last executing test programs:

6m25.00353036s ago: executing program 32 (id=707):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

6m12.687170742s ago: executing program 33 (id=832):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

4m53.710774538s ago: executing program 3 (id=1648):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffe}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0xf0, 0x294, 0xf0, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 'pimreg1\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004540)=ANY=[])
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffffe, 0x4031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

4m53.183801682s ago: executing program 3 (id=1656):
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000340), 0x3fffd65, 0x40010120, 0x0)

4m52.301824081s ago: executing program 3 (id=1658):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r0, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4)

4m52.069624339s ago: executing program 3 (id=1662):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

4m52.068701839s ago: executing program 3 (id=1664):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m51.864124105s ago: executing program 3 (id=1667):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r0, 0x400, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000001500)="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", 0x2000, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003900)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x3, 0x8000800, 0xfffffffffffffff2, 0x5, 0x5, {0x6, 0x5, 0x5, 0x800, 0x2a6e, 0x7, 0x6, 0x5, 0x3, 0x8000, 0x7f, 0x0, 0x0, 0x40, 0x91}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

4m51.737325034s ago: executing program 34 (id=1667):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r0, 0x400, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000001500)="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", 0x2000, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003900)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x3, 0x8000800, 0xfffffffffffffff2, 0x5, 0x5, {0x6, 0x5, 0x5, 0x800, 0x2a6e, 0x7, 0x6, 0x5, 0x3, 0x8000, 0x7f, 0x0, 0x0, 0x40, 0x91}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

2m57.380091493s ago: executing program 5 (id=2748):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="01005e00001600112233445508004600003800004000010242f7c0a8010ae00000169404"], 0x0)

2m57.271317699s ago: executing program 5 (id=2749):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)

2m57.081002645s ago: executing program 5 (id=2750):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

2m56.93974756s ago: executing program 5 (id=2751):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2m56.818334222s ago: executing program 5 (id=2754):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

2m56.630922226s ago: executing program 1 (id=2757):
sched_setscheduler(0xffffffffffffffff, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0xffffffff}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @private0}, 0x20)
ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6}])
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x40, 0x5, 0x5}}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$poke(0x4, r5, &(0x7f0000000080), 0x1)

2m56.310469202s ago: executing program 5 (id=2761):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x47d, 0xdf1c, 0x800009, 0xfffffffffffff7f7})

2m56.217199112s ago: executing program 35 (id=2761):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x47d, 0xdf1c, 0x800009, 0xfffffffffffff7f7})

2m55.752003491s ago: executing program 1 (id=2769):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)

2m55.750978149s ago: executing program 1 (id=2771):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0xe6, 0x4)

2m55.662781055s ago: executing program 1 (id=2772):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

2m55.44294427s ago: executing program 1 (id=2774):
sched_setscheduler(0xffffffffffffffff, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0xffffffff}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040050)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @private0}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6}])
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xdb9776a128fc7f6, {0x40, 0x5, 0x5}}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$poke(0x4, r5, &(0x7f0000000080), 0x1)

2m54.981695624s ago: executing program 1 (id=2776):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

2m54.819119928s ago: executing program 36 (id=2776):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

2m48.740608785s ago: executing program 6 (id=2806):
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})

2m48.600078098s ago: executing program 6 (id=2808):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)

2m48.525550035s ago: executing program 6 (id=2809):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffffffc, 0x1)

2m48.365967647s ago: executing program 6 (id=2811):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

2m48.182218366s ago: executing program 6 (id=2814):
syz_usb_connect$uac2(0x3, 0xa2, &(0x7f0000000080)=ANY=[@ANYBLOB="120100030000002035121000400001020301090290000301000002080b0101010a20020904000000010120000924010700063000b2092407030300027f950b240606030900020004000c24030304040606038100801e240802", @ANYRES64], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

2m47.87885564s ago: executing program 6 (id=2819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x403, 0x70bd2a, 0x10001, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0xc000)

2m47.580039266s ago: executing program 37 (id=2819):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x403, 0x70bd2a, 0x10001, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0xc000)

2m37.040787377s ago: executing program 8 (id=2914):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f0000000280)={[{@nodelalloc}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=")
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10)
recvmmsg(r0, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

2m36.731919269s ago: executing program 8 (id=2916):
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYRESHEX], 0xfdef)

2m36.49084429s ago: executing program 8 (id=2920):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01022000000000000000010000000900030073797a300000000028000480080002403628d5b008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000060000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000340004801400030076657468315f6d616376746170000000080001"], 0x104}}, 0x0)

2m36.4902615s ago: executing program 8 (id=2921):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

2m36.279113392s ago: executing program 8 (id=2923):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)

2m36.036815781s ago: executing program 8 (id=2927):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
wait4(0x0, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

2m35.959522363s ago: executing program 38 (id=2927):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
wait4(0x0, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

2m27.252317764s ago: executing program 7 (id=2982):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006740)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="7e906aa1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m27.251941686s ago: executing program 7 (id=2983):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
symlink(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

2m27.007138946s ago: executing program 7 (id=2985):
select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0)

2m26.953107843s ago: executing program 7 (id=2987):
pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffff7, 0x3, 0xff, 0x80000000, 0xffffffffffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

2m26.047724586s ago: executing program 7 (id=2995):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==")
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0xb)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0xfffffeb1)

2m24.947955054s ago: executing program 7 (id=3004):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)

2m23.323209939s ago: executing program 9 (id=3009):
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x80010040)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x40, 0xb, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ee5c05d3a18a585d349dcf7bf787f9a6"}, @eol, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x86, 0x80000001}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0x2}]}}}}}}}, 0x0)

2m23.322684421s ago: executing program 9 (id=3010):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1010051, &(0x7f0000000100), 0x1, 0x567, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

2m23.162618182s ago: executing program 9 (id=3011):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e0000001e6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a0101000000000000c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
close(r0)

2m23.040694896s ago: executing program 9 (id=3012):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)

2m22.941040181s ago: executing program 9 (id=3013):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe)

2m22.661755413s ago: executing program 9 (id=3018):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)

2m22.386439069s ago: executing program 39 (id=3018):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178)
open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)

2m9.868619451s ago: executing program 40 (id=3004):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)

9.389668538s ago: executing program 2 (id=4765):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

9.389372559s ago: executing program 2 (id=4766):
creat(&(0x7f0000000100)='./file0\x00', 0x1c)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]})

9.272219625s ago: executing program 2 (id=4767):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0xa0)
write(r0, &(0x7f00000001c0)='2', 0x1)

9.271950517s ago: executing program 2 (id=4768):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57)
syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x3000100)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

9.224476266s ago: executing program 2 (id=4769):
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000840)={0x1, 0x0, '\x00', 0x0, &(0x7f00000007c0)})
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r1, 0x1, 0x2}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000000280)='P', &(0x7f0000000780)="38b5")

9.131114723s ago: executing program 2 (id=4770):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000)
sync()
sync()
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.021401451s ago: executing program 0 (id=4899):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r1})

952.422761ms ago: executing program 4 (id=4901):
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xf0f026, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e6002000", 0x9, 0xbd6, 0xff, 0x2, 0x28})

951.894922ms ago: executing program 0 (id=4902):
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020)

951.828559ms ago: executing program 4 (id=4903):
r0 = fsopen(&(0x7f00000001c0)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='dax\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c)

892.477629ms ago: executing program 0 (id=4904):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)='%', 0x1}], 0x1)

892.114929ms ago: executing program 4 (id=4905):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='r:my_probe ./file0:0x0\n', 0xffffff01)

827.263297ms ago: executing program 0 (id=4906):
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

826.702091ms ago: executing program 4 (id=4907):
syz_read_part_table(0x5f2, &(0x7f0000000000)="$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")
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0xa0080, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
gettid()
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)

771.477392ms ago: executing program 0 (id=4908):
ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0)

702.135315ms ago: executing program 0 (id=4909):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r2, 0x0, 0x0, 0x4000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r3 = getpgrp(0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
sendmsg$nl_xfrm(r1, 0x0, 0x400c8c0)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

372.181787ms ago: executing program 4 (id=4910):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x28, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xde, 0x47c, &(0x7f0000000540)="$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")
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$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")
splice(r1, &(0x7f0000000f80)=0x3, r0, 0x0, 0x1, 0xc)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
setns(0xc9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@index_off}, {@verity_off}]})

