9PwAAAJRG7PvHQ00q0v+XLv+/+dKK1i//L//fvL/k/8uQ/19cvmf+/5Gi5f/z84X8f3+sNX8v/x/I/8v/y/8PTP5/Ibwhyf9TREXL/8e+/6Ysq2T/DwAAAFUQ+/6NoSb6fwAAACiN2PffHGqi/wcAAIDSiH3/i0JNKtL/y//L/8v/y//L/3dev/z/YJL/707+vwf5/6msWvn/y/0cv+v/y/+zVNHy/7Hvf3GoSUX6fwAAAKiC2PffEmqi/wcAAIDSiH3/raEm+n8AAAAojdj3bwo1qUj/L/8v/y//L/8v/995/fL/g0n+vzv5/x7k/13/X/5f/p++Klr+P/b9Lwk1qUj/DwAAAFUQ+/6Xhpro/wEAAKB4Rq7tYbHvf1moyZL+/xpXAAAAANxwse+/LWsLglfk7//y//L/xc//b0j3yf/L/2eFzP8PZ/L/xSH/3538fw/y//L/8v/y//RV0fL/jb4/G89eHmpSkf4fAAAAqiD2/beHmuj/AQAAoDRi3/9LoSb6fwAAACiN2PdvDjWpSP8v/y//f6Pz/6NtY3f9/8XHyf/nip//d/3/IpH/707+vwf5f/l/+X/5f/qqaPn/2PffEWpSkf4fAAAAqiD2/XeGmuj/AQAAoDRi3//LoSb6fwAAACiN2PdvCTWpSP8v/1/w/H9MjpY4/9/7+v/y//L/8v/y/ysn/9+d/H8P8v/y//L/8v/0VdHy/7Hvf0WoSUX6fwAAAKiC2PffFWqi/wcAAIDSiH3/K0NN9P8AAABQGrHvnwg1qUj/L/9f8Px/noMfK/P1/+X/5f/l/+X/+0n+vzv5/x7Cae5HWZbJ/1c4/x9bAvl/+X/WrGj5/9j33x1qUpH+HwAAAKog9v1bQ030/wAAAFAase+/J9RE/w8AAAClEfv+baEmFen/5f8HIv+fyf/L/8v/y//L/6+M/H938v89uP6//L/r/8v/01dFy//Hvv9VoSYV6f8BAACgCmLfvz3URP8PAAAApRH7/leHmuj/AQAAoDRi378j1KQi/b/8v/y//L/8v/x/5/XL/w8m+f/u5P97kP+X/5f/l/+nr4qW/499/2tCTSrS/wMAAEAVxL5/Z6iJ/h8AAABKI/b994aa6P8BAACgNGLfPxlqUpH+X/5f/l/+X/5f/r/z+uX/B5P8f3fy/z3I/8v/y//L/9NXRcv/x77/vlCTivT/AAAAUAWx778/1ET/DwAAAKUR+/6pUBP9PwAAAJRG7PunQ00q0v/L/8v/y//L/68q///KxeeV/8/J/xeL/H938v89yP/L/9/w/P+o/D+lUrT8f+z7d4WapMZv7Bq2EgAAACiS2PfvDjWpyN//AQAAoApi378n1ET/DwAAAKUR+/69oSYV6f/l/+X/5f/l/13/v/P65f8Hk/x/d/3P/8dNlP+X/5f/d/1/+X+WKlr+P/b9D4SaVKT/BwAAgCqIff++UBP9PwAAAJRG7Pv3h5ro/wEAAKA0Yt9/INSkIv2//L/8v/y//L/8f+f1y/8PJvn/7lz/v4fi5f9f1/zw9cz/19cl/y//L//P6j3yh80/FS3/H/v+g6EmFen/AQAAoApi3//aUBP9PwAAAJRG7Pt/JdSke/+/4fqOCgAAAOin2Pf/aqhJRf7+L/8v/y//L/8v/995/fL/g0n+vzv5/x6Kl/9v4fr/xR6//L/8P0sVLf8f+/5DoSYV6f8BAACgCmLf/2uhJvp/AAAAKI3Y978u1ET/DwAAAKUR+/7DoQad4tylJP8v/z+Y+f9x+X/5/9Ll/8fi88r/r4n8f3fy/z3I/8v/y//L/9NXRcv/x77/9aEm/v4PAAAApRH7/gdDTfT/AAAAUBqx739DqIn+HwAAAEoj9v1vDDWpSP8v/y//P5j5f9f/z+T/S5f/d/3//pD/707+vwf5f/l/+X/5f/qqaPn/2Pe/KdSkIv0/AAAAVEHs+98caqL/BwAAgNKIff9bQk30/wAAAFAase9/a6hJRfp/+X/5/xuZ/89dlv+X/2+Q/5f/7wf5/+7k/3uQ/5f/l/+X/6evipb/j33/r4eaVKT/BwAAgCqIff9DoSb6fwAAACiN2Pe/LdRE/w8AAAClEfv+t4eaVKT/l/+X/3f9f/l/+f/O65f/H0zy/90NWP7/57eE2+X/c/L/xR7/avP/I20/X5f8/w+Wy/8vbGh/vPw/10PR8v+x739HqElF+n8AAACogtj3vzPURP8PAAAApRH7/neFmjT1/339D+8AAACAdRf7/t8INanI3//l/+vjWEwvy//L/zdukP+X/5f/H1jy/90NWP7f9f/byP8Xe/yu/y//z1JFy//Hvv/doSYV6f8BAACgCmLf/3Coif4fAAAASiP2/Y+Emuj/AQAAoDRi3/+eUJOK9P/y/67/L/8v/y//33n98v+DSf6/O/n/HuT/5f+Llv//T/l/BlvR8v+x73801KQi/T8AAABUQez73xtqov8HAACA0oh9/2+Gmuj/AQAAoDRi3/++UJOK9P/y/4OS/58Y0Pz/E/L/1zH/f9ct+XLy//L/LJL/707+vwf5f/n/ouX/Xf+fAVe0/H/s+98farLy/n98xUsCAAAA19HIsvfEvv+3Qk0q8vd/AAAAqILY9/92qIn+HwAAAEoj9v2/E2pSkf5f/n9Q8v+u/5/J/7v+f9v2yP/L/3eyfvn/eOaR/5f/L1b+f9OqNrjVjc7Pr9WNHn918//5O6P8P50ULf8f+/7fDTWpSP8PAAAAVRD7/g+Emuj/AQAAYCB0+m+y28W+/0ioif4fAAAASiP2/UdDTSrS/8v/y//L/xc0//9nW//le99+59Fd8v/y//L/q7Ku1/+vH/yu/y//X7D8/1rc6Pz8eo2/tsylweT/Xf+f/ita/j/2/cdCTSrS/wMAAEAVxL7/90JN9P8AAABQGrHvPx5qov8HAACA0oh9/0yoSUX6f/l/+X/5/4Lm/wf4+v9xf8j/t+pb/j+edOX/O1rX/P97F3Pi8v+rzf+PdbxV/l/+f5DHL/8v/89SRcv/x75/NtSkIv0/AAAAVEHo+4dO5HXxDv0/AAAAlEbs+0+Gmuj/AQAAoDRi3//BUJOK9P/y//L/8v/y/67/33n93fL/tRHX/y8q+f/uipP/70z+X/5/kMcv/y//T5YtfjLPFS3/H/v+uVCTivT/AAAAUAWx7/9QqIn+HwAAAEoj9v0fDjXR/wMAAEBpxL7/VKhJRfp/+X/5f/l/+X/5//9n706+LK3rO47fgoauPmSRXRbZ5Jws8yewCOtknyyyySI5JyfnBJKQhMw0GZxFUXFWFGcFBxBEVJwncEJxBhUV5xEnRD3toer7/XYNT91bVX1v3+f5/V6vBd90hep77dNCf7r67TP8+qN9/r/+fy79/3z6/wX0//p//b/+n6UaW/+fu//v4pZO9j8AAAD0IHf/5XGL/Q8AAADNyN1/Rdxi/wMAAEAzcvf/fdzSyf7X/+v/m+3//1j/f9Dr6//1/y3T/8+n/19A/6//1//r/1mqsfX/ufv/IW7pZP8DAABAD3L3/2PcYv8DAABAM3L3Xxm32P8AAADQjNz9/xS3dLL/9/T/G7M++//MePX/LfX/nv9/4Ovr/8+h/79Q/z9257f/v+axf/Lp//X/+v+g/z9U/3/yoM/X/9OisfX/ufv/OW7pZP8DAABAD3L3/0vcYv8DAADA9O36kzebs6viFvsfAAAAmpG7/1/jlk72//Ke/39q6+MT7f+L/l//v/UB/b/+/6D+/8TZb+v/x8nz/+frqf+/8r5LLn/49t+/4yivr//X/3v+v/6f5Rpb/5+7/9/ilk72PwAAAPQgd/+/xy32PwAAADQjd/9/xC32PwAAADQjd/9/xi2d7P/l9f+Tfv5/0f/r/7c+oP/X/x/U//+Z5/+Pnf5/vp76/+O8vv5f/6//1/+zXOvu//M7zm/n7v+vuKWT/Q8AAAA9yN3/33GL/Q8AAADNyN1/ddxi/wMAAEAzcvefjls62f/6/9X3/7/R/+v/4+r/9f/6/9XT/8+n/19A/6//1//r/1mqdff/e7+du/+auKWT/Q8AAAA9yN3/P3GL/Q8AAADNyN3/v3GL/Q8AAADNyN3/f3FLJ/tf/+/5//p//b/+f/j19f/TpP+fT/+/gP7/XPv5i/T/E+z/4xdS+n9W4Yj9/6Nz/rG9lP4/d///xy2d7H8AAADoQe7+x8Ut9j8AAAA0I3f/4+MW+x8AAACakbv/CXFLJ/tf/6//1//r/4/d/+//qbdF/z9M/39+6P/nG03/v3Fi8MP6/8n3/57/P8X+P+j/WYWxPf8/d/8T45ZO9j8AAAD0IHf/k+KWOfv/yL+ZDwAAAKxV7v4nxy2+/g8AAACTl9VZ7v6nxC2d7H/9v/5f/6//9/z/4def1//fseP96f/HRf8/32j6/wPo//X/U37/+v+z/X/+2kz/z9j6/9z9T41bOtn/AAAA0IPc/dfGLfY/AAAANCN3/9PiFvsfAAAAmpG7/+lxSyf7f7j/P/v/1/8fjv5/9/vX/w///FhW/5/fo/5/bv9/mef/90n/P9/57/9P6v93f//6/xVa9/tvvP8/tejzPf+fIWPr/3P3Xxe3dLL/AQAAoAe5+58Rt9j/AAAA0Izc/c+MW+x/AAAAaEbu/mfFLZ3s/zU///+aiw96X/r/Lfp//b/n/4/z+f+z897/n9D/H5L+fz7P/19A/6//1/8v5fn/+n/S2Pr/3P3Xxy2d7H8AAADowfWPzLZ2/7NnM/sfAAAApmjnnx3Y+wdKQ+7+58Qt9j8AAAA0I3f/c+OWTvb/mvv/VT3//6JFr63/1//v/PHS/+v/h15/XP2/5/8flv5/Pv3/Avr/VfTzJxrr/2846PPH0P9frf9nZHb1/3ed/fi6+v/c/c+LWzrZ/wAAANCD3P3Pj1vsfwAAAGhG7v4XxC32PwAAADQjd/8L45ZO9v/K+/9TB7/2Cvv/hfT/+v+dP176f/3/0Ovr/6dJ/z+f/n8B/b/n/3v+v/6fpdrV/++wrv4/d/+L4pZO9j8AAAD0IHf/i+MW+x8AAACakbv/hrjF/gcAAIBm5O5/SdzSyf5v9Pn/C+n/9f87f7z0//r/odfX/0+T/n8+/f8C+n/9v/5/cf+/91/UQf/PkLH1/7n7Xxq3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pfFLfY/AAAANCN3/8vjlk72v/5/tf1/flz/r/+fHaX/j0/Q/2/T/+v/j2Jq/f/e//4cu1/fGPo30X4H9P/3/M3pP939Ef2//l//r//3/H+WYBT9/5mzv7rM3f+KuKWT/Q8AAAA9yN3/yrjF/gcAAIBm5O5/Vdxi/wMAAEAzcve/Om454v7/3aW+q/NH/+/5//r/Efb/Qf+/Tf+v/z+KqfX/e3n+v/5f/z/d96//1/+z3yj6/x3fzt3/mrjF1/8BAACgGbn7Xxu32P8AAADQjNz9r4tb7H8AAABoRu7+m+KWTva//l//r//X/+v/h1//uP3/5myY/v/80P/Pp/9fQP+v/9f/6/9ZqrH1/7n7b45bOtn/AAAA0IPc/a+PW+x/AAAAaEbu/jfELfY/AAAATEmmY4Ny978xbulk/+v/9f/6f/2//n/49T3/f5om2v/XPwan2v9fOKX+/5Y5b2Co/z9zUv+v/9f/6/85prH1/7n73xS3dLL/AQAAoAe5+2+JW+x/AAAAaEbu/lvjFvsfAAAAmpG7/81xSyf7X/+v/19m/5/0/8M/P/T/+n/9/+pNtP8vU+3/Pf9f/z/T/+v/9f8MGFv/n7v/trilk/0PAAAAPcjdf3vcYv8DAABAM3L3vyVusf8BAACgGbn774hbOtn/+n/9v+f/6//1/8Ovr/+fptX1/7P19f8PXXDU7+ZA+v8F9P/6f/2//p+lGlv/n7v/rXFLJ/sfAAAAepC7/864xf4HAACAZuTuf1vcYv8DAABAM3L3vz1u6WT/6//1/9Ps/6/bHHr/+n/9/0z/3z3P/59P/7+A/l//r//X/7NUY+v/c/e/I27pZP8DAABAD3L33xW32P8AAADQjNz974xb7H8AAABoRu7+d8Utnex//b/+f3f/P5tNo//3/P+Z/r+F/n9zpv9fOv3/fIfr/y/T/+v/2+r/L5g11P+fOvDz9f+M0dj6/9z9745bOtn/AAAA0IPc/e+JW+x/AAAAaMD2n53J3f/euMX+BwAAgDE7cZS/OXf/++KWTvb/9Pv/k3s+Uf8/m83uv6r55//r/2f6/xb6//pR1f8vj/5/Ps//X0D/32b/7/n/+n/WZmz9f+7+98ctnex/AAAA6EHu/g/ELfY/AAAANCN3/wfjFvsfAAAAmpG7/0NxSyf7f/r9/95P1P/Pzun5//r/rQ/o//X/+v/J0v/Pp/9fQP+/sJ/fOODXPTP9v/5f/8+AsfX/ufs/HLd0sv8BAACgB7n7745b7H8AAABoRu7+e+IW+x8AAACakbv/I3FLJ/tf/6//1/9Ps//f1P/r//X/g8bS/1966Z/cq//X/7fY/8+j/9f/6//Za2z9f+7+j8Ytnex/AAAA6EHu/o/FLfY/AAAANCN3/8fjFvsfAAAAmpG7/xNxSyf7f3//f9Fsu1DdNtT/R6Om/99B/7/7/ev/h39+eP6//l//v3pj6f89//9471//r/+f8vs/Uv//B/s/X/9Pi8bW/+fuvzdu6WT/AwAAQA9y938ybrH/AQAAoBm5+z8Vt9j/AAAA0Izc/ffFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8VcX6v9ZnrH1/7n7Px23bA2/P/ydY/7HBAAAAEYkd/9n4pZOvv4PAAAAPcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76/82hD667nz9X637/zfT/nv/PEo2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDNy998ft3Sy//X/+v/2+/+/1P/veX39v/6/Zfr//Df6MP3/Av30/4PW3c9P/f3r//X/7De2/j93/wNxSyf7HwAAAHqQu/9LcYv9DwAAAM3I3f/luMX+BwAAgGbk7v9K3NLJ/tf/99X/b8x67P89/1//r//vyXT6/xtPDH3U8//1//r/6b5//b/+n/3G1v/n7n9w40SX+x8AAACm6s//6G8fOOzf++DWXzdnX41b7H8AAABoRu7+r8Ut9j8AAAA0I3f/1+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n/2G1v/n7v/obhlx/Ab/B/oAQAAACYjd/834pZOvv4PAAAAPcjd/824Zd/+P3PIP9UOAAAAjE3u/m/FLZ18/V//P/L+f7ai/j/+Pv3/Nv2//n/o9fX/09Ra/39yNqr+/8yG/l//P4f+X/+v/2evsfX/ufvvvG3W5f4HAACARu36HYVvb/11c/aduMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/R97/H+v5/6fq//L8/877/2s3B19f/6//b1lr/b/n/29/XP+/Tf8/7vev/9f/s98R+v+tQbrq/j93//fjlk72PwAAAPQgd/8P4hb7HwAAAJqRu/+HcYv9DwAAAM3I3f+juKWT/a//X0P/f93J2Wyl/f8hnv+v/++j/z/g9dvp/3/vktN3/8Vf33qz/p+zzmf/nz8X9P/6/zX0/zfFzz/9/4jev/5f/89+Y3v+f+7+H8ctnex/AAAA6EHu/ofjFvsfAAAAmpG7/ydxi/0PAAAAzcjd/9O4pZP9r/9v8fn/0+z/88d6Df3/6en1/9kU997/e/6//n8/z/+fT/+/wHT6/61ve/7/uN6//l//z35j6/9z9/8sbulk/wMAAEAPcvf/PG7J/b9x5N+6BwAAAEYmd/8v4hZf/wcAAIBm5O5/JG7pZP/r//X/Y+n/k+f/n/08z//fpv/X/x+F/n8+/f8C+n/9v/5f/89Sja3/z93/y7ilk/0PAAAAPcjd/2jcYv8DAABAM3L3/ypusf8BAACgGbn7fx23dLL/9f/6f/2//l//P/z6+v9p0v/Pp/9/zMUHvwH9v/5f/6//Z6nG1v/n7v9tAAAA//89hVJZ")
creat(&(0x7f0000000300)='./file0/file0\x00', 0x165)

3.005463292s ago: executing program 3 (id=990):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)

2.855323104s ago: executing program 3 (id=991):
timer_create(0x3, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd, 0xfffffffffffffffb, 0x8001, 0x7fffffff, 0x18, 0x1, {0x3}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x4000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0x0, 0x8, 0x0, 0x7, 0x2, 0x3, 0xd7a, [{0x7fffffff, 0x7f0, 0x8, 0x8}, {0xb, 0x3, 0x4, 0x4b}, {0x35c, 0x5, 0x2, 0xf}, {0x6, 0x0, 0xbd, 0x5a57eb3c}, {0xfff, 0x4, 0x7, 0x9}, {0xc1b, 0xffffffff, 0x100, 0x6}, {0x9, 0x6, 0xd82f, 0x5}, {0x4, 0x8, 0x0, 0x5}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x8}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)

946.432366ms ago: executing program 3 (id=992):
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000580)=[r2], &(0x7f0000000040)})

897.453599ms ago: executing program 1 (id=993):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/87, 0x57}, 0x3}], 0x1, 0x3010, 0x0)

897.229639ms ago: executing program 2 (id=994):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xba}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

856.694262ms ago: executing program 3 (id=995):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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")
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

718.912903ms ago: executing program 2 (id=996):
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00')
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000480), 0x7f03)

165.496147ms ago: executing program 0 (id=997):
r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x4}}}], 0x18}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f041})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)

0s ago: executing program 1 (id=998):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x10, &(0x7f0000002380)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xd, 0x0, &(0x7f0000000180)="4e3f261e29a7fa764a1131a77b", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000580)=0xe)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil)

kernel console output (not intermixed with test programs):

er_alloc: 4474: binder_alloc_buf, no vma
[   69.068804][ T4490] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer.
