last executing test programs:

2m44.815397803s ago: executing program 0 (id=1294):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x401, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

2m44.574728702s ago: executing program 0 (id=1298):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
accept4$ax25(r0, 0x0, 0x0, 0x0)

2m44.369901042s ago: executing program 0 (id=1302):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

2m44.200440511s ago: executing program 0 (id=1305):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0)

2m44.029769341s ago: executing program 0 (id=1308):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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")
open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)

2m43.005883057s ago: executing program 0 (id=1326):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x37c, 0x80000000, 0x3012, 0x4, 0x4, 0x1, 0x1, 0x3}})

2m27.851075738s ago: executing program 32 (id=1326):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x37c, 0x80000000, 0x3012, 0x4, 0x4, 0x1, 0x1, 0x3}})

2m13.480450152s ago: executing program 4 (id=1755):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000001c0))

2m13.226657791s ago: executing program 4 (id=1759):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f00000001c0), 0x4)

2m13.03064625s ago: executing program 4 (id=1762):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x541b, 0x0)

2m12.78628407s ago: executing program 4 (id=1766):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

2m12.334577658s ago: executing program 4 (id=1773):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, 0x0, 0x0)

2m11.754612976s ago: executing program 4 (id=1779):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="7a8cdf3a", 0x4}], 0x1)

2m11.174234774s ago: executing program 33 (id=1779):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="7a8cdf3a", 0x4}], 0x1)

18.52625589s ago: executing program 2 (id=3319):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4447, &(0x7f000000cd00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a439, &(0x7f0000000080)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

17.136272646s ago: executing program 2 (id=3338):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x29, 0x2b})

16.493871923s ago: executing program 2 (id=3350):
r0 = syz_open_dev$vim2m(&(0x7f0000003f80), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000003fc0)={0x2, @pix={0x8, 0x6, 0x42303159, 0x0, 0x1a01, 0x3, 0x0, 0x1, 0x1, 0x6, 0x2, 0x5}})

16.200394813s ago: executing program 2 (id=3356):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

15.759550191s ago: executing program 2 (id=3364):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)

15.158611439s ago: executing program 2 (id=3375):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)=0x1e)

14.750810218s ago: executing program 34 (id=3375):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000040)=0x1e)

3.749594092s ago: executing program 3 (id=3476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000080)="00000000000000003b2bf39a88a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.453513362s ago: executing program 5 (id=3480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.22561078s ago: executing program 5 (id=3483):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x3, 0x38, 0x7f}, 0x20)

2.97561244s ago: executing program 5 (id=3486):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10)

2.714487109s ago: executing program 5 (id=3488):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008000, &(0x7f0000000400)={[{@nfs_export_on}, {@metacopy_on}]})

2.653587299s ago: executing program 3 (id=3489):
r0 = syz_io_uring_setup(0xff9, &(0x7f0000000040)={0x0, 0xfd03, 0xc0b}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2)

2.478368128s ago: executing program 5 (id=3491):
r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nouser_xattr}, {@jqfmt_vfsv0}, {@four_active_logs}, {@data_flush}, {@heap}, {@nouser_xattr}, {@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrjquota={'usrjquota', 0x3d, 'noflush_merge'}}, {@noflush_merge}, {@noinline_data}, {@grpjquota={'grpjquota', 0x3d, '+~N~^\x05[\x1b=^\x00\x1e\xe1\x06\x86\xa2\xec\xc19lh\xa6\xb1\x84\xe2\x7f\xe0\x13\xa1HTx\x8ey\xd55:\x90\xe5 \x9b\xbc\xbe\x9d/\xacPN\xbed\xb0\x84\xd7\xfd\xff\xb6\x19U\x1e\xe5\xa9\x925Q\xe8&\xd8\x1d\x8c5\r\x96I\xc9\x0eq\x01\xd1;t$\xe0XVU\x1c\xbf\x84L\xd3\xf3\xf43\xd1\xb7\"\nn\f\xeby\x9d\xdf\xcb\\\xcc\xe6Zk\xe6\xf6]\xd9/\xe3\xc5k\x17\x04\xee'}}]}, 0x0, 0x550a, &(0x7f0000006200)="$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")
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4018f50b, &(0x7f0000000080))

2.420241598s ago: executing program 3 (id=3492):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f7", 0x8}], 0x2)

2.160199537s ago: executing program 3 (id=3494):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c12, &(0x7f0000002140)={[{@hide}, {@unhide}, {@check_relaxed}, {@mode={'mode', 0x3d, 0x6}}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@session={'session', 0x3d, 0x10}}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@map_normal}, {@cruft}, {@overriderock}, {@mode={'mode', 0x3d, 0x8}}, {@map_acorn}]}, 0x4, 0xa1b, &(0x7f00000004c0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001d"], 0x0)

2.022575237s ago: executing program 1 (id=3495):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x80000000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0)

1.820715446s ago: executing program 1 (id=3496):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002"], 0x28}}, 0x0)

1.774496936s ago: executing program 3 (id=3497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x68}}, 0x0)

1.516501705s ago: executing program 1 (id=3498):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)