0s ago: executing program 4 (id=4911):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0xc620, 0xb, @remote, 0x2}, 0x1c)
connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc)

kernel console output (not intermixed with test programs):

ume '010000E0'
[  404.839181][T15990] ALSA: mixer_oss: invalid OSS volume '21'
[  404.839185][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839189][T15990] ALSA: mixer_oss: invalid OSS volume '22'
[  404.839194][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839198][T15990] ALSA: mixer_oss: invalid OSS volume '23'
[  404.839202][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839206][T15990] ALSA: mixer_oss: invalid OSS volume '24'
[  404.839211][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839215][T15990] ALSA: mixer_oss: invalid OSS volume '25'
[  404.839219][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839223][T15990] ALSA: mixer_oss: invalid OSS volume '26'
[  404.839228][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839232][T15990] ALSA: mixer_oss: invalid OSS volume '27'
[  404.839236][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839241][T15990] ALSA: mixer_oss: invalid OSS volume '28'
[  404.839245][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839249][T15990] ALSA: mixer_oss: invalid OSS volume '29'
[  404.839253][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839258][T15990] ALSA: mixer_oss: invalid OSS volume '30'
[  404.839262][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839268][T15990] ALSA: mixer_oss: invalid OSS volume '31'
[  404.839273][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839277][T15990] ALSA: mixer_oss: invalid OSS volume '32'
[  404.839281][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839286][T15990] ALSA: mixer_oss: invalid OSS volume '33'
[  404.839290][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839294][T15990] ALSA: mixer_oss: invalid OSS volume '34'
[  404.839298][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839302][T15990] ALSA: mixer_oss: invalid OSS volume '35'
[  404.839307][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839314][T15990] ALSA: mixer_oss: invalid OSS volume '36'
[  404.839320][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839327][T15990] ALSA: mixer_oss: invalid OSS volume '37'
[  404.839334][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839340][T15990] ALSA: mixer_oss: invalid OSS volume '38'
[  404.839347][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839354][T15990] ALSA: mixer_oss: invalid OSS volume '39'
[  404.839360][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839367][T15990] ALSA: mixer_oss: invalid OSS volume '40'
[  404.839374][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839408][T15990] ALSA: mixer_oss: invalid OSS volume '41'
[  404.839415][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839421][T15990] ALSA: mixer_oss: invalid OSS volume '42'
[  404.839427][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839434][T15990] ALSA: mixer_oss: invalid OSS volume '43'
[  404.839439][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839446][T15990] ALSA: mixer_oss: invalid OSS volume '44'
[  404.839452][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839458][T15990] ALSA: mixer_oss: invalid OSS volume '45'
[  404.839465][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.839472][T15990] ALSA: mixer_oss: invalid OSS volume '46'
[  404.839479][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845267][T15990] ALSA: mixer_oss: invalid OSS volume '47'
[  404.845279][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845284][T15990] ALSA: mixer_oss: invalid OSS volume '48'
[  404.845288][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845293][T15990] ALSA: mixer_oss: invalid OSS volume '49'
[  404.845298][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845543][T15990] ALSA: mixer_oss: invalid OSS volume '50'
[  404.845552][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845559][T15990] ALSA: mixer_oss: invalid OSS volume '52'
[  404.845566][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845573][T15990] ALSA: mixer_oss: invalid OSS volume '53'
[  404.845580][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845587][T15990] ALSA: mixer_oss: invalid OSS volume '54'
[  404.845594][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845599][T15990] ALSA: mixer_oss: invalid OSS volume '55'
[  404.845603][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845607][T15990] ALSA: mixer_oss: invalid OSS volume '56'
[  404.845611][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845616][T15990] ALSA: mixer_oss: invalid OSS volume '57'
[  404.845620][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845624][T15990] ALSA: mixer_oss: invalid OSS volume '60'
[  404.845628][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845633][T15990] ALSA: mixer_oss: invalid OSS volume '61'
[  404.845637][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845641][T15990] ALSA: mixer_oss: invalid OSS volume '62'
[  404.845645][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845650][T15990] ALSA: mixer_oss: invalid OSS volume '63'
[  404.845654][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845659][T15990] ALSA: mixer_oss: invalid OSS volume '64'
[  404.845663][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845667][T15990] ALSA: mixer_oss: invalid OSS volume '65'
[  404.845671][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845676][T15990] ALSA: mixer_oss: invalid OSS volume '66'
[  404.845680][T15990] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  404.845736][T15990] ALSA: mixer_oss: invalid OSS volume ''
[  405.436641][T16006] loop2: detected capacity change from 0 to 2048
[  405.484232][T16006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.487670][T16006] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  405.686337][T16015] busy
[  405.747793][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.752858][T16020] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3716'.
[  405.770369][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.773890][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.879214][   T34] audit: type=1800 audit(1790260527.083:6001): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3718" name="enable" dev="configfs" ino=44337 res=0 errno=0
[  405.880006][T16022] nvmet: failed to open file ./img: (-2)
[  406.665454][   T34] audit: type=1800 audit(1790260527.873:6002): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3727" name="resv_enable" dev="configfs" ino=43818 res=0 errno=0
[  406.745200][   T34] audit: type=1800 audit(1790260527.953:6003): pid=16043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3728" name="enable" dev="configfs" ino=44367 res=0 errno=0
[  406.748208][T16043] nvmet: failed to open file ./img: (-2)
[  406.876062][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[  407.033835][T16061] loop4: detected capacity change from 0 to 8192
[  407.054006][T16069] binder: 16068:16069 ioctl c0306201 200000000080 returned -14
[  407.246580][T16082] nvmet: failed to open file ./img: (-2)
[  407.251593][   T34] audit: type=1800 audit(1790260528.453:6004): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3748" name="enable" dev="configfs" ino=44432 res=0 errno=0
[  407.310648][T16087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.310893][T16087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.427517][T16096] loop2: detected capacity change from 0 to 2048
[  407.453492][T16096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.453619][T16096] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  407.507428][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.607198][T16104] loop2: detected capacity change from 0 to 1024
[  407.858701][T16115] ip_tables: iptables: counters copy to user failed while replacing table
[  408.115344][T16119] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.115680][T16119] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.237207][T16119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.256495][T16119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.453443][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.461649][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.476126][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.476690][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.157430][T16154] VFS: file-max limit 0 reached
[  409.379731][T16143] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  409.538645][T16143] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  409.539893][T16143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  409.539913][T16143] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  409.544322][T16143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.544342][T16143] usb 5-1: Product: syz
[  409.544353][T16143] usb 5-1: Manufacturer: syz
[  409.544391][T16143] usb 5-1: SerialNumber: syz
[  409.554393][T16143] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  409.558291][T16143] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  409.558291][T16143]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  410.010106][T16176] loop0: detected capacity change from 0 to 256
[  410.015816][T16176] exFAT-fs (loop0): bogus fat length
[  410.017178][T16143] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -5
[  410.021175][T16176] exFAT-fs (loop0): failed to read boot sector
[  410.021184][T16176] exFAT-fs (loop0): failed to recognize exfat type
[  410.028452][T16143] usb 5-1: USB disconnect, device number 26
[  410.151021][T16180] loop2: detected capacity change from 0 to 1024
[  410.325392][T16190] FAULT_INJECTION: forcing a failure.
[  410.325392][T16190] name failslab, interval 1, probability 0, space 0, times 0
[  410.330419][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.0.3786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  410.330451][T16190] Tainted: [L]=SOFTLOCKUP
[  410.330460][T16190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  410.330472][T16190] Call Trace:
[  410.330482][T16190]  <TASK>
[  410.330492][T16190]  dump_stack_lvl+0xe8/0x150
[  410.330527][T16190]  should_fail_ex+0x410/0x560
[  410.330555][T16190]  should_failslab+0xa8/0x100
[  410.330575][T16190]  __kmalloc_cache_noprof+0xa3/0x600
[  410.330601][T16190]  ? alloc_fdtable+0xc0/0x2c0
[  410.330618][T16190]  ? alloc_fdtable+0xc0/0x2c0
[  410.330637][T16190]  alloc_fdtable+0xc0/0x2c0
[  410.330655][T16190]  ? dup_fd+0x7f5/0xaf0
[  410.330671][T16190]  dup_fd+0x7fe/0xaf0
[  410.330697][T16190]  copy_files+0xaf/0x120
[  410.330717][T16190]  ? copy_process+0xd3c/0x43e0
[  410.330740][T16190]  copy_process+0x1cca/0x43e0
[  410.330768][T16190]  ? copy_process+0xd3c/0x43e0
[  410.330799][T16190]  ? __pfx_copy_process+0x10/0x10
[  410.330831][T16190]  kernel_clone+0x2d7/0x940