[   69.324900][ T4499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer.
[   69.464165][ T2238] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   69.914350][ T2238] usb 2-1: config index 0 descriptor too short (expected 65535, got 36)
[   70.456401][ T2238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.474139][ T2238] usb 2-1: config 0 has no interfaces?
[   70.502106][ T2238] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.518003][ T2238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.582029][ T2238] usb 2-1: config 0 descriptor??
[   70.734308][   T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.850785][ T2238] usb 2-1: USB disconnect, device number 3
[   70.976736][ T4516] loop3: detected capacity change from 0 to 40427
[   71.052543][ T4516] F2FS-fs (loop3): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[   71.076138][    C0] vkms_vblank_simulate: vblank timer overrun
[   71.134851][   T13] usb 3-1: Using ep0 maxpacket: 8
[   71.279387][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.286257][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.415486][   T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   71.463675][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.491685][   T13] usb 3-1: Product: syz
[   71.504682][   T13] usb 3-1: Manufacturer: syz
[   71.543250][   T13] usb 3-1: SerialNumber: syz
[   71.614319][   T13] usb 3-1: config 0 descriptor??
[   71.734308][ T4522] loop4: detected capacity change from 0 to 16
[   71.771625][ T4522] erofs: (device loop4): mounted with root inode @ nid 36.
[   71.894331][   T13] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   74.588071][ T4542] syz.4.63 uses obsolete (PF_INET,SOCK_PACKET)
[   75.121431][ T4556] loop3: detected capacity change from 0 to 2048
[   75.213351][ T4556] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.325426][   T13] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[   75.374577][   T13] usb 3-1: USB disconnect, device number 2
[   75.430522][ T4552] loop0: detected capacity change from 0 to 32768
[   75.741183][ T4552] XFS (loop0): Mounting V5 Filesystem
[   76.447409][   T24] cfg80211: failed to load regulatory.db
[   76.462190][ T4566] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   76.512144][ T4574] loop4: detected capacity change from 0 to 64
[   76.575808][ T4566] 8021q: adding VLAN 0 to HW filter on device team0
[   76.584899][ T4566] bond0: (slave team0): Enslaving as an active interface with an up link
[   77.283075][ T4552] XFS (loop0): Ending clean mount
[   77.679752][ T4590] loop1: detected capacity change from 0 to 16
[   77.710029][ T4184] XFS (loop0): Unmounting Filesystem
[   77.728602][ T4590] erofs: (device loop1): mounted with root inode @ nid 36.
[   77.737922][ T4590] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   77.748209][ T4590] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[   78.809787][ T4596] loop2: detected capacity change from 0 to 40427
[   78.870015][ T4596] F2FS-fs (loop2): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[   79.340626][ T4600] loop1: detected capacity change from 0 to 736
[   79.571165][ T4586] loop4: detected capacity change from 0 to 32768
[   79.726141][ T4586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.75 (4586)
[   79.875874][ T4586] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   80.767537][ T4586] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   81.299742][ T4586] BTRFS info (device loop4): trying to use backup root at mount time
[   81.574646][ T4586] BTRFS info (device loop4): setting nodatasum
[   81.581341][ T4586] BTRFS info (device loop4): force zlib compression, level 3
[   81.674625][ T4586] BTRFS info (device loop4): turning on flush-on-commit
[   81.686515][ T4586] BTRFS info (device loop4): enabling disk space caching
[   81.705267][ T4586] BTRFS error (device loop4): cannot disable free space tree
[   81.863326][ T4586] BTRFS error (device loop4): open_ctree failed: -22
[   83.616800][ T4628] loop3: detected capacity change from 0 to 64
[   86.109824][ T4644] syz.3.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   87.624013][ T4663] Zero length message leads to an empty skb
[   87.849434][ T4666] loop4: detected capacity change from 0 to 1024
[   88.077716][ T4666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.179050][ T4691] loop2: detected capacity change from 0 to 32768
[   91.400336][ T4691] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   91.437095][ T4691] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.295100][ T4691] syz.2.101 (4691) used greatest stack depth: 21136 bytes left
[   92.362456][ T4185] ocfs2: Unmounting device (7,2) on (node local)
[   92.584293][ T4260] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.844308][ T4260] usb 1-1: Using ep0 maxpacket: 8
[   92.964720][ T4260] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   93.107964][ T4722] loop1: detected capacity change from 0 to 64
[   93.294397][ T4260] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   93.611341][ T4726] loop4: detected capacity change from 0 to 32768
[   93.665734][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.673795][ T4260] usb 1-1: Product: syz
[   93.678756][ T4260] usb 1-1: Manufacturer: syz
[   93.683409][ T4260] usb 1-1: SerialNumber: syz
[   93.692109][ T4260] usb 1-1: config 0 descriptor??
[   93.713376][ T4726] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   93.721871][ T4726] gfs2: fsid=syz:syz: Now mounting FS (format 1802)...
[   93.739757][ T4260] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[   93.748384][ T4726] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   93.748384][ T4726]   inode = 0 19
[   93.748384][ T4726]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[   93.767003][ T4726] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   93.779770][ T4726] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   93.789080][ T4726] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   93.795741][ T4726] gfs2: fsid=syz:syz.0: File system withdrawn
[   93.801865][ T4726] CPU: 1 PID: 4726 Comm: syz.4.109 Not tainted 5.15.189-syzkaller #0
[   93.810025][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   93.820202][ T4726] Call Trace:
[   93.823490][ T4726]  <TASK>
[   93.826428][ T4726]  dump_stack_lvl+0x168/0x230
[   93.831133][ T4726]  ? kobject_uevent_env+0x371/0x890
[   93.836343][ T4726]  ? show_regs_print_info+0x20/0x20
[   93.841555][ T4726]  ? load_image+0x3b0/0x3b0
[   93.846076][ T4726]  ? kobject_uevent_env+0x371/0x890
[   93.851366][ T4726]  ? lockref_put_or_lock+0x6e/0xb0
[   93.856491][ T4726]  gfs2_withdraw+0x111b/0x1460
[   93.861289][ T4726]  ? gfs2_lm+0x220/0x220
[   93.865703][ T4726]  ? __lock_acquire+0x13ad/0x7c60
[   93.870759][ T4726]  ? gfs2_consist_inode_i+0xc0/0xe0
[   93.875974][ T4726]  gfs2_inode_refresh+0xb5e/0xfe0
[   93.881015][ T4726]  ? do_promote+0x71a/0xab0
[   93.885530][ T4726]  ? gfs2_inode_metasync+0xf0/0xf0
[   93.890786][ T4726]  ? __lock_acquire+0x7c60/0x7c60
[   93.895923][ T4726]  inode_go_lock+0x127/0x470
[   93.900622][ T4726]  do_promote+0x741/0xab0
[   93.905073][ T4726]  finish_xmote+0x514/0xb70
[   93.909598][ T4726]  do_xmote+0x7b6/0x1120
[   93.913854][ T4726]  gfs2_glock_nq+0xc7a/0x1550
[   93.918565][ T4726]  init_journal+0xc42/0x2220
[   93.923195][ T4726]  ? end_bio_io_page+0x100/0x100
[   93.928241][ T4726]  ? vsnprintf+0x1905/0x1a00
[   93.932881][ T4726]  ? snprintf+0xd7/0x120
[   93.937144][ T4726]  ? init_journal+0x710/0x2220
[   93.941927][ T4726]  ? vscnprintf+0x80/0x80
[   93.946286][ T4726]  ? gfs2_glock_nq_num+0x17a/0x1b0
[   93.951429][ T4726]  init_inodes+0xdb/0x320
[   93.955786][ T4726]  gfs2_fill_super+0x1701/0x1f50
[   93.960754][ T4726]  ? gfs2_reconfigure+0xcd0/0xcd0
[   93.965797][ T4726]  ? gfs2_glock_nq_num+0x82/0x1b0
[   93.970831][ T4726]  ? preempt_count_add+0x8d/0x190
[   93.975925][ T4726]  ? sb_set_blocksize+0xa5/0xe0
[   93.980791][ T4726]  get_tree_bdev+0x3f1/0x610
[   93.985392][ T4726]  ? gfs2_reconfigure+0xcd0/0xcd0
[   93.990432][ T4726]  gfs2_get_tree+0x4d/0x1e0
[   93.994948][ T4726]  vfs_get_tree+0x88/0x270
[   93.999375][ T4726]  do_new_mount+0x24a/0xa40
[   94.003890][ T4726]  __se_sys_mount+0x2d6/0x3c0
[   94.008664][ T4726]  ? __x64_sys_mount+0xc0/0xc0
[   94.013439][ T4726]  ? lockdep_hardirqs_on+0x94/0x140
[   94.018636][ T4726]  ? __x64_sys_mount+0x1c/0xc0
[   94.023421][ T4726]  do_syscall_64+0x4c/0xa0
[   94.027842][ T4726]  ? clear_bhb_loop+0x30/0x80
[   94.032523][ T4726]  ? clear_bhb_loop+0x30/0x80
[   94.037195][ T4726]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   94.043101][ T4726] RIP: 0033:0x7f5378d4138a
[   94.047519][ T4726] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.067416][ T4726] RSP: 002b:00007f5376fa6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   94.075859][ T4726] RAX: ffffffffffffffda RBX: 00007f5376fa6ef0 RCX: 00007f5378d4138a
[   94.083840][ T4726] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f5376fa6eb0
[   94.091818][ T4726] RBP: 0000200000000400 R08: 00007f5376fa6ef0 R09: 0000000001000004
[   94.099826][ T4726] R10: 0000000001000004 R11: 0000000000000246 R12: 0000200000012500
[   94.107812][ T4726] R13: 00007f5376fa6eb0 R14: 00000000000126ae R15: 0000200000000580
[   94.115810][ T4726]  </TASK>
[   94.119642][ T4726] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5
[   94.684079][    C1] sched: RT throttling activated
[   95.064602][ T4736] loop2: detected capacity change from 0 to 40427
[   95.121845][ T4736] F2FS-fs (loop2): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[   95.158077][ T4232] usb 1-1: USB disconnect, device number 2
[   96.935829][ T4748] loop4: detected capacity change from 0 to 256
[   97.289915][ T4748] FAT-fs (loop4): Directory bread(block 64) failed
[   97.359211][ T4748] FAT-fs (loop4): Directory bread(block 65) failed
[   97.408304][ T4753] netlink: 'syz.3.117': attribute type 17 has an invalid length.