1.515713985s ago: executing program 3 (id=3499):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QrSuS6VUQKKAkorSziykLiwIm/AITEESGOiAN/QA9cuXHiRCQbCdQTg8Z+nni82e06tb2z9rxekjPzmWd2/YzfO/sjM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx3e98b6WIiBs/TQuWIv4vuhGdiIWqXo6IheWlvH4vIp6LneZ4NiL6cxHV7Xf+eTri1Yj46GzE1vb6arX48gH78e0//O233z/z1l9/37/4nz/e6742br3793/57z89ONw2AwAAQNuUZVkW6WP+ufT5vtN0pwCAqciv/2WSl5/6+lf/eOvPs9QftVqtVqunUNeVoz2oFxGxUb9N9Z7B4XgAOGE24uOmu0CD5N9qvYg403QngJlWNN0BjsXW9vpqkfIt6q8Hy7vt+VyQfflvFI+u7xg3nWT4HJNpPb42oxvPjOnPwpT6MEty/p3h/G/stg/Sesed/7SMy3+we+lT6+T8u8P5Dzk9+XdG5t9WOf/eE+XflT8AAAAAAMyw/P//Sw0f/507/KYcyCcd/12eUh8AAAAAAAAA4Kgddvy/R4z/BwAAADOr+qxe+fXZvWXjvoutWn69iHhqaH2gZdLFMotN9wMAAAAAAAAAAAAA2qS3ew7v9SKiHxFPLS6WZVn91A3XT+qwtz/p2r790GZNP8kDAMCuj87ma/n7uwuKiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0NDvCGuDcoqzubr92ubtLn5Untw/dX/a5B2T1Ax45I+mPGmOYGAweA9AIVseUV6ZQpy6fHvfmAfez/p9BSLDX9uGL2Nf0wBQAAAI5fWZZlkb7O+1w65t9pulMAwFTk1//h4wKHqjtj2iOO5v7VarVarVZ/qrquHO1BvYiIjfptqvcMhuMHgBNmIz5uugs0SP6t1ouI55ruBDDTiqY7wLHY2l5fLVK+Rf31II3vns8F2Zf/RrFzu3z7UdNJhs8xmdbjazO68cyY/jw7pT7Mkpx/Zzj/G7vtg7Tecec/LePyH+xcMtc+Of/ucP5DTk/+nZH5t1XOv/dE+XflDwAAAAAAMyz///+S4795kwEAAAAAAADgxNnaXl/N173m4/+fGbGe6z9Pp5x/8aT5L6R5+Z9oOf/OUP5fHFqvW5t/+Obe/v+v7fXV39375//n6UHzn8szRXpkFekRUaTfVPTS9DBb97jNfndQ/aZ+0en20jk/Zf+duBW3Yy0u7Vu3k/4ee+0r+9qrnvb3tV/e1957rP3KvvZ++t6BciG3X4jV+FHcjrd32qu2uQnbPz+hvZzQnvPvev5vpZx/r/ZT5b+Y2ouhaeXhh53H9vv6dNTveePWZ39x6fg3Z6LN6D7atrpq+8430J+dv8mZQfzk7tqdC/dv3rt3ZyXSZN/Sy5EmRyzn39/5mdt7/n9htz0/79f314cfDp44/1mxGb2x+b9Qm6+296Up960JOf9B+sn5v53aR+//Jzn/8fv/yw30BwAAAAAAAAAAAAAAAD5JWZY7l4i+ERFX0/U/TV2bCQBMV379L5O8XK1Wq9Vq9emr68rRXq8XEfGX+m2q9ww/G3VnAMAs+29E/L3pTtAY+bdY/r6/avpi050Bpuru+x/84Obt22t37jbdEwAAAAAAAADg08rjfy7Xxn9+MSKWhtbbN/7rm7F82PE/e3nm0QCjRzzQ9xibnUG3Uxtu/PnYGZ/7wrjxv8/H4+N/5zFxu/XtGKM/oX0woX1uQvv8yKV7aY280KMm5/98bbzzKv9zQ8Ovt2H81+Ex79sg53++9niu8v/C0Hr1/MvfzFz+GwddcTM6+/K/eO+9H1+8+/4Hr9x67+a7a++u/fDKysqlK1evXrt27eI7t26vXdr993h6PQNy/nnsa+eBtkvOP2cu/3bJ+X8u1fJvl5z/51Mt/3bJ+ef3e/Jvl5x//uwj/3bJ+b+Uavm3S87/S6mWf7tsba/PVfm/nGr5t0ve/7+cavm3S87/lVTLv11y/hdSLf92yflfTPUB8vf18KdIzj8f4bL/t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/K6mWf7vk/K+mWv7tkvP/aqrl3y45/2upln+75Py/lmr5t0vO/+upln+75PxfS7X82yXn/41Uy79dcv7fTLX82yXn/61Uy79dcv6vp1r+7bL3/f9mzMzCzM+P9g67MSPbddJmmn5mAgAAAAAAAAAAAACGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct31HcDP7M1rhxADITipgbVjjHGW7PoSX2hdTLg2QLklFHrBdr1rs+AbXrsEimTTQImEUVEFavrQFhBqI1UVVsUDrSjNQ9XLU2kf6EtFVQmpURWigIrUVjRbzZz//++Z2dmZXXu8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzLW+c/VytKIr6n8ZfG4viBfWP109sbFz2ulu9hQAAAMCN+r/G38/dkS44vIwbNS3zd6/4x28uLCwsFB8Y/vLolxYW0hUTRTG6riga10VX//2DteZlgseK8dpQ0+dDPVY/3OP6kR7Xj/a4fqzH9et6XD/e4/pFO2CR9eXPYxp3tq3x4cZylxZ3FqON67Z1uNVjtXVDQ/FnOQ21xm0WRk8Uc8WpYraYblm+XLbWWP7bW+rrelsR1zXUtK7N9SPkR586HrehFvbxtpZ1XbvP6IdvKCZ+/KNPHf/jC8/c3Wn23A0t91du546t9e38TLik3NZasS7tk7idQ03bubnDczLcsp21xu3qH7dv53PL3M7ha5u5qtqf8/FiqPHxdxv7aaT5x3ppP20Ol/33vUVRXL622e3LLFpXMVRsaLlk6NrzM14ekfX7qB9KLy5GVnScblnGcVqfM9taj9P210R8/reE240ssQ3NT9MPPz226Hlf6XEa1R/1Uq+V9mOw36+VQTkG43Hx3caDfrzjMbgtPP5PbV/6GOx47HQ4BtPjbjoGt/Y6BofGhhvbnJ6EWuM2147BXS3LDzfWVGvMp7d3PwanLpw+NzX/iU++du70sZOzJ2fP7Nm1a3rPvn0HDhyYOjF3ana6/Ps69/bg21AMpdfA1rDv4mvg1W3LNh+qC1/t3+twvMvrcGPbsv1+HY60P7ja6rwgFx/T5Wvj4fpOH78yVCzxGms8Pztv/HWYHnfT63Ck6XXY8WtKh9fhyDJeh/Vlzu1c3vcsI01/Om3DzfpasLHpGGz/fqT9GOz39yODcgyOh+PiX3cu/bVgc9jexydX+v3I8KJjMD3c8N5TvyR9vz9+oDE6HZf31K+4bay4OD97/v5Hj124cH5XEcaqeEnTsdJ+vG5oekzFouN1aMXH6+G5Vzx+T4fLN4Z9Nf7a+l/jSz5X9WX23t/9uWp8deu8P1su3V2E0WervT87fTWv78+UJbvsz/oyn5m68e/FUy5tev8dXeL9N+b+58v1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/N7W89+PR8Ge134/v7PJ+vKlt2X6/H4+2P7j4flzr9dOOG9P+fI6H4+TUdPf34/oym3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWa3jdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/HxZ17uh+n9WWe2nvj753r44dN751jvY7B0eGx+jaPpoOwfL9fWB+PwfuL48XZ4lQx07h2rHE81RrrmnxgecfgWPiz2u+Vm7ocgzvalu33MZi+ji117NVGFj/4Pmh/PsfDcfHEA92Pwfoyb9rf3+9dd4RL0jJN37u2/3xtqZ953dO2m27mz7zq2/k3+7v/bLa+zKkDK82Z3ffTfeGS2zrsp/bX71KvqZlidfbTprCdzxxYej/Vt6e+zJcOLvN4OlwUxaWPPdj4eW/495U/v/i9b7b8u0unf9O59LEHn739xN+uZPsBWPueL8eG8mtd079MLeff/wEAAIA1Ieb+oTAT+R8AAAAqI+b++L/CE/kfAAAAKiPm/pEwk0zy/6Y3PTP3/KUiNfMXgnh92g0PlcvFjut0+Hxi4Zr65Q9+ffYnf3lpeeseKoripw/9ZsflNz0Ut6s0Ebbz6ptbL198w0vLWv/RR64t19xf/0q4//h4lnsYdKrgThdF8e07vtBYz8QHrzTmUw8dbcz3Xn78sfoyzx0sP4+3f/ol5fJ/EMq/h08ca7n902E//CDM6bd33h/xdt+48prN+99/bX3xdrWtL2w87Cc+VN5v/D05X3ysXD7u56W2/68+/+Q36ss/+qrO239pqPP2Pxnu9+th/s/Ly+Wbn4P65/F2nw3bH9cXb3f/177Tcfuvfq5c/txbyuWOhhnXvyN8vu0tz8w1769Ha8daHlfx1nK5uP7p7/1O4/p4f/H+27d//MiVlv3Rfnw89c/l/Uy1LR8vj+uJ/qJt/fX7aT4+4/qf/O2jLfu51/qvvvfpl9fvt33997UtN9x2+/bf2PSHn/1Cx/XF7Tn8Z+daHs/h94TXcVj/Ex8Kx2O4/n+vfqFlvdHR97S+/8Tlv7LxUsvjid7243L9V19/sjH/Y+Inv3/bC25/4eVX1vddUXz3feX99Vr/yT8627L9X71rZ+P5iNfHjn77+pcS13/+45Nnzs5fnJtp2quN353zjnJ71o2v31Df3jvCe2v750fOXvjw7PmJ6Ynpopio7q/Qu25fC/PZclxe6e13PhKez3t+79sbtv/T5+Pl//JwefmVt5dft14dlvtiuHxj+fwt1G5w/U9suavx+q49VX7e0mPvg83b/vPAshYMj7/9+4J4vJ976Ycb+6F+XePrRnxd3+D2f3+mvJ9vhf26EH4z89a7rq2vefn4uxGuvK98vd/w/gtvc/F5/ZPwfL/zB+X9x+2Kj/f74fuY72xqfb+Lx8e3Lg2133/jt3hcDu8nxeXy+rhU3N9Xnrur4+bF30NSXL678fnvpvu5e0UPcynzn5ifOjV35uKjUxdm5y9MzX/ik0dOn7145sKRxu/yPPKRXre/9v60ofH+NDO7b28xvb4oirPF9Cq8Yd2c7a9/tLztP/fI8Zn909tnZk8cu3jiwiPnZs+fPD4/f3x2Zn77sRMnZj/e6/ZzM4d27T64Z//uyZNzM4cOHDy45+Dk3Jmz9c0oN6qHfdMfnTxz/kjjJvOH9h7c9cADe6cnT5+dmT20f3p68mKv2ze+Nk3Wb/0bk+dnTx27MHd6dnJ+7pOzh3Yd3Ldvd8/fBnj63In5ianzF89MXZyfPT9VPpaJC42L61/7et2eapr/t/L72Xa18hfxFe+6b1/6/ax1X//0kndVLtL2C0SfCb+L5h9edO7Acj6PuX80zCST/A8AAAA5iLl/LMxE/gcAAIDKiLl/XZiJ/A8AAACVEXP/eJhJJvlf/1//f3n9//J6/f+8+v/nPlb2Std6/z/25/X/83CL+/83vH79f/3/6vX/l9+fX+vbr/+v/89ig9b/j7l/fVFkmf8BAAAgBzH3bwgzkf8BAACgMmLuvy3MRP4HAACAyoi5/wVhJpnk/xz6/+/usNgK+/+7exWuqt//XzPn/19f6P/r/zf3/+OTo/+fjRX379//cMun+v+B/r/+v/6//r/+PzdsdMlrblX/P+b+28NMMsn/AAAAkIOY+18YZiL/AwAAQGXE3H9HmIn8DwAAAJURc//GMJNM8n8O/f9OnP+/sv1/5//X/+/v+f+bNkb/f21w/v/uOvf/x25bdJH+/wr7/+P6/2ux/z/a3+0f7P5/z83X/+emGLTz/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAZMfe/JMxE/gcAAIDKiLn/zjCTTPK//r/+v/6//r/+f+f19z7/f/mR/v9g0f/vzvn/e3D+/7z6/33e/sHu//f7/P+jb26/vf4/nQxa/z/m/peGmWSS/wEAACAHMfffFWYi/wMAAEBlxNz/sjAT+R8AAAAqI+b+TWEmmeR//X/9f/1//X/9/87r793/L+n/Dxb9/+70/3vQ/9f/1/9fXv+/wze/+v90Mmj9/5j77w4zyST/AwAAQA5i7r8nzET+BwAAgMqIuf9nwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/z6v/fN6b/r/9fbfr/3en/96D/r/+v/7/M8/8vtpL+/7ped0ZlDFr/P+b+l4eZZJL/AQAAIAcx978izET+BwAAgMqIuf+VYSbyPwAAAFRGzP0TYSaZ5H/9/2r1///0r594ZaH/r//fY/0V7f/Hw0D/P3P6/93p//eg/6//r/+/Kv1/8jFo/f+Y+7eEmWSS/wEAACAHMfdvDTOR/wEAAKAyYu6/N8xE/gcAAIDKiLl/W5hJJvlf/79a/f9I/1//v9v6K9r/T/T/86b/30HTi1T/vwf9f/3/7Pv/8btf/X/6Y9D6/zH3vyrMJJP8DwAAADmIuX97mIn8DwAAAJURc/+rw0zkfwAAAKiMmPt3hJlkkv/1//X/9f/1//X/O69f/39t0v/vbqX9/zH9f/1//f/M+v/O/09/DVr/P+b+14SZZJL/AQAAIAcx9+8MM5H/AQAAoDLi/98s/9+r/A8AAABVFHP/ZJhJJvlf/1//P6f+f03/X/9f/7/y9P+7c/7/HvT/9f/1//X/6atB6//H3P/aMJNM8j8AAADkIOb++8NM5H8AAACojJj7p8JM5H8AAACojJj7p8NMMsn/+v/6/zn1/53/X/9f/7/69P+70//vQf9f/79q/f+i0P/nlhq0/n/M/bvCTDLJ/wAAAJCDmPt3h5nI/wAAAFAZMffvCTOR/wEAAKAyYu7fG2aSSf7X/9f/1//X/9f/77x+/f+1qVv//svLuL3+f6D/r/+v/1+N/r/z/3OLDVr/P+b+B8JMMsn/AAAAkIOY+/eFmcj/AAAAUBkx9+8PMwn5v9P/6wYAAADWlpj7D4SZZPLv//r/Fen//9bft6xb/1//v9v6+9P/X6//H6b+/2Cp6Pn/218W121t9v+fT49f/1//f5C3X/9f/5/FBq3/H3P/wTCTTPI/AAAA5CDm/teFmcj/AAAAUBkx9/9smIn8DwAAAJURc//PhZlkkv/1/yvS/2+j/6//3239zv+v/19lFe3/983a7P8vcf7/If1//f/B2n79/+X0/9f1uhsq5ub3/+NHy+v/x9x/KMwkk/wPAAAAOYi5/+fDTOR/AAAAqIyY+18fZiL/AwAAQGXE3H84zCST/K//r/+v/6//f3P6/68v2g1i/79+8Oj/V4v+f3eV6v87/7/+/4Btv/6/8/+z2KCd/z/m/jeEmWSS/wEAACAHMfc/GGYi/wMAAEBlxNz/xjAT+R8AAAAqI+b+N4WZZJL/9f/1//X/9f+d/7/z+vX/1yb9/+70/3vQ/9f/1//X/6evbl3/f13H62Puf3OYSSb5HwAAAHIQc/9bwkzkfwAAAKiMmPvfGmYi/wMAAEBlxNz/tjCTTPK//r/+v/6//r/+f+f16/+vTfr/3en/96D/r/+v/6//T18N2vn/Y+7/hTCTTPI/AAAA5CDm/ofCTOR/AAAAqIyY+98eZiL/AwAAQGXE3P+OMJNM8r/+v/6//r/+v/5/5/Xr/69N+v/d6f/3oP+v/6//r/9PXw1a/z/m/neGmWSS/wEAACAHMff/YpiJ/A8AAACVEXP/u8JM5H8AAACojJj73x1mkkn+1//X/x+s/v/Cpebb6f/r/xf96v/Xb6T/nwX9/+70/3vo0P9fp/+v/6//r//PdRu0/n/M/e8JM8kk/wMAAEAOYu5/b5iJ/A8AAACVEXP/+8JM5H8AAACojJj7Hw4zyST/6/9n2f9PD3nw+v/O/6//7/z/+v83Rv+/O/3/Hpz/X/9/Tfb/R8P86GT82qT/z6AYtP5/zP2PhJlkkv8BAAAgBzH3vz/MRP4HAACAyoi5/5fCTOR/AAAAqIyY+z8QZpJJ/tf/z7L/P8Dn/69a/3+k5fjIqf8/3vR8puNS/1//fxXo/3en/9+D/r/+/yD3/8PRvH6J2zv/P4No0Pr/Mfd/MMwkk/wPAAAAOYi5/5fDTOR/AAAAqIyY+38lzET+BwAAgMqIuf9Xw0wyyf/6//r/+v/O/+/8/53Xr/+/Nun/d6f/34P+fz79/5H+b/+tO/9/Sf+fQTRo/f+Y+38tzGTJ4Pfsfy3jYQIAAAADJOb+D4WZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP/r/7f3/+MZVfX/9f/1//X/9f/Xov71/192e1Ho/+v/6/9Xtv9/E7Zf/1//n8UGrf8fc/+xMJNM8j8AAADkIOb+Xw8zkf8BAACgMmLuPx5mIv8DAABAZcTcPxNmkkn+X+3+f1Ovd3Qw+//O/3+9/f+f6v/r/wf6/53p/68O5//vTv+/B/1//X/9f/1/+mrQ+v8x98+GmWSS/wEAAKDC0o+DY+4/EWYi/wMAAEBlxNx/MsxE/gcAAIDKiLn/w2EmmeR/5//X/3f+/1vR/x9pWV7/v6T/r//fD/r/3en/96D/r/+v/6//T18NWv8/5v65MJNM8j8AAADkIOb+j4SZyP8AAABQGTH3fzTMRP4HAACAyoi5/1SYSSb5X/9f/z/3/n+tKC47/7/+f6f16/+vTfr/3en/96D/r/+v/6//T18NWv8/5v7TYSaZ5H8AAAD+n737aLLrqvo4fLGVegQfgTEjhmZkD/gATJlRxZhscrBNzmCiyWDA5JyzyTnnbHKOJhhDVVNur7Wk1r19jqQ+6nvO3s8zWa9UFn2FG7v+r+pXmx7k7r9v3GL/AwAAQDNy998vbrH/AQAAoBm5++8ft3Sy//X/+v/e+//VVt7/3//Xt9//3/53SP+v/z8Ka/39sc1/3UFR+IH9/10vu/Je+n/9v/5/kP5f/6//52xz6/9z9z8gbulk/wMAAEAPcvc/MG6x/wEAAKAZufsfFLfY/wAAANCM3P1Xxi2d7H/9v/5f/6//39f/3+j9f/3/snn/f9gy+v/Ldnd39f+b6P/n/fn1//p/1s2t/8/d/+C4pZP9DwAAAD3I3f+QuMX+BwAAgGbk7n9o3GL/AwAAQDNy9z8sbulk/+v/9f/6/6X0/ycW/P5/fD/o//X/R0D/P2wZ/b/3//X/y/z8+n/9P+vOv/8/8B/bk/T/ufsfHrd0sv8BAACgB7n7HxG32P8AAADQjNz9j4xb7H8AAABoRu7+R8Utnex//b/+X/+/lP7/iN7/1//r/xfu+tXpfybo/9fp/0eM9P+rlf5/yDn385t/e8v5/AfQ/+v/WXf+/f+B/1GT9P+5+x8dt1yxWp240N8kAAAAMCu5+x8Tt3Ty5/8AAADQg9z9V8Ut9j8AAAA0I3f/1XFLJ/tf/6//1//r//X/m7++/n+ZvP8/7PD9/13udJ9799v/e/9/mPf/p+7/b/vOaLL/l1l3ZG79f+7+a+KWTvY/AAAA9CB3/2PjFvsfAAAAmpG7/3Fxi/0PAAAAzcjd//i4pZP9r/9vrf+/dN+vO6P/36td9P9L7//vrv/X/+v/R+j/h3n/f8TeP+Z26of6f/2/9/+9/8/hzK3/z93/hLilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/6/9b6//3/zrv/7fW/3v/f6X/1/+P0P8P0/+PaOX9/wv8rtl2P39Y2/78+n/9P+vm1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/ZfT/+RX0//r/i9//J/3/Mun/h+n/R7TS/1+gbffzS//8+n/9P+vm1v/n7n9G3NLJ/gcAAIAe5O5/Ztxi/wMAAEAzcvc/K26x/wEAAKAZufufHbd0sv/1//r/ZfT/3v/X/3v/X/9/bvT/w/T/I/T/+n/9v/6fSc2t/8/df23c0sn+BwAAgB7k7n9O3GL/AwAAQDNy9z83brH/AQAAoBm5+58Xt3Sy//X/+n/9v/5f/7/56+v/l0n/P0z/P0L/r//X/+v/mdSM+v8zftWp1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3X9d3NLJ/tf/z6b/38v52ur/d1arlf5/1Wn/v3PG38/6vtT/6/+PgP5/mP5/hP5f/6//1/8zqRn1/3s/zt3/orilk/0PAAAAPcjd/+K4xf4HAACAZuTuf0ncYv8DAABAM3L3vzRu6WT/6/9n0//vaav/9/7/2d8fPfX/3v9fp/8/Gvr/Yfr/Efp//b/+X//PpObW/+fuf1ncdOL4Bf8WAQAAgJnJ3f/yuKWTP/8HAACAHuTuf0XcYv8DAADAQl279jO5+18Zt3Sy//X/0/b/J874Of2//v/s7w/9v/5f/3/x6f+H6f9H6P/1//p//T+Tmlv/n7v/VXFLJ/sfAAAAepC7//q4xf4HAACAZuTuf3XcYv8DAABAM3L3vyZu6WT/6/+9/6//1//r/zd/ff3/Mun/h+n/R+j/D+znz+VpbP3/ofv/k6f/T/0/bTiP/n93d/eqi97/5+5/bdzSyf4HAACAHuTuvyFusf8BAACgGbn7Xxe32P8AAADQjNz9r49bOtn/+v9O+//8Vl9W/3/1aqX/1//r//X/w/T/w/T/I/T/3v/3/r/+n0nN7f3/3P1viFs62f8AAADQg9z9b4xb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//r/T/t/7//p//f9R9/+3rvT/R2IR/f/OwV9/7v3/Nfp//f+A7vr/e9xt3w/1//p/1s2t/8/d/5a4pZP9DwAAAD3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bjrWyf7X/+v/9f/6f/3/5q9/xO//n1itVvr/CSyi/x8w9/5/mvf/z/5f+Wn6f/3/kj+//l//z7q59f+5+98Rt3Sy/wEAAKAHufvfGbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PudtW/5+7/z1xSyf7HwAAAHqQu/+9cYv9DwAAAM3I3f++uMX+BwAAgGbk7n9/3NLJ/tf/6//Pp//Pz6n/b6v/Pzm7/v/Uvv+8Tt7/1/9PRP8/TP8/Qv+v/9f/X6v/Z0pze/8/d/8H4pZO9j8AAAD0IHf/B+PW/+vW/gcAAIBm5O7/UNxi/wMAAEAzcvd/OG7pZP/r//X/3v/X/zf//r/+vyv6/2H6/xH6f/2//t/7/0xqbv1/7v6PxC2d7H8AAADoQe7+j8Yt9j8AAAA0I3f/x+IW+x8AAACakbv/xrilk/2v/9f/6//1//r/2/8e6v/boP8fdjT9/47+X/9f/fwd4n8F+n/9/9ivp01z6/9z9388bulk/wMAAEBrjm/4udz9n4hb7H8AAABoRu7+T8Yt9j8AAAAs0rENP5e7/1NxyyL3/6YKfZj+X/+v/9f/6/83f339/zJtpf/Pbwr9v/f/Qz/9/533/Whp7/+f/e+vS1f6f/0/U5tb/5+7/9NxyyL3PwAAALBJ7v7PxC32PwAAADQjd/9n4xb7HwAAAJqRu/9zcUsn+1//r//X/+v/9f+bv77+f5m8/z9M/z9C/7/V9/OX/vn1//p/1s2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDP2dn/GZR3uf/2//l//r//X/2/++vr/ZdL/D9P/j9D/6//1//p/JjW3/v9Le7/q1OrLcUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/+v/l9H/7+7uXqX/1//v//2c7v9vWnD/f53+f2L6/2H6/xH6f/3/7Pv/s/8teZr+nzmaW/+fu//rcUsn+x8AAAB6kLv/G3GL/Q8AAADNyN3/zbjF/gcAAIBm5O7/VtzSyf7X/8+g/z+l//f+v/5/5f1//f9E9P/D9P8jWuz/T537b3/b/fxhbfvze/9f/8+6ufX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/R9f+3/XfXy/v/O6vNn1//r//X/+v/Lzb9/zD9/4gW+//zsO1+fumfX/+v/2fd3Pr/3P3fj1v2D7/j5/e7BAAAAOYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwfv/Dfb/3v/f/P2h/591/3+J/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu//HcUsn+x8AAAB6kLv/J3HLFTvb+kgAAADAxHL3/zRu8ef/AAAA0Izc/TfFLWfs/01tdyv0//p//b/+X/+/+evr/5dJ/z/sXPv/k6vD9f9J/6//1//32v97/5/bHXH/f/VY/5+7/2dxiz//BwAAgMU5fsDP5+7/edxi/wMAAEAzcvf/Im6x/wEAAKAZuft/GbfcfMm2PtKR0v/r//X/I/3/LfENrv/X/+v/F0H/P8z7/yP0/1P085fr/9vo/1cr/T+Hd8T9/+iPc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8j+fy/NbLr/9/6//j/o/5dB/z9s+/3/DYNfVv/fRP/v/f9G+n/v/zOFufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8V+1/n/x/X/77/8P9v+7K/2//l//Py/6/2Hb7/+H6f/1/0v+/Pp//T/r5tb/5+7/U9zSyf4HAACAHuTu/3PcYv8DAABAM3L3/yVusf8BAACgGbn7/xq3dLL/vf+v/9f/e/9f/7/56+v/l0n/P0z/v1n9jdL/6//1//p/JjW3/j93/9/ilk72PwAAAPQgd//f4xb7HwAAAJqRu//muMX+BwAAgGbk7v9H3NLE/j82+lfo/xfZ/1cerf/X/+v/9f/sp/8fts3+/553HP+y3v/fev+fH0H/r//X/zOJufX/ufv/Gbc0sf8BAACA2+Tu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b4lbOtn/I/3/yfoL9f+DvP+///Pr/zd/f+j/9f/6/4tP/z/M+/8j9P/e/9f/6/+Z1Nz6/9z9/4lbOtn/AAAA0IPc/bfGLfY/AAAANCN3/3/jFvsfAAAAmpG7/39xSyf73/v/S+r/L9f/6//1//p//f8I/f8w/f8I/b/+X/+v/2dSc+v/c/f/PwAA///2nlJP")
lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x3)