[  410.330861][T16190]  ? __pfx_kernel_clone+0x10/0x10
[  410.330884][T16190]  ? __raw_spin_lock_init+0x45/0x100
[  410.330914][T16190]  ? do_futex+0x3e7/0x4e0
[  410.330938][T16190]  __x64_sys_clone+0x1b6/0x230
[  410.330961][T16190]  ? __pfx___x64_sys_clone+0x10/0x10
[  410.330990][T16190]  ? rcu_is_watching+0x16/0xb0
[  410.331020][T16190]  do_syscall_64+0x166/0x520
[  410.331045][T16190]  ? trace_irq_disable+0x3b/0x140
[  410.331064][T16190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.331085][T16190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.331101][T16190] RIP: 0033:0x7f11b139e159
[  410.331121][T16190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.331137][T16190] RSP: 002b:00007f11b21e8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  410.331155][T16190] RAX: ffffffffffffffda RBX: 00007f11b1625fa0 RCX: 00007f11b139e159
[  410.331167][T16190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000088206000
[  410.331176][T16190] RBP: 00007f11b143506b R08: 0000000000000000 R09: 0000000000000000
[  410.331186][T16190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  410.331195][T16190] R13: 00007f11b1626038 R14: 00007f11b1625fa0 R15: 00007ffe71fa3758
[  410.331231][T16190]  </TASK>
[  410.691532][T16210] xt_hashlimit: size too large, truncated to 1048576
[  410.691594][T16210] xt_hashlimit: max too large, truncated to 1048576
[  410.739995][T16208] ip_tables: iptables: counters copy to user failed while replacing table
[  410.775486][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.775730][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.797342][   T34] audit: type=1800 audit(1790260532.003:6005): pid=16216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3799" name="enable" dev="configfs" ino=44657 res=0 errno=0
[  410.803783][T16216] nvmet: failed to open file ./img: (-2)
[  411.037236][T16234] loop4: detected capacity change from 0 to 2048
[  411.042953][T16234] NILFS (loop4): invalid segment: Inconsistency found
[  411.053467][T16234] NILFS (loop4): trying rollback from an earlier position
[  411.066053][T16234] NILFS (loop4): recovery complete
[  411.071889][T16237] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.206253][T16249] loop4: detected capacity change from 0 to 16
[  411.211139][T16249] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  411.215963][T16249] erofs (device loop4): mounted with root inode @ nid 36.
[  411.249327][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3816'.
[  411.274033][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3816'.
[  412.167137][T16294] loop2: detected capacity change from 0 to 16
[  412.203543][T16294] erofs (device loop2): mounted with root inode @ nid 36.
[  412.334123][T16300] loop2: detected capacity change from 0 to 4096
[  412.335217][T16300] ntfs3: Unknown parameter 'ssFsparse'
[  412.645611][T16317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.645863][T16317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.016443][T16307] loop4: detected capacity change from 0 to 131072
[  413.024713][T16307] F2FS-fs (loop4): invalid crc value
[  413.052809][T16307] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  413.058385][T16307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  413.071756][   T34] audit: type=1800 audit(1790260534.283:6006): pid=16307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3840" name="file2" dev="loop4" ino=8 res=0 errno=0
[  413.299440][   T34] audit: type=1800 audit(1790260534.503:6007): pid=16332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3845" name="device_path" dev="configfs" ino=45264 res=0 errno=0
[  413.302707][   T34] audit: type=1800 audit(1790260534.513:6008): pid=16332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3845" name="enable" dev="configfs" ino=45265 res=0 errno=0
[  413.304566][T16332] nvmet: failed to open file ./img: (-2)
[  413.440745][T16338] FAULT_INJECTION: forcing a failure.
[  413.440745][T16338] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  413.440838][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz.2.3849 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.440881][T16338] Tainted: [L]=SOFTLOCKUP
[  413.440888][T16338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  413.440898][T16338] Call Trace:
[  413.440905][T16338]  <TASK>
[  413.440912][T16338]  dump_stack_lvl+0xe8/0x150
[  413.440941][T16338]  should_fail_ex+0x410/0x560
[  413.440969][T16338]  prepare_alloc_pages+0x223/0x600
[  413.440995][T16338]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  413.441034][T16338]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  413.441053][T16338]  ? __pfx_policy_nodemask+0x10/0x10
[  413.441069][T16338]  ? __get_vm_area_node+0x155/0x2f0
[  413.441089][T16338]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  413.441108][T16338]  ? __vmalloc_node_noprof+0xc2/0x100
[  413.441124][T16338]  ? dup_task_struct+0x2c6/0xa00
[  413.441140][T16338]  ? copy_process+0x820/0x43e0
[  413.441155][T16338]  ? io_sq_offload_create+0xa42/0x1050
[  413.441168][T16338]  ? io_uring_create+0x48a/0x990
[  413.441185][T16338]  ? __se_sys_io_uring_setup+0x2a8/0x2c0
[  413.441203][T16338]  ? do_syscall_64+0x166/0x520
[  413.441233][T16338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.441251][T16338]  alloc_pages_mpol+0x21e/0x390
[  413.441271][T16338]  alloc_pages_noprof+0xb1/0x2b0
[  413.441289][T16338]  get_free_pages_noprof+0xf/0x80
[  413.441302][T16338]  __kasan_populate_vmalloc+0x38/0x1c0
[  413.441322][T16338]  ? do_raw_spin_unlock+0x4d/0x200
[  413.441373][T16338]  alloc_vmap_area+0xd1a/0x1420
[  413.441404][T16338]  ? __pfx_alloc_vmap_area+0x10/0x10
[  413.441420][T16338]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  413.441442][T16338]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  413.441465][T16338]  ? __get_vm_area_node+0x155/0x2f0
[  413.441488][T16338]  __get_vm_area_node+0x200/0x2f0
[  413.441509][T16338]  __vmalloc_node_range_noprof+0x343/0x1540
[  413.441528][T16338]  ? copy_process+0x820/0x43e0
[  413.441551][T16338]  ? __memcg_slab_post_alloc_hook+0x4d7/0xf80
[  413.441579][T16338]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  413.441598][T16338]  ? dup_task_struct+0x52/0xa00
[  413.441612][T16338]  ? trace_kmem_cache_alloc+0x29/0xe0
[  413.441629][T16338]  ? memcpy_and_pad+0x48/0x80
[  413.441649][T16338]  __vmalloc_node_noprof+0xc2/0x100
[  413.441666][T16338]  ? copy_process+0x820/0x43e0
[  413.441681][T16338]  ? copy_process+0x820/0x43e0
[  413.441698][T16338]  dup_task_struct+0x2c6/0xa00
[  413.441718][T16338]  copy_process+0x820/0x43e0
[  413.441734][T16338]  ? stack_depot_save_flags+0x33/0x7f0
[  413.441758][T16338]  ? kasan_save_track+0x3e/0x80
[  413.441771][T16338]  ? __kasan_kmalloc+0x93/0xb0
[  413.441785][T16338]  ? io_sq_offload_create+0x2ab/0x1050
[  413.441798][T16338]  ? look_up_lock_class+0x57/0x110
[  413.441818][T16338]  ? register_lock_class+0x31/0x2e0
[  413.441836][T16338]  ? __lock_acquire+0x6df/0x2e50
[  413.441852][T16338]  ? __pfx_copy_process+0x10/0x10
[  413.441872][T16338]  ? trace_contention_end+0x3d/0x140
[  413.441890][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.441908][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.441926][T16338]  create_io_thread+0xfc/0x170
[  413.441945][T16338]  ? __pfx_create_io_thread+0x10/0x10
[  413.441961][T16338]  ? do_raw_spin_lock+0x12b/0x2f0
[  413.441982][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.441999][T16338]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  413.442017][T16338]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  413.442032][T16338]  ? __wake_up_common_lock+0x195/0x1f0
[  413.442054][T16338]  io_sq_offload_create+0xa42/0x1050
[  413.442074][T16338]  ? __pfx_io_sq_offload_create+0x10/0x10
[  413.442085][T16338]  ? bpf_lsm_capable+0x9/0x20
[  413.442103][T16338]  ? security_capable+0x7e/0x2c0
[  413.442128][T16338]  io_uring_create+0x48a/0x990
[  413.442152][T16338]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  413.442174][T16338]  ? lock_acquire+0x115/0x350
[  413.442187][T16338]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  413.442214][T16338]  ? rcu_is_watching+0x16/0xb0
[  413.442249][T16338]  do_syscall_64+0x166/0x520
[  413.442269][T16338]  ? trace_irq_disable+0x3b/0x140
[  413.442283][T16338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.442300][T16338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.442315][T16338] RIP: 0033:0x7f2c9779e159
[  413.442331][T16338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.442376][T16338] RSP: 002b:00007f2c98641028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  413.442396][T16338] RAX: ffffffffffffffda RBX: 00007f2c97a25fa0 RCX: 00007f2c9779e159
[  413.442406][T16338] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 00000000000007d1
[  413.442415][T16338] RBP: 00007f2c9783506b R08: 0000000000000000 R09: 0000000000000000
[  413.442424][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.442432][T16338] R13: 00007f2c97a26038 R14: 00007f2c97a25fa0 R15: 00007ffeec75c168
[  413.442451][T16338]  </TASK>
[  413.444768][T16338] syz.2.3849: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  413.444955][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz.2.3849 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.444976][T16338] Tainted: [L]=SOFTLOCKUP
[  413.444982][T16338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  413.444991][T16338] Call Trace:
[  413.444999][T16338]  <TASK>
[  413.445006][T16338]  dump_stack_lvl+0xe8/0x150
[  413.445032][T16338]  warn_alloc+0x24d/0x270
[  413.445056][T16338]  ? lockdep_hardirqs_on+0x7b/0x110
[  413.445079][T16338]  ? __pfx_warn_alloc+0x10/0x10
[  413.445100][T16338]  ? kfree+0x1c5/0x650
[  413.445124][T16338]  ? __get_vm_area_node+0x219/0x2f0
[  413.445146][T16338]  __vmalloc_node_range_noprof+0x36b/0x1540
[  413.445171][T16338]  ? __memcg_slab_post_alloc_hook+0x4d7/0xf80
[  413.445200][T16338]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  413.445227][T16338]  ? dup_task_struct+0x52/0xa00
[  413.445247][T16338]  ? trace_kmem_cache_alloc+0x29/0xe0
[  413.445268][T16338]  ? memcpy_and_pad+0x48/0x80
[  413.445289][T16338]  __vmalloc_node_noprof+0xc2/0x100
[  413.445310][T16338]  ? copy_process+0x820/0x43e0
[  413.445326][T16338]  ? copy_process+0x820/0x43e0
[  413.445378][T16338]  dup_task_struct+0x2c6/0xa00
[  413.445400][T16338]  copy_process+0x820/0x43e0
[  413.445419][T16338]  ? stack_depot_save_flags+0x33/0x7f0
[  413.445443][T16338]  ? kasan_save_track+0x3e/0x80
[  413.445456][T16338]  ? __kasan_kmalloc+0x93/0xb0
[  413.445469][T16338]  ? io_sq_offload_create+0x2ab/0x1050
[  413.445482][T16338]  ? look_up_lock_class+0x57/0x110
[  413.445501][T16338]  ? register_lock_class+0x31/0x2e0
[  413.445519][T16338]  ? __lock_acquire+0x6df/0x2e50
[  413.445533][T16338]  ? __pfx_copy_process+0x10/0x10