[   97.414250][ T4748] FAT-fs (loop4): Directory bread(block 66) failed
[   97.435801][ T4748] FAT-fs (loop4): Directory bread(block 67) failed
[   97.460854][ T4748] FAT-fs (loop4): Directory bread(block 68) failed
[   97.476743][ T4748] FAT-fs (loop4): Directory bread(block 69) failed
[   97.484699][ T4748] FAT-fs (loop4): Directory bread(block 70) failed
[   97.494738][ T4748] FAT-fs (loop4): Directory bread(block 71) failed
[   97.507910][ T4748] FAT-fs (loop4): Directory bread(block 72) failed
[   97.647484][ T4748] FAT-fs (loop4): Directory bread(block 73) failed
[   98.680908][ T4764] loop1: detected capacity change from 0 to 64
[   99.956551][ T4777] loop3: detected capacity change from 0 to 40427
[  100.044114][ T4777] F2FS-fs (loop3): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  100.493869][ T4772] loop4: detected capacity change from 0 to 4096
[  101.498757][ T4772] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  102.417562][ T4800] loop0: detected capacity change from 0 to 128
[  102.585068][ T4260] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  102.624219][ T4800] FAT-fs (loop0): Directory bread(block 162) failed
[  102.671235][ T4800] FAT-fs (loop0): Directory bread(block 163) failed
[  102.758667][ T4800] FAT-fs (loop0): Directory bread(block 164) failed
[  103.044564][ T4260] usb 4-1: Using ep0 maxpacket: 8
[  103.089839][ T4800] FAT-fs (loop0): Directory bread(block 165) failed
[  103.186599][ T4800] FAT-fs (loop0): Directory bread(block 166) failed
[  103.315646][ T4800] FAT-fs (loop0): Directory bread(block 167) failed
[  103.475762][ T4800] FAT-fs (loop0): Directory bread(block 168) failed
[  103.507885][ T4800] FAT-fs (loop0): Directory bread(block 169) failed
[  103.598190][ T4800] FAT-fs (loop0): Directory bread(block 162) failed
[  103.645824][ T4800] FAT-fs (loop0): Directory bread(block 163) failed
[  103.671764][ T4800] attempt to access beyond end of device
[  103.671764][ T4800] loop0: rw=3, want=232, limit=128
[  103.685591][ T4800] attempt to access beyond end of device
[  103.685591][ T4800] loop0: rw=2051, want=234, limit=128
[  103.734427][ T4260] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  104.114517][ T4260] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  104.294320][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.317410][ T4260] usb 4-1: Product: syz
[  104.321751][ T4260] usb 4-1: Manufacturer: syz
[  104.326893][ T4260] usb 4-1: SerialNumber: syz
[  104.337876][ T4260] usb 4-1: config 0 descriptor??
[  104.385978][ T4260] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  104.530435][ T4823] loop0: detected capacity change from 0 to 512
[  104.600452][ T4246] usb 4-1: USB disconnect, device number 2
[  105.427001][ T4832] loop3: detected capacity change from 0 to 40427
[  105.497903][ T4823] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.137: invalid block
[  105.523283][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  105.534809][ T4832] F2FS-fs (loop3): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  105.566402][ T4823] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.137: invalid indirect mapped block 1024 (level 0)
[  105.582764][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  105.593119][ T4823] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.137: bg 0: block 35: padding at end of block bitmap is not set
[  105.633811][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  105.651783][ T4823] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  105.804802][ T4823] EXT4-fs (loop0): Remounting filesystem read-only
[  105.815603][ T4823] EXT4-fs (loop0): 1 truncate cleaned up
[  105.821314][ T4823] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nombcache,bsddf,. Quota mode: none.
[  105.849765][ T4821] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  106.090253][ T4841] loop1: detected capacity change from 0 to 32768
[  106.134570][ T4841] XFS: ikeep mount option is deprecated.
[  106.221588][ T4841] XFS (loop1): Mounting V5 Filesystem
[  106.327924][ T4852] loop0: detected capacity change from 0 to 1024
[  106.477809][ T4852] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.696722][ T4841] XFS (loop1): Ending clean mount
[  106.709313][ T4841] XFS (loop1): Quotacheck needed: Please wait.
[  106.790067][ T4841] XFS (loop1): Quotacheck: Done.
[  107.185271][ T4183] XFS (loop1): Unmounting Filesystem
[  107.258877][ T4857] loop2: detected capacity change from 0 to 4096
[  107.393947][ T4857] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  109.125850][ T4871] loop3: detected capacity change from 0 to 128
[  109.194206][ T4871] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  109.385461][ T4874] cifs: Unknown parameter 'mode'
[  109.494275][ T4260] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.784296][ T4260] usb 2-1: Using ep0 maxpacket: 8
[  110.004508][ T4260] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  110.080961][ T4185] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  111.261035][ T4260] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  111.344185][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.388237][ T4892] loop0: detected capacity change from 0 to 512
[  111.404123][ T4260] usb 2-1: Product: syz
[  111.427349][ T4260] usb 2-1: Manufacturer: syz
[  111.452423][ T4260] usb 2-1: SerialNumber: syz
[  111.469708][ T4892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  111.520274][ T4260] usb 2-1: config 0 descriptor??
[  111.587869][ T4260] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  111.625792][ T4892] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  111.702331][ T4898] loop2: detected capacity change from 0 to 4096
[  111.724847][ T4892] EXT4-fs (loop0): 1 truncate cleaned up
[  111.730675][ T4892] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,nolazytime,nombcache,,errors=continue. Quota mode: none.
[  111.900438][ T4900] loop4: detected capacity change from 0 to 32768
[  111.926084][ T4898] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  111.974825][ T4900] XFS: ikeep mount option is deprecated.
[  113.358026][ T4900] XFS (loop4): Mounting V5 Filesystem
[  113.587164][ T4900] XFS (loop4): Ending clean mount
[  113.593895][ T4900] XFS (loop4): Quotacheck needed: Please wait.
[  113.617559][ T4316] usb 2-1: USB disconnect, device number 4
[  114.078268][ T4900] XFS (loop4): Quotacheck: Done.
[  114.767487][ T4182] XFS (loop4): Unmounting Filesystem
[  116.444759][   T26] audit: type=1326 audit(1754605544.054:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  116.479183][   T26] audit: type=1326 audit(1754605544.094:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  116.845346][ T4953] input: syz1 as /devices/virtual/input/input5
[  116.971551][   T26] audit: type=1326 audit(1754605544.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  116.993684][    C1] vkms_vblank_simulate: vblank timer overrun
[  118.334811][ T4969] loop1: detected capacity change from 0 to 16
[  118.350003][   T26] audit: type=1326 audit(1754605544.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  118.376521][   T26] audit: type=1326 audit(1754605544.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  118.417645][ T4969] erofs: (device loop1): mounted with root inode @ nid 36.
[  118.426966][ T4969] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  118.436800][ T4969] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  118.538083][ T4260] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.640573][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  118.685264][ T4968] loop4: detected capacity change from 0 to 32768
[  118.794432][ T4260] usb 1-1: Using ep0 maxpacket: 8
[  118.917465][ T4260] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.953610][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.983823][ T4972] loop2: detected capacity change from 0 to 32768
[  119.021290][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  119.083521][ T4260] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  119.308251][ T4972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.175 (4972)
[  119.442651][ T4260] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  119.713330][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.853488][ T4972] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  119.875862][ T4972] BTRFS info (device loop2): using free space tree
[  119.884365][ T4972] BTRFS info (device loop2): has skinny extents
[  120.044478][ T4260] usb 1-1: GET_CAPABILITIES returned 0
[  120.050849][ T4260] usbtmc 1-1:16.0: can't read capabilities
[  120.521958][ T5003] loop1: detected capacity change from 0 to 1024
[  120.542124][ T4260] usb 1-1: USB disconnect, device number 3
[  120.624307][ T5003] EXT4-fs (loop1): Ignoring removed oldalloc option
[  120.648970][ T4972] BTRFS info (device loop2): enabling ssd optimizations
[  120.664338][ T5003] EXT4-fs (loop1): Ignoring removed orlov option
[  121.449694][ T5003] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  121.478267][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.705724][   T26] audit: type=1800 audit(1754605549.324:7): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.179" name="file1" dev="loop1" ino=16 res=0 errno=0
[  121.725984][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.752451][ T5023] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.179: Allocating blocks 497-513 which overlap fs metadata
[  121.792832][ T5023] EXT4-fs (loop1): pa ffff88802651f9a0: logic 256, phys. 353, len 10
[  121.801312][ T5023] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1
[  122.287987][ T4324] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  122.715452][ T5026] loop0: detected capacity change from 0 to 4096
[  122.914465][ T5026] NILFS (loop0): invalid segment: Checksum error in segment payload
[  122.943139][ T5032] loop1: detected capacity change from 0 to 64
[  123.087768][ T5026] NILFS (loop0): trying rollback from an earlier position
[  123.880573][ T5026] NILFS (loop0): recovery complete
[  124.081121][ T5044] loop3: detected capacity change from 0 to 2048
[  124.100042][ T5046] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.084215][ T5044] NILFS (loop3): invalid segment: Inconsistency found
[  125.091071][ T5044] NILFS (loop3): trying rollback from an earlier position
[  125.118394][ T5054] input: syz1 as /devices/virtual/input/input6
[  125.351478][ T5044] NILFS (loop3): recovery complete
[  126.381618][ T5064] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  126.454989][   T26] audit: type=1804 audit(1754605554.064:8): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.188" name="/newroot/29/file0/file1" dev="loop3" ino=12 res=1 errno=0
[  127.194424][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  127.386988][ T5067] loop4: detected capacity change from 0 to 32768
[  127.503713][ T5069] loop3: detected capacity change from 0 to 32768
[  127.544235][ T5069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.194 (5069)
[  127.754786][ T5069] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  127.784797][   T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  127.815076][ T5069] BTRFS info (device loop3): using free space tree
[  127.821776][ T5069] BTRFS info (device loop3): has skinny extents
[  128.538314][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.546775][   T24] usb 1-1: Product: syz
[  128.554673][   T24] usb 1-1: Manufacturer: syz
[  128.559327][   T24] usb 1-1: SerialNumber: syz
[  128.605199][   T24] usb 1-1: config 0 descriptor??
[  128.627642][ T5099] loop2: detected capacity change from 0 to 64
[  128.652826][ T5069] BTRFS info (device loop3): enabling ssd optimizations
[  128.665462][   T24] ch341 1-1:0.0: ch341-uart converter detected
[  128.744297][  T144] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  130.457315][   T24] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  130.658689][ T4246] usb 1-1: USB disconnect, device number 4
[  130.756009][ T4246] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  130.794267][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  130.813986][ T4246] ch341 1-1:0.0: device disconnected
[  131.804763][    T7] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  131.831832][    T7] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping
[  131.874235][    T7] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  131.887744][    T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  131.897146][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.935311][ T5118] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  132.243016][ T5135] loop4: detected capacity change from 0 to 2048
[  132.255706][    T7] ath6kl: Failed to submit usb control message: -71
[  132.289690][    T7] ath6kl: unable to send the bmi data to the device: -71
[  132.384433][ T5141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'.
[  133.068194][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  133.076162][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  133.266845][    T7] ath6kl: Unable to send get target info: -71
[  133.370901][ T5135] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.655756][    T7] ath6kl: Failed to init ath6kl core: -71
[  133.735264][    T7] ath6kl_usb: probe of 3-1:4.0 failed with error -71
[  133.774188][   T26] audit: type=1800 audit(1754605561.364:9): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.206" name="file1" dev="loop4" ino=15 res=0 errno=0
[  133.839275][    T7] usb 3-1: USB disconnect, device number 3
[  134.610781][ T5156] input: syz1 as /devices/virtual/input/input7
[  135.440426][ T5161] loop4: detected capacity change from 0 to 32768
[  135.502824][ T5161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.212 (5161)
[  135.583720][ T5161] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  135.596688][ T5161] BTRFS info (device loop4): using free space tree
[  135.603269][ T5161] BTRFS info (device loop4): has skinny extents
[  137.316021][ T5161] BTRFS info (device loop4): enabling ssd optimizations
[  137.788660][ T5166] loop1: detected capacity change from 0 to 32768
[  137.805287][ T5166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.213 (5166)
[  137.847036][ T5204] loop3: detected capacity change from 0 to 16
[  137.924438][ T5204] erofs: (device loop3): mounted with root inode @ nid 36.
[  137.933339][ T5204] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  137.944780][ T5204] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  138.495991][ T5166] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  138.553070][ T5217] input: syz1 as /devices/virtual/input/input8
[  138.649290][ T5166] BTRFS info (device loop1): metadata ratio 2
[  138.743146][ T5166] BTRFS info (device loop1): turning on flush-on-commit
[  138.764547][ T5166] BTRFS info (device loop1): enabling auto defrag
[  138.794335][ T5166] BTRFS info (device loop1): max_inline at 0
[  138.819573][ T5166] BTRFS info (device loop1): using free space tree
[  138.872549][ T5166] BTRFS info (device loop1): has skinny extents
[  139.192081][ T5243] loop3: detected capacity change from 0 to 1024
[  140.215125][ T5243] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.234661][ T5243] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.765472][ T5166] BTRFS error (device loop1): open_ctree failed: -12
[  141.057035][  T442] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6)
[  141.100653][  T442] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  141.134119][  T442] EXT4-fs (loop3): This should not happen!! Data will be lost
[  141.134119][  T442] 
[  141.208656][  T442] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  141.269551][  T442] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  141.365870][ T5265] loop2: detected capacity change from 0 to 32768
[  141.469556][  T442] EXT4-fs (loop3): This should not happen!! Data will be lost
[  141.469556][  T442] 
[  141.532039][ T5265] XFS (loop2): Mounting V5 Filesystem
[  141.928522][ T5265] XFS (loop2): Ending clean mount
[  141.937103][ T5265] XFS (loop2): Quotacheck needed: Please wait.
[  142.079387][ T5265] XFS (loop2): Quotacheck: Done.
[  143.637883][ T4185] XFS (loop2): Unmounting Filesystem
[  145.081270][ T5305] loop4: detected capacity change from 0 to 1024
[  145.314511][ T5305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.441793][ T5305] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.627035][ T5317] loop2: detected capacity change from 0 to 16
[  145.737694][ T5317] erofs: (device loop2): mounted with root inode @ nid 36.
[  145.746059][ T5317] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  145.797677][ T5317] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  145.978430][ T4326] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 6)
[  146.055029][ T4326] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  146.095875][ T4326] EXT4-fs (loop4): This should not happen!! Data will be lost
[  146.095875][ T4326] 
[  146.155087][ T4326] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8)
[  146.208487][ T4326] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  146.236959][ T4326] EXT4-fs (loop4): This should not happen!! Data will be lost
[  146.236959][ T4326] 
[  146.341724][ T5326] input: syz1 as /devices/virtual/input/input9
[  146.424248][ T5304] loop3: detected capacity change from 0 to 32768
[  146.448398][ T5304] XFS: noikeep mount option is deprecated.
[  146.520190][ T5304] XFS (loop3): Mounting V5 Filesystem
[  146.682789][ T5304] XFS (loop3): Ending clean mount
[  146.700889][ T5304] XFS (loop3): Quotacheck needed: Please wait.
[  146.932496][ T5304] XFS (loop3): Quotacheck: Done.
[  148.537502][ T4186] XFS (loop3): Unmounting Filesystem
[  149.430606][ T5353] loop1: detected capacity change from 0 to 4096
[  149.511037][ T5353] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  150.149562][ T5353] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  150.363608][ T5367] loop4: detected capacity change from 0 to 1024
[  151.231560][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.301150][ T5367] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.146393][ T5399] loop0: detected capacity change from 0 to 128
[  152.286861][ T5401] loop1: detected capacity change from 0 to 512
[  152.307142][ T5399] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback.
[  152.322148][ T5399] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  152.724924][ T5401] EXT4-fs (loop1): Test dummy encryption mode enabled
[  152.731730][ T5401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  152.763735][ T5401] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.267: bad orphan inode 131083
[  152.811673][ T5401] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none.