1.301179684s ago: executing program 1 (id=3500):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0)

1.156777504s ago: executing program 6 (id=3501):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1, 0xee, 0x3, 0x0)

878.647533ms ago: executing program 1 (id=3502):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

870.351223ms ago: executing program 6 (id=3503):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=ANY=[@ANYBLOB="70030000160001000000000004000000fc000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff01000000000000000000000000000100000000320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580000000000000000000000000000801c0004"], 0x370}}, 0x0)

642.467512ms ago: executing program 1 (id=3504):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="b81d36"], 0x0, 0x0, 0x0}, 0x0)

546.698332ms ago: executing program 6 (id=3505):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/mnt\x00')
ioctl$TUNSETIFF(r0, 0xb701, 0x0)

456.164312ms ago: executing program 7 (id=3379):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x148, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x20, 0x23}, {0xffffffff}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x1000008}}]}, 0x148}}, 0x0)

417.023231ms ago: executing program 6 (id=3506):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682)
write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x61, 0x0, 0xfe, @tick=0x7, {}, {0x0, 0x1}, @result}], 0x1c)

293.856301ms ago: executing program 5 (id=3507):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

245.663481ms ago: executing program 6 (id=3508):
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x200b)
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910"], 0x0)

245.065981ms ago: executing program 7 (id=3509):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x48}}, 0x0)

0s ago: executing program 6 (id=3510):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x800000, &(0x7f0000000280)={[{@nls={'nls', 0x3d, 'cp950'}}, {@force}, {@gid}, {@type={'type', 0x3d, "2d3eced1"}}, {@nobarrier}, {@nodecompose}, {@barrier}, {@uid}, {@nobarrier}, {@creator={'creator', 0x3d, "f39128bd"}}, {@nobarrier}, {@force}]}, 0x1, 0x5f0, &(0x7f0000001980)="$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")
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

kernel console output (not intermixed with test programs):