[  413.445551][T16338]  ? trace_contention_end+0x3d/0x140
[  413.445568][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.445586][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.445604][T16338]  create_io_thread+0xfc/0x170
[  413.445623][T16338]  ? __pfx_create_io_thread+0x10/0x10
[  413.445639][T16338]  ? do_raw_spin_lock+0x12b/0x2f0
[  413.445662][T16338]  ? __pfx_io_sq_thread+0x10/0x10
[  413.445680][T16338]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  413.445698][T16338]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  413.445715][T16338]  ? __wake_up_common_lock+0x195/0x1f0
[  413.445734][T16338]  io_sq_offload_create+0xa42/0x1050
[  413.445753][T16338]  ? __pfx_io_sq_offload_create+0x10/0x10
[  413.445767][T16338]  ? bpf_lsm_capable+0x9/0x20
[  413.445787][T16338]  ? security_capable+0x7e/0x2c0
[  413.445813][T16338]  io_uring_create+0x48a/0x990
[  413.445835][T16338]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  413.445854][T16338]  ? lock_acquire+0x115/0x350
[  413.445867][T16338]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  413.445920][T16338]  ? rcu_is_watching+0x16/0xb0
[  413.445947][T16338]  do_syscall_64+0x166/0x520
[  413.445967][T16338]  ? trace_irq_disable+0x3b/0x140
[  413.445981][T16338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.445997][T16338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.446010][T16338] RIP: 0033:0x7f2c9779e159
[  413.446025][T16338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.446037][T16338] RSP: 002b:00007f2c98641028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  413.446053][T16338] RAX: ffffffffffffffda RBX: 00007f2c97a25fa0 RCX: 00007f2c9779e159
[  413.446064][T16338] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 00000000000007d1
[  413.446074][T16338] RBP: 00007f2c9783506b R08: 0000000000000000 R09: 0000000000000000
[  413.446084][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.446093][T16338] R13: 00007f2c97a26038 R14: 00007f2c97a25fa0 R15: 00007ffeec75c168
[  413.446114][T16338]  </TASK>
[  413.451719][T16338] Mem-Info:
[  413.451734][T16338] active_anon:98081 inactive_anon:0 isolated_anon:0
[  413.451734][T16338]  active_file:40 inactive_file:63131 isolated_file:0
[  413.451734][T16338]  unevictable:1000 dirty:2743 writeback:1
[  413.451734][T16338]  slab_reclaimable:12210 slab_unreclaimable:95419
[  413.451734][T16338]  mapped:24398 shmem:90943 pagetables:2057
[  413.451734][T16338]  sec_pagetables:0 bounce:0
[  413.451734][T16338]  kernel_misc_reclaimable:0
[  413.451734][T16338]  free:978582 free_pcp:30753 free_cma:0
[  413.451775][T16338] Node 0 active_anon:182096kB inactive_anon:0kB active_file:160kB inactive_file:143064kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:44156kB dirty:8112kB writeback:0kB shmem:171080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10624kB pagetables:3872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  413.451816][T16338] Node 1 active_anon:210228kB inactive_anon:0kB active_file:0kB inactive_file:109460kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:53436kB dirty:2860kB writeback:4kB shmem:192692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4924kB pagetables:4356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  413.451852][T16338] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  413.451890][T16338] lowmem_reserve[]: 0 1581 2111 2111 2111
[  413.451916][T16338] Node 0 DMA32 free:1193236kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:170212kB inactive_anon:0kB active_file:104kB inactive_file:41164kB unevictable:0kB writepending:6324kB zspages:0kB present:2080636kB managed:1619492kB mlocked:0kB bounce:0kB free_pcp:42220kB local_pcp:240kB free_cma:0kB
[  413.451953][T16338] lowmem_reserve[]: 0 0 529 529 529
[  413.451978][T16338] Node 0 Normal free:10524kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11900kB inactive_anon:0kB active_file:56kB inactive_file:101900kB unevictable:2000kB writepending:1788kB zspages:0kB present:1572868kB managed:542444kB mlocked:0kB bounce:0kB free_pcp:3520kB local_pcp:112kB free_cma:0kB
[  413.452015][T16338] lowmem_reserve[]: 0 0 0 0 0
[  413.452037][T16338] Node 1 Normal free:2695208kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:210228kB inactive_anon:0kB active_file:0kB inactive_file:109460kB unevictable:2000kB writepending:2864kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:77272kB local_pcp:42704kB free_cma:0kB
[  413.452074][T16338] lowmem_reserve[]: 0 0 0 0 0
[  413.452099][T16338] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  413.452173][T16338] Node 0 DMA32: 201*4kB (UME) 115*8kB (UME) 62*16kB (UME) 38*32kB (UME) 62*64kB (UME) 40*128kB (UME) 8*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 7*2048kB (UM) 282*4096kB (M) = 1193180kB
[  413.452297][T16338] Node 0 Normal: 30*4kB (UE) 119*8kB (UE) 45*16kB (UE) 132*32kB (UE) 69*64kB (UE) 1*128kB (E) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10560kB
[  413.452423][T16338] Node 1 Normal: 560*4kB (UME) 141*8kB (UME) 208*16kB (UME) 102*32kB (UE) 77*64kB (UE) 30*128kB (UE) 5*256kB (UM) 1*512kB (E) 2*1024kB (ME) 1*2048kB (U) 652*4096kB (UM) = 2695208kB
[  413.452532][T16338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  413.452543][T16338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  413.452554][T16338] 154077 total pagecache pages
[  413.452559][T16338] 0 pages in swap cache
[  413.452565][T16338] Free swap  = 124996kB
[  413.452570][T16338] Total swap = 124996kB
[  413.452576][T16338] 1834877 pages RAM
[  413.452581][T16338] 0 pages HighMem/MovableOnly
[  413.452587][T16338] 391881 pages reserved
[  413.452592][T16338] 0 pages cma reserved
[  413.860568][T13907] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  413.936797][T16346] loop0: detected capacity change from 0 to 32768
[  414.002909][T13907] usb 3-1: unable to get BOS descriptor or descriptor too short
[  414.002978][T13907] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a
[  414.005947][T13907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.005960][T13907] usb 3-1: Product: syz
[  414.005967][T13907] usb 3-1: Manufacturer: syz
[  414.005974][T13907] usb 3-1: SerialNumber: syz
[  414.228493][T13907] option 3-1:4.0: GSM modem (1-port) converter detected
[  414.242352][T13907] usb 3-1: USB disconnect, device number 7
[  414.244688][T13907] option 3-1:4.0: device disconnected
[  415.240893][T16381] FAULT_INJECTION: forcing a failure.
[  415.240893][T16381] name failslab, interval 1, probability 0, space 0, times 0
[  415.240953][T16381] CPU: 1 UID: 0 PID: 16381 Comm: syz.0.3864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.240982][T16381] Tainted: [L]=SOFTLOCKUP
[  415.240987][T16381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  415.240992][T16381] Call Trace:
[  415.240996][T16381]  <TASK>
[  415.241001][T16381]  dump_stack_lvl+0xe8/0x150
[  415.241019][T16381]  should_fail_ex+0x410/0x560
[  415.241035][T16381]  should_failslab+0xa8/0x100
[  415.241047][T16381]  ? anon_vma_fork+0x158/0x540
[  415.241059][T16381]  kmem_cache_alloc_noprof+0xa1/0x600
[  415.241071][T16381]  ? trace_kmem_cache_alloc+0x29/0xe0
[  415.241081][T16381]  ? anon_vma_fork+0x88/0x540
[  415.241091][T16381]  ? kmem_cache_alloc_noprof+0x156/0x600
[  415.241102][T16381]  ? anon_vma_fork+0x158/0x540
[  415.241115][T16381]  anon_vma_fork+0x158/0x540
[  415.241127][T16381]  ? dup_mmap+0x875/0x1dc0
[  415.241140][T16381]  dup_mmap+0x954/0x1dc0
[  415.241161][T16381]  ? __pfx_dup_mmap+0x10/0x10
[  415.241173][T16381]  ? do_raw_spin_lock+0x12b/0x2f0
[  415.241189][T16381]  ? lock_acquire+0x115/0x350
[  415.241204][T16381]  copy_mm+0x11a/0x480
[  415.241216][T16381]  ? copy_process+0xd3c/0x43e0
[  415.241225][T16381]  copy_process+0x1e75/0x43e0
[  415.241238][T16381]  ? copy_process+0xd3c/0x43e0
[  415.241254][T16381]  ? __pfx_copy_process+0x10/0x10
[  415.241269][T16381]  kernel_clone+0x2d7/0x940
[  415.241282][T16381]  ? __pfx_kernel_clone+0x10/0x10
[  415.241296][T16381]  ? do_futex+0x3e7/0x4e0
[  415.241309][T16381]  __x64_sys_clone+0x1b6/0x230
[  415.241320][T16381]  ? signal_setup_done+0x22f/0x310
[  415.241354][T16381]  ? __pfx___x64_sys_clone+0x10/0x10
[  415.241371][T16381]  ? __pfx___se_sys_futex+0x10/0x10
[  415.241392][T16381]  do_syscall_64+0x166/0x520
[  415.241405][T16381]  ? trace_irq_disable+0x3b/0x140
[  415.241414][T16381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.241425][T16381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.241434][T16381] RIP: 0033:0x7f11b139e159
[  415.241443][T16381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.241451][T16381] RSP: 002b:00007f11b21e8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  415.241461][T16381] RAX: ffffffffffffffda RBX: 00007f11b1625fa0 RCX: 00007f11b139e159
[  415.241467][T16381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000088206000
[  415.241472][T16381] RBP: 00007f11b143506b R08: 0000000000000000 R09: 0000000000000000
[  415.241477][T16381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  415.241482][T16381] R13: 00007f11b1626038 R14: 00007f11b1625fa0 R15: 00007ffe71fa3758
[  415.241496][T16381]  </TASK>
[  415.570829][T16397] loop4: detected capacity change from 0 to 512
[  415.598999][T16397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.599204][T16397] ext4 filesystem being mounted at /1039/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.662552][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.720223][T16393] loop0: detected capacity change from 0 to 32768
[  415.727481][T16393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3869 (16393)
[  415.732869][T16404] loop4: detected capacity change from 0 to 16
[  415.735787][T16404] erofs (device loop4): mounted with root inode @ nid 36.
[  415.742227][T16393] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  415.742278][T16393] BTRFS info (device loop0 state S): using crc32c checksum algorithm
[  415.766989][T16412] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  415.785358][ T5943] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  415.792857][ T8462] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  415.795920][ T8462] BTRFS warning (device loop0 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  415.796292][ T8601] BTRFS warning (device loop0 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xe31d3a17 level 0, ignored
[  415.798192][T16393] BTRFS error (device loop0 state ECS): logical 6881280 len 1638400 found bg but no related chunk
[  415.817643][ T8462] BTRFS warning (device loop0 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xd0cef59b level 0, ignored
[  415.817736][T16393] BTRFS error (device loop0 state ECS): invalid tree nritems, bytenr=5267456 nritems=0 expect >0
[  415.817764][T16393] BTRFS error (device loop0 state ECS): failed to read fs tree: -EUCLEAN