[  152.874640][ T5219] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  152.975602][ T5401] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  153.174322][ T5219] usb 3-1: Using ep0 maxpacket: 8
[  153.834527][ T5219] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  154.023853][ T5216] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 6)
[  154.046045][ T5429] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  154.186995][ T5219] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  154.219303][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.264558][ T5216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  154.348176][ T5219] usb 3-1: Product: syz
[  154.362920][ T5219] usb 3-1: Manufacturer: syz
[  154.378650][ T5219] usb 3-1: SerialNumber: syz
[  154.450904][ T5219] usb 3-1: config 0 descriptor??
[  154.570847][ T5219] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  154.952832][ T5216] EXT4-fs (loop4): This should not happen!! Data will be lost
[  154.952832][ T5216] 
[  154.967743][ T5216] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8)
[  155.021517][ T5448] trusted_key: encrypted_key: keylen parameter is missing
[  155.133717][ T5216] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  155.180629][ T5216] EXT4-fs (loop4): This should not happen!! Data will be lost
[  155.180629][ T5216] 
[  155.266684][ T5035] usb 3-1: USB disconnect, device number 4
[  155.342187][ T5455] loop0: detected capacity change from 0 to 1024
[  156.273435][  T144] hfsplus: b-tree write err: -5, ino 4
[  156.533989][ T5469] loop2: detected capacity change from 0 to 1024
[  156.597720][ T5472] loop4: detected capacity change from 0 to 256
[  156.656069][ T5472] exfat: Unknown parameter 'zero_size_dir'
[  156.793995][ T5450] loop1: detected capacity change from 0 to 32768
[  156.988344][ T5450] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.278 (5450)
[  157.003719][ T5469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.082790][ T5457] loop3: detected capacity change from 0 to 32768
[  157.474455][ T5469] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.567005][ T5450] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  157.628601][ T5450] BTRFS info (device loop1): using free space tree
[  157.639945][ T5457] XFS (loop3): Mounting V5 Filesystem
[  157.645610][ T5450] BTRFS info (device loop1): has skinny extents
[  157.734800][ T5457] XFS (loop3): Ending clean mount
[  157.772979][ T5457] XFS (loop3): Quotacheck needed: Please wait.
[  157.969168][ T5450] BTRFS info (device loop1): enabling ssd optimizations
[  157.986556][ T5457] XFS (loop3): Quotacheck: Done.
[  158.079139][ T5466] loop0: detected capacity change from 0 to 32768
[  158.099104][   T26] audit: type=1800 audit(1754605585.714:10): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.283" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  158.180955][ T5466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.284 (5466)
[  158.450715][ T5466] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  158.515686][ T5466] BTRFS info (device loop0): using free space tree
[  158.546947][ T5466] BTRFS info (device loop0): has skinny extents
[  158.761743][ T4186] XFS (loop3): Unmounting Filesystem
[  158.811408][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.818984][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  159.525796][ T5526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.906789][ T5466] BTRFS error (device loop0): open_ctree failed: -12
[  160.073376][ T4273] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 6)
[  160.177406][ T4273] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  160.204477][ T4273] EXT4-fs (loop2): This should not happen!! Data will be lost
[  160.204477][ T4273] 
[  160.229602][ T4273] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8)
[  160.262895][ T4273] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  160.302221][ T4273] EXT4-fs (loop2): This should not happen!! Data will be lost
[  160.302221][ T4273] 
[  162.929395][ T5572] netlink: 'syz.3.300': attribute type 20 has an invalid length.
[  163.439440][ T5575] loop1: detected capacity change from 0 to 512
[  163.987059][ T5575] EXT4-fs (loop1): Test dummy encryption mode enabled
[  164.136230][ T5575] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  164.219734][ T5575] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  164.832083][ T5575] EXT4-fs (loop1): 1 truncate cleaned up
[  164.915868][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  165.150201][ T5588] loop0: detected capacity change from 0 to 1024
[  165.276267][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'.
[  165.666535][ T5588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.698517][ T5596] loop4: detected capacity change from 0 to 128
[  165.785580][ T5588] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.878623][ T5596] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4.
[  166.271591][ T5606] cifs: Unknown parameter 'mode'
[  166.379698][ T5595] loop2: detected capacity change from 0 to 32768
[  166.777389][ T5595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.306 (5595)
[  166.838074][ T5595] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  166.870676][ T5595] BTRFS info (device loop2): using free space tree
[  166.890693][ T5595] BTRFS info (device loop2): has skinny extents
[  167.782109][ T5595] BTRFS info (device loop2): enabling ssd optimizations
[  168.089746][ T4470] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 6)
[  168.463828][ T4470] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  168.614670][  T442] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  168.645459][ T4470] EXT4-fs (loop0): This should not happen!! Data will be lost
[  168.645459][ T4470] 
[  168.674574][ T4470] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8)
[  168.716351][ T4470] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  168.733195][ T4470] EXT4-fs (loop0): This should not happen!! Data will be lost
[  168.733195][ T4470] 
[  169.560889][ T5595] syz.2.306 (5595) used greatest stack depth: 20896 bytes left
[  170.675853][ T5665] loop1: detected capacity change from 0 to 1024
[  170.703325][ T5667] loop3: detected capacity change from 0 to 128
[  170.784427][ T5120] Bluetooth: hci0: command 0x0406 tx timeout
[  170.792681][ T5120] Bluetooth: hci4: command 0x0406 tx timeout
[  170.811671][ T5120] Bluetooth: hci2: command 0x0406 tx timeout
[  170.812282][ T5667] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  170.830625][ T5120] Bluetooth: hci1: command 0x0406 tx timeout
[  170.879211][ T5120] Bluetooth: hci3: command 0x0406 tx timeout
[  171.511263][ T5665] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.527818][ T5665] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.828846][ T5683] cifs: Unknown parameter 'mode'
[  171.985058][ T5679] loop4: detected capacity change from 0 to 32768
[  172.217402][ T5679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.326 (5679)
[  172.264989][   T26] audit: type=1326 audit(1754605599.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  172.303442][   T26] audit: type=1326 audit(1754605599.914:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  172.334278][ T4224] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  172.344395][ T5679] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  172.344456][ T5679] BTRFS info (device loop4): turning on sync discard
[  172.344472][ T5679] BTRFS info (device loop4): use no compression
[  172.344492][ T5679] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  172.344507][ T5679] BTRFS info (device loop4): trying to use backup root at mount time
[  172.344522][ T5679] BTRFS info (device loop4): enabling disk space caching
[  172.344536][ T5679] BTRFS info (device loop4): enabling auto defrag
[  172.344549][ T5679] BTRFS info (device loop4): disabling disk space caching
[  172.344583][ T5679] BTRFS info (device loop4): max_inline at 0
[  172.344597][ T5679] BTRFS error (device loop4): cannot disable free space tree
[  172.346909][ T5679] BTRFS error (device loop4): open_ctree failed: -22
[  172.422954][   T26] audit: type=1326 audit(1754605599.914:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febc8229550 code=0x7ffc0000
[  172.606090][ T4787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4787)
[  172.709065][   T26] audit: type=1326 audit(1754605600.234:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  172.709107][   T26] audit: type=1326 audit(1754605600.234:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5685 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc822abe9 code=0x7ffc0000
[  172.738492][ T4224] usb 1-1: Using ep0 maxpacket: 16
[  172.897886][ T4224] usb 1-1: config 0 has no interfaces?
[  172.897939][ T4224] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  172.897958][ T4224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.899728][ T4224] usb 1-1: config 0 descriptor??
[  173.040709][ T4320] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 6)
[  173.041089][ T4320] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  173.041113][ T4320] EXT4-fs (loop1): This should not happen!! Data will be lost
[  173.041113][ T4320] 
[  173.042153][ T4320] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  173.042390][ T4320] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  173.042405][ T4320] EXT4-fs (loop1): This should not happen!! Data will be lost
[  173.042405][ T4320] 
[  173.938063][ T5682] device bridge0 entered promiscuous mode
[  173.938226][ T5682] device vlan2 entered promiscuous mode
[  175.189987][ T4224] usb 1-1: USB disconnect, device number 5
[  175.297470][ T5712] loop0: detected capacity change from 0 to 4096
[  175.319362][ T5712] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  175.914648][ T5716] loop4: detected capacity change from 0 to 32768
[  176.084667][ T5716] XFS: ikeep mount option is deprecated.
[  176.187421][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  176.283796][ T5716] XFS (loop4): Mounting V5 Filesystem
[  176.336244][ T5543] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  176.510683][ T5716] XFS (loop4): Ending clean mount
[  176.535037][ T5716] XFS (loop4): Quotacheck needed: Please wait.
[  176.544753][ T5543] usb 4-1: device descriptor read/64, error -71
[  177.145058][ T5736] loop0: detected capacity change from 0 to 128
[  177.156335][ T5736] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0.
[  177.363164][ T5738] cifs: Unknown parameter 'mode'
[  178.020179][ T5543] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  178.487266][ T5716] XFS (loop4): Quotacheck: Done.
[  178.528583][ T4182] XFS (loop4): Unmounting Filesystem
[  178.704284][ T5543] usb 4-1: device descriptor read/64, error -71
[  178.830572][ T5120] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  178.844495][ T5543] usb usb4-port1: attempt power cycle
[  178.998842][ T5749] loop4: detected capacity change from 0 to 512
[  179.042581][ T5749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  179.122114][ T5749] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.342: bad orphan inode 16
[  179.144655][ T5749] ext4_test_bit(bit=15, block=4) = 0
[  179.169746][ T5749] EXT4-fs (loop4): 1 orphan inode deleted
[  179.175986][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,abort,,errors=continue. Quota mode: none.
[  179.196924][ T5753] loop3: detected capacity change from 0 to 1024
[  179.479767][ T4325] hfsplus: b-tree write err: -5, ino 4
[  179.552793][ T5759] loop2: detected capacity change from 0 to 40427
[  179.594378][ T5120] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  179.607133][ T5120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.615925][ T5759] F2FS-fs (loop2): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  179.649600][ T5120] usb 1-1: Product: syz
[  179.657173][ T5120] usb 1-1: Manufacturer: syz
[  179.665899][ T5120] usb 1-1: SerialNumber: syz
[  179.848178][ T5120] usb 1-1: config 0 descriptor??
[  181.002649][ T5778] loop4: detected capacity change from 0 to 128
[  181.056812][ T5120] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  181.083610][ T5778] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4.
[  181.312070][ T5782] loop3: detected capacity change from 0 to 32768
[  181.319222][ T5782] XFS: ikeep mount option is deprecated.
[  181.602918][ T5786] cifs: Unknown parameter 'mode'
[  182.107099][ T5782] XFS (loop3): Mounting V5 Filesystem
[  182.245434][ T5782] XFS (loop3): Ending clean mount
[  182.287262][ T5782] XFS (loop3): Quotacheck needed: Please wait.
[  182.381545][ T5782] XFS (loop3): Quotacheck: Done.
[  182.394419][ T5540] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  182.594258][ T5540] usb 3-1: device descriptor read/64, error -71
[  182.753864][ T5808] netlink: 'syz.1.358': attribute type 20 has an invalid length.
[  183.146630][ T4186] XFS (loop3): Unmounting Filesystem
[  183.265064][ T5540] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  183.449352][ T5120] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  183.464369][ T5540] usb 3-1: device descriptor read/64, error -71
[  183.482348][ T5120] usb 1-1: USB disconnect, device number 6
[  183.594396][ T5540] usb usb3-port1: attempt power cycle
[  183.611986][ T5813] loop0: detected capacity change from 0 to 1024
[  184.249073][ T5540] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  185.173005][ T5822] loop2: detected capacity change from 0 to 512
[  185.566468][ T5540] usb 3-1: device not accepting address 7, error -71
[  185.628339][ T5822] EXT4-fs (loop2): Ignoring removed bh option
[  185.663117][ T5822] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  185.699082][ T5822] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  185.900525][ T5822] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  185.927820][ T5822] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  185.966599][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none.
[  186.037242][ T5827] loop0: detected capacity change from 0 to 40427
[  186.093542][ T5827] F2FS-fs (loop0): invalid crc value
[  186.114632][ T5827] F2FS-fs (loop0): Found nat_bits in checkpoint
[  186.142301][ T5827] F2FS-fs (loop0): Start checkpoint disabled!
[  186.235790][ T5827] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  186.515440][   T26] audit: type=1800 audit(1754605614.134:16): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.364" name="file1" dev="loop0" ino=10 res=0 errno=0
[  186.535709][    C1] vkms_vblank_simulate: vblank timer overrun
[  186.547270][ T5839] vivid-000: disconnect
[  187.125833][ T5841] loop2: detected capacity change from 0 to 128
[  187.197629][ T5841] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2.
[  187.285510][ T5826] vivid-000: reconnect
[  187.476108][ T5845] cifs: Unknown parameter 'mode'
[  189.120437][    T9] attempt to access beyond end of device
[  189.120437][    T9] loop0: rw=2049, want=40976, limit=40427
[  190.561239][ T5874] input: syz0 as /devices/virtual/input/input10
[  192.482556][ T5867] loop4: detected capacity change from 0 to 32768
[  192.650456][ T5867] XFS (loop4): Mounting V5 Filesystem
[  192.877057][ T5867] XFS (loop4): Ending clean mount
[  192.902019][ T5867] XFS (loop4): Quotacheck needed: Please wait.
[  193.013538][ T5867] XFS (loop4): Quotacheck: Done.
[  193.081127][ T4182] XFS (loop4): Unmounting Filesystem
[  193.596265][ T5891] loop1: detected capacity change from 0 to 40427
[  193.651331][ T5891] F2FS-fs (loop1): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  194.265242][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.278363][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.291084][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.485372][ T5917] binder: 5913:5917 ioctl 4018620d 0 returned -22
[  194.652339][ T5921] binder: 5913:5921 ioctl c018620c 0 returned -14
[  195.403928][ T5932] netlink: 'syz.2.395': attribute type 10 has an invalid length.
[  195.460643][ T5932] device syz_tun entered promiscuous mode
[  195.997175][ T5932] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  196.061804][ T5936] netlink: 'syz.2.395': attribute type 10 has an invalid length.
[  196.249798][ T5936] team0: Device bond0 is already an upper device of the team interface
[  197.232963][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[  198.007318][ T5955] loop3: detected capacity change from 0 to 128
[  198.041991][ T5953] loop2: detected capacity change from 0 to 40427
[  198.090135][ T5953] F2FS-fs (loop2): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  198.267048][ T5955] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none.
[  198.341973][ T5955] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.935088][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[  199.741021][ T5974] netlink: 108 bytes leftover after parsing attributes in process `syz.0.407'.
[  199.872192][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'.
[  200.245847][ T5979] loop1: detected capacity change from 0 to 32768
[  201.069142][ T5979] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  201.077568][ T5979] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  201.085450][ T5979] XFS (loop1): DAX and reflink cannot be used together!
[  202.135509][ T5987] loop0: detected capacity change from 0 to 32768
[  202.399640][ T5987] XFS (loop0): Mounting V5 Filesystem
[  203.190578][ T5987] XFS (loop0): Ending clean mount
[  203.394670][ T5987] XFS (loop0): Quotacheck needed: Please wait.
[  203.783483][ T5987] XFS (loop0): Quotacheck: Done.
[  203.970418][ T4184] XFS (loop0): Unmounting Filesystem
[  204.055167][ T6020] loop3: detected capacity change from 0 to 128
[  204.104387][ T6020] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  204.380415][ T6023] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  204.407145][ T6023] CIFS mount error: No usable UNC path provided in device string!
[  204.407145][ T6023] 
[  204.417495][ T6023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  205.434214][ T6029] netlink: 108 bytes leftover after parsing attributes in process `syz.2.421'.
[  205.475726][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.421'.