6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  216.149445][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  216.172968][ T8392] 8021q: adding VLAN 0 to HW filter on device team0
[  216.194265][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  216.221007][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  216.250486][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.257790][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.290845][ T7865] EXT4-fs (loop5): unmounting filesystem.
[  216.301716][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  216.359263][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  216.404189][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  216.433849][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.441062][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.485577][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  216.605245][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  216.634599][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  216.708553][ T8708] binder: 8707:8708 ioctl c018620c 0 returned -14
[  216.713118][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  216.728839][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  216.748309][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  216.793074][ T8392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  216.838081][ T8392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  216.879075][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  216.896165][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  216.936350][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  216.978079][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  217.018328][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  217.044925][ T8683] loop3: detected capacity change from 0 to 32768
[  217.084914][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  217.232519][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1910'.
[  217.381974][ T8727] loop2: detected capacity change from 0 to 512
[  217.439405][ T8727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.489816][ T8727] EXT4-fs (loop2): 1 truncate cleaned up
[  217.508172][ T8727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  217.615627][ T8738] loop1: detected capacity change from 0 to 256
[  217.711059][ T4250] EXT4-fs (loop2): unmounting filesystem.
[  217.836995][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  217.844561][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  217.890101][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.924881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  218.952597][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  219.033367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.062555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  219.087734][ T8749] loop3: detected capacity change from 0 to 32768
[  219.114318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  219.134090][ T8749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1917 (8749)
[  219.154131][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  219.189041][ T8392] device veth0_vlan entered promiscuous mode
[  219.201675][ T8759] loop5: detected capacity change from 0 to 32768
[  219.217664][ T8749] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.231540][ T8759] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1919 (8759)
[  219.250723][ T8392] device veth1_vlan entered promiscuous mode
[  219.257215][ T8749] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  219.298760][ T8749] BTRFS info (device loop3): using free space tree
[  219.341943][ T8759] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  219.362798][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  219.406930][ T8759] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  219.407121][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  219.416198][ T8759] BTRFS info (device loop5): force zlib compression, level 3
[  219.416226][ T8759] BTRFS info (device loop5): force clearing of disk cache
[  219.416247][ T8759] BTRFS info (device loop5): setting nodatasum
[  219.446184][ T8759] BTRFS info (device loop5): allowing degraded mounts
[  219.453192][ T8759] BTRFS info (device loop5): enabling disk space caching
[  219.460424][ T8759] BTRFS info (device loop5): disk space caching is enabled
[  219.469020][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.478823][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.490671][ T8392] device veth0_macvtap entered promiscuous mode
[  219.505147][ T8392] device veth1_macvtap entered promiscuous mode
[  219.533113][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.593860][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.614926][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.636849][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.676641][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.691433][ T8768] loop2: detected capacity change from 0 to 32768
[  219.769791][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  219.788256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  219.792454][ T8759] BTRFS info (device loop5): rebuilding free space tree
[  219.797615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  219.803011][ T8749] BTRFS info (device loop3): enabling ssd optimizations
[  219.850320][ T8759] BTRFS info (device loop5): disabling free space tree
[  219.872123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  219.890599][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  219.902032][ T8759] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  219.912185][ T8759] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  219.925479][ T8768] XFS (loop2): Mounting V5 Filesystem
[  219.972416][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.013478][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.096024][ T8392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.115234][ T8392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.144804][ T8768] XFS (loop2): Ending clean mount
[  220.198213][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.205760][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  220.217116][ T4255] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.238897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  220.277915][ T8392] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.316793][ T8392] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.366790][ T8392] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.400292][ T8392] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.577570][ T4250] XFS (loop2): Unmounting Filesystem
[  220.607223][ T7865] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  220.813597][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.860375][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.962998][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  220.987151][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.995515][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.053672][ T8850] loop1: detected capacity change from 0 to 64
[  221.066259][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  221.411459][ T6134] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  221.626907][ T6134] usb 4-1: Using ep0 maxpacket: 16
[  221.636125][ T6134] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  221.671384][ T8863] loop6: detected capacity change from 0 to 64
[  221.678563][ T6134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.686606][ T6134] usb 4-1: Product: syz
[  221.724558][ T6134] usb 4-1: Manufacturer: syz
[  221.734676][ T6134] usb 4-1: SerialNumber: syz
[  221.758718][ T6134] usb 4-1: config 0 descriptor??
[  221.768879][ T8867] loop1: detected capacity change from 0 to 64
[  221.787843][ T8869] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.800004][ T6134] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  222.069302][ T8872] loop2: detected capacity change from 0 to 256
[  222.151737][ T8872] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  222.212684][ T6134] usb 4-1: clie_3_5_startup: get interface number failed: -71
[  222.242871][ T6134] visor: probe of 4-1:0.0 failed with error -71
[  222.263359][ T6134] usb 4-1: USB disconnect, device number 6
[  223.911325][ T8946] Cannot find add_set index 0 as target
[  224.435762][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1982'.
[  224.457787][ T8970] overlayfs: bad mount option "redirect_dir=off:/"
[  224.623358][ T8975] xt_limit: Overflow, try lower: 65536/2147483648
[  224.690066][ T8977] xt_l2tp: wrong L2TP version: 0
[  225.314892][ T9005] loop2: detected capacity change from 0 to 16
[  225.375947][ T9005] erofs: (device loop2): mounted with root inode @ nid 36.
[  225.395237][ T9008] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1997'.
[  225.413867][ T9005] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  225.464079][ T9005] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851]
[  225.507174][ T9005] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  225.568910][ T9013] loop5: detected capacity change from 0 to 256
[  225.584632][ T9013] exfat: Deprecated parameter 'namecase'
[  225.603074][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'.
[  225.643059][ T9013] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  225.656906][   T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  225.736848][ T6126] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  225.799338][ T9018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2001'.
[  225.857169][   T14] usb 4-1: Using ep0 maxpacket: 8
[  225.871038][   T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  225.908661][   T14] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  225.929122][ T6126] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.931758][   T14] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  225.971353][ T6126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  225.981372][   T14] usb 4-1: Product: syz
[  225.995972][   T14] usb 4-1: Manufacturer: syz
[  226.021996][ T6126] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  226.027914][   T14] usb 4-1: SerialNumber: syz
[  226.051459][ T6126] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.120182][ T6126] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  226.138224][ T6126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.168591][ T6126] usb 7-1: Product: syz
[  226.172817][ T6126] usb 7-1: Manufacturer: syz
[  226.216155][ T6126] usb 7-1: SerialNumber: syz
[  226.242654][ T6126] usb 7-1: config 0 descriptor??
[  226.262198][   T14] usb 4-1: Invalid connection information received from device
[  226.278311][ T6126] redrat3 7-1:0.0: Couldn't find all endpoints
[  226.333113][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2007'.
[  226.530880][ T6125] usb 7-1: USB disconnect, device number 2
[  226.567386][   T14] usb 4-1: USB disconnect, device number 7
[  228.427488][ T9118] loop2: detected capacity change from 0 to 1024
[  228.537764][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'.
[  228.605862][ T8535] hfsplus: b-tree write err: -5, ino 4
[  228.629314][ T9126] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  228.642714][ T9127] netlink: 'syz.1.2049': attribute type 2 has an invalid length.
[  228.900507][ T9134] Cannot find add_set index 0 as target
[  229.292086][ T9151] loop3: detected capacity change from 0 to 64
[  229.432148][ T9157] loop5: detected capacity change from 0 to 256
[  229.785056][ T9170] netlink: 'syz.2.2071': attribute type 4 has an invalid length.
[  229.820912][ T9170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2071'.
[  229.840932][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'.
[  229.889765][ T9170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  230.075093][ T9181] device netdevsim0 entered promiscuous mode
[  230.250491][ T9187] gfs2: not a GFS2 filesystem
[  230.695458][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'.
[  231.139522][ T9225] loop1: detected capacity change from 0 to 256
[  231.146679][ T9225] exfat: Deprecated parameter 'namecase'
[  231.197024][ T9225] exfat: Deprecated parameter 'namecase'
[  231.224228][ T9225] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  231.552583][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'.
[  231.573513][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'.
[  231.603391][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'.
[  231.629996][ T9239] netlink: 'syz.6.2105': attribute type 7 has an invalid length.
[  232.515574][ T9283] xt_CT: You must specify a L4 protocol and not use inversions on it
[  232.613363][ T9288] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  232.676908][ T9288] overlayfs: conflicting options: userxattr,redirect_dir=off
[  232.731431][ T9293] netlink: 1033 bytes leftover after parsing attributes in process `syz.6.2129'.
[  232.843456][ T9297] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2131'.
[  233.076620][ T9301] loop1: detected capacity change from 0 to 4096
[  233.217957][ T9301] ntfs: volume version 3.1.
[  233.314741][ T9316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.322102][ T9316] IPv6: NLM_F_CREATE should be set when creating new route
[  233.329454][ T9316] IPv6: NLM_F_CREATE should be set when creating new route
[  233.503491][ T9322] loop1: detected capacity change from 0 to 8
[  233.616934][ T9322] SQUASHFS error: Failed to read block 0x1ec: -5
[  233.623340][ T9322] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  233.920422][ T9338] loop2: detected capacity change from 0 to 64
[  234.453933][ T9361] loop5: detected capacity change from 0 to 8
[  234.516999][ T6125] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  234.716837][ T6125] usb 4-1: Using ep0 maxpacket: 8
[  234.724290][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  234.756831][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  234.787015][ T6125] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  234.827932][ T6125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  234.877235][ T6125] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  234.897254][ T6125] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  234.917006][ T6125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.951447][ T6125] usb 4-1: config 0 descriptor??
[  234.972624][ T9349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.024133][ T9370] loop6: detected capacity change from 0 to 8192
[  235.074502][ T9370] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  235.137536][ T9370] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  235.165261][ T9370] REISERFS (device loop6): using ordered data mode
[  235.209418][ T9370] reiserfs: using flush barriers
[  235.260862][ T9370] REISERFS warning (device loop6): sh-457 journal_init_dev: journal_init_dev: Cannot open './file0': -15
[  235.278648][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.286047][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.295119][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.302216][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.314654][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.321771][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.328499][ T9370] REISERFS warning (device loop6): sh-462 journal_init: unable to initialize journal device
[  235.328875][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.345661][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.352671][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.359648][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.366535][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.373498][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.380481][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.387506][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.394388][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.402738][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.409696][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.417520][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.424404][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.432841][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.435193][ T9370] REISERFS warning (device loop6): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  235.441308][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.457756][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.464636][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.471626][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.478580][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.485655][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.493994][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.501043][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.508056][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  235.532870][ T4262] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  235.536131][ T4744] usb 4-1: USB disconnect, device number 8
[  235.980889][ T9404] netlink: 'syz.1.2177': attribute type 21 has an invalid length.
[  236.014579][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'.
[  236.449065][ T9423] netlink: 'syz.2.2184': attribute type 21 has an invalid length.
[  236.460459][ T9421] Unsupported ieee802154 address type: 0
[  237.877689][   T27] audit: type=1326 audit(1738017467.192:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ffc0000
[  238.002163][   T27] audit: type=1326 audit(1738017467.222:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f24dbd8cd29 code=0x7ffc0000
[  238.130280][ T9494] loop1: detected capacity change from 0 to 512
[  238.130718][   T27] audit: type=1326 audit(1738017467.222:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.6.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ffc0000
[  238.238452][ T9494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  238.286947][ T9494] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  238.531973][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  238.708477][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2224'.
[  239.053088][   T52] block nbd3: Attempted send on invalid socket
[  239.059988][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  239.086907][ T9528] efs: cannot read volume header
[  239.663069][ T9498] loop6: detected capacity change from 0 to 40427
[  239.715906][ T9498] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  239.753538][ T9498] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  239.760622][ T9550] loop3: detected capacity change from 0 to 512
[  239.797639][ T9498] F2FS-fs (loop6): invalid crc value
[  239.830272][ T9550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.878887][ T9498] F2FS-fs (loop6): Found nat_bits in checkpoint
[  239.905099][ T9550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  239.924362][ T9550] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.115604][ T9498] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[  240.158604][ T9498] F2FS-fs (loop6): Start checkpoint disabled!
[  240.230196][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  240.236113][ T9498] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  240.250262][ T9498] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  240.425937][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'.
[  240.436541][ T9498] F2FS-fs (loop6): switch discard_unit option is not allowed
[  240.507011][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2240'.
[  240.670028][ T9578] loop1: detected capacity change from 0 to 64
[  241.274590][ T9594] loop2: detected capacity change from 0 to 8
[  241.369268][ T9594] SQUASHFS error: Failed to read block 0x260685: -5
[  241.407173][ T9594] SQUASHFS error: Unable to read metadata cache entry [260685]
[  241.414794][ T9594] SQUASHFS error: Unable to read directory block [260685:0]
[  241.453169][ T9603] xt_NFQUEUE: number of total queues is 0
[  241.563989][ T9573] loop5: detected capacity change from 0 to 32768
[  241.589799][ T9606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.276830][ T4294] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  242.348979][ T9633] netlink: 'syz.1.2265': attribute type 3 has an invalid length.
[  242.482468][ T4294] usb 4-1: Using ep0 maxpacket: 16
[  242.489779][ T4294] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  242.507110][ T9638] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2266'.
[  242.542395][ T4294] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0
[  242.590763][ T4294] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  242.627003][ T4294] usb 4-1: config 0 interface 0 has no altsetting 0
[  242.635912][ T9641] loop1: detected capacity change from 0 to 256
[  242.664800][ T4294] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  242.694474][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.724695][ T9641] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  242.724754][ T4294] usb 4-1: Product: syz
[  242.761464][ T4294] usb 4-1: Manufacturer: syz
[  242.766150][ T4294] usb 4-1: SerialNumber: syz
[  242.786982][ T9641] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  242.803801][ T4294] usb 4-1: config 0 descriptor??
[  242.830121][ T4294] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  242.840789][ T9641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  243.065574][ T4744] usb 4-1: USB disconnect, device number 9
[  243.303083][ T9625] loop2: detected capacity change from 0 to 32768
[  243.348029][ T9625] XFS: attr2 mount option is deprecated.
[  243.390775][ T9625] XFS: ikeep mount option is deprecated.
[  243.396492][ T9625] XFS: noikeep mount option is deprecated.
[  243.481623][ T9625] XFS (loop2): Mounting V5 Filesystem
[  243.542165][ T9631] loop5: detected capacity change from 0 to 32768
[  243.577360][ T9625] XFS (loop2): Ending clean mount
[  243.646644][ T9631] XFS (loop5): Mounting V5 Filesystem
[  243.666331][ T9625] XFS (loop2): Quotacheck needed: Please wait.
[  243.810768][ T9631] XFS (loop5): Ending clean mount
[  243.861054][ T9631] XFS (loop5): Quotacheck needed: Please wait.
[  243.898416][ T9625] XFS (loop2): Quotacheck: Done.
[  244.052153][ T9689] xt_connbytes: Forcing CT accounting to be enabled
[  244.062877][ T9631] XFS (loop5): Quotacheck: Done.
[  244.102844][ T4250] XFS (loop2): Unmounting Filesystem
[  244.277725][ T7865] XFS (loop5): Unmounting Filesystem
[  244.579979][ T9707] ERROR: device name not specified.
[  244.789245][ T9714] loop3: detected capacity change from 0 to 64
[  244.888751][   T27] audit: type=1800 audit(1738017474.202:2177): pid=9714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2286" name="file1" dev="loop3" ino=18 res=0 errno=0
[  245.112591][ T9724] loop6: detected capacity change from 0 to 16
[  245.235291][ T9729] loop3: detected capacity change from 0 to 1764
[  245.636954][ T9740] netlink: 'syz.6.2295': attribute type 1 has an invalid length.
[  245.715451][ T9744] tmpfs: Bad value for 'mpol'
[  246.304590][ T9726] loop2: detected capacity change from 0 to 32768
[  246.372351][ T9726] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2290 (9726)
[  246.495972][ T4750] kernel write not supported for file /151/net/sockstat (pid: 4750 comm: kworker/0:14)
[  246.512769][ T9726] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  246.541554][ T9761] loop3: detected capacity change from 0 to 8192