[  415.843100][T16404] erofs (device loop4): bogus i_mode (4355) @ nid 46
[  415.846924][T16404] erofs (device loop4): bogus i_mode (4355) @ nid 46
[  415.856496][T16404] erofs (device loop4): bogus i_mode (4355) @ nid 46
[  415.997170][T16393] BTRFS error (device loop0 state ECS): open_ctree failed: -EUCLEAN
[  416.007550][T16426] VFS: file-max limit 0 reached
[  416.953909][T16453] loop0: detected capacity change from 0 to 512
[  416.958555][T16453] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  416.963530][T16453] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[  416.963681][T16453] EXT4-fs (loop0): orphan cleanup on readonly fs
[  416.970951][T16453] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.3887: Allocating blocks 41-42 which overlap fs metadata
[  416.971002][T16453] loop0: lost filesystem error report for type 5 error -117
[  416.980076][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  416.980123][    C1] EXT4-fs (loop0): initial error at time 1790260538: ext4_mb_mark_diskspace_used:4223
[  416.980155][    C1] EXT4-fs (loop0): last error at time 1790260538: ext4_mb_mark_diskspace_used:4223
[  417.008264][T16453] Quota error (device loop0): write_blk: dquota write failed
[  417.008374][T16453] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  417.008393][T16453] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.3887: Failed to acquire dquot type 0
[  417.008403][T16453] loop0: lost filesystem error report for type 5 error -117
[  417.009392][T16453] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  417.013217][T16453] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.3887: corrupted inode contents
[  417.013231][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.013442][T16453] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #12: comm syz.0.3887: mark_inode_dirty error
[  417.013454][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.013656][T16453] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.3887: corrupted inode contents
[  417.013667][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.013799][T16453] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.3887: mark_inode_dirty error
[  417.013810][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.014023][T16453] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.3887: corrupted inode contents
[  417.014035][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.014181][T16453] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem
[  417.014190][T16453] loop0: lost filesystem error report for type 5 error -117
[  417.014312][T16453] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.3887: corrupted inode contents
[  417.014348][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.014566][T16453] EXT4-fs error (device loop0): ext4_truncate:4721: inode #12: comm syz.0.3887: mark_inode_dirty error
[  417.014577][T16453] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  417.014712][T16453] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem
[  417.014720][T16453] loop0: lost filesystem error report for type 5 error -117
[  417.014955][T16453] EXT4-fs (loop0): 1 truncate cleaned up
[  417.030397][T16453] EXT4-fs (loop0): pa ffff8881abdd51d0: logic 1, phys. 41, len 23
[  417.030414][T16453] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[  417.038394][T16453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  417.076150][T16453] EXT4-fs (loop0): shut down requested (2)
[  417.137740][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.823660][T16466] netlink: 'syz.2.3893': attribute type 3 has an invalid length.
[  417.826439][T16466] netlink: 'syz.2.3893': attribute type 6 has an invalid length.
[  417.829300][T16466] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3893'.
[  419.269168][T16541] loop4: detected capacity change from 0 to 256
[  419.276350][T16541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x997a2ed9, utbl_chksum : 0xe619d30d)
[  419.651930][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.748419][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.844505][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.931631][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.184766][T16568] loop0: detected capacity change from 0 to 128
[  420.228668][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'.
[  420.554497][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.559465][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.645810][   T12] bond0 (unregistering): Released all slaves
[  420.651594][   T12] bond1 (unregistering): Released all slaves
[  420.657829][ T5340] 8021q: adding VLAN 0 to HW filter on device eth1
[  420.666953][T16589] tipc: Started in network mode
[  420.667561][T16589] tipc: Node identity ac14140f, cluster identity 4711
[  420.681217][T16589] tipc: New replicast peer: 255.255.255.255
[  420.681478][T16589] tipc: Enabled bearer <udp:syz2>, priority 10
[  420.707169][T16590] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001
[  420.711868][   T12] tipc: Left network mode
[  421.152963][ T5340] 8021q: adding VLAN 0 to HW filter on device eth2
[  421.178167][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'.
[  421.225192][   T12] hsr_slave_0: left promiscuous mode
[  421.226596][   T12] hsr_slave_1: left promiscuous mode
[  421.230405][   T12] veth1_macvtap: left promiscuous mode
[  421.230456][   T12] veth0_macvtap: left promiscuous mode
[  421.230526][   T12] veth1_vlan: left promiscuous mode
[  421.230579][   T12] veth0_vlan: left promiscuous mode
[  421.525255][T16614] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  421.870732][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'.
[  421.879243][T16125] tipc: Node number set to 2886997007
[  422.035323][T16629] FAULT_INJECTION: forcing a failure.
[  422.035323][T16629] name failslab, interval 1, probability 0, space 0, times 0
[  422.045269][T16629] CPU: 1 UID: 0 PID: 16629 Comm: syz.0.3962 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.045334][T16629] Tainted: [L]=SOFTLOCKUP
[  422.045359][T16629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  422.045368][T16629] Call Trace:
[  422.045374][T16629]  <TASK>
[  422.045380][T16629]  dump_stack_lvl+0xe8/0x150
[  422.045397][T16629]  should_fail_ex+0x410/0x560
[  422.045413][T16629]  should_failslab+0xa8/0x100
[  422.045425][T16629]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  422.045439][T16629]  ? kasprintf+0xe2/0x140
[  422.045449][T16629]  ? kasprintf+0xe2/0x140
[  422.045460][T16629]  kvasprintf+0xeb/0x1a0
[  422.045469][T16629]  ? __pfx_kvasprintf+0x10/0x10
[  422.045479][T16629]  ? do_raw_spin_lock+0x12b/0x2f0
[  422.045493][T16629]  kasprintf+0xe2/0x140
[  422.045504][T16629]  ? __pfx_kasprintf+0x10/0x10
[  422.045515][T16629]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  422.045528][T16629]  ieee80211_alloc_led_names+0xa4/0x2b0
[  422.045538][T16629]  ieee80211_alloc_hw_nm+0x1849/0x1f00
[  422.045550][T16629]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[  422.045562][T16629]  mac80211_hwsim_new_radio+0x1ea/0x56b0
[  422.045579][T16629]  ? __pfx___nla_validate_parse+0x10/0x10
[  422.045594][T16629]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  422.045605][T16629]  ? trace_kmalloc+0x2a/0xf0
[  422.045619][T16629]  hwsim_new_radio_nl+0xd8b/0xf90
[  422.045636][T16629]  genl_family_rcv_msg_doit+0x233/0x340
[  422.045651][T16629]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  422.045667][T16629]  ? bpf_lsm_capable+0x9/0x20
[  422.045679][T16629]  ? security_capable+0x7e/0x2c0
[  422.045694][T16629]  genl_rcv_msg+0x614/0x7a0
[  422.045707][T16629]  ? __pfx_genl_rcv_msg+0x10/0x10
[  422.045718][T16629]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  422.045734][T16629]  netlink_rcv_skb+0x226/0x4a0
[  422.045744][T16629]  ? __pfx_genl_rcv_msg+0x10/0x10
[  422.045756][T16629]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  422.045770][T16629]  ? down_read+0x2be/0x330
[  422.045779][T16629]  genl_rcv+0x28/0x40
[  422.045789][T16629]  netlink_unicast+0x7bd/0x940
[  422.045802][T16629]  netlink_sendmsg+0x813/0xb40
[  422.045820][T16629]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.045832][T16629]  ? apparmor_socket_sendmsg+0x18b/0x360
[  422.045844][T16629]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.045853][T16629]  sock_sendmsg_nosec+0x13a/0x180
[  422.045866][T16629]  ____sys_sendmsg+0x54e/0x850
[  422.045877][T16629]  ? __pfx_____sys_sendmsg+0x10/0x10
[  422.045889][T16629]  ? import_iovec+0x73/0xa0
[  422.045900][T16629]  ___sys_sendmsg+0x2a5/0x360
[  422.045908][T16629]  ? __lock_acquire+0x6df/0x2e50
[  422.045917][T16629]  ? __pfx____sys_sendmsg+0x10/0x10
[  422.045928][T16629]  ? futex_wake+0x51b/0x5f0
[  422.045951][T16629]  ? __fget_files+0x2a/0x420
[  422.045960][T16629]  ? __fget_files+0x3a2/0x420
[  422.045974][T16629]  __x64_sys_sendmsg+0x1b1/0x290
[  422.045983][T16629]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  422.045999][T16629]  do_syscall_64+0x166/0x520
[  422.046010][T16629]  ? trace_irq_disable+0x3b/0x140
[  422.046017][T16629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.046027][T16629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.046035][T16629] RIP: 0033:0x7f11b139e159
[  422.046045][T16629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.046052][T16629] RSP: 002b:00007f11b21e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  422.046062][T16629] RAX: ffffffffffffffda RBX: 00007f11b1625fa0 RCX: 00007f11b139e159
[  422.046068][T16629] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003
[  422.046073][T16629] RBP: 00007f11b143506b R08: 0000000000000000 R09: 0000000000000000
[  422.046078][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  422.046083][T16629] R13: 00007f11b1626038 R14: 00007f11b1625fa0 R15: 00007ffe71fa3758
[  422.046096][T16629]  </TASK>
[  422.269429][ T5340] 8021q: adding VLAN 0 to HW filter on device eth3
[  422.635727][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3967'.
[  422.649931][T16652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3967'.
[  422.653968][T16652] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  422.663390][ T5340] 8021q: adding VLAN 0 to HW filter on device eth4
[  422.744624][T16659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.080552][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'.
[  423.107500][T16670] loop4: detected capacity change from 0 to 128
[  423.118059][T16670] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  423.118440][T16670] ext4 filesystem being mounted at /1087/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  423.148792][ T7877] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  423.552187][T16685] IPVS: length: 1152 != 8
[  424.547033][T16722] loop0: detected capacity change from 0 to 128
[  424.770662][T16730] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  424.841488][T16733] loop0: detected capacity change from 0 to 256