[  205.706115][ T6035] input: syz1 as /devices/virtual/input/input11
[  205.970041][ T6043] loop2: detected capacity change from 0 to 128
[  206.065531][ T6043] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none.
[  206.089546][ T6043] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  207.199666][ T6063] loop3: detected capacity change from 0 to 64
[  207.378426][ T6067] netlink: 108 bytes leftover after parsing attributes in process `syz.4.433'.
[  207.407868][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'.
[  208.261725][ T6079] loop2: detected capacity change from 0 to 64
[  208.684434][ T6066] loop3: detected capacity change from 0 to 40427
[  208.778090][ T6066] F2FS-fs (loop3): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  209.975537][ T6098] loop4: detected capacity change from 0 to 512
[  210.226135][ T6098] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback.
[  210.314365][ T6098] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.405175][ T6107] netlink: 108 bytes leftover after parsing attributes in process `syz.0.446'.
[  210.424269][ T6098] capability: warning: `syz.4.442' uses deprecated v2 capabilities in a way that may be insecure
[  211.366869][ T6119] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  212.151013][ T6126] loop0: detected capacity change from 0 to 64
[  213.912291][ T6142] netlink: 108 bytes leftover after parsing attributes in process `syz.0.457'.
[  213.926269][ T6129] loop4: detected capacity change from 0 to 32768
[  213.943882][ T6140] loop2: detected capacity change from 0 to 2048
[  213.997608][ T6140] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  214.091474][ T6147] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.163056][ T6129] attempt to access beyond end of device
[  214.163056][ T6129] loop4: rw=1, want=4701704, limit=32768
[  214.264193][ T6129] metapage_write_end_io: I/O error
[  214.299729][ T6129] ERROR: (device loop4): diWrite: ixpxd invalid
[  214.299729][ T6129] 
[  214.340707][ T6129] ERROR: (device loop4): remounting filesystem as read-only
[  214.446594][ T6152] loop0: detected capacity change from 0 to 64
[  214.467587][ T6129] ERROR: (device loop4): txCommit: 
[  214.467587][ T6129] 
[  214.550138][ T6129] blkno = 8f7c0, nblocks = 1
[  214.564414][ T6129] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  214.564414][ T6129] 
[  214.647422][ T6129] ERROR: (device loop4): dbAllocNext: Corrupt dmap page
[  214.647422][ T6129] 
[  214.663325][ T6129] ialloc: diAlloc returned -5!
[  214.734914][ T4182] attempt to access beyond end of device
[  214.734914][ T4182] loop4: rw=1, want=4701704, limit=32768
[  214.752443][ T4182] metapage_write_end_io: I/O error
[  216.197773][ T6168] loop3: detected capacity change from 0 to 64
[  216.221818][ T6149] loop2: detected capacity change from 0 to 40427
[  216.302697][ T6149] F2FS-fs (loop2): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  216.778512][ T6175] loop1: detected capacity change from 0 to 16
[  217.258586][ T6175] erofs: (device loop1): mounted with root inode @ nid 36.
[  217.268790][ T6175] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  217.285503][ T6175] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  217.558877][ T6182] netlink: 108 bytes leftover after parsing attributes in process `syz.3.468'.
[  217.959663][ T6195] loop2: detected capacity change from 0 to 256
[  218.291740][ T6204] loop0: detected capacity change from 0 to 64
[  220.610092][ T6221] loop3: detected capacity change from 0 to 16
[  220.619653][ T6221] erofs: (device loop3): mounted with root inode @ nid 36.
[  220.628269][ T6221] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  220.638146][ T6221] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  220.875556][ T6224] netlink: 108 bytes leftover after parsing attributes in process `syz.0.481'.
[  220.964342][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  221.798646][ T6235] loop3: detected capacity change from 0 to 128
[  221.810006][ T6235] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  221.887610][ T6233] loop2: detected capacity change from 0 to 40427
[  221.981075][ T6233] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[  222.051602][ T6237] CIFS mount error: No usable UNC path provided in device string!
[  222.051602][ T6237] 
[  222.061854][ T6237] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  226.447072][ T6265] input: syz1 as /devices/virtual/input/input12
[  226.692284][ T6269] netlink: 108 bytes leftover after parsing attributes in process `syz.1.494'.
[  226.774500][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[  226.915434][ T6275] loop3: detected capacity change from 0 to 16
[  226.924563][ T6275] erofs: (device loop3): mounted with root inode @ nid 36.
[  226.932962][ T6275] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  226.962574][ T6275] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  227.364278][ T6280] loop4: detected capacity change from 0 to 32768
[  227.405945][ T6280] XFS: ikeep mount option is deprecated.
[  227.434751][ T5540] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  227.490992][ T6282] loop0: detected capacity change from 0 to 4096
[  227.508172][ T6280] XFS (loop4): Mounting V5 Filesystem
[  227.569280][ T6280] XFS (loop4): Ending clean mount
[  227.576527][ T6280] XFS (loop4): Quotacheck needed: Please wait.
[  227.614572][ T6280] XFS (loop4): Quotacheck: Done.
[  227.667441][ T6282] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  227.674916][ T5540] usb 2-1: Using ep0 maxpacket: 8
[  228.100670][ T4182] XFS (loop4): Unmounting Filesystem
[  228.107752][ T5540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.374400][ T5540] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  228.393849][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.440556][ T6300] loop3: detected capacity change from 0 to 512
[  228.452853][ T5540] usb 2-1: Product: syz
[  228.469638][ T5540] usb 2-1: Manufacturer: syz
[  228.503213][ T5540] usb 2-1: SerialNumber: syz
[  228.549489][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  228.573123][ T5540] usb 2-1: config 0 descriptor??
[  228.580088][ T6300] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback.
[  228.610540][ T6300] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.623014][ T5540] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  229.063206][ T5546] usb 2-1: USB disconnect, device number 5
[  230.284406][ T4173] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  230.564384][ T4173] usb 5-1: Using ep0 maxpacket: 8
[  230.819820][ T4173] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  230.839435][ T4173] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  230.845438][ T6325] netlink: 108 bytes leftover after parsing attributes in process `syz.0.507'.
[  230.855202][ T4173] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  230.879295][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[  230.914125][ T4173] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.067846][ T4173] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  231.093622][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.149728][ T6334] input: syz1 as /devices/virtual/input/input13
[  232.394352][ T4173] usb 5-1: GET_CAPABILITIES returned 0
[  232.400162][ T4173] usbtmc 5-1:16.0: can't read capabilities
[  232.456621][ T4288] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  233.151947][ T4173] usb 5-1: USB disconnect, device number 2
[  234.204292][ T4288] usb 1-1: unable to read config index 0 descriptor/start: -71
[  234.212079][ T4288] usb 1-1: can't read configurations, error -71
[  234.560740][ T5540] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  234.835717][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'.
[  236.024959][ T6373] input: syz1 as /devices/virtual/input/input14
[  236.304329][ T5540] usb 4-1: Using ep0 maxpacket: 8
[  236.488446][ T6383] loop4: detected capacity change from 0 to 16
[  236.553792][ T6380] loop2: detected capacity change from 0 to 40427
[  236.693196][ T6380] F2FS-fs (loop2): invalid crc value
[  236.710122][ T6380] F2FS-fs (loop2): Found nat_bits in checkpoint
[  236.803253][ T5540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.820534][ T6383] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  236.843378][ T6380] F2FS-fs (loop2): Start checkpoint disabled!
[  236.916191][ T6380] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  236.970375][ T5540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.385051][   T26] audit: type=1800 audit(1754605664.994:17): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.524" name="file1" dev="loop2" ino=10 res=0 errno=0
[  237.470159][ T6380] vivid-004: disconnect
[  237.476137][ T5540] usb 4-1: string descriptor 0 read error: -71
[  237.566080][ T5540] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  237.575897][ T5540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.679829][ T5540] usb 4-1: config 0 descriptor??
[  237.704407][ T5540] usb 4-1: can't set config #0, error -71
[  237.711331][ T5540] usb 4-1: USB disconnect, device number 6
[  238.506320][ T4247] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  238.551317][ T6378] vivid-004: reconnect
[  239.074773][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.201304][ T4247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.338628][ T4247] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  239.447272][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.733733][ T4325] attempt to access beyond end of device
[  239.733733][ T4325] loop2: rw=2049, want=40976, limit=40427
[  239.753920][ T6413] loop4: detected capacity change from 0 to 32768
[  239.775510][ T4247] usb 1-1: config 0 descriptor??
[  239.796274][ T6413] XFS: ikeep mount option is deprecated.
[  240.073464][ T6413] XFS (loop4): Mounting V5 Filesystem
[  240.585929][ T4247] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  240.593970][ T4247] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  240.605957][ T4247] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  240.635820][ T4247] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  240.643373][ T4247] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  240.784663][ T4247] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving
[  240.873407][ T6413] XFS (loop4): Ending clean mount
[  241.574341][ T5540] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  241.611401][ T4247] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  241.624118][    C0] raw-gadget.0 gadget: ignoring, device is not running
[  241.631166][ T4247] usb 1-1: USB disconnect, device number 9
[  241.650742][ T6413] XFS (loop4): Quotacheck needed: Please wait.
[  241.984970][ T5540] usb 2-1: device descriptor read/64, error -32
[  242.192239][ T6413] XFS (loop4): Quotacheck: Done.
[  242.267622][ T4182] XFS (loop4): Unmounting Filesystem
[  242.496892][ T5540] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  242.538661][ T6442] fido_id[6442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  242.833020][ T6449] loop3: detected capacity change from 0 to 16
[  242.844351][ T5540] usb 2-1: Using ep0 maxpacket: 8
[  242.858243][ T6449] erofs: (device loop3): mounted with root inode @ nid 36.
[  242.989299][ T5540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.009320][ T5540] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  243.110898][ T6454] loop2: detected capacity change from 0 to 164
[  243.156898][ T6444] loop0: detected capacity change from 0 to 32768
[  243.435662][ T5540] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  243.484603][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.494604][ T5540] usb 2-1: Product: syz
[  243.498850][ T5540] usb 2-1: Manufacturer: syz
[  243.503608][ T5540] usb 2-1: SerialNumber: syz
[  243.965797][ T5540] usb 2-1: config 0 descriptor??
[  244.055815][ T5540] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  245.196697][ T5544] usb 2-1: USB disconnect, device number 7
[  245.692922][ T6474] loop4: detected capacity change from 0 to 32768
[  245.724749][ T6474] XFS: ikeep mount option is deprecated.
[  245.818648][ T6474] XFS (loop4): Mounting V5 Filesystem
[  246.545538][ T6474] XFS (loop4): Ending clean mount
[  246.578635][ T6474] XFS (loop4): Quotacheck needed: Please wait.
[  246.646106][ T6474] XFS (loop4): Quotacheck: Done.
[  247.210697][ T6502] loop2: detected capacity change from 0 to 512
[  247.224183][ T4247] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  247.232729][ T4182] XFS (loop4): Unmounting Filesystem
[  247.863534][ T6502] EXT4-fs (loop2): Test dummy encryption mode enabled
[  247.901740][ T6502] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  247.958063][ T6502] EXT4-fs (loop2): 1 truncate cleaned up
[  247.963773][ T6502] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  248.048831][ T6511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'.
[  248.067996][ T6510] loop3: detected capacity change from 0 to 4096
[  248.078748][ T6511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'.
[  248.094727][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.559'.
[  248.214168][ T4247] usb 2-1: Using ep0 maxpacket: 8
[  248.253293][ T6510] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  248.346066][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'.
[  248.435734][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.909842][ T4247] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  248.920627][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.942439][ T4247] usb 2-1: config 0 descriptor??
[  249.909590][ T4247] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  250.632527][ T4247] usb 2-1: USB disconnect, device number 8
[  250.705786][ T4186] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  250.780548][ T6525] loop2: detected capacity change from 0 to 764
[  253.304752][ T6543] input: syz1 as /devices/virtual/input/input15
[  253.621293][ T6525] Symlink component flag not implemented
[  253.646673][ T6525] Symlink component flag not implemented (101)
[  254.170672][ T6558] fuse: Unknown parameter 'use00000000000000000000'
[  255.875112][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  256.876141][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  257.430658][ T6578] mmap: syz.4.580 (6578) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  259.152219][ T6596] loop0: detected capacity change from 0 to 512
[  259.951118][ T6596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  259.989313][ T6596] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.431977][ T6682] loop0: detected capacity change from 0 to 1024
[  266.879794][ T6682] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  266.887152][ T6682] EXT4-fs (loop0): Ignoring removed bh option
[  266.893453][ T6682] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.119131][ T6682] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  267.146231][    C0] vkms_vblank_simulate: vblank timer overrun
[  267.481558][ T6677] loop1: detected capacity change from 0 to 32768
[  268.001171][ T6697] loop1: detected capacity change from 0 to 32768
[  268.054911][ T6697] XFS: ikeep mount option is deprecated.
[  268.130779][ T6697] XFS (loop1): Mounting V5 Filesystem
[  268.219189][ T6697] XFS (loop1): Ending clean mount
[  268.226361][ T6697] XFS (loop1): Quotacheck needed: Please wait.
[  268.550010][ T6697] XFS (loop1): Quotacheck: Done.
[  268.575405][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'.
[  268.607784][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.724237][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.848894][ T6719] loop3: detected capacity change from 0 to 512
[  268.859675][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.881988][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.947267][ T6719] EXT4-fs (loop3): Test dummy encryption mode enabled
[  268.988139][ T4183] XFS (loop1): Unmounting Filesystem
[  268.998626][ T6719] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  269.057370][ T6719] EXT4-fs (loop3): 1 truncate cleaned up
[  269.113900][ T6719] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  269.361951][ T6712] loop2: detected capacity change from 0 to 40427
[  269.510657][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'.
[  269.969289][ T6712] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  270.310724][ T6712] F2FS-fs (loop2): invalid crc value
[  270.467201][ T6712] F2FS-fs (loop2): Found nat_bits in checkpoint
[  270.894836][ T6739] loop3: detected capacity change from 0 to 2048
[  272.101542][ T6732] device syzkaller0 entered promiscuous mode
[  272.128601][ T4176] GPT:first_usable_lbas don't match.
[  272.137270][ T4176] GPT:34 != 290
[  272.154517][ T4176] GPT: Use GNU Parted to correct GPT errors.
[  272.176350][ T4176]  loop3: p1 p2 p3
[  272.232353][ T6739] GPT:first_usable_lbas don't match.
[  272.238009][ T6739] GPT:34 != 290
[  272.241481][ T6739] GPT: Use GNU Parted to correct GPT errors.
[  272.247665][ T6739]  loop3: p1 p2 p3
[  272.440699][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  272.444858][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  272.467501][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  272.654037][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  272.667293][ T4787] udevd[4787]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  272.872382][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  273.175867][ T6762] loop1: detected capacity change from 0 to 32768
[  273.182831][ T6762] XFS: ikeep mount option is deprecated.
[  273.509492][ T6762] XFS (loop1): Mounting V5 Filesystem
[  275.545661][ T6762] XFS (loop1): Ending clean mount
[  275.552373][ T6762] XFS (loop1): Quotacheck needed: Please wait.
[  275.570586][   T26] audit: type=1326 audit(1754605703.184:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  275.640449][   T26] audit: type=1326 audit(1754605703.184:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  275.790041][   T26] audit: type=1326 audit(1754605703.184:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  275.823188][   T26] audit: type=1326 audit(1754605703.184:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  275.859809][   T26] audit: type=1326 audit(1754605703.184:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  275.883917][ T6762] XFS (loop1): Quotacheck: Done.