[  246.586859][ T9726] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  246.592502][ T9761] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  246.614166][ T9726] BTRFS info (device loop2): using free space tree
[  246.636875][ T9761] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  246.707165][ T9761] REISERFS (device loop3): using ordered data mode
[  246.713734][ T9761] reiserfs: using flush barriers
[  246.783783][ T9761] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  246.835246][ T9761] REISERFS (device loop3): checking transaction log (loop3)
[  246.854321][ T9761] REISERFS (device loop3): Using rupasov hash to sort names
[  246.862981][ T9761] REISERFS (device loop3): using 3.5.x disk format
[  246.871183][ T9761] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  246.894296][ T9761] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  246.927026][ T9761] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  246.984572][ T9761] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  246.996361][ T9726] BTRFS info (device loop2): enabling ssd optimizations
[  247.037127][ T6126] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  247.226944][ T6126] usb 7-1: Using ep0 maxpacket: 8
[  247.234799][ T6126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  247.298998][ T6126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.349532][ T6126] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.402747][ T6126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  247.434760][ T6126] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  247.485962][ T6126] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  247.521411][ T6126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.582325][ T6126] usb 7-1: config 0 descriptor??
[  247.600246][ T4250] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.626065][ T9782] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  247.918273][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.932213][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.947139][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.954049][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.961545][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.968500][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.975379][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.982474][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.989463][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  247.996373][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.004877][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.012792][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.020010][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.026969][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.033898][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.040885][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.047919][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.054810][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.061849][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.068863][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.075874][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.082944][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.089866][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.097305][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.104185][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.111941][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.118940][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.129690][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.136625][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  248.146188][ T4262] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  248.258206][ T4293] usb 7-1: USB disconnect, device number 3
[  248.341208][ T9803] loop5: detected capacity change from 0 to 32768
[  248.413495][ T9803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2312 (9803)
[  248.493580][ T9803] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.534772][ T9803] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  248.544834][ T9833] xt_bpf: check failed: parse error
[  248.563417][ T9803] BTRFS info (device loop5): setting nodatasum
[  248.590333][ T9803] BTRFS info (device loop5): force zlib compression, level 3
[  248.620818][ T9803] BTRFS info (device loop5): metadata ratio 1
[  248.656586][ T9803] BTRFS info (device loop5): enabling ssd optimizations
[  248.699240][ T9803] BTRFS info (device loop5): allowing degraded mounts
[  248.706085][ T9803] BTRFS info (device loop5): using free space tree
[  248.888353][ T9852] tmpfs: Bad value for 'mpol'
[  249.196572][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2329'.
[  249.206938][ T9876] netlink: 'syz.3.2329': attribute type 2 has an invalid length.
[  249.214740][ T9876] netlink: 'syz.3.2329': attribute type 1 has an invalid length.
[  249.346822][ T9876] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2329'.
[  249.790373][ T7865] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.016900][ T6126] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  250.054398][ T9906] loop3: detected capacity change from 0 to 512
[  250.094667][ T9908] loop1: detected capacity change from 0 to 64
[  250.174105][ T9906] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2340: casefold flag without casefold feature
[  250.236859][ T6126] usb 3-1: Using ep0 maxpacket: 8
[  250.261433][ T6126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  250.327200][ T9906] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2340: couldn't read orphan inode 15 (err -117)
[  250.346842][ T6126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  250.356550][ T6126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  250.392757][ T9906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  250.423342][ T6126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  250.506268][ T6126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  250.537730][ T6126] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  250.573206][ T6126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.615786][ T6126] usb 3-1: config 0 descriptor??
[  250.636091][ T9893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  250.645169][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  250.950200][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.963436][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.970775][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.978327][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.985172][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.992260][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  250.999161][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.005991][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.012932][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.020058][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.027076][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.034329][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.041355][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.048262][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.055094][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.061985][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.070175][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.077093][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.084811][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.091841][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.098705][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.105535][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.112934][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.120035][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.126951][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.132908][ T9927] loop3: detected capacity change from 0 to 4096
[  251.133766][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.147082][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.154283][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.159437][ T6134] usb 3-1: USB disconnect, device number 8
[  251.161179][ T4252] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  251.176106][ T4262] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  251.269682][ T9927] ntfs3: loop3: ino=3, Correct links count -> 2.
[  251.276175][ T9927] ntfs3: loop3: Failed to load $Volume.
[  252.004113][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2360'.
[  252.184076][ T9966] netlink: 'syz.6.2363': attribute type 20 has an invalid length.
[  252.276856][ T8088] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  252.336332][ T9972] netlink: 'syz.5.2366': attribute type 1 has an invalid length.
[  252.364837][ T9972] netlink: 'syz.5.2366': attribute type 3 has an invalid length.
[  252.416384][ T9972] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2366'.
[  252.466829][ T8088] usb 4-1: Using ep0 maxpacket: 32
[  252.473953][ T8088] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  252.508178][ T8088] usb 4-1: config 1 interface 0 has no altsetting 0
[  252.554477][ T8088] usb 4-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.40
[  252.574340][ T9980] xt_l2tp: unknown flags: 17
[  252.579133][ T8088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.616813][ T8088] usb 4-1: Product: syz
[  252.621039][ T8088] usb 4-1: Manufacturer: syz
[  252.625661][ T8088] usb 4-1: SerialNumber: syz
[  252.841528][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'.
[  253.089726][ T8088] usbhid 4-1:1.0: can't add hid device: -71
[  253.095780][ T8088] usbhid: probe of 4-1:1.0 failed with error -71
[  253.153385][ T8088] usb 4-1: USB disconnect, device number 10
[  253.204539][T10004] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  254.688911][T10024] loop6: detected capacity change from 0 to 32768
[  254.696162][T10024] XFS: attr2 mount option is deprecated.
[  254.758342][T10024] XFS: ikeep mount option is deprecated.
[  254.764402][T10024] XFS: noikeep mount option is deprecated.
[  254.873938][T10024] XFS (loop6): Mounting V5 Filesystem
[  254.874774][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'.
[  254.994011][T10078] netlink: 'syz.1.2415': attribute type 5 has an invalid length.
[  255.103488][T10024] XFS (loop6): Ending clean mount
[  255.119011][T10024] XFS (loop6): Quotacheck needed: Please wait.
[  255.194738][T10024] XFS (loop6): Quotacheck: Done.
[  255.376291][ T8392] XFS (loop6): Unmounting Filesystem
[  255.680351][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.686768][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  255.994813][T10105] kAFS: unparsable volume name
[  256.375157][T10118] loop5: detected capacity change from 0 to 64
[  256.449255][T10092] loop2: detected capacity change from 0 to 32768
[  256.744601][T10126] cgroup: Need name or subsystem set
[  257.052304][T10110] loop3: detected capacity change from 0 to 32768
[  257.087766][T10110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2431 (10110)
[  257.155768][T10110] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.181094][T10110] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  257.228311][T10110] BTRFS info (device loop3): setting nodatasum
[  257.245181][T10110] BTRFS info (device loop3): force zlib compression, level 3
[  257.262773][T10110] BTRFS info (device loop3): metadata ratio 1
[  257.291689][T10110] BTRFS info (device loop3): enabling ssd optimizations
[  257.312025][T10110] BTRFS info (device loop3): allowing degraded mounts
[  257.360833][T10110] BTRFS info (device loop3): using free space tree
[  257.424707][T10147] loop2: detected capacity change from 0 to 64
[  257.515295][T10152] loop6: detected capacity change from 0 to 256
[  257.607575][T10152] exfat: Deprecated parameter 'namecase'
[  257.613327][T10152] exfat: Deprecated parameter 'namecase'
[  257.701612][T10152] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  258.053212][ T4255] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.094775][T10185] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  258.996813][   T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  259.072334][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'.
[  259.191259][   T26] usb 6-1: Using ep0 maxpacket: 32
[  259.199659][   T26] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  259.227706][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.250934][   T26] usb 6-1: config 0 descriptor??
[  259.274738][   T26] gspca_main: sunplus-2.14.0 probing 0458:7006
[  259.515009][T10234] loop3: detected capacity change from 0 to 256
[  259.535315][T10235] loop2: detected capacity change from 0 to 64
[  259.536133][T10234] exfat: Deprecated parameter 'utf8'
[  259.550233][T10234] exfat: Deprecated parameter 'namecase'
[  259.556495][T10234] exfat: Deprecated parameter 'utf8'
[  259.562903][T10234] exfat: Deprecated parameter 'utf8'
[  259.575718][T10234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabc8c723, utbl_chksum : 0xe619d30d)
[  259.674873][   T26] gspca_sunplus: reg_w_riv err -71
[  259.680284][   T26] sunplus: probe of 6-1:0.0 failed with error -71
[  259.732471][   T26] usb 6-1: USB disconnect, device number 2
[  259.822074][T10241] loop1: detected capacity change from 0 to 64
[  260.341331][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2497'.
[  260.371640][T10260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.554904][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'.
[  260.590737][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2500'.
[  260.829254][T10279] loop3: detected capacity change from 0 to 64
[  261.211488][T10291] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2512'.
[  261.360545][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'.
[  261.425201][T10296] 8021q: adding VLAN 0 to HW filter on device bond1
[  261.517057][T10269] loop2: detected capacity change from 0 to 32768
[  261.577352][T10269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2501 (10269)
[  261.657141][T10269] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  261.675217][T10309] loop1: detected capacity change from 0 to 64
[  261.718339][T10269] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  261.744867][T10269] BTRFS info (device loop2): using free space tree
[  261.943923][T10325] overlayfs: failed to resolve './file0': -2
[  262.003948][T10269] BTRFS info (device loop2): enabling ssd optimizations
[  262.215328][ T4250] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  262.978330][   T27] audit: type=1326 audit(1738017492.292:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  263.000273][T10362] netlink: 'syz.5.2538': attribute type 6 has an invalid length.
[  263.071164][   T27] audit: type=1326 audit(1738017492.312:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  263.106814][ T4298] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  263.149834][   T27] audit: type=1326 audit(1738017492.312:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  263.223779][   T27] audit: type=1326 audit(1738017492.312:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10357 comm="syz.1.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  263.247621][T10368] x_tables: ip_tables: osf match: only valid for protocol 6
[  263.261047][T10338] loop3: detected capacity change from 0 to 32768
[  263.307076][ T4298] usb 3-1: Using ep0 maxpacket: 8
[  263.321241][ T4298] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF6, skipping
[  263.348436][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.360082][ T4298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  263.365620][T10338] ERROR: (device loop3): dbAllocAG: Corrupt dmapctl page
[  263.365620][T10338] 
[  263.375126][ T4298] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d
[  263.417855][T10338] ERROR: (device loop3): remounting filesystem as read-only
[  263.461063][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.477353][ T4298] usb 3-1: Product: syz
[  263.491803][ T4298] usb 3-1: Manufacturer: syz
[  263.496462][ T4298] usb 3-1: SerialNumber: syz
[  263.541982][ T4298] usb 3-1: config 0 descriptor??
[  263.575580][ T4298] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  263.864815][ T4298] usb 3-1: USB disconnect, device number 9
[  263.944669][T10386] loop6: detected capacity change from 0 to 736
[  264.046153][T10386] rock: directory entry would overflow storage
[  264.076591][T10386] rock: sig=0x3b10, size=4, remaining=3
[  264.227469][T10396] loop5: detected capacity change from 0 to 8
[  265.025867][T10425] libceph: resolve '.
[  265.025867][T10425] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  265.025867][T10425] ' (ret=-3): failed
[  265.069051][T10429] loop5: detected capacity change from 0 to 1024
[  265.236997][T10435] netlink: 'syz.2.2574': attribute type 21 has an invalid length.
[  265.244958][T10435] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2574'.
[  265.360376][T10438] loop6: detected capacity change from 0 to 256
[  265.476295][T10443] loop5: detected capacity change from 0 to 128
[  265.503860][T10443] FAT-fs (loop5): Directory bread(block 3236) failed
[  265.535313][T10443] FAT-fs (loop5): Directory bread(block 3237) failed
[  265.569030][T10443] FAT-fs (loop5): Directory bread(block 3238) failed
[  265.578509][   T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  265.607169][T10443] FAT-fs (loop5): Directory bread(block 3239) failed
[  265.625293][T10443] FAT-fs (loop5): Directory bread(block 3240) failed
[  265.644423][T10443] FAT-fs (loop5): Directory bread(block 3241) failed
[  265.655472][T10443] FAT-fs (loop5): Directory bread(block 3242) failed
[  265.672752][T10443] FAT-fs (loop5): Directory bread(block 3243) failed
[  265.714870][T10443] FAT-fs (loop5): Directory bread(block 3236) failed
[  265.745198][T10443] FAT-fs (loop5): Directory bread(block 3237) failed
[  265.788682][   T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.816892][   T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  265.826580][   T26] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  265.871190][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.895737][   T26] usb 4-1: config 0 descriptor??
[  266.319370][   T26] Bluetooth: Can't get version to change to load ram patch err
[  266.347508][   T26] Bluetooth: Loading patch file failed
[  266.353081][   T26] ath3k: probe of 4-1:0.0 failed with error -71
[  266.408172][   T26] usb 4-1: USB disconnect, device number 11
[  266.732055][ T6131] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  266.798690][T10484] misc userio: The device must be registered before sending interrupts
[  266.936958][ T6131] usb 3-1: Using ep0 maxpacket: 16
[  266.972072][ T6131] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  267.011781][T10491] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  267.032125][ T6131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.071182][ T6131] usb 3-1: config 0 descriptor??
[  267.089365][ T6131] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  267.224402][T10497] loop6: detected capacity change from 0 to 256
[  267.290191][ T6131] usb 3-1: Detected FT232B
[  267.300887][T10497] FAT-fs (loop6): Directory bread(block 64) failed
[  267.329894][T10497] FAT-fs (loop6): Directory bread(block 65) failed
[  267.376976][T10497] FAT-fs (loop6): Directory bread(block 66) failed
[  267.394617][T10497] FAT-fs (loop6): Directory bread(block 67) failed
[  267.415059][T10497] FAT-fs (loop6): Directory bread(block 68) failed
[  267.456873][T10497] FAT-fs (loop6): Directory bread(block 69) failed
[  267.464502][T10497] FAT-fs (loop6): Directory bread(block 70) failed
[  267.503809][ T6131] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  267.516879][T10497] FAT-fs (loop6): Directory bread(block 71) failed
[  267.519612][ T6131] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  267.540294][T10497] FAT-fs (loop6): Directory bread(block 72) failed
[  267.583253][ T6131] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  267.583252][T10497] FAT-fs (loop6): Directory bread(block 73) failed
[  267.616982][ T6131] usb 3-1: USB disconnect, device number 10
[  267.679445][ T6131] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  267.710565][ T6131] ftdi_sio 3-1:0.0: device disconnected
[  268.136399][T10526] QAT: Device 192 not found
[  268.454456][T10536] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  268.766304][T10543] loop2: detected capacity change from 0 to 4096
[  268.770221][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'.
[  268.792539][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'.
[  268.847995][T10551] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.853015][T10553] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  268.917398][T10543] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  268.949443][T10556] loop6: detected capacity change from 0 to 512
[  268.964640][T10543] Remounting filesystem read-only
[  269.060823][T10556] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  269.094169][T10556] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.229494][T10566] loop5: detected capacity change from 0 to 512
[  269.327516][T10572] loop1: detected capacity change from 0 to 64
[  269.347420][T10566] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  269.356456][T10566] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.387979][ T8392] EXT4-fs (loop6): unmounting filesystem.
[  269.465709][T10574] loop3: detected capacity change from 0 to 256
[  269.504340][T10574] UBIFS error (pid: 10574): cannot open "ubifs", error -22
[  269.708717][ T7865] EXT4-fs (loop5): unmounting filesystem.
[  269.806613][T10583] loop3: detected capacity change from 0 to 164
[  269.905635][T10588] rdma_rxe: rxe creation allowed on top of a real device only
[  270.301774][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2655'.
[  270.346894][ T4743] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  270.545678][ T4743] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  270.557090][T10614] xt_l2tp: invalid flags combination: 8
[  270.570157][ T4743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.590241][ T4743] usb 4-1: Product: syz
[  270.594771][ T4743] usb 4-1: Manufacturer: syz
[  270.617913][ T4743] usb 4-1: SerialNumber: syz
[  270.657801][ T4743] usb 4-1: config 0 descriptor??
[  270.672709][ T4743] gspca_main: sunplus-2.14.0 probing 055f:c230
[  270.728186][T10620] xt_hashlimit: max too large, truncated to 1048576
[  271.122089][ T4743] usb 4-1: USB disconnect, device number 12
[  271.295211][T10639] loop6: detected capacity change from 0 to 4096
[  271.322725][T10639] EXT4-fs (loop6): Test dummy encryption mode enabled
[  271.372129][T10639] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  271.391923][T10639] System zones: 0-5
[  271.405709][T10639] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  271.457390][ T4293] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  271.577488][ T8392] EXT4-fs (loop6): unmounting filesystem.
[  271.646784][ T4293] usb 2-1: Using ep0 maxpacket: 16
[  271.656175][ T4293] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  271.686867][ T4293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.694948][ T4293] usb 2-1: Product: syz
[  271.710775][ T4293] usb 2-1: Manufacturer: syz
[  271.716237][ T4293] usb 2-1: SerialNumber: syz
[  271.729488][ T4293] r8152-cfgselector 2-1: config 0 descriptor??