[  425.792524][   T34] audit: type=1800 audit(1790260547.003:6009): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4008" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  426.670962][T16791] loop2: detected capacity change from 0 to 16
[  426.684526][T16791] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  426.831494][T16793] SET target dimension over the limit!
[  427.368921][T16811] loop4: detected capacity change from 0 to 128
[  427.472977][   T34] audit: type=1800 audit(1790260548.683:6010): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4038" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0
[  427.569027][T16819] loop4: detected capacity change from 0 to 2048
[  427.585872][T16819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.627304][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.792771][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4044'.
[  428.374653][T16865] loop2: detected capacity change from 0 to 128
[  428.434420][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'.
[  428.849135][   T34] audit: type=1800 audit(1790260550.053:6011): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4068" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  429.340983][T16877] loop2: detected capacity change from 0 to 131072
[  429.425559][T16877] F2FS-fs (loop2): invalid crc value
[  429.522576][T16877] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  429.539968][T16877] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  429.546547][   T34] audit: type=1800 audit(1790260550.753:6012): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4064" name="file2" dev="loop2" ino=8 res=0 errno=0
[  429.571821][T16906] loop0: detected capacity change from 0 to 2048
[  429.617180][T16903] SET target dimension over the limit!
[  429.678990][T16906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.737657][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.854275][T16918] netlink: 'syz.0.4082': attribute type 3 has an invalid length.
[  429.857024][T16918] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4082'.
[  430.218444][   T56] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  430.229232][   T56] Bluetooth: hci3: Injecting HCI hardware error event
[  430.238083][   T56] Bluetooth: hci3: hardware error 0x00
[  430.509815][T16139] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  430.662937][T16139] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  430.665594][T16139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.665631][T16139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  430.665646][T16139] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  430.665662][T16139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  430.665693][T16139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.676381][T16139] usb 3-1: config 0 descriptor??
[  430.688237][T16139] hdpvr 3-1:0.0: Could not find bulk-in endpoint
[  430.688329][T16139] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  430.885659][T16139] usb 3-1: USB disconnect, device number 8
[  430.982043][T16958] CIFS: Attempting to mount //127.0.0.1/share
[  431.253215][ T4995] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  431.253343][ T4995] Bluetooth: hci1: Injecting HCI hardware error event
[  431.261582][T14445] Bluetooth: hci1: hardware error 0x00
[  431.477085][T16963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4101'.
[  431.638598][T16968] loop4: detected capacity change from 0 to 128
[  431.847317][T16958] CIFS: VFS: Error connecting to socket. Aborting operation.
[  431.858918][T16958] CIFS: VFS: cifs_mount failed w/return code = -4
[  432.023904][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.030338][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.305683][   T56] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  432.938709][T16983] loop0: detected capacity change from 0 to 128
[  433.007869][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4109'.
[  433.187725][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.187996][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.329617][T14445] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  433.525202][T16991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4113'.
[  433.525291][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4113'.
[  435.063428][T17036] loop2: detected capacity change from 0 to 128
[  435.272148][T17043] loop0: detected capacity change from 0 to 32768
[  435.275328][T17043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4126 (17043)
[  435.281730][T17043] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  435.285150][T17043] BTRFS info (device loop0): using sha256 checksum algorithm
[  435.345442][T17043] BTRFS info (device loop0): enabling ssd optimizations
[  435.345597][T17043] BTRFS info (device loop0): turning on async discard
[  435.345606][T17043] BTRFS info (device loop0): enabling free space tree
[  435.448872][T14443] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  436.524000][T17096] loop4: detected capacity change from 0 to 128
[  437.229544][T17122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.233924][T17122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.967096][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.967508][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.067139][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  440.069633][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  440.599277][T17172] loop2: detected capacity change from 0 to 512
[  440.603831][T17172] EXT4-fs: Ignoring removed i_version option
[  440.638280][T17172] EXT4-fs (loop2): 1 orphan inode deleted
[  440.639887][T17172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.643223][T17172] EXT4-fs error (device loop2): __ext4_add_entry:2414: inode #2: comm syz.2.4174: Directory hole found for htree leaf block 0
[  440.662736][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.830217][   T33] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  441.879789][T16139] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  442.004956][   T33] usb 5-1: unable to get BOS descriptor or descriptor too short
[  442.007551][   T33] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  442.011889][   T33] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  442.018062][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.021114][   T33] usb 5-1: Product: syz
[  442.021125][   T33] usb 5-1: Manufacturer: syz
[  442.021131][   T33] usb 5-1: SerialNumber: syz
[  442.030307][T16139] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  442.046613][T16139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.046671][T16139] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.046685][T16139] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.046694][T16139] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  442.046715][T16139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.133053][T14445] Bluetooth: hci0: command 0x0406 tx timeout
[  442.247176][   T33] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  442.265154][   T33] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  442.303219][   T33] usb 5-1: USB disconnect, device number 27
[  442.357455][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  442.471081][T16139] hid_parser_main: 21 callbacks suppressed
[  442.473986][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.476705][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.479034][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.481601][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.484169][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487209][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487256][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487285][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487314][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487343][T16139] lg-g15 0003:046D:C222.000A: unknown main item tag 0x0
[  442.487443][T16139] lg-g15 0003:046D:C222.000A: unbalanced collection at end of report description
[  442.505669][T16139] lg-g15 0003:046D:C222.000A: probe with driver lg-g15 failed with error -22
[  442.808868][T17219] loop4: detected capacity change from 0 to 512
[  442.814231][T17219] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  442.833575][T17219] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  443.152924][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.157665][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.800887][T16139] usb 3-1: USB disconnect, device number 9
[  444.146095][T17264] loop4: detected capacity change from 0 to 512
[  444.147090][T17264] EXT4-fs: Ignoring removed i_version option
[  444.178116][T17264] EXT4-fs (loop4): 1 orphan inode deleted
[  444.181116][T17264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.206670][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.292087][T17272] loop0: detected capacity change from 0 to 128
[  444.412869][T17276] loop0: detected capacity change from 0 to 8192
[  444.454106][T17276]  loop0: p1 p2 p3
[  444.455601][T17276] loop0: p1 start 262078720 is beyond EOD, truncated
[  444.487206][T17276] loop0: p3 size 100663552 extends beyond EOD, truncated
[  444.522074][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  444.523973][ T5608] udevd[5608]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  444.631971][T17294] Bluetooth: MGMT ver 1.23
[  444.805245][T17307] loop0: detected capacity change from 0 to 512
[  444.812492][T17307] EXT4-fs: Ignoring removed i_version option
[  444.845227][T17307] EXT4-fs (loop0): 1 orphan inode deleted
[  444.848037][T17307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.868318][T17307] EXT4-fs error (device loop0): __ext4_add_entry:2414: inode #2: comm syz.0.4226: Directory hole found for htree leaf block 0
[  444.942599][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.553378][T17344] 9p: Bad value for 'source'
[  445.717998][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'.
[  446.042972][T17371] loop2: detected capacity change from 0 to 128
[  446.063461][T17371] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  446.063637][T17371] hpfs: filesystem error: improperly stopped
[  446.063693][T17371] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  446.063748][T17371] hpfs: You really don't want any checks? You are crazy...
[  446.063762][T17371] hpfs: Code page index out of array
[  446.063768][T17371] hpfs: code page support is disabled
[  446.063843][T17371] hpfs: hpfs_map_4sectors(): unaligned read
[  446.063895][T17371] hpfs: hpfs_map_4sectors(): unaligned read
[  446.063902][T17371] hpfs: filesystem error: unable to find root dir
[  446.119772][   T33] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  446.145895][T17371] hpfs: hpfs_map_4sectors(): unaligned read