[  276.496061][   T26] audit: type=1326 audit(1754605703.234:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  276.602208][   T26] audit: type=1326 audit(1754605703.234:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdebe6a3be9 code=0x7ffc0000
[  276.816799][ T4183] XFS (loop1): Unmounting Filesystem
[  280.584047][ T6837] loop2: detected capacity change from 0 to 32768
[  280.625156][ T6837] XFS: ikeep mount option is deprecated.
[  280.749674][ T6837] XFS (loop2): Mounting V5 Filesystem
[  280.880852][ T6837] XFS (loop2): Ending clean mount
[  280.895884][ T6837] XFS (loop2): Quotacheck needed: Please wait.
[  280.934026][ T6836] loop0: detected capacity change from 0 to 16
[  281.010257][ T6836] erofs: (device loop0): mounted with root inode @ nid 36.
[  281.046031][ T6837] XFS (loop2): Quotacheck: Done.
[  282.008582][ T6829] loop3: detected capacity change from 0 to 32768
[  282.153867][ T6829] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.646 (6829)
[  282.186244][ T4185] XFS (loop2): Unmounting Filesystem
[  282.321826][ T6829] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  282.387841][ T6829] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  282.432508][ T6829] BTRFS info (device loop3): use zstd compression, level 3
[  282.453529][ T6829] BTRFS info (device loop3): using free space tree
[  282.516036][ T6829] BTRFS info (device loop3): has skinny extents
[  283.090268][ T6893] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16)
[  283.097378][ T6893] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  283.111659][ T6898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.114011][ T6890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  283.127942][ T6890] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  283.293502][ T6893] vhci_hcd vhci_hcd.0: Device attached
[  283.309996][ T6890] vhci_hcd vhci_hcd.0: Device attached
[  283.343556][ T6894] vhci_hcd: connection closed
[  283.488187][ T6891] vhci_hcd: connection closed
[  283.672822][ T4247] usb 35-2: new low-speed USB device number 2 using vhci_hcd
[  284.313570][ T4326] vhci_hcd: stop threads
[  284.319082][ T6829] BTRFS error (device loop3): open_ctree failed: -12
[  284.372021][ T4326] vhci_hcd: release socket
[  284.396148][ T6916] loop1: detected capacity change from 0 to 64
[  284.412641][ T4326] vhci_hcd: disconnect device
[  284.421204][ T4326] vhci_hcd: stop threads
[  284.486827][ T4326] vhci_hcd: release socket
[  284.781322][ T4326] vhci_hcd: disconnect device
[  285.741453][ T6920] loop4: detected capacity change from 0 to 32768
[  285.814797][ T6920] XFS: ikeep mount option is deprecated.
[  286.503846][ T6920] XFS (loop4): Mounting V5 Filesystem
[  286.900668][ T6920] XFS (loop4): Ending clean mount
[  286.909300][ T6920] XFS (loop4): Quotacheck needed: Please wait.
[  287.045333][ T6920] XFS (loop4): Quotacheck: Done.
[  288.088510][ T4182] XFS (loop4): Unmounting Filesystem
[  289.567856][ T4247] vhci_hcd: vhci_device speed not set
[  289.709826][ T6953] loop1: detected capacity change from 0 to 32768
[  290.041811][   T26] audit: type=1326 audit(1754605717.654:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c5d41be9 code=0x7ffc0000
[  290.184918][   T26] audit: type=1326 audit(1754605717.654:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f78c5d41be9 code=0x7ffc0000
[  290.605084][   T26] audit: type=1326 audit(1754605717.654:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c5d41be9 code=0x7ffc0000
[  291.179273][ T4224] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  291.994142][ T4224] usb 1-1: Using ep0 maxpacket: 8
[  292.017957][ T6995] kvm: emulating exchange as write
[  292.114382][ T4224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.166106][ T4224] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  293.182903][ T4224] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  293.196912][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.208885][ T4224] usb 1-1: Product: syz
[  293.208905][ T4224] usb 1-1: Manufacturer: syz
[  293.208919][ T4224] usb 1-1: SerialNumber: syz
[  293.224876][ T4224] usb 1-1: config 0 descriptor??
[  293.265267][ T4224] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  295.346109][ T4224] usb 1-1: USB disconnect, device number 10
[  297.542207][ T7043] loop4: detected capacity change from 0 to 2048
[  297.601874][ T7043] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  297.614906][ T7043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.904567][ T4354] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  300.474144][ T4354] usb 2-1: Using ep0 maxpacket: 8
[  300.480519][ T7073] loop3: detected capacity change from 0 to 4096
[  300.538455][ T7073] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  300.634417][ T4354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.654688][ T4354] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  301.864259][ T4354] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  301.890619][ T4354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.939641][ T4354] usb 2-1: Product: syz
[  301.943852][ T4354] usb 2-1: Manufacturer: syz
[  301.983483][ T4354] usb 2-1: SerialNumber: syz
[  302.006739][ T4354] usb 2-1: config 0 descriptor??
[  302.065794][ T4354] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  302.084547][ T7084] loop3: detected capacity change from 0 to 8192
[  303.164814][ T7093] vivid-001: =================  START STATUS  =================
[  303.173074][ T7093] vivid-001: Test Pattern: 75% Colorbar
[  303.243260][ T7093] vivid-001: Fill Percentage of Frame: 100
[  303.258516][ T4354] usb 2-1: USB disconnect, device number 9
[  303.295657][ T7093] vivid-001: Horizontal Movement: No Movement
[  303.314283][ T7093] vivid-001: Vertical Movement: No Movement
[  303.341819][ T7093] vivid-001: OSD Text Mode: All
[  303.384160][ T7093] vivid-001: Show Border: false
[  303.389068][ T7093] vivid-001: Show Square: false
[  303.421552][ T7093] vivid-001: Sensor Flipped Horizontally: false
[  303.458931][ T7093] vivid-001: Sensor Flipped Vertically: false
[  303.477320][ T7093] vivid-001: Insert SAV Code in Image: false
[  303.497726][ T7093] vivid-001: Insert EAV Code in Image: false
[  303.503763][ T7093] vivid-001: Reduced Framerate: false
[  303.587367][ T7093] vivid-001: Enable Capture Cropping: true
[  303.587434][ T7093] vivid-001: Enable Capture Composing: true
[  303.587454][ T7093] vivid-001: Enable Capture Scaler: true
[  303.587475][ T7093] vivid-001: Timestamp Source: End of Frame
[  303.587496][ T7093] vivid-001: Colorspace: Rec. 709
[  303.587515][ T7093] vivid-001: Transfer Function: Default
[  303.587536][ T7093] vivid-001: Y'CbCr Encoding: Default
[  303.587553][ T7093] vivid-001: HSV Encoding: Hue 0-179
[  303.587573][ T7093] vivid-001: Quantization: Default
[  303.587592][ T7093] vivid-001: Apply Alpha To Red Only: false
[  303.587611][ T7093] vivid-001: Standard Aspect Ratio: 4x3
[  303.587630][ T7093] vivid-001: DV Timings Signal Mode: Current DV Timings
[  303.587650][ T7093] vivid-001: DV Timings: 640x480p59 inactive
[  303.587769][ T7093] vivid-001: DV Timings Aspect Ratio: Source Width x Height
[  303.587790][ T7093] vivid-001: Maximum EDID Blocks: 2
[  303.587811][ T7093] vivid-001: Limited RGB Range (16-235): true
[  303.587831][ T7093] vivid-001: Rx RGB Quantization Range: Automatic
[  303.587851][ T7093] vivid-001: Power Present: 0x00000001
[  303.587879][ T7093] tpg source WxH: 1280x720 (Y'CbCr)
[  303.587910][ T7093] tpg field: 1
[  303.587916][ T7093] tpg crop: 1280x720@0x0
[  303.587928][ T7093] tpg compose: 1280x720@0x0
[  303.587939][ T7093] tpg colorspace: 3
[  303.587946][ T7093] tpg transfer function: 0/0
[  303.587954][ T7093] tpg Y'CbCr encoding: 0/0
[  303.587963][ T7093] tpg quantization: 0/0
[  303.587971][ T7093] tpg RGB range: 0/1
[  303.587980][ T7093] vivid-001: ==================  END STATUS  ==================
[  304.536804][ T7097] loop0: detected capacity change from 0 to 32768
[  304.796909][ T7097] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  304.815802][ T7097] BTRFS info (device loop0): turning on sync discard
[  304.822615][ T7097] BTRFS info (device loop0): use no compression
[  304.849973][ T7097] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  304.876608][ T7097] BTRFS info (device loop0): trying to use backup root at mount time
[  304.904183][ T7097] BTRFS info (device loop0): enabling disk space caching
[  304.921536][ T7097] BTRFS info (device loop0): enabling auto defrag
[  304.941811][ T7097] BTRFS info (device loop0): disabling disk space caching
[  304.956283][ T7118] loop4: detected capacity change from 0 to 4096
[  304.962821][ T7097] BTRFS info (device loop0): max_inline at 0
[  304.983043][ T7097] BTRFS error (device loop0): cannot disable free space tree
[  304.995145][ T7097] BTRFS error (device loop0): open_ctree failed: -22
[  305.041772][ T7118] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  305.290673][ T7118] ntfs3: loop4: Failed to load $Extend.
[  305.941884][ T7133] loop1: detected capacity change from 0 to 512
[  306.021567][ T7131] loop4: detected capacity change from 0 to 40427
[  306.030770][ T7133] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  306.044413][ T7133] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.111159][ T7131] F2FS-fs (loop4): invalid crc value
[  306.130958][ T7131] F2FS-fs (loop4): Found nat_bits in checkpoint
[  306.168577][ T7131] F2FS-fs (loop4): Start checkpoint disabled!
[  306.180418][ T7131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  306.268927][   T26] audit: type=1800 audit(1754605733.884:28): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.721" name="file1" dev="loop4" ino=10 res=0 errno=0
[  306.295909][ T7140] vivid-008: disconnect
[  306.619475][ T7130] vivid-008: reconnect
[  306.678343][ T4324] attempt to access beyond end of device
[  306.678343][ T4324] loop4: rw=2049, want=40976, limit=40427
[  307.182737][ T7151] loop0: detected capacity change from 0 to 512
[  307.291768][ T7151] EXT4-fs (loop0): Test dummy encryption mode enabled
[  307.335344][ T7151] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  307.592383][ T7151] EXT4-fs (loop0): 1 truncate cleaned up
[  307.794249][ T7151] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  308.488173][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'.
[  309.086125][ T7181] loop1: detected capacity change from 0 to 40427
[  309.185057][ T7181] F2FS-fs (loop1): invalid crc value
[  309.320250][ T7181] F2FS-fs (loop1): Found nat_bits in checkpoint
[  309.358746][ T7181] F2FS-fs (loop1): Start checkpoint disabled!
[  309.377001][ T7181] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  309.463630][   T26] audit: type=1800 audit(1754605737.074:29): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="file1" dev="loop1" ino=10 res=0 errno=0
[  309.487170][ T7193] vivid-002: disconnect
[  309.743929][ T7180] vivid-002: reconnect
[  309.799284][ T7179] loop4: detected capacity change from 0 to 32768
[  309.847584][ T7187] loop0: detected capacity change from 0 to 4096
[  309.870418][ T7179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.734 (7179)
[  309.960622][ T7179] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  309.969652][ T7179] BTRFS info (device loop4): using free space tree
[  309.976889][ T7179] BTRFS info (device loop4): has skinny extents
[  310.028235][ T4320] attempt to access beyond end of device
[  310.028235][ T4320] loop1: rw=2049, want=40976, limit=40427
[  310.577803][ T7179] BTRFS info (device loop4): enabling ssd optimizations
[  312.983781][ T7241] loop3: detected capacity change from 0 to 512
[  313.132979][ T7241] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  313.214247][ T7241] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.524350][ T5543] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  313.715020][ T7257] loop4: detected capacity change from 0 to 512
[  313.766951][ T7257] FAT-fs (loop4): Unrecognized mount option "allow_utime=000000Äò000000000000002" or missing value
[  313.807794][ T7255] loop3: detected capacity change from 0 to 40427
[  313.820421][ T7255] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  314.708242][ T5543] usb 2-1: Using ep0 maxpacket: 8
[  314.824226][ T5543] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.824264][ T5543] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  315.426584][ T5543] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  315.440383][ T5543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.449398][ T5543] usb 2-1: Product: syz
[  315.453729][ T5543] usb 2-1: Manufacturer: syz
[  315.459299][ T5543] usb 2-1: SerialNumber: syz
[  315.470532][ T5543] usb 2-1: config 0 descriptor??
[  315.515851][ T5543] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  315.613939][ T7278] loop3: detected capacity change from 0 to 512
[  315.623412][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'.
[  315.728952][ T7287] loop2: detected capacity change from 0 to 2048
[  315.806011][ T7278] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  315.904048][ T7291] ubi31: attaching mtd0
[  315.924820][ T7291] ubi31: scanning is finished
[  315.929705][ T7291] ubi31: empty MTD device detected
[  316.288591][ T7291] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  316.297168][ T7291] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  316.304829][ T7291] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  316.312074][ T7291] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  316.319805][ T7291] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  316.326728][ T7291] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  316.334831][ T7291] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1107726356
[  316.345116][ T7291] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  316.360521][ T7292] ubi31: background thread "ubi_bgt31d" started, PID 7292
[  316.382750][ T7278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  316.521091][ T7278] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.760: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  317.307158][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.313685][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.465816][ T5542] usb 2-1: USB disconnect, device number 10
[  317.748789][ T4186] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  317.890244][ T7312] loop0: detected capacity change from 0 to 4096
[  317.977804][ T7312] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  318.755927][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  319.098350][ T7334] loop0: detected capacity change from 0 to 512
[  319.224850][ T7334] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  319.358868][ T7334] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.366196][ T7321] loop3: detected capacity change from 0 to 40427
[  319.431207][   T26] audit: type=1800 audit(1754605747.044:30): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.773" name="file1" dev="loop0" ino=15 res=0 errno=0
[  319.486136][ T7321] F2FS-fs (loop3): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  319.892414][ T7343] loop0: detected capacity change from 0 to 40427
[  320.008876][ T7343] F2FS-fs (loop0): invalid crc value
[  320.031054][ T7343] F2FS-fs (loop0): Found nat_bits in checkpoint
[  320.070478][ T7343] F2FS-fs (loop0): Start checkpoint disabled!
[  320.106825][ T7343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  320.227807][ T7349] vivid-000: disconnect
[  320.464351][ T7342] vivid-000: reconnect
[  320.470856][ T7347] loop1: detected capacity change from 0 to 512
[  320.494880][ T7347] EXT4-fs (loop1): Test dummy encryption mode enabled
[  320.501694][ T7347] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  320.651493][ T7347] EXT4-fs (loop1): 1 truncate cleaned up
[  320.679991][ T7347] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  320.863235][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.776'.
[  322.622040][ T7374] nvme_fabrics: missing parameter 'transport=%s'
[  322.629195][ T7374] nvme_fabrics: missing parameter 'nqn=%s'
[  322.822066][ T7377] loop2: detected capacity change from 0 to 512
[  323.274453][ T4316] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  323.554259][ T4316] usb 1-1: Using ep0 maxpacket: 8
[  323.684874][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.738270][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  324.044901][ T4316] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  324.075714][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.151854][ T4316] usb 1-1: Product: syz
[  324.172054][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.211758][ T7377] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  324.251626][ T4316] usb 1-1: Manufacturer: syz
[  324.304286][ T7377] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.783: bad orphan inode 15
[  324.317376][ T7377] ext4_test_bit(bit=14, block=18) = 1
[  324.322908][ T7377] is_bad_inode(inode)=0
[  324.327226][ T7377] NEXT_ORPHAN(inode)=1023
[  324.331740][ T7377] max_ino=32
[  324.335084][ T7377] i_nlink=0
[  324.341871][ T7377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  324.352969][ T7377] ext2 filesystem being mounted at /166/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  324.376325][ T4316] usb 1-1: SerialNumber: syz
[  324.529629][ T4316] usb 1-1: config 0 descriptor??