[  271.859735][T10657] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2680'.
[  272.151541][ T4293] r8152-cfgselector 2-1: Unknown version 0x0000
[  272.176063][ T4293] r8152-cfgselector 2-1: USB disconnect, device number 9
[  272.345581][T10673] device caif0 left promiscuous mode
[  273.366827][ T6604] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  273.534112][T10720] loop2: detected capacity change from 0 to 512
[  273.578675][ T6604] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  273.608017][ T6604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.628117][T10720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  273.638409][ T6604] usb 4-1: config 0 descriptor??
[  273.648944][ T6604] cp210x 4-1:0.0: cp210x converter detected
[  273.687306][T10720] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.856667][ T6604] usb 4-1: cp210x converter now attached to ttyUSB0
[  273.892133][T10728] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  273.930172][T10728] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  273.964073][T10728] overlayfs: missing 'lowerdir'
[  273.988263][ T4250] EXT4-fs (loop2): unmounting filesystem.
[  274.063861][ T6604] usb 4-1: USB disconnect, device number 13
[  274.104733][ T6604] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  274.143803][ T6604] cp210x 4-1:0.0: device disconnected
[  274.233509][T10712] loop1: detected capacity change from 0 to 40427
[  274.283331][T10712] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  274.292545][T10712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  274.354549][T10712] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff
[  274.374178][T10712] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  274.395998][T10712] F2FS-fs (loop1): invalid crc value
[  274.444304][T10712] F2FS-fs (loop1): Found nat_bits in checkpoint
[  274.549419][T10712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  274.558970][T10712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  274.782877][ T4248] syz-executor: attempt to access beyond end of device
[  274.782877][ T4248] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  275.129294][T10736] loop5: detected capacity change from 0 to 32768
[  275.176020][ T5341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (5341)
[  275.248940][T10736] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  275.267037][T10736] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  275.275746][T10736] BTRFS info (device loop5): enabling auto defrag
[  275.326868][T10736] BTRFS info (device loop5): doing ref verification
[  275.333530][T10736] BTRFS info (device loop5): use no compression
[  275.375595][T10736] BTRFS info (device loop5): force clearing of disk cache
[  275.407202][T10736] BTRFS info (device loop5): max_inline at 4096
[  275.417277][T10736] BTRFS info (device loop5): metadata ratio 5
[  275.456786][T10736] BTRFS info (device loop5): using free space tree
[  275.638665][T10786] loop2: detected capacity change from 0 to 1024
[  275.706476][T10736] BTRFS info (device loop5): enabling ssd optimizations
[  275.769152][T10736] BTRFS info (device loop5): rebuilding free space tree
[  275.771696][T10786] hfsplus: keylen 65060 too large
[  275.786091][T10800] loop6: detected capacity change from 0 to 128
[  275.819047][T10801] loop3: detected capacity change from 0 to 128
[  275.831490][T10800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  275.894327][T10800] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  275.909984][T10803] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  276.119782][ T7865] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  276.218002][ T6131] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  276.316280][   T27] audit: type=1326 audit(1738017505.622:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0498cd29 code=0x7ffc0000
[  276.381974][   T27] audit: type=1326 audit(1738017505.632:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5d0498cd29 code=0x7ffc0000
[  276.418773][ T6131] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[  276.437868][ T6131] usb 7-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config
[  276.455041][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'.
[  276.461800][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2746'.
[  276.479724][ T6131] usb 7-1: config 0 has no interface number 0
[  276.490352][ T6131] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7
[  276.505199][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'.
[  276.516537][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'.
[  276.531079][ T6131] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024
[  276.542777][T10816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'.
[  276.556625][ T6131] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  276.618041][ T6131] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  276.650609][ T6131] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.687963][ T6131] usb 7-1: config 0 descriptor??
[  276.702576][   T27] audit: type=1326 audit(1738017506.012:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0498cd29 code=0x7ffc0000
[  276.748401][ T6131] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  276.797244][   T27] audit: type=1326 audit(1738017506.012:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0498cd29 code=0x7ffc0000
[  276.864185][T10824] loop3: detected capacity change from 0 to 1764
[  276.908477][   T33] usb 7-1: Failed to submit usb control message: -71
[  276.908600][ T2119] usb 7-1: USB disconnect, device number 4
[  276.925967][   T33] usb 7-1: unable to send the bmi data to the device: -71
[  276.956913][   T27] audit: type=1326 audit(1738017506.042:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5d049bf5e5 code=0x7ffc0000
[  276.980741][   T33] usb 7-1: unable to get target info from device
[  277.016964][   T33] usb 7-1: could not get target info (-71)
[  277.033730][   T33] usb 7-1: could not probe fw (-71)
[  277.047774][   T27] audit: type=1326 audit(1738017506.202:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.2.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5d0498cd29 code=0x7ffc0000
[  277.285608][T10829] loop1: detected capacity change from 0 to 4096
[  277.328777][T10829] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  277.388559][T10829] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  277.418609][T10829] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  277.461579][T10829] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  277.524511][T10829] ntfs: volume version 3.1.
[  277.628930][ T8392] EXT4-fs (loop6): unmounting filesystem.
[  277.825145][T10849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2757'.
[  278.364477][T10857] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0
[  278.696027][T10882] sctp: [Deprecated]: syz.6.2774 (pid 10882) Use of int in maxseg socket option.
[  278.696027][T10882] Use struct sctp_assoc_value instead
[  278.987008][T10888] xt_CT: No such helper "syz0"
[  279.199494][T10900] loop5: detected capacity change from 0 to 8
[  279.761535][T10919] loop3: detected capacity change from 0 to 1024
[  279.819121][T10919] EXT4-fs: Ignoring removed i_version option
[  279.838794][T10919] EXT4-fs (loop3): Test dummy encryption mode enabled
[  279.941728][T10919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  279.977696][T10897] loop1: detected capacity change from 0 to 32768
[  280.182939][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  280.250256][T10931] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2796'.
[  280.348896][T10937] loop6: detected capacity change from 0 to 256
[  280.484675][T10937] FAT-fs (loop6): Directory bread(block 64) failed
[  280.513476][T10939] loop5: detected capacity change from 0 to 4096
[  280.529974][T10937] FAT-fs (loop6): Directory bread(block 65) failed
[  280.536660][T10937] FAT-fs (loop6): Directory bread(block 66) failed
[  280.586847][T10937] FAT-fs (loop6): Directory bread(block 67) failed
[  280.593530][T10937] FAT-fs (loop6): Directory bread(block 68) failed
[  280.616562][T10937] FAT-fs (loop6): Directory bread(block 69) failed
[  280.645167][T10937] FAT-fs (loop6): Directory bread(block 70) failed
[  280.664114][T10937] FAT-fs (loop6): Directory bread(block 71) failed
[  280.686413][T10937] FAT-fs (loop6): Directory bread(block 72) failed
[  280.710769][T10937] FAT-fs (loop6): Directory bread(block 73) failed
[  280.783704][ T7865] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  280.817003][ T7865] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  281.076810][ T2119] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  281.279386][ T2119] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  281.301439][ T2119] usb 4-1: config 0 interface 0 has no altsetting 0
[  281.319435][ T2119] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  281.346766][ T2119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.382112][ T2119] usb 4-1: Product: syz
[  281.395510][ T2119] usb 4-1: Manufacturer: syz
[  281.410478][ T2119] usb 4-1: SerialNumber: syz
[  281.434167][ T2119] usb 4-1: config 0 descriptor??
[  281.471146][ T2119] usb 4-1: selecting invalid altsetting 0
[  281.671911][T10969] loop2: detected capacity change from 0 to 8
[  281.772760][ T2119] usb 4-1: USB disconnect, device number 14
[  281.832813][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  281.832831][   T27] audit: type=1800 audit(1738017511.142:2189): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2815" name="file1" dev="loop2" ino=5 res=0 errno=0
[  282.287262][T10987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2824'.
[  282.634884][T10989] loop5: detected capacity change from 0 to 8192
[  282.659686][T10994] loop3: detected capacity change from 0 to 4096
[  282.681772][T10989] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  282.706602][T10989] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  282.735574][T10989] REISERFS (device loop5): using ordered data mode
[  282.742650][T10989] reiserfs: using flush barriers
[  282.762255][T10989] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  282.779255][T10989] REISERFS (device loop5): checking transaction log (loop5)
[  282.788317][T10989] REISERFS (device loop5): Using r5 hash to sort names
[  282.834238][T10989] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "01777777777777777777777î§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒÏð D|ÙÊÞÔ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ
[  282.834238][T10989] ðOÉQ±•Çý6ÿÛÐb"
[  282.946179][T11002] loop1: detected capacity change from 0 to 8
[  283.161662][   T27] audit: type=1800 audit(1738017512.472:2190): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2830" name="file1" dev="loop1" ino=5 res=0 errno=0
[  284.296470][T11046] loop3: detected capacity change from 0 to 1024
[  284.304515][T11050] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  284.355535][T11054] hsr0: VLAN not yet supported
[  284.602677][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'.
[  284.669070][   T27] audit: type=1326 audit(1738017513.982:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1d8cd29 code=0x7ffc0000
[  284.691534][    C1] vkms_vblank_simulate: vblank timer overrun
[  284.746794][   T27] audit: type=1326 audit(1738017513.982:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f55e1d8cd29 code=0x7ffc0000
[  284.992097][   T27] audit: type=1326 audit(1738017514.302:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1d8cd29 code=0x7ffc0000
[  285.063136][   T27] audit: type=1326 audit(1738017514.332:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11061 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e1d8cd29 code=0x7ffc0000
[  285.186893][   T27] audit: type=1326 audit(1738017514.332:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e1dbf5e5 code=0x7ffc0000
[  285.260220][   T27] audit: type=1326 audit(1738017514.482:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.2859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f55e1d8cd29 code=0x7ffc0000
[  285.740761][T11094] loop3: detected capacity change from 0 to 256
[  286.160977][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'.
[  286.187338][T11110] SET target dimension over the limit!
[  286.209002][T11106] loop2: detected capacity change from 0 to 4096
[  286.266851][ T2119] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  286.476888][ T2119] usb 6-1: Using ep0 maxpacket: 8
[  286.512833][ T2119] usb 6-1: unable to get BOS descriptor or descriptor too short
[  286.543051][ T2119] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  286.561694][ T2119] usb 6-1: config 8 interface 0 has no altsetting 0
[  286.595554][ T2119] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  286.624060][ T2119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.643913][ T2119] usb 6-1: Product: syz
[  286.654056][ T2119] usb 6-1: Manufacturer: syz
[  286.668074][ T2119] usb 6-1: SerialNumber: syz
[  286.704066][T11102] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  286.936579][ T2119] usb 6-1: selecting invalid altsetting 0
[  286.946784][   T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  286.996315][T11130] loop1: detected capacity change from 0 to 4096
[  287.005237][ T2119] usb 6-1: USB disconnect, device number 3
[  287.028762][T11130] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  287.159977][   T26] usb 4-1: Using ep0 maxpacket: 8
[  287.172859][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  287.196655][   T26] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  287.227341][   T26] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  287.235481][   T26] usb 4-1: Product: syz
[  287.247785][   T26] usb 4-1: Manufacturer: syz
[  287.257036][   T26] usb 4-1: SerialNumber: syz
[  287.297530][ T4248] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  287.306280][ T4248] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  287.313888][ T4248] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  287.349132][ T6921] udevd[6921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.477436][   T26] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  287.503163][   T26] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  287.528191][   T26] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  287.687864][   T26] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  287.696234][   T26] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  287.724328][   T26] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  287.743485][ T4752] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  287.758833][   T26] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  287.806757][   T26] usb 4-1: USB disconnect, device number 15
[  287.847821][   T26] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  287.865425][   T26] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  287.905946][   T26] visor 4-1:1.0: device disconnected
[  287.948649][ T4752] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  287.972656][ T4752] usb 2-1: config 0 has no interface number 0
[  287.989290][ T4752] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  288.014175][T11147] netlink: 'syz.6.2903': attribute type 30 has an invalid length.
[  288.043194][ T4752] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  288.058050][ T4752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.087388][ T4752] usb 2-1: config 0 descriptor??
[  288.174630][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'.
[  288.312260][ T4751] usb 2-1: USB disconnect, device number 10
[  288.938686][T11167] loop6: detected capacity change from 0 to 4096
[  288.966460][T11167] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  289.431452][T11187] loop1: detected capacity change from 0 to 256
[  289.656834][T11195] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2927'.
[  289.854958][T11200] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  289.911562][   T27] audit: type=1326 audit(1738017519.222:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.6.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ffc0000
[  289.969600][   T27] audit: type=1326 audit(1738017519.222:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.6.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ffc0000
[  290.198235][T11208] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2933'.
[  290.534460][T11217] xt_nfacct: accounting object `syz0' does not exists
[  290.662160][T11221] netlink: 'syz.6.2939': attribute type 1 has an invalid length.
[  290.911317][T11229] loop6: detected capacity change from 0 to 256
[  291.028265][T11229] FAT-fs (loop6): Directory bread(block 64) failed
[  291.038479][T11231] netlink: 'syz.1.2944': attribute type 27 has an invalid length.
[  291.048238][T11229] FAT-fs (loop6): Directory bread(block 65) failed
[  291.055001][T11229] FAT-fs (loop6): Directory bread(block 66) failed
[  291.099746][T11229] FAT-fs (loop6): Directory bread(block 67) failed
[  291.120752][T11229] FAT-fs (loop6): Directory bread(block 68) failed
[  291.146842][T11229] FAT-fs (loop6): Directory bread(block 69) failed
[  291.153538][T11229] FAT-fs (loop6): Directory bread(block 70) failed
[  291.193464][T11229] FAT-fs (loop6): Directory bread(block 71) failed
[  291.214193][T11229] FAT-fs (loop6): Directory bread(block 72) failed
[  291.266821][T11229] FAT-fs (loop6): Directory bread(block 73) failed
[  291.839768][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'.
[  292.236898][ T6131] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  292.341315][ T4751] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  292.428673][ T6131] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6
[  292.446774][ T6131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.478038][ T6131] usb 2-1: config 0 descriptor??
[  292.561567][ T4751] usb 6-1: not running at top speed; connect to a high speed hub
[  292.580453][ T4751] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[  292.602239][ T4751] usb 6-1: config 95 has no interface number 0
[  292.619948][ T4751] usb 6-1: config 95 interface 1 has no altsetting 0
[  292.636122][ T4751] usb 6-1: string descriptor 0 read error: -22
[  292.642964][ T4751] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  292.665911][ T4751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.868623][T11284] loop3: detected capacity change from 0 to 512
[  292.893150][ T6131] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  292.913387][ T6131] mxuport: probe of 2-1:0.0 failed with error -5
[  292.920658][T11284] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  292.955675][ T6131] usb 2-1: USB disconnect, device number 11
[  292.992566][T11284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  293.096898][T11284] Quota error (device loop3): do_check_range: Getting block 256 out of range 1-6
[  293.134980][ T8088] usb 6-1: USB disconnect, device number 4
[  293.157186][T11284] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  293.174531][T11284] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2967: Failed to acquire dquot type 0
[  293.590674][   T52] block nbd6: Attempted send on invalid socket
[  293.597169][   T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  293.612586][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  293.619143][T11331] FAT-fs (nbd6): unable to read boot sector
[  294.112449][T11343] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  294.189154][T11339] loop5: detected capacity change from 0 to 4096
[  294.208103][ T4752] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  294.241365][T11339] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  294.294430][T11349] ipt_REJECT: TCP_RESET invalid for non-tcp
[  294.406930][ T4752] usb 4-1: Using ep0 maxpacket: 16
[  294.414268][ T4752] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  294.464556][ T7865] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  294.478601][ T4752] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  294.493793][ T7865] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  294.497445][ T4752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.516008][ T7865] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  294.542671][ T4752] usb 4-1: Product: syz
[  294.571714][ T4752] usb 4-1: Manufacturer: syz
[  294.589310][ T4752] usb 4-1: SerialNumber: syz
[  294.622759][ T4752] usb 4-1: config 0 descriptor??
[  294.627770][   T27] audit: type=1326 audit(1738017523.942:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  294.641692][ T4752] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  294.707975][ T4752] usb 4-1: Detected FT232R
[  294.715603][   T27] audit: type=1326 audit(1738017523.962:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  294.855385][T11364] Cannot find add_set index 0 as target
[  294.923647][   T27] audit: type=1326 audit(1738017524.202:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  295.006911][   T27] audit: type=1326 audit(1738017524.272:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc75d7bf5e5 code=0x7ffc0000
[  295.049592][ T4752] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  295.069638][ T4752] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  295.074856][   T27] audit: type=1326 audit(1738017524.272:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  295.099994][ T4752] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  295.166498][ T4752] usb 4-1: USB disconnect, device number 16
[  295.166811][   T27] audit: type=1326 audit(1738017524.442:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc75d78cd29 code=0x7ffc0000
[  295.206656][ T4752] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  295.227954][T11371] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  295.284002][ T4752] ftdi_sio 4-1:0.0: device disconnected
[  295.664136][T11383] loop6: detected capacity change from 0 to 64
[  295.896583][T11386] loop3: detected capacity change from 0 to 2048
[  295.987366][T11390] netlink: 'syz.6.2997': attribute type 10 has an invalid length.
[  295.995885][T11386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.427525][   T27] audit: type=1326 audit(1738017525.742:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78cd29 code=0x7ffc0000
[  296.521195][   T27] audit: type=1326 audit(1738017525.762:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78cd29 code=0x7ffc0000
[  296.595226][   T27] audit: type=1326 audit(1738017525.762:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcd2d78cd29 code=0x7ffc0000
[  296.747015][T11411] netlink: 'syz.1.3007': attribute type 6 has an invalid length.
[  296.830378][   T27] audit: type=1326 audit(1738017526.142:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78cd29 code=0x7ffc0000
[  296.886770][   T27] audit: type=1326 audit(1738017526.142:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd2d7bf5e5 code=0x7ffc0000
[  296.956303][   T27] audit: type=1326 audit(1738017526.222:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.3.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d78cd29 code=0x7ffc0000
[  297.064441][T11422] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  297.232111][T11426] netlink: 'syz.5.3015': attribute type 11 has an invalid length.
[  297.299588][T11426] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3015'.
[  297.839374][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3026'.
[  297.871522][T11449] netlink: 'syz.2.3026': attribute type 1 has an invalid length.