[  446.270331][   T33] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  446.271506][   T33] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.271542][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.271562][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.271577][   T33] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  446.271609][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.294556][T17380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'.
[  446.294573][T17380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'.
[  446.681459][   T33] lg-g15 0003:046D:C222.000B: unbalanced collection at end of report description
[  446.681798][   T33] lg-g15 0003:046D:C222.000B: probe with driver lg-g15 failed with error -22
[  446.700524][T14445] Bluetooth: hci0: command 0x0406 tx timeout
[  446.700908][   T56] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  446.885815][T16139] usb 5-1: USB disconnect, device number 28
[  449.170241][T14445] Bluetooth: hci4: command 0x1003 tx timeout
[  449.177741][   T56] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  449.343115][T17446] loop4: detected capacity change from 0 to 512
[  449.360251][T17449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4284'.
[  449.363273][T17449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4284'.
[  449.368077][T17446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  449.374703][T17446] System zones: 1-12
[  449.384568][T17446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.4283: missing EA_INODE flag
[  449.384618][T17446] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.389778][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  449.389791][    C0] EXT4-fs (loop4): initial error at time 1790260570: ext4_xattr_inode_iget:437: inode 12
[  449.389804][    C0] EXT4-fs (loop4): last error at time 1790260570: ext4_xattr_inode_iget:437: inode 12
[  449.418618][T17446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4283: error while reading EA inode 12 err=-117
[  449.418668][T17446] loop4: lost filesystem error report for type 5 error -117
[  449.424403][T17446] EXT4-fs (loop4): 1 orphan inode deleted
[  449.425241][T17446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.474989][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.692724][T17472] loop0: detected capacity change from 0 to 128
[  449.697708][T17472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  449.699245][T17472] hpfs: filesystem error: improperly stopped
[  449.699257][T17472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  449.699264][T17472] hpfs: You really don't want any checks? You are crazy...
[  449.699272][T17472] hpfs: Code page index out of array
[  449.699276][T17472] hpfs: code page support is disabled
[  449.699435][T17472] hpfs: hpfs_map_4sectors(): unaligned read
[  449.699474][T17472] hpfs: hpfs_map_4sectors(): unaligned read
[  449.699478][T17472] hpfs: filesystem error: unable to find root dir
[  449.736942][T17472] hpfs: hpfs_map_4sectors(): unaligned read
[  449.812943][T17474] loop2: detected capacity change from 0 to 128
[  450.151616][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4306'.
[  450.529988][   T33] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  450.681228][   T33] usb 5-1: Using ep0 maxpacket: 16
[  450.683751][   T33] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  450.684726][   T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.684746][   T33] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  450.684758][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  450.684769][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  450.684779][   T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  450.686870][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.686887][   T33] usb 5-1: Product: syz
[  450.686893][   T33] usb 5-1: Manufacturer: syz
[  450.686899][   T33] usb 5-1: SerialNumber: syz
[  450.693610][   T33] usb 5-1: config 0 descriptor??
[  450.696664][   T33] xbox_remote_probe: endpoint_in message size==0?
[  450.781257][T17532] macsec0: entered promiscuous mode
[  450.781410][T17532] macsec0: entered allmulticast mode
[  450.781418][T17532] veth1_macvtap: entered allmulticast mode
[  450.901116][T13905] usb 5-1: USB disconnect, device number 29
[  451.435546][T17542] loop4: detected capacity change from 0 to 512
[  451.443259][T17542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  451.443353][T17542] System zones: 1-12
[  451.444076][T17542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.4329: missing EA_INODE flag
[  451.444123][T17542] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  451.444298][T17542] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.4329: error while reading EA inode 12 err=-117
[  451.444312][T17542] loop4: lost filesystem error report for type 5 error -117
[  451.449561][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  451.449575][    C1] EXT4-fs (loop4): initial error at time 1790260572: ext4_xattr_inode_iget:437: inode 12
[  451.449588][    C1] EXT4-fs (loop4): last error at time 1790260572: ext4_xattr_inode_iget:442
[  451.453306][T17542] EXT4-fs (loop4): 1 orphan inode deleted
[  451.467537][T17542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.510592][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.715829][T17551] loop4: detected capacity change from 0 to 8192
[  452.073727][T17561] loop4: detected capacity change from 0 to 128
[  452.090849][T17561] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  452.178460][T17561] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  452.280593][T17561] EXT4-fs (loop4): shut down requested (0)
[  452.487700][ T7877] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.273913][T17572] loop4: detected capacity change from 0 to 32768
[  453.279458][T17572] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4341 (17572)
[  453.292175][T17572] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  453.292267][T17572] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  453.362154][T17572] BTRFS info (device loop4): setting nodatasum
[  453.362208][T17572] BTRFS info (device loop4): allowing degraded mounts
[  453.362251][T17572] BTRFS info (device loop4): turning on async discard
[  453.362276][T17572] BTRFS info (device loop4): enabling free space tree
[  453.362303][T17572] BTRFS info (device loop4): force zlib compression, level 3
[  453.474529][ T7877] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  453.850611][T17607] loop2: detected capacity change from 0 to 128
[  453.855655][T17607] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  453.873960][T17607] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  453.898350][T17609] veth0_macvtap: entered allmulticast mode
[  453.898513][T17609] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  453.916526][T14102] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  454.131644][T17617] loop4: detected capacity change from 0 to 128
[  454.154736][T17617] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  454.175156][T17617] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  454.187527][T17617] EXT4-fs (loop4): shut down requested (0)
[  454.230573][ T7877] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  454.429212][T17624] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4358'.
[  454.831171][T17622] loop4: detected capacity change from 0 to 32768
[  454.893152][T17622] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  455.012521][   T34] audit: type=1800 audit(1790260576.223:6013): pid=17622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4356" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  455.035142][T17622] (syz.4.4356,17622,0):ocfs2_file_write_iter:2458 ERROR: status = -27
[  455.404526][ T7877] ocfs2: Unmounting device (7,4) on (node local)
[  455.902589][T17654] loop0: detected capacity change from 0 to 512
[  455.959297][T17654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  455.976679][T17654] EXT4-fs (loop0): 1 truncate cleaned up
[  455.993926][T17654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.076960][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.201709][T17675] loop2: detected capacity change from 0 to 1024
[  456.405762][T17687] loop4: detected capacity change from 0 to 2048
[  456.426776][T17687] NILFS (loop4): invalid segment: Magic number mismatch
[  456.426850][T17687] NILFS (loop4): trying rollback from an earlier position
[  456.455901][T17687] NILFS (loop4): recovery complete
[  456.470400][T17693] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  456.713771][T17702] blktrace: Concurrent blktraces are not allowed on loop3
[  456.717903][T17702] SET target dimension over the limit!
[  457.108382][T17705] loop2: detected capacity change from 0 to 32768
[  457.205038][T17705] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  457.263485][   T34] audit: type=1800 audit(1790260578.473:6014): pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4393" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  457.331982][T14102] ocfs2: Unmounting device (7,2) on (node local)
[  458.330959][T17766] loop0: detected capacity change from 0 to 2048
[  458.338864][T17766] NILFS (loop0): invalid segment: Magic number mismatch
[  458.339613][T17766] NILFS (loop0): trying rollback from an earlier position
[  458.355738][T17766] NILFS (loop0): recovery complete
[  458.361222][T17769] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  459.146954][T17802] loop0: detected capacity change from 0 to 32768
[  459.175396][T17802] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  459.306719][   T34] audit: type=1800 audit(1790260580.513:6015): pid=17802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4428" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  459.367587][T14443] ocfs2: Unmounting device (7,0) on (node local)
[  459.609404][T17828] geneve1: entered promiscuous mode
[  459.895119][T17830] loop4: detected capacity change from 0 to 32768
[  459.969749][ T9863] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980249][T12252] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980430][T12252] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980478][T12252] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980524][T12252] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980571][T12252] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980617][T12252] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980664][T12252] netdevsim netdevsim9 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980712][T12252] netdevsim netdevsim9 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980758][T12252] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980805][T12252] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980851][T12252] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  459.980979][T12252] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981027][T12252] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981074][T12252] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981148][T12252] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981195][T12252] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981242][T12252] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981290][T12252] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  459.981336][T12252] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  460.519819][T17873] loop0: detected capacity change from 0 to 40427