[  324.657270][ T7382] syz.4.780 (7382) used greatest stack depth: 20800 bytes left
[  324.685245][ T4316] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  324.837721][ T7386] device bridge_slave_1 left promiscuous mode
[  324.846782][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.307756][ T7390] loop2: detected capacity change from 0 to 40427
[  325.431701][ T7390] F2FS-fs (loop2): invalid crc value
[  325.449204][ T7390] F2FS-fs (loop2): Found nat_bits in checkpoint
[  325.486217][ T7390] F2FS-fs (loop2): Start checkpoint disabled!
[  325.505298][ T7390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  325.670133][ T7390] vivid-004: disconnect
[  326.464432][ T5543] usb 1-1: USB disconnect, device number 11
[  326.467374][ T7389] vivid-004: reconnect
[  327.326707][ T7406] loop0: detected capacity change from 0 to 512
[  327.370907][ T7408] loop3: detected capacity change from 0 to 256
[  327.445272][ T7406] EXT4-fs (loop0): Test dummy encryption mode enabled
[  327.452415][ T7406] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  327.485745][ T7408] FAT-fs (loop3): Directory bread(block 64) failed
[  327.492324][ T7408] FAT-fs (loop3): Directory bread(block 65) failed
[  327.536401][ T7408] FAT-fs (loop3): Directory bread(block 66) failed
[  327.542985][ T7408] FAT-fs (loop3): Directory bread(block 67) failed
[  327.552956][ T7406] EXT4-fs (loop0): 1 truncate cleaned up
[  327.584309][ T7406] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  327.614238][ T7408] FAT-fs (loop3): Directory bread(block 68) failed
[  327.620824][ T7408] FAT-fs (loop3): Directory bread(block 69) failed
[  327.657557][ T7408] FAT-fs (loop3): Directory bread(block 70) failed
[  327.665660][ T7408] FAT-fs (loop3): Directory bread(block 71) failed
[  327.672267][ T7408] FAT-fs (loop3): Directory bread(block 72) failed
[  327.679155][ T7408] FAT-fs (loop3): Directory bread(block 73) failed
[  327.838922][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'.
[  330.131941][ T7427] loop0: detected capacity change from 0 to 1024
[  331.258036][ T7427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  331.565461][ T7440] loop3: detected capacity change from 0 to 40427
[  331.574640][ T7444] overlayfs: missing 'lowerdir'
[  331.791120][ T7440] F2FS-fs (loop3): invalid crc value
[  331.854036][ T7440] F2FS-fs (loop3): Found nat_bits in checkpoint
[  331.891763][ T7440] F2FS-fs (loop3): Start checkpoint disabled!
[  332.076530][ T7440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  332.159153][ T7457] vivid-006: disconnect
[  332.175028][ T7437] vivid-006: reconnect
[  332.180028][ T7456] loop4: detected capacity change from 0 to 512
[  332.242836][ T7456] EXT4-fs (loop4): Test dummy encryption mode enabled
[  332.259359][ T7456] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  332.301749][ T7456] EXT4-fs (loop4): 1 truncate cleaned up
[  332.334345][ T7456] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  332.580190][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'.
[  333.174288][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  333.751587][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.838220][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.848795][ T4316] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  333.858125][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.872454][ T4316] usb 5-1: config 0 descriptor??
[  333.886040][ T7477] loop2: detected capacity change from 0 to 1024
[  334.081201][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  334.747544][ T4316] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  334.914829][ T7487] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  335.112103][ T7490] loop1: detected capacity change from 0 to 256
[  335.129152][ T4316] usb 5-1: USB disconnect, device number 3
[  335.359409][ T7490] FAT-fs (loop1): Directory bread(block 64) failed
[  335.388844][ T7490] FAT-fs (loop1): Directory bread(block 65) failed
[  335.418952][ T7490] FAT-fs (loop1): Directory bread(block 66) failed
[  335.434846][ T7490] FAT-fs (loop1): Directory bread(block 67) failed
[  335.480047][ T7490] FAT-fs (loop1): Directory bread(block 68) failed
[  335.493362][ T7491] fido_id[7491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  335.514392][ T7490] FAT-fs (loop1): Directory bread(block 69) failed
[  335.524672][ T7490] FAT-fs (loop1): Directory bread(block 70) failed
[  335.534272][ T7490] FAT-fs (loop1): Directory bread(block 71) failed
[  335.564839][ T7490] FAT-fs (loop1): Directory bread(block 72) failed
[  335.594260][ T7490] FAT-fs (loop1): Directory bread(block 73) failed
[  335.629953][ T7495] loop4: detected capacity change from 0 to 128
[  336.448328][ T7501] Device name cannot be null; rc = [-22]
[  337.853527][ T7514] loop4: detected capacity change from 0 to 512
[  338.046116][ T7516] loop0: detected capacity change from 0 to 32768
[  338.104888][ T7516] XFS: ikeep mount option is deprecated.
[  338.119069][ T7514] EXT4-fs (loop4): Test dummy encryption mode enabled
[  338.172898][ T7514] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  338.265823][ T7516] XFS (loop0): Mounting V5 Filesystem
[  338.299298][ T7514] EXT4-fs (loop4): 1 truncate cleaned up
[  338.329486][ T7514] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  338.464973][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.820'.
[  338.651575][ T7516] XFS (loop0): Ending clean mount
[  338.662587][ T7516] XFS (loop0): Quotacheck needed: Please wait.
[  338.810455][ T7540] loop2: detected capacity change from 0 to 128
[  339.582444][ T7516] XFS (loop0): Quotacheck: Done.
[  340.466425][ T4184] XFS (loop0): Unmounting Filesystem
[  340.502006][ T7540] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  340.558381][ T7540] FAT-fs (loop2): Filesystem has been set read-only
[  340.599226][ T7548] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  341.000948][ T7554] tmpfs: Bad value for 'mpol'
[  342.266310][ T7569] overlayfs: './file0' not a directory
[  342.634909][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  343.493049][ T7581] loop8: detected capacity change from 0 to 16384
[  343.854384][ T7583] loop_set_status: loop8 () has still dirty pages (nrpages=211)
[  346.041838][ T7606] netlink: 'syz.0.845': attribute type 8 has an invalid length.
[  346.086556][ T4173] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  347.224174][ T4173] usb 4-1: Using ep0 maxpacket: 16
[  347.466745][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'.
[  347.475813][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'.
[  347.514812][ T4173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.538146][ T4173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  348.014356][ T4173] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  348.153073][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.643637][ T4173] usb 4-1: Product: syz
[  348.828456][ T4173] usb 4-1: Manufacturer: syz
[  348.864453][ T4173] usb 4-1: can't set config #1, error -71
[  348.877123][ T4173] usb 4-1: USB disconnect, device number 7
[  349.630723][ T7643] loop0: detected capacity change from 0 to 32768
[  349.674832][ T7643] XFS: ikeep mount option is deprecated.
[  349.784683][ T7643] XFS (loop0): Mounting V5 Filesystem
[  350.096485][ T7643] XFS (loop0): Ending clean mount
[  350.110490][ T7643] XFS (loop0): Quotacheck needed: Please wait.
[  350.233257][ T7643] XFS (loop0): Quotacheck: Done.
[  350.382980][ T4184] XFS (loop0): Unmounting Filesystem
[  350.486099][ T7636] loop1: detected capacity change from 0 to 32768
[  350.554394][ T7636] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta"
[  350.562073][ T7636] gfs2: fsid=meta: Now mounting FS (format 0)...
[  350.681320][ T7663] loop4: detected capacity change from 0 to 2048
[  350.711648][ T7636] gfs2: fsid=meta.s: journal 0 mapped with 5 extents in 0ms
[  350.809658][ T7663] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  350.864318][ T7636] gfs2: fsid=meta.s: first mount done, others may mount
[  350.896906][ T4364] udevd[4364]: incorrect nilfs2 checksum on /dev/loop4
[  350.998041][ T4364] udevd[4364]: incorrect nilfs2 checksum on /dev/loop4
[  351.005219][ T7663] NILFS (loop4): mounting unchecked fs
[  351.093925][ T7663] NILFS (loop4): recovery complete
[  351.124479][ T4173] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  351.208114][ T7669] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  351.232319][   T26] audit: type=1800 audit(1754605778.844:31): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.863" name="file1" dev="loop4" ino=15 res=0 errno=0
[  351.934289][ T4173] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  351.974373][ T4173] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  352.014228][ T4173] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  352.023309][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.095563][ T4316] libceph: connect (1)[c::]:6789 error -101
[  352.102395][ T4316] libceph: mon0 (1)[c::]:6789 connect error
[  352.145139][ T7676] ceph: No mds server is up or the cluster is laggy
[  352.465035][    T7] libceph: connect (1)[c::]:6789 error -101
[  352.650774][ T4173] snd-usb-audio: probe of 4-1:27.0 failed with error -2
[  352.662696][    T7] libceph: mon0 (1)[c::]:6789 connect error
[  352.710873][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.887552][ T7690] loop1: detected capacity change from 0 to 512
[  353.082389][ T7690] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  353.211650][ T7700] overlayfs: missing 'workdir'
[  354.846931][ T7712] loop2: detected capacity change from 0 to 128
[  355.100099][ T7712] FAT-fs (loop2): bogus number of reserved sectors
[  355.113468][ T7712] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  355.123364][ T7712] FAT-fs (loop2): Can't find a valid FAT filesystem
[  356.883108][    T7] usb 4-1: USB disconnect, device number 8
[  356.931698][ T7667] delete_channel: no stack
[  359.446408][ T7751] binder: BINDER_SET_CONTEXT_MGR already set
[  359.453038][ T7751] binder: 7750:7751 ioctl 4018620d 200000000040 returned -16
[  359.495080][ T7751] binder: 7750:7751 ioctl c0306201 200000001440 returned -11
[  359.656799][ T7742] loop3: detected capacity change from 0 to 32768
[  360.864264][ T7768] loop1: detected capacity change from 0 to 40427
[  360.895212][ T7768] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  360.895249][ T4312] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  360.903156][ T7768] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  360.975802][ T7768] F2FS-fs (loop1): Found nat_bits in checkpoint
[  361.242713][ T7768] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  361.250217][ T4312] usb 5-1: Using ep0 maxpacket: 8
[  361.290570][ T7787] loop2: detected capacity change from 0 to 256
[  361.297286][ T7768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  361.374474][ T4312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.397155][ T4312] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  361.434246][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.498744][ T4312] usb 5-1: config 0 descriptor??
[  361.566497][ T7785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  361.571157][ T4312] gspca_main: vc032x-2.14.0 probing 046d:0892
[  361.626662][ T7785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  361.811864][ T7797] loop3: detected capacity change from 0 to 1024
[  361.846678][ T7797] hfsplus: unable to parse mount options
[  362.214462][ T4312] gspca_vc032x: reg_r err -71
[  362.223865][ T4312] vc032x: probe of 5-1:0.0 failed with error -71
[  362.525048][ T4312] usb 5-1: USB disconnect, device number 4
[  364.286508][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'.
[  364.837258][ T7826] loop3: detected capacity change from 0 to 1024
[  365.135931][ T7826] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002]
[  365.263957][ T7826] System zones: 0-1, 3-36
[  365.480052][ T7826] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  365.536772][ T7827] loop1: detected capacity change from 0 to 4096
[  365.594939][ T7827] ntfs3: Bad value for 'gid'
[  365.815929][ T7847] tipc: Started in network mode
[  365.860060][ T7847] tipc: Node identity 12c8686823ff, cluster identity 4711
[  365.909481][ T7847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.917545][ T7847] device syzkaller0 entered promiscuous mode
[  365.933892][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.942864][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.960665][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[  365.968979][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.978727][ T7847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.994698][ T7845] tipc: Resetting bearer <eth:syzkaller0>
[  366.007160][ T7845] tipc: Disabling bearer <eth:syzkaller0>
[  369.157558][ T7876] loop1: detected capacity change from 0 to 512
[  369.329298][ T7876] EXT4-fs (loop1): Test dummy encryption mode enabled
[  369.424689][ T7876] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  369.739889][ T7876] EXT4-fs (loop1): 1 truncate cleaned up
[  369.746004][ T7876] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  369.775751][ T7887] loop4: detected capacity change from 0 to 1024
[  369.817272][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'.
[  369.887733][ T7887] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  369.938450][ T5543] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  370.028590][ T7896] loop1: detected capacity change from 0 to 512
[  370.044817][ T7887] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  370.242008][ T7887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  370.305684][ T7887] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  370.346374][ T7887] EXT4-fs (loop4): This should not happen!! Data will be lost
[  370.346374][ T7887] 
[  370.374690][ T7887] EXT4-fs (loop4): Total free blocks count 0
[  370.381842][ T7887] EXT4-fs (loop4): Free/Dirty block details
[  370.387974][ T7887] EXT4-fs (loop4): free_blocks=20480
[  370.394938][ T7887] EXT4-fs (loop4): dirty_blocks=80
[  370.400330][ T7887] EXT4-fs (loop4): Block reservation details
[  370.407020][ T7887] EXT4-fs (loop4): i_reserved_data_blocks=5
[  370.417454][ T7901] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  370.457423][ T7901] EXT4-fs (loop4): This should not happen!! Data will be lost
[  370.457423][ T7901] 
[  370.497741][ T7896] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,auto_da_alloc=0x0000000000000007,data_err=abort,dioread_lock,acl,barrier=0x0000000000000007,journal_dev=0x0000000000000005,,errors=continue. Quota mode: none.
[  370.508969][ T7900] loop3: detected capacity change from 0 to 32768
[  370.532165][ T7887] syz.4.923 (7887) used greatest stack depth: 20744 bytes left
[  370.540018][ T7900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.927 (7900)
[  370.566851][ T7900] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  370.581657][ T7900] BTRFS info (device loop3): using free space tree
[  370.589058][ T7900] BTRFS info (device loop3): has skinny extents
[  370.604477][ T5543] usb 3-1: config 0 has no interfaces?
[  370.610297][ T5543] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  370.622605][ T5543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.634012][ T5543] usb 3-1: config 0 descriptor??
[  370.900729][ T5543] usb 3-1: USB disconnect, device number 9
[  371.525087][ T7900] BTRFS info (device loop3): enabling ssd optimizations
[  373.563686][ T7955] loop2: detected capacity change from 0 to 512
[  373.649749][ T7949] ODEBUG: Out of memory. ODEBUG disabled
[  373.739107][ T7955] EXT4-fs (loop2): Test dummy encryption mode enabled
[  373.799637][ T7955] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  373.890371][ T7955] EXT4-fs (loop2): 1 truncate cleaned up
[  373.907658][ T7955] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  374.053816][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'.