[  298.184691][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3032'.
[  298.396305][T11468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.431357][T11468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.462978][T11468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.501379][T11468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.769537][T11482] netlink: 'syz.5.3041': attribute type 3 has an invalid length.
[  298.859468][T11486] netlink: 'syz.3.3043': attribute type 1 has an invalid length.
[  299.191777][T11498] loop1: detected capacity change from 0 to 16
[  299.293036][T11498] erofs: (device loop1): mounted with root inode @ nid 36.
[  299.400219][T11498] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  299.460585][T11498] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[1851]
[  299.502220][T11498] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  299.771594][T11484] loop2: detected capacity change from 0 to 32768
[  299.791346][T11484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3042 (11484)
[  299.862993][T11484] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.897470][T11484] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  299.906178][T11484] BTRFS info (device loop2): using free space tree
[  299.998392][T11511] loop5: detected capacity change from 0 to 4096
[  300.093944][T11525] loop1: detected capacity change from 0 to 1024
[  300.171865][T11525] EXT4-fs: Ignoring removed nobh option
[  300.257440][T11484] BTRFS info (device loop2): enabling ssd optimizations
[  300.285264][T11525] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.3058: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  300.290472][T11506] loop6: detected capacity change from 0 to 32768
[  300.346845][T11506] __jfs_setxattr: xattr_size = 74, new_size = 12820
[  300.391948][T11525] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3058: couldn't read orphan inode 11 (err -117)
[  300.432013][T11525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  300.531570][T11525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.3058: Invalid block bitmap block 0 in block_group 0
[  300.583456][T11525] __quota_error: 8 callbacks suppressed
[  300.583476][T11525] Quota error (device loop1): write_blk: dquota write failed
[  300.639870][T11525] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  300.667200][T11525] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.3058: Failed to acquire dquot type 0
[  300.772165][ T4250] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.995360][T11552] loop6: detected capacity change from 0 to 764
[  301.089917][T11552] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  301.163893][T11552] Symlink component flag not implemented
[  301.182904][T11552] Symlink component flag not implemented
[  301.203170][T11552] Symlink component flag not implemented (128)
[  301.205209][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  301.237016][T11552] Symlink component flag not implemented (122)
[  301.802183][ T4751] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  301.840403][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  302.000640][ T4751] usb 7-1: Using ep0 maxpacket: 8
[  302.010727][ T4751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  302.051315][ T4751] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  302.086639][T11583] loop2: detected capacity change from 0 to 256
[  302.088067][ T4751] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  302.102557][ T4751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.135403][ T4751] usb 7-1: Product: syz
[  302.144842][ T4751] usb 7-1: Manufacturer: syz
[  302.154961][ T4751] usb 7-1: SerialNumber: syz
[  302.183268][ T4751] usb 7-1: config 0 descriptor??
[  302.666059][ T6131] usb 7-1: USB disconnect, device number 5
[  302.676975][ T4752] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  302.727104][ T4743] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  302.896902][ T4752] usb 6-1: Using ep0 maxpacket: 16
[  302.904984][ T4752] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  302.917039][ T4743] usb 3-1: Using ep0 maxpacket: 16
[  302.931949][ T4743] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  302.956988][ T4752] usb 6-1: config 0 has no interface number 0
[  302.967227][ T4743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.975400][ T4752] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  302.985951][ T4743] usb 3-1: Product: syz
[  302.990779][ T4743] usb 3-1: Manufacturer: syz
[  302.995434][ T4743] usb 3-1: SerialNumber: syz
[  303.002093][ T4752] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  303.029969][ T4743] usb 3-1: config 0 descriptor??
[  303.038056][ T4752] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  303.049516][ T4743] usb 3-1: Found UVC 0.00 device syz (046d:0721)
[  303.056376][ T4743] usb 3-1: No valid video chain found.
[  303.063096][ T4752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.071560][ T4752] usb 6-1: Product: syz
[  303.083396][ T4752] usb 6-1: Manufacturer: syz
[  303.089795][ T4752] usb 6-1: SerialNumber: syz
[  303.104670][ T4752] usb 6-1: config 0 descriptor??
[  303.111938][T11591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  303.129548][T11591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  303.249234][ T4743] usb 3-1: USB disconnect, device number 11
[  303.301591][T11609] loop3: detected capacity change from 0 to 64
[  303.351522][T11591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  303.364836][T11591] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  303.588014][ T4752] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  303.588052][ T4752] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  303.588181][ T4752] asix: probe of 6-1:0.251 failed with error -5
[  303.604055][ T4752] usb 6-1: USB disconnect, device number 5
[  303.984204][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'.
[  304.044727][T11636] netlink: 'syz.3.3107': attribute type 1 has an invalid length.
[  304.053471][T11636] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3107'.
[  304.282390][T11645] loop5: detected capacity change from 0 to 64
[  304.523911][T11655] [U] 
[  304.527351][T11655] [U] 
[  304.530111][T11655] [U] 
[  304.532846][T11655] [U] 
[  304.570481][T11655] [U] 
[  304.573261][T11655] [U] 
[  304.575992][T11655] [U] 
[  304.578730][T11655] [U] 
[  304.622806][T11655] [U] 
[  304.625668][T11655] [U] 
[  304.628402][T11655] [U] 
[  304.673273][T11654] [U] 
[  304.855866][T11664] loop5: detected capacity change from 0 to 1024
[  304.962157][T11664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  305.209989][ T7865] EXT4-fs (loop5): unmounting filesystem.
[  305.591418][T11656] loop3: detected capacity change from 0 to 32768
[  305.648258][T11656] (syz.3.3115,11656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  305.717435][T11656] (syz.3.3115,11656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  305.821648][T11656] JBD2: Ignoring recovery information on journal
[  305.933689][T11656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  306.020209][T11706] loop5: detected capacity change from 0 to 16
[  306.106184][T11706] virtio-fs: tag <(null)> not found
[  306.136351][T11708] ieee802154 phy0 wpan0: encryption failed: -22
[  306.196428][T11712] ieee802154 phy0 wpan0: encryption failed: -22
[  306.304304][T11714] netlink: 'syz.5.3144': attribute type 21 has an invalid length.
[  306.317415][ T4255] ocfs2: Unmounting device (7,3) on (node local)
[  306.353562][T11714] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3144'.
[  307.236283][T11742] loop3: detected capacity change from 0 to 4096
[  307.260228][T11742] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  307.424127][T11742] ntfs3: loop3: failed to convert "c46c" to cp852
[  307.685493][T11765] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3169'.
[  307.894242][T11771] loop1: detected capacity change from 0 to 256
[  307.939828][T11771] exfat: Deprecated parameter 'namecase'
[  307.976350][T11771] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  307.978389][T11776] loop3: detected capacity change from 0 to 64
[  308.235813][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'.
[  308.521724][T11794] loop6: detected capacity change from 0 to 256
[  308.867532][T11804] mmap: syz.3.3188 (11804): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  309.124109][T11815] kernel profiling enabled (shift: 63)
[  309.164642][T11815] profiling shift: 63 too large
[  309.313535][T11820] loop1: detected capacity change from 0 to 512
[  309.339357][T11820] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  309.414083][T11786] loop2: detected capacity change from 0 to 32768
[  309.430173][T11820] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #17: comm syz.1.3197: iget: bad i_size value: -6917529027641081756
[  309.445732][T11820] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3197: couldn't read orphan inode 17 (err -117)
[  309.463432][T11820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  309.512197][T11786] XFS (loop2): Mounting V5 Filesystem
[  309.527951][ T4248] EXT4-fs (loop1): unmounting filesystem.
[  309.709255][T11786] XFS (loop2): Ending clean mount
[  309.742197][T11786] XFS (loop2): Quotacheck needed: Please wait.
[  309.783893][T11843] loop6: detected capacity change from 0 to 256
[  309.878102][T11786] XFS (loop2): Quotacheck: Done.
[  310.050151][ T4250] XFS (loop2): Unmounting Filesystem
[  310.156518][T11855] xt_hashlimit: invalid rate
[  310.231072][T11858] loop3: detected capacity change from 0 to 512
[  310.287622][T11858] EXT4-fs: Ignoring removed mblk_io_submit option
[  310.349298][T11858] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  310.419664][T11858] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c128, mo2=0002]
[  310.436894][T11858] System zones: 1-12
[  310.502228][T11858] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.3211: corrupted in-inode xattr
[  310.518195][T11858] EXT4-fs (loop3): Remounting filesystem read-only
[  310.524958][T11858] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3211: couldn't read orphan inode 15 (err -117)
[  310.550741][T11858] EXT4-fs (loop3): Remounting filesystem read-only
[  310.560898][T11858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  310.607092][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3216'.
[  310.616114][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3216'.
[  310.775667][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  310.808160][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3216'.
[  311.084244][T11880] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  311.809882][T11912] loop1: detected capacity change from 0 to 256
[  312.773672][T11945] loop2: detected capacity change from 0 to 4096
[  312.774098][T11950] loop1: detected capacity change from 0 to 2048
[  312.972799][T11958] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  313.117206][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.200727][T11950] Remounting filesystem read-only
[  313.206438][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.217851][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.247589][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.289682][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.305272][T11950] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  313.321049][   T27] audit: type=1800 audit(1738017542.632:2219): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3255" name="file2" dev="loop1" ino=16 res=0 errno=0
[  313.978706][T11989] loop5: detected capacity change from 0 to 4096
[  313.989041][T11993] loop1: detected capacity change from 0 to 8
[  314.000024][T11989] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  314.023046][T11993] SQUASHFS error: Unable to read inode 0xa7
[  314.119724][T11997] loop3: detected capacity change from 0 to 1024
[  314.245741][T11997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  314.314022][   T27] audit: type=1400 audit(1738017543.622:2220): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=12003 comm="syz.1.3280"
[  314.459497][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  314.651324][T12014] bond0: Error: Cannot enslave bond to itself.
[  315.050874][T12034] netlink: 'syz.3.3292': attribute type 11 has an invalid length.
[  315.430547][   T27] audit: type=1326 audit(1738017544.742:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430584][   T27] audit: type=1326 audit(1738017544.742:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430610][   T27] audit: type=1326 audit(1738017544.742:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430637][   T27] audit: type=1326 audit(1738017544.742:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430662][   T27] audit: type=1326 audit(1738017544.742:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430687][   T27] audit: type=1326 audit(1738017544.742:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430718][   T27] audit: type=1326 audit(1738017544.742:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.430744][   T27] audit: type=1326 audit(1738017544.742:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12045 comm="syz.6.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dbd8cd29 code=0x7ff00000
[  315.554124][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.609283][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.838907][T12058] loop6: detected capacity change from 0 to 2048
[  315.839354][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.991170][T12064] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.059757][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.088875][T12058] Remounting filesystem read-only
[  316.095044][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.128980][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.149803][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.192114][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.224263][T12058] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  316.386910][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'.
[  316.420022][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'.
[  316.942104][T12090] loop6: detected capacity change from 0 to 128
[  316.979795][T12090] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  317.060056][T12065] loop3: detected capacity change from 0 to 32768
[  317.065509][T12090] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  317.124409][T12065] jfs_lookup: iget failed on inum 32
[  317.130791][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  317.137171][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  317.145976][T12090] FAT-fs (loop6): Filesystem has been set read-only
[  317.206870][T12065] jfs_lookup: iget failed on inum 32
[  317.520542][T12082] loop2: detected capacity change from 0 to 32768
[  317.608641][T12082] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  317.668981][T12109] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  317.712843][T12082] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  317.784201][T12082] (syz.2.3319,12082,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  317.953596][ T4250] ocfs2: Unmounting device (7,2) on (node local)
[  318.006612][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'.
[  318.990168][T12160] loop2: detected capacity change from 0 to 128
[  319.027635][T12160] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  319.074740][T12160] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  319.221144][T12166] loop6: detected capacity change from 0 to 1764
[  319.238036][T12170] loop5: detected capacity change from 0 to 16
[  319.263443][T12170] erofs: (device loop5): mounted with root inode @ nid 36.
[  319.322109][ T4250] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  319.377058][ T4250] FAT-fs (loop2): Filesystem has been set read-only
[  319.385010][ T4250] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  319.601423][T12180] netlink: 'syz.5.3368': attribute type 3 has an invalid length.
[  319.647234][T12180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3368'.
[  320.111645][T11314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.268130][T11314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.326882][ T5241] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  320.398143][T11314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.441601][T12205] loop6: detected capacity change from 0 to 256
[  320.457220][ T4743] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  320.517366][T11314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.534302][ T5341] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  320.544367][ T5241] usb 2-1: Using ep0 maxpacket: 16
[  320.566874][ T5241] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.594440][ T5241] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.616321][ T5241] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  320.645865][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.654391][ T5241] usb 2-1: Product: syz
[  320.659505][ T5241] usb 2-1: Manufacturer: syz
[  320.664148][ T5241] usb 2-1: SerialNumber: syz
[  320.678547][ T4743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.699460][ T4743] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.716400][ T4743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  320.728334][ T4743] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  320.738602][ T4743] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  320.765838][ T4743] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  320.790035][ T4743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.815453][ T4743] usb 4-1: Product: syz
[  320.854697][ T4743] usb 4-1: Manufacturer: syz
[  320.859855][ T4743] usb 4-1: SerialNumber: syz
[  320.926829][ T5241] usb 2-1: 0:2 : does not exist
[  320.959093][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.978232][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.988161][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.002057][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.010975][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  321.023866][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.034726][ T5241] usb 2-1: USB disconnect, device number 12
[  321.065285][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.072477][ T4743] cdc_ncm 4-1:1.0: bind() failure
[  321.078494][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.084024][ T4743] usbtest 4-1:1.0: Linux gadget zero
[  321.091737][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.098382][ T4743] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  321.139357][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.148562][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  321.165275][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.235307][ T4743] usbtest 4-1:1.1: couldn't get endpoints, -22
[  321.265387][ T4743] usbtest: probe of 4-1:1.1 failed with error -22
[  321.291569][ T4743] usbhid 4-1:1.1: couldn't find an input interrupt endpoint
[  321.351897][ T5341] udevd[5341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  321.354113][ T4743] usb 4-1: USB disconnect, device number 17
[  321.638286][T12224] loop6: detected capacity change from 0 to 1024
[  321.755208][T12229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3388'.
[  321.844787][T12229] netlink: 'syz.1.3388': attribute type 2 has an invalid length.
[  321.875012][T12234] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  321.919505][T12234] CIFS mount error: No usable UNC path provided in device string!
[  321.919505][T12234] 
[  321.936159][T12234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  322.550736][T12211] chnl_net:caif_netlink_parms(): no params data found
[  322.569510][T12256] loop3: detected capacity change from 0 to 4096
[  322.723867][T12264] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.924493][T12256] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  322.989290][T12274] loop5: detected capacity change from 0 to 256
[  323.129402][T12256] Remounting filesystem read-only
[  323.203248][ T4262] Bluetooth: hci4: command 0x0409 tx timeout
[  323.275464][ T4255] NILFS (loop3): discard dirty page: offset=0, ino=6
[  323.285692][ T4255] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  323.303232][ T4255] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  323.319027][T12211] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.323324][ T4255] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  323.326232][T12211] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.352892][ T4255] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  323.378478][T12211] device bridge_slave_0 entered promiscuous mode
[  323.386776][ T4255] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  323.427109][ T4255] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  323.447304][T12211] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.454502][T12211] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.469940][ T4255] NILFS (loop3): discard dirty page: offset=0, ino=3
[  323.479551][T12211] device bridge_slave_1 entered promiscuous mode
[  323.486542][ T4255] NILFS (loop3): discard dirty block: blocknr=28, size=4096
[  323.496969][ T4743] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  323.519748][ T4255] NILFS (loop3): discard dirty page: offset=4096, ino=3
[  323.554152][ T4255] NILFS (loop3): discard dirty block: blocknr=29, size=4096
[  323.566218][T12285] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3410'.
[  323.586028][ T4255] NILFS (loop3): discard dirty page: offset=270336, ino=3
[  323.595423][ T4255] NILFS (loop3): discard dirty block: blocknr=0, size=4096
[  323.620317][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.621109][T12287] No such timeout policy "syz1"
[  323.691064][ T4743] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  323.715029][ T4743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.746962][ T4743] usb 7-1: Product: syz
[  323.763822][ T4743] usb 7-1: Manufacturer: syz
[  323.786791][ T4743] usb 7-1: SerialNumber: syz
[  323.825858][ T4743] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  323.874434][ T4743] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  323.981006][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.195115][T12211] team0: Port device team_slave_0 added
[  324.280129][T12302] loop3: detected capacity change from 0 to 2048
[  324.333924][ T4751] usb 7-1: USB disconnect, device number 6
[  324.458623][T12302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.490899][T12211] team0: Port device team_slave_1 added
[  324.671840][T11314] device hsr_slave_0 left promiscuous mode
[  324.720797][T11314] device hsr_slave_1 left promiscuous mode
[  324.737525][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.766873][T11314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.803655][T11314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.844247][T11314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.891041][T11314] device bridge_slave_1 left promiscuous mode
[  324.911121][T11314] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.956781][ T4743] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  324.963903][ T4743] ath9k_htc: Failed to initialize the device
[  324.978069][T11314] device bridge_slave_0 left promiscuous mode