[  377.095122][ T7989] loop2: detected capacity change from 0 to 512
[  377.324607][ T7987] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[  377.324607][ T7987]    program syz.0.947 not setting count and/or reply_len properly
[  377.334552][ T7989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  377.354508][ T7989] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.496581][ T7989] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes
[  377.577914][ T8003] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[  377.577914][ T8003]    program syz.3.950 not setting count and/or reply_len properly
[  378.164705][ T4316] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  378.280207][ T8005] loop3: detected capacity change from 0 to 16
[  378.300692][ T8007] loop2: detected capacity change from 0 to 512
[  378.347629][ T8007] EXT4-fs (loop2): Ignoring removed oldalloc option
[  378.356055][ T8007] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  378.375393][ T8005] erofs: (device loop3): mounted with root inode @ nid 36.
[  378.410946][ T8005] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  378.427026][ T8005] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  378.439844][ T8005] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  378.445344][ T8007] EXT4-fs (loop2): 1 truncate cleaned up
[  378.468735][ T8012] loop1: detected capacity change from 0 to 512
[  378.478593][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.485228][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.488062][ T8007] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  378.511578][ T8005] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  378.533028][ T8005] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  378.615660][ T8007] EXT4-fs (loop2): Online resizing not supported with sparse_super2
[  378.624304][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0
[  378.630446][ T8012] EXT4-fs (loop1): Test dummy encryption mode enabled
[  378.665313][ T8012] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  378.774720][ T4316] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  378.810589][ T8012] EXT4-fs (loop1): 1 truncate cleaned up
[  378.844297][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.854276][ T4316] usb 5-1: config 0 descriptor??
[  378.860053][ T8012] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  379.575654][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'.
[  379.721012][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'.
[  381.043865][ T4316] zeroplus 0003:0C12:0005.0004: unknown main item tag 0x0
[  381.497780][ T4316] zeroplus 0003:0C12:0005.0004: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0
[  381.510391][ T4316] zeroplus 0003:0C12:0005.0004: no inputs found
[  381.674580][ T4316] usb 5-1: USB disconnect, device number 5
[  382.770147][ T8036] loop4: detected capacity change from 0 to 1024
[  382.802922][ T8039] loop3: detected capacity change from 0 to 256
[  382.833226][ T8038] fido_id[8038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  382.931079][ T8036] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,max_batch_time=0x0000000000000009,usrjquota=,noquota,inode_readahead_blks=0x0000000000200000,nobarrier,nojournal_checksum,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none.
[  384.595984][ T8036] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.288419][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'.
[  385.783375][ T8060] loop4: detected capacity change from 0 to 512
[  385.827322][ T8060] EXT4-fs (loop4): Ignoring removed nobh option
[  386.041952][ T8060] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.964: iget: bad i_size value: 38620345925642
[  386.338654][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  386.346241][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  386.355275][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.362759][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  386.370585][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.378115][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.876635][ T8060] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.964: couldn't read orphan inode 15 (err -117)
[  386.899982][ T8060] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  387.190996][ T7959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  387.621969][ T8073] loop3: detected capacity change from 0 to 512
[  388.154489][ T8073] EXT4-fs (loop3): Test dummy encryption mode enabled
[  388.161424][ T8073] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  388.240211][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'.
[  388.373792][ T8073] EXT4-fs (loop3): 1 truncate cleaned up
[  389.054919][ T8073] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  389.162055][ T8073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.969'.
[  392.403621][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.146070][ T8128] loop3: detected capacity change from 0 to 1024
[  393.208689][ T8128] hfsplus: gid requires an argument
[  393.269378][ T8128] hfsplus: unable to parse mount options
[  393.347856][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.483130][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.621890][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.274267][ T5684] Bluetooth: hci0: command 0x0409 tx timeout
[  395.647218][ T8133] chnl_net:caif_netlink_parms(): no params data found
[  395.741382][ T8138] loop0: detected capacity change from 0 to 32768
[  395.948989][ T8138] 
[  395.948989][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  395.948989][ T8138] 
[  396.025245][ T8158] loop2: detected capacity change from 0 to 32768
[  396.077463][ T8138] 
[  396.077463][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.077463][ T8138] 
[  396.088648][ T8138] 
[  396.088648][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.088648][ T8138] 
[  396.114892][ T8158] XFS: ikeep mount option is deprecated.
[  396.120911][ T8138] 
[  396.120911][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.120911][ T8138] 
[  396.201610][ T8138] 
[  396.201610][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.201610][ T8138] 
[  396.212421][ T8138] 
[  396.212421][ T8138]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.212421][ T8138] 
[  396.232064][  T275] 
[  396.232064][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.232064][  T275] 
[  396.277533][ T8158] XFS (loop2): Mounting V5 Filesystem
[  396.296072][ T4470] 
[  396.296072][ T4470]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.296072][ T4470] 
[  396.340675][ T4470] 
[  396.340675][ T4470]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.340675][ T4470] 
[  396.353377][ T4184] 
[  396.353377][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.353377][ T4184] 
[  396.366920][ T4184] 
[  396.366920][ T4184]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.366920][ T4184] 
[  396.399975][  T276] 
[  396.399975][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  396.399975][  T276] 
[  396.430011][ T8153] loop3: detected capacity change from 0 to 32768
[  396.444444][  T276] ==================================================================
[  396.453000][  T276] BUG: KASAN: use-after-free in lmLogSync+0x924/0x9c0
[  396.459788][  T276] Write of size 4 at addr ffff88805b395a20 by task jfsCommit/276
[  396.467622][  T276] 
[  396.468198][ T8153] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  396.469952][  T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted 5.15.189-syzkaller #0
[  396.486369][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  396.496531][  T276] Call Trace:
[  396.499922][  T276]  <TASK>
[  396.502853][  T276]  dump_stack_lvl+0x168/0x230
[  396.507548][  T276]  ? show_regs_print_info+0x20/0x20
[  396.512768][  T276]  ? load_image+0x3b0/0x3b0
[  396.517513][  T276]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  396.522910][  T276]  ? _printk+0xcc/0x110
[  396.527088][  T276]  print_address_description+0x60/0x2d0
[  396.532670][  T276]  ? lmLogSync+0x924/0x9c0
[  396.537096][  T276]  kasan_report+0xdf/0x130
[  396.541531][  T276]  ? lmLogSync+0x924/0x9c0
[  396.545973][  T276]  lmLogSync+0x924/0x9c0
[  396.550228][  T276]  ? lmWriteRecord+0x1aa0/0x1aa0
[  396.555191][  T276]  ? __lock_acquire+0x7c60/0x7c60
[  396.560228][  T276]  ? do_raw_spin_lock+0x11d/0x280
[  396.565284][  T276]  ? __rwlock_init+0x140/0x140
[  396.570085][  T276]  jfs_syncpt+0x77/0x90
[  396.574573][  T276]  txEnd+0x2e1/0x520
[  396.578509][  T276]  jfs_lazycommit+0x5ba/0xb20
[  396.583297][  T276]  ? txFreelock+0x5a0/0x5a0
[  396.587815][  T276]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  396.594168][  T276]  ? sched_dynamic_update+0x210/0x210
[  396.599652][  T276]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  396.606473][  T276]  ? __kthread_parkme+0x157/0x1b0
[  396.611522][  T276]  kthread+0x436/0x520
[  396.615655][  T276]  ? txFreelock+0x5a0/0x5a0
[  396.620172][  T276]  ? kthread_blkcg+0xd0/0xd0
[  396.624778][  T276]  ret_from_fork+0x1f/0x30
[  396.629232][  T276]  </TASK>
[  396.632265][  T276] 
[  396.634730][  T276] Allocated by task 8138:
[  396.639242][  T276]  __kasan_kmalloc+0xb5/0xf0
[  396.644016][  T276]  lmLogOpen+0x2c0/0xf90
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  396.648283][  T276]  jfs_mount_rw+0xf2/0x5c0
[  396.652711][  T276]  jfs_fill_super+0x5bb/0xaf0
[  396.657408][  T276]  mount_bdev+0x287/0x3c0
[  396.661751][  T276]  legacy_get_tree+0xe6/0x180
[  396.666568][  T276]  vfs_get_tree+0x88/0x270
[  396.670999][  T276]  do_new_mount+0x24a/0xa40
[  396.675517][  T276]  __se_sys_mount+0x2d6/0x3c0
[  396.680205][  T276]  do_syscall_64+0x4c/0xa0
[  396.684810][  T276]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  396.690829][  T276] 
[  396.693152][  T276] Freed by task 4184:
[  396.697125][  T276]  kasan_set_track+0x4b/0x70
[  396.701728][  T276]  kasan_set_free_info+0x1f/0x40
[  396.706684][  T276]  ____kasan_slab_free+0xd5/0x110
[  396.711806][  T276]  slab_free_freelist_hook+0xea/0x170
[  396.717201][  T276]  kfree+0xef/0x2a0
[  396.721018][  T276]  lmLogClose+0x293/0x520
[  396.725616][  T276]  jfs_umount+0x28f/0x360
[  396.730067][  T276]  jfs_put_super+0x88/0x190
[  396.734585][  T276]  generic_shutdown_super+0x130/0x300
[  396.739976][  T276]  kill_block_super+0x7c/0xe0
[  396.744671][  T276]  deactivate_locked_super+0x93/0xf0
[  396.750268][  T276]  cleanup_mnt+0x418/0x4d0
[  396.754699][  T276]  task_work_run+0x125/0x1a0
[  396.759305][  T276]  exit_to_user_mode_loop+0x10f/0x130
[  396.761874][ T8153] JBD2: recovery failed
[  396.764841][  T276]  exit_to_user_mode_prepare+0xb1/0x140
[  396.764873][  T276]  syscall_exit_to_user_mode+0x16/0x40
[  396.764887][  T276]  do_syscall_64+0x58/0xa0
[  396.764902][  T276]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  396.764919][  T276] 
[  396.764923][  T276] The buggy address belongs to the object at ffff88805b395800
[  396.764923][  T276]  which belongs to the cache kmalloc-1k of size 1024
[  396.764937][  T276] The buggy address is located 544 bytes inside of
[  396.764937][  T276]  1024-byte region [ffff88805b395800, ffff88805b395c00)
[  396.764951][  T276] The buggy address belongs to the page:
[  396.764959][  T276] page:ffffea00016ce400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b390
[  396.764975][  T276] head:ffffea00016ce400 order:3 compound_mapcount:0 compound_pincount:0
[  396.764987][  T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  396.765009][  T276] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841dc0
[  396.765023][  T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  396.765031][  T276] page dumped because: kasan: bad access detected
[  396.765050][  T276] page_owner tracks the page as allocated
[  396.765056][  T276] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4320, ts 288853327863, free_ts 288354490580
[  396.765079][  T276]  get_page_from_freelist+0x1b77/0x1c60
[  396.765096][  T276]  __alloc_pages+0x1e1/0x470
[  396.765110][  T276]  new_slab+0xc0/0x4b0
[  396.765123][  T276]  ___slab_alloc+0x81e/0xdf0
[  396.802219][ T8153] (syz.3.995,8153,1):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  396.807016][  T276]  __kmalloc+0x1cd/0x330
[  396.807044][  T276]  ieee802_11_parse_elems_crc+0xab/0x10c0
[  396.807062][  T276]  ieee80211_bss_info_update+0x75d/0xaa0
[  396.807076][  T276]  ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0
[  396.807091][  T276]  ieee80211_iface_work+0x70e/0xc60
[  396.807102][  T276]  process_one_work+0x863/0x1000
[  396.807116][  T276]  worker_thread+0xaa8/0x12a0
[  396.807129][  T276]  kthread+0x436/0x520
[  396.807140][  T276]  ret_from_fork+0x1f/0x30
[  396.807156][  T276] page last free stack trace:
[  396.807161][  T276]  free_unref_page_prepare+0x637/0x6c0
[  396.843745][ T8153] (syz.3.995,8153,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[  396.845278][  T276]  free_unref_page+0x94/0x280
[  396.845304][  T276]  qlist_free_all+0x35/0x90
[  396.845319][  T276]  kasan_quarantine_reduce+0x150/0x160
[  396.845333][  T276]  __kasan_slab_alloc+0x2f/0xd0
[  396.845347][  T276]  slab_post_alloc_hook+0x4c/0x380
[  396.845358][  T276]  kmem_cache_alloc+0x100/0x290
[  396.845374][  T276]  getname_flags+0xb5/0x500
[  396.845387][  T276]  __se_sys_quotactl+0x1f7/0x6c0
[  396.845404][  T276]  do_syscall_64+0x4c/0xa0
[  396.845421][  T276]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  396.845441][  T276] 
[  396.845445][  T276] Memory state around the buggy address:
[  396.845455][  T276]  ffff88805b395900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  396.845464][  T276]  ffff88805b395980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  396.845474][  T276] >ffff88805b395a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  396.859839][ T8153] (syz.3.995,8153,1):ocfs2_check_volume:2493 ERROR: status = -5
[  396.862097][  T276]                                ^
[  396.862112][  T276]  ffff88805b395a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  396.872614][ T8153] (syz.3.995,8153,1):ocfs2_mount_volume:1824 ERROR: status = -5
[  396.877223][  T276]  ffff88805b395b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  396.877233][  T276] ==================================================================
[  396.877239][  T276] Disabling lock debugging due to kernel taint
[  396.877265][    C0] vkms_vblank_simulate: vblank timer overrun
[  396.899746][  T276] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  397.141638][  T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G    B             5.15.189-syzkaller #0
[  397.151441][  T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  397.161673][  T276] Call Trace:
[  397.164948][  T276]  <TASK>
[  397.167959][  T276]  dump_stack_lvl+0x168/0x230
[  397.172648][  T276]  ? show_regs_print_info+0x20/0x20
[  397.177834][  T276]  ? load_image+0x3b0/0x3b0
[  397.182337][  T276]  panic+0x2c9/0x7f0
[  397.186237][  T276]  ? bpf_jit_dump+0xd0/0xd0
[  397.190815][  T276]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  397.196780][  T276]  ? _raw_spin_unlock+0x40/0x40
[  397.201648][  T276]  ? lmLogSync+0x924/0x9c0
[  397.206046][  T276]  check_panic_on_warn+0x80/0xa0
[  397.210967][  T276]  ? lmLogSync+0x924/0x9c0
[  397.215363][  T276]  end_report+0x6d/0xf0
[  397.219507][  T276]  kasan_report+0x102/0x130
[  397.224000][  T276]  ? lmLogSync+0x924/0x9c0
[  397.228605][  T276]  lmLogSync+0x924/0x9c0
[  397.232833][  T276]  ? lmWriteRecord+0x1aa0/0x1aa0
[  397.237753][  T276]  ? __lock_acquire+0x7c60/0x7c60
[  397.242768][  T276]  ? do_raw_spin_lock+0x11d/0x280
[  397.248058][  T276]  ? __rwlock_init+0x140/0x140
[  397.252917][  T276]  jfs_syncpt+0x77/0x90
[  397.257077][  T276]  txEnd+0x2e1/0x520
[  397.260971][  T276]  jfs_lazycommit+0x5ba/0xb20
[  397.265634][  T276]  ? txFreelock+0x5a0/0x5a0
[  397.270121][  T276]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  397.276081][  T276]  ? sched_dynamic_update+0x210/0x210
[  397.281550][  T276]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  397.287449][  T276]  ? __kthread_parkme+0x157/0x1b0
[  397.292517][  T276]  kthread+0x436/0x520
[  397.296584][  T276]  ? txFreelock+0x5a0/0x5a0
[  397.301087][  T276]  ? kthread_blkcg+0xd0/0xd0
[  397.305773][  T276]  ret_from_fork+0x1f/0x30
[  397.310181][  T276]  </TASK>
[  397.313318][  T276] Kernel Offset: disabled
[  397.317801][  T276] Rebooting in 86400 seconds..