[  324.984370][T11314] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.990106][ T4751] usb 7-1: ath9k_htc: USB layer deinitialized
[  325.047058][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'.
[  325.182514][T11314] device veth1_macvtap left promiscuous mode
[  325.209607][T11314] device veth0_macvtap left promiscuous mode
[  325.215801][T11314] device veth1_vlan left promiscuous mode
[  325.267912][T11314] device veth0_vlan left promiscuous mode
[  325.276975][ T4262] Bluetooth: hci4: command 0x041b tx timeout
[  325.310935][T12330] loop5: detected capacity change from 0 to 4096
[  325.322139][T12330] __ntfs_error: 135 callbacks suppressed
[  325.322158][T12330] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  325.341285][T12330] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  325.370562][T12330] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  325.411652][T12330] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  325.441826][T12330] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  325.476021][T12330] ntfs: volume version 3.1.
[  325.493690][T12330] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  325.517074][T12330] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  325.555155][T12330] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  325.600246][T12330] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  325.648484][T12330] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  325.657327][T12338] loop6: detected capacity change from 0 to 4096
[  326.466993][ T4743] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  326.516029][T12342] loop3: detected capacity change from 0 to 32768
[  326.541789][T12342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3431 (12342)
[  326.573119][T12342] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.592209][T12342] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  326.602182][T12342] BTRFS info (device loop3): using free space tree
[  326.678947][ T4743] usb 6-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51
[  326.695786][ T4743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.722621][ T4743] usb 6-1: config 0 descriptor??
[  326.731520][ T4743] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4
[  326.791966][T12342] BTRFS info (device loop3): enabling ssd optimizations
[  326.891821][ T4255] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.177104][ T4743] gspca_sn9c20x: Write register 1001 failed -71
[  327.183512][ T4743] gspca_sn9c20x: Device initialization failed
[  327.212171][ T4743] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71
[  327.232864][ T4743] usb 6-1: USB disconnect, device number 6
[  327.324736][T11314] team0 (unregistering): Port device team_slave_1 removed
[  327.359919][ T4262] Bluetooth: hci4: command 0x040f tx timeout
[  327.419413][T11314] team0 (unregistering): Port device team_slave_0 removed
[  327.483764][T11314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.552118][T11314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.984447][T12380] loop5: detected capacity change from 0 to 256
[  328.535806][T11314] bond0 (unregistering): Released all slaves
[  328.633657][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.640930][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.667404][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.679985][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.687052][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.714620][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.749162][T12334] netlink: 'syz.1.3427': attribute type 6 has an invalid length.
[  328.939935][T12211] device hsr_slave_0 entered promiscuous mode
[  328.964695][T12211] device hsr_slave_1 entered promiscuous mode
[  329.051945][T12211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.066796][T12211] Cannot create hsr debugfs directory
[  329.072510][T12395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3446'.
[  329.092211][T12395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3446'.
[  329.436917][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[  329.641327][T12413] loop3: detected capacity change from 0 to 64
[  329.668934][T12415] vivid-002: disconnect
[  329.690842][T12411] vivid-002: reconnect
[  329.869169][T12211] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  329.922778][T12211] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  329.974461][T12211] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  330.002812][T12211] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  330.282948][T12436] loop1: detected capacity change from 0 to 64
[  330.399636][T12211] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.452163][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.482159][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.530426][T12211] 8021q: adding VLAN 0 to HW filter on device team0
[  330.581523][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  330.600966][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  330.624404][T11314] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.631640][T11314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.669610][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  330.680003][T12448] netlink: 'syz.1.3465': attribute type 1 has an invalid length.
[  330.719695][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  330.737770][T12448] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3465'.
[  330.767589][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  330.777342][T12448] NCSI netlink: No device for ifindex 130997362
[  330.791290][T11314] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.798484][T11314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.860350][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  330.912544][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  330.936230][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  330.983133][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  331.031749][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  331.087345][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.117316][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.127719][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.177202][T11314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.216607][T12211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.257977][T12211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  331.298013][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  331.307350][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  331.998564][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.006162][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.050165][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.391509][T12511] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  332.466766][ T4296] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  332.679385][ T4296] usb 7-1: config 8 has an invalid interface number: 177 but max is 0
[  332.687935][ T4296] usb 7-1: config 8 has no interface number 0
[  332.712094][ T4296] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  332.733796][ T4296] usb 7-1: config 8 interface 177 has no altsetting 0
[  332.761320][ T4296] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  332.819294][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.859835][T12502] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  333.005530][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  333.028737][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  333.072487][T12532] loop3: detected capacity change from 0 to 1764
[  333.094049][ T4296] usb 7-1: string descriptor 0 read error: -71
[  333.095549][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  333.122594][    C1] ir_toy 7-1:8.177: out urb status: -71
[  333.135536][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  333.177514][T12211] device veth0_vlan entered promiscuous mode
[  333.201529][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  333.216429][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  333.234636][T12211] device veth1_vlan entered promiscuous mode
[  333.300569][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  333.318704][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  333.342297][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  333.373892][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  333.393106][T12211] device veth0_macvtap entered promiscuous mode
[  333.415182][T12211] device veth1_macvtap entered promiscuous mode
[  333.482763][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.506777][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.540086][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.567484][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.605423][T12211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.618676][T12542] xt_TCPMSS: Only works on TCP SYN packets
[  333.629056][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  333.639256][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  333.646831][ T4296] ir_toy 7-1:8.177: could not write reset command: -110
[  333.647021][ T4296] ir_toy: probe of 7-1:8.177 failed with error -110
[  333.669554][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  333.701505][ T4296] usb 7-1: USB disconnect, device number 7
[  333.702901][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  333.740210][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.767786][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.800119][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.822706][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.845622][T12211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.878356][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  333.902161][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  333.942606][T12211] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.967138][T12211] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.986170][T12211] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.004804][T12522] loop5: detected capacity change from 0 to 40427
[  334.006021][T12211] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.071538][T12522] F2FS-fs (loop5): invalid crc value
[  334.096355][T12522] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  334.198638][T12522] F2FS-fs (loop5): Found nat_bits in checkpoint
[  334.264736][T11314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.287291][T11314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.314243][T12562] netlink: 604 bytes leftover after parsing attributes in process `syz.6.3503'.
[  334.367874][T11308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  334.393500][T11314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.417937][T12522] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  334.426727][T11314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.460586][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  334.460767][T12522] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  334.531648][T12522] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  334.796454][T12545] loop3: detected capacity change from 0 to 32768
[  334.816939][ T6125] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  334.924756][T12545] JFS: metapage_get_blocks failed
[  334.968369][T12545] ERROR: (device loop3): release_metapage: write_one_page() failed
[  334.968369][T12545] 
[  335.027009][ T6125] usb 2-1: Using ep0 maxpacket: 32
[  335.032899][T12545] ERROR: (device loop3): remounting filesystem as read-only
[  335.038098][ T6125] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.041468][   T28] INFO: task syz-executor:4249 blocked for more than 143 seconds.
[  335.092143][  T106] blkno = 5002c, nblocks = 1
[  335.097738][  T106] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  335.097738][  T106] 
[  335.114814][   T28]       Not tainted 6.1.127-syzkaller #0
[  335.120633][ T6125] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.120684][ T6125] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  335.120710][ T6125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.141091][ T6125] hub 2-1:4.0: USB hub found
[  335.234928][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  335.245263][   T28] task:syz-executor    state:D stack:19544 pid:4249  ppid:1      flags:0x00004004
[  335.272620][T12581] loop6: detected capacity change from 0 to 1024
[  335.297094][   T28] Call Trace:
[  335.300458][   T28]  <TASK>
[  335.305825][   T28]  __schedule+0x143f/0x4570
[  335.321581][   T28]  ? release_firmware_map_entry+0x186/0x186
[  335.342217][ T6125] hub 2-1:4.0: 2 ports detected
[  335.347508][ T6125] usb 2-1: selecting invalid altsetting 1
[  335.356484][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  335.366242][ T6125] hub 2-1:4.0: Using single TT (err -22)
[  335.381664][   T28]  ? print_irqtrace_events+0x210/0x210
[  335.404524][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  335.410077][   T28]  schedule+0xbf/0x180
[  335.414208][   T28]  io_schedule+0x88/0x100
[  335.423771][   T28]  folio_wait_bit_common+0x878/0x1290
[  335.429384][   T28]  ? folio_wait_bit+0x20/0x20
[  335.434107][   T28]  ? find_get_entries+0x188/0x710
[  335.444755][   T28]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  335.473286][   T28]  ? __lock_acquire+0x125b/0x1f80
[  335.482553][   T28]  truncate_inode_pages_range+0xbb5/0x1340
[  335.488819][   T28]  ? read_lock_is_recursive+0x10/0x10
[  335.494256][   T28]  ? mapping_evict_folio+0x5b0/0x5b0
[  335.504398][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  335.514509][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  335.524771][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  335.530133][   T28]  evict+0x53c/0x930
[  335.534331][   T28]  ? proc_nr_inodes+0x310/0x310
[  335.546810][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  335.552096][   T28]  evict_inodes+0x668/0x700
[  335.554998][ T6125] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  335.569012][ T6125] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  335.576799][   T28]  ? clear_inode+0x150/0x150
[  335.581570][   T28]  ? sync_filesystem+0x103/0x220
[  335.586560][   T28]  generic_shutdown_super+0x94/0x340
[  335.626861][   T28]  kill_block_super+0x7a/0xe0
[  335.632347][ T6125] usb 2-1: USB disconnect, device number 13
[  335.633868][   T28]  deactivate_locked_super+0xa0/0x110
[  335.643727][   T28]  cleanup_mnt+0x490/0x520
[  335.663773][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  335.679026][   T28]  task_work_run+0x246/0x300
[  335.683707][   T28]  ? task_work_cancel+0x2e0/0x2e0
[  335.704838][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  335.711095][   T28]  exit_to_user_mode_loop+0xde/0x100
[  335.716533][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  335.722698][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  335.728851][   T28]  do_syscall_64+0x47/0xb0
[  335.733470][   T28]  ? clear_bhb_loop+0x45/0xa0
[  335.738688][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  335.744802][   T28] RIP: 0033:0x7f82df78e057
[  335.749759][   T28] RSP: 002b:00007ffe93d41558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  335.758734][   T28] RAX: 0000000000000000 RBX: 00007f82df80e08c RCX: 00007f82df78e057
[  335.768451][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe93d41610
[  335.777958][   T28] RBP: 00007ffe93d41610 R08: 0000000000000000 R09: 0000000000000000
[  335.786078][   T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe93d42690
[  335.795346][   T28] R13: 00007f82df80e08c R14: 00007ffe93d426d0 R15: 000000000000010f
[  335.803533][   T28]  </TASK>
[  335.807849][   T28] 
[  335.807849][   T28] Showing all locks held in the system:
[  335.815740][   T28] 1 lock held by rcu_tasks_kthre/12:
[  335.822318][   T28]  #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  335.856339][   T28] 1 lock held by rcu_tasks_trace/13:
[  335.868277][   T28]  #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  335.883460][   T28] 1 lock held by khungtaskd/28:
[  335.888816][   T28]  #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  335.903207][   T28] 2 locks held by getty/4003:
[  335.910912][   T28]  #0: ffff88814d2a4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  335.921150][   T28]  #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  335.931925][   T28] 1 lock held by syz-executor/4249:
[  335.937454][   T28]  #0: ffff8880501440e0 (&type->s_umount_key#70){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  335.948107][   T28] 1 lock held by syz-executor/4255:
[  335.953599][   T28]  #0: ffff888054b360e0 (&type->s_umount_key#56){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  335.964228][   T28] 3 locks held by kworker/0:16/4752:
[  335.970570][   T28]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  335.981277][   T28]  #1: ffffc90005f6fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  335.993783][   T28]  #2: ffff8880560ae240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  336.004771][   T28] 5 locks held by kworker/u4:12/11314:
[  336.010556][   T28] 3 locks held by dhcpcd-run-hook/12595:
[  336.017022][   T28] 
[  336.019654][   T28] =============================================
[  336.019654][   T28] 
[  336.028515][   T28] NMI backtrace for cpu 1
[  336.033218][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0
[  336.041406][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  336.051497][   T28] Call Trace:
[  336.054785][   T28]  <TASK>
[  336.057725][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  336.062435][   T28]  ? preempt_schedule_thunk+0x16/0x18
[  336.067827][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  336.073317][   T28]  ? panic+0x764/0x764
[  336.077392][   T28]  ? vprintk_emit+0x622/0x740
[  336.082111][   T28]  ? printk_sprint+0x490/0x490
[  336.086921][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  336.092048][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  336.096996][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  336.103157][   T28]  ? _printk+0xd1/0x111
[  336.107320][   T28]  ? panic+0x764/0x764
[  336.111404][   T28]  ? __wake_up_klogd+0xcc/0x100
[  336.116268][   T28]  ? panic+0x764/0x764
[  336.120350][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  336.126431][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  336.132611][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  336.138617][   T28]  watchdog+0xf88/0xfd0
[  336.142802][   T28]  ? watchdog+0x1f8/0xfd0
[  336.147170][   T28]  kthread+0x28d/0x320
[  336.151248][   T28]  ? hungtask_pm_notify+0x50/0x50
[  336.156287][   T28]  ? kthread_blkcg+0xd0/0xd0
[  336.160898][   T28]  ret_from_fork+0x1f/0x30
[  336.165355][   T28]  </TASK>
[  336.169464][   T28] Sending NMI from CPU 1 to CPUs 0:
[  336.175566][    C0] NMI backtrace for cpu 0
[  336.175587][    C0] CPU: 0 PID: 11308 Comm: kworker/u4:9 Not tainted 6.1.127-syzkaller #0
[  336.175605][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  336.175617][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  336.175644][    C0] RIP: 0010:memset_erms+0x9/0x10
[  336.175665][    C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01
[  336.175679][    C0] RSP: 0018:ffffc9000d98fa28 EFLAGS: 00010246
[  336.175699][    C0] RAX: ffff88807d4ee000 RBX: 0000000000000000 RCX: 0000000000000e40
[  336.175711][    C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff88807d4ee1c0
[  336.175722][    C0] RBP: 0000000000000001 R08: ffffc9000d98faa8 R09: ffff88807d4ee000
[  336.175734][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  336.175744][    C0] R13: 0000000000082a20 R14: 0000000000000001 R15: ffffc9000d98faa8
[  336.175756][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  336.175770][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.175781][    C0] CR2: 00007f65df7325e8 CR3: 000000007f526000 CR4: 00000000003506f0
[  336.175796][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  336.175806][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  336.175816][    C0] Call Trace:
[  336.175821][    C0]  <NMI>
[  336.175828][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  336.175845][    C0]  ? read_lock_is_recursive+0x10/0x10
[  336.175873][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  336.175891][    C0]  ? nmi_handle+0x25/0x440
[  336.175924][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  336.175939][    C0]  ? nmi_handle+0x12e/0x440
[  336.175965][    C0]  ? nmi_handle+0x25/0x440
[  336.175991][    C0]  ? memset_erms+0x9/0x10
[  336.176007][    C0]  ? default_do_nmi+0x62/0x150
[  336.176025][    C0]  ? exc_nmi+0xa8/0x100
[  336.176041][    C0]  ? end_repeat_nmi+0x16/0x31
[  336.176063][    C0]  ? memset_erms+0x9/0x10
[  336.176081][    C0]  ? memset_erms+0x9/0x10
[  336.176098][    C0]  ? memset_erms+0x9/0x10
[  336.176115][    C0]  </NMI>
[  336.176120][    C0]  <TASK>
[  336.176124][    C0]  slab_post_alloc_hook+0x71/0x3a0
[  336.176148][    C0]  ? __kasan_slab_alloc+0x65/0x70
[  336.176166][    C0]  __kmem_cache_alloc_node+0x137/0x260
[  336.176187][    C0]  ? nsim_dev_trap_report_work+0x24c/0xab0
[  336.176211][    C0]  ? nsim_dev_trap_report_work+0x24c/0xab0
[  336.176233][    C0]  __kmalloc_node_track_caller+0xa0/0x220
[  336.176256][    C0]  ? nsim_dev_trap_report_work+0x24c/0xab0
[  336.176277][    C0]  __alloc_skb+0x135/0x670
[  336.176303][    C0]  nsim_dev_trap_report_work+0x24c/0xab0
[  336.176333][    C0]  ? process_one_work+0x7a9/0x11d0
[  336.176353][    C0]  process_one_work+0x8a9/0x11d0
[  336.176379][    C0]  ? worker_detach_from_pool+0x260/0x260
[  336.176402][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  336.176425][    C0]  ? kthread_data+0x4e/0xc0
[  336.176452][    C0]  ? wq_worker_running+0x97/0x190
[  336.176469][    C0]  worker_thread+0xa47/0x1200
[  336.176491][    C0]  ? release_firmware_map_entry+0x186/0x186
[  336.176519][    C0]  kthread+0x28d/0x320
[  336.176533][    C0]  ? worker_clr_flags+0x190/0x190
[  336.176552][    C0]  ? kthread_blkcg+0xd0/0xd0
[  336.176568][    C0]  ret_from_fork+0x1f/0x30
[  336.176598][    C0]  </TASK>
[  336.546335][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  336.553242][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0
[  336.561177][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  336.571265][   T28] Call Trace:
[  336.574573][   T28]  <TASK>
[  336.577536][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  336.582271][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  336.587788][   T28]  ? panic+0x764/0x764
[  336.591900][   T28]  ? llist_add_batch+0x160/0x1d0
[  336.596891][   T28]  ? vscnprintf+0x59/0x80
[  336.601265][   T28]  panic+0x318/0x764
[  336.605205][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  336.611402][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  336.616828][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  336.623033][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  336.629230][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  336.635430][   T28]  watchdog+0xfc7/0xfd0
[  336.639641][   T28]  ? watchdog+0x1f8/0xfd0
[  336.644106][   T28]  kthread+0x28d/0x320
[  336.648212][   T28]  ? hungtask_pm_notify+0x50/0x50
[  336.653282][   T28]  ? kthread_blkcg+0xd0/0xd0
[  336.657919][   T28]  ret_from_fork+0x1f/0x30
[  336.662397][   T28]  </TASK>
[  336.665780][   T28] Kernel Offset: disabled
[  336.670146][   T28] Rebooting in 86400 seconds..