[  460.523118][T17873] F2FS-fs: heap/no_heap options were deprecated
[  460.526312][T17873] F2FS-fs (loop0): build fault injection rate: 19
[  460.528923][T17873] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  460.534484][T17873] F2FS-fs (loop0): invalid crc value
[  460.542152][T17873] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  460.568241][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4458'.
[  460.568282][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4458'.
[  460.568326][T17884] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4458'.
[  460.581792][T17873] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  460.584492][T17873] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  460.594552][T17873] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  460.610734][T17873] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  460.730391][    C1] F2FS-fs (loop0): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50
[  460.730458][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.730471][    C1] Tainted: [L]=SOFTLOCKUP
[  460.730474][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.730479][    C1] Call Trace:
[  460.730482][    C1]  <TASK>
[  460.730486][    C1]  dump_stack_lvl+0xe8/0x150
[  460.730499][    C1]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  460.730510][    C1]  f2fs_write_end_bio+0x1211/0x16e0
[  460.730522][    C1]  ? blkg_put+0x22/0x240
[  460.730535][    C1]  blk_update_request+0x57b/0xe50
[  460.730548][    C1]  blk_mq_end_request+0x3e/0x70
[  460.730574][    C1]  blk_flush_complete_seq+0x68a/0xce0
[  460.730590][    C1]  flush_end_io+0xb7e/0xe90
[  460.730604][    C1]  __blk_mq_end_request+0x461/0x600
[  460.730615][    C1]  blk_done_softirq+0x10a/0x160
[  460.730624][    C1]  handle_softirqs+0x226/0x860
[  460.730635][    C1]  ? schedule+0x90/0x2b0
[  460.730645][    C1]  ? run_ksoftirqd+0x36/0x60
[  460.730657][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  460.730667][    C1]  run_ksoftirqd+0x36/0x60
[  460.730676][    C1]  smpboot_thread_fn+0x565/0xa70
[  460.730687][    C1]  ? smpboot_thread_fn+0x4e/0xa70
[  460.730699][    C1]  kthread+0x38b/0x480
[  460.730707][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  460.730716][    C1]  ? __pfx_kthread+0x10/0x10
[  460.730724][    C1]  ret_from_fork+0x514/0xb70
[  460.730736][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  460.730747][    C1]  ? __switch_to+0xc89/0x1420
[  460.730758][    C1]  ? __pfx_kthread+0x10/0x10
[  460.730765][    C1]  ret_from_fork_asm+0x1a/0x30
[  460.730787][    C1]  </TASK>
[  460.730792][    C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  460.739675][T17892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4461'.
[  460.807650][T14443] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  461.026329][T17901] loop0: detected capacity change from 0 to 1024
[  461.048796][T17901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.099368][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.665257][T17926] loop0: detected capacity change from 0 to 32768
[  461.724319][T17926] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  461.761372][   T34] audit: type=1800 audit(1790260582.973:6016): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4471" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  461.769433][T17926] (syz.0.4471,17926,1):ocfs2_file_write_iter:2458 ERROR: status = -27
[  461.838196][T14443] ocfs2: Unmounting device (7,0) on (node local)
[  462.023985][T17950] loop4: detected capacity change from 0 to 512
[  462.113993][T17950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.122271][T17950] ext4 filesystem being mounted at /1257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.223283][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.396689][T17967] loop0: detected capacity change from 0 to 1024
[  462.443367][T17967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.488344][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.783132][T17987] loop0: detected capacity change from 0 to 512
[  462.790934][T17987] EXT4-fs (loop0): Test dummy encryption mode enabled
[  462.790979][T17987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  462.807994][T17987] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.4494: bad orphan inode 131083
[  462.808036][T17987] loop0: lost filesystem error report for type 5 error -117
[  462.812237][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  462.812249][    C1] EXT4-fs (loop0): initial error at time 1790260584: ext4_orphan_get:1429
[  462.812259][    C1] EXT4-fs (loop0): last error at time 1790260584: ext4_orphan_get:1429
[  462.826856][T17987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.922534][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.819766][T16125] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  463.970565][T16125] usb 3-1: Using ep0 maxpacket: 8
[  463.973474][T16125] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  463.978554][T16125] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  463.982590][T16125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  463.986709][T16125] usb 3-1: config 0 has no interface number 0
[  463.993301][T16125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.996498][T16125] usb 3-1: Product: syz
[  463.998571][T16125] usb 3-1: Manufacturer: syz
[  464.000603][T16125] usb 3-1: SerialNumber: syz
[  464.005776][T16125] usb 3-1: config 0 descriptor??
[  464.016566][T16125] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  464.020230][T16125] uvcvideo 3-1:0.31: Failed to create links for entity 32774
[  464.023365][T16125] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  464.117028][T18031] loop0: detected capacity change from 0 to 32768
[  464.225548][T13284] usb 3-1: USB disconnect, device number 10
[  464.649023][T18040] ip_tables: iptables: counters copy to user failed while replacing table
[  465.124662][T18051] loop2: detected capacity change from 0 to 32768
[  465.137467][T18051] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  465.212174][   T34] audit: type=1800 audit(1790260586.423:6017): pid=18051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4522" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  465.346362][T14102] ocfs2: Unmounting device (7,2) on (node local)
[  465.577878][T18076] loop2: detected capacity change from 0 to 512
[  465.590780][T18076] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  465.636809][   T34] audit: type=1326 audit(1790260586.843:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18078 comm="syz.4.4533" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3b0b9e159 code=0x0
[  465.876401][T18073] loop0: detected capacity change from 0 to 40427
[  465.877302][T18073] F2FS-fs: heap/no_heap options were deprecated
[  465.882979][T18073] F2FS-fs (loop0): build fault injection rate: 19
[  465.883134][T18073] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  465.883965][T18073] F2FS-fs (loop0): invalid crc value
[  465.901420][T18073] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  465.992095][T18073] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  465.998310][T18073] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  466.009387][T18073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  466.028004][T18073] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  466.033363][T18073] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  466.042226][T18073] bio_check_eod: 73 callbacks suppressed
[  466.046047][T18073] syz.0.4531: attempt to access beyond end of device
[  466.046047][T18073] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  466.055706][T18073] CPU: 1 UID: 0 PID: 18073 Comm: syz.0.4531 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.055744][T18073] Tainted: [L]=SOFTLOCKUP
[  466.055749][T18073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  466.055756][T18073] Call Trace:
[  466.055760][T18073]  <TASK>
[  466.055765][T18073]  dump_stack_lvl+0xe8/0x150
[  466.055783][T18073]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  466.055796][T18073]  f2fs_write_end_bio+0x1211/0x16e0
[  466.055810][T18073]  ? blkg_put+0x22/0x240
[  466.055825][T18073]  __submit_merged_bio+0x258/0x6a0
[  466.055835][T18073]  ? rcu_is_watching+0x16/0xb0
[  466.055846][T18073]  __submit_merged_write_cond+0x3c9/0x4e0
[  466.055859][T18073]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  466.055878][T18073]  f2fs_write_data_pages+0x2a27/0x36f0
[  466.055901][T18073]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  466.055910][T18073]  ? is_bpf_text_address+0x26/0x2b0
[  466.055924][T18073]  ? arch_stack_walk+0xfb/0x150
[  466.055945][T18073]  ? __lock_acquire+0x6df/0x2e50
[  466.055959][T18073]  ? __lock_acquire+0x6df/0x2e50
[  466.055969][T18073]  ? do_raw_spin_lock+0x12b/0x2f0
[  466.055983][T18073]  ? do_raw_spin_unlock+0x4d/0x200
[  466.055994][T18073]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  466.056005][T18073]  do_writepages+0x338/0x560
[  466.056020][T18073]  ? do_raw_spin_unlock+0x4d/0x200
[  466.056032][T18073]  filemap_write_and_wait_range+0x335/0x3f0
[  466.056041][T18073]  ? arch_stack_walk+0xfb/0x150
[  466.056050][T18073]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  466.056123][T18073]  ? __lock_acquire+0x6df/0x2e50
[  466.056135][T18073]  ? fiemap_prep+0x1c7/0x250
[  466.056146][T18073]  f2fs_fiemap+0x19c/0x17f0
[  466.056161][T18073]  ? __pfx_f2fs_fiemap+0x10/0x10
[  466.056170][T18073]  ? lock_acquire+0x115/0x350
[  466.056188][T18073]  do_vfs_ioctl+0x1263/0x1530
[  466.056198][T18073]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  466.056211][T18073]  ? hook_file_ioctl+0x1f2/0x600
[  466.056227][T18073]  ? __fget_files+0x2a/0x420
[  466.056239][T18073]  ? __fget_files+0x2a/0x420
[  466.056248][T18073]  ? __fget_files+0x3a2/0x420
[  466.056257][T18073]  ? __fget_files+0x2a/0x420
[  466.056268][T18073]  ? bpf_lsm_file_ioctl+0x9/0x20
[  466.056280][T18073]  __se_sys_ioctl+0x82/0x170
[  466.056288][T18073]  do_syscall_64+0x166/0x520
[  466.056300][T18073]  ? trace_irq_disable+0x3b/0x140
[  466.056307][T18073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.056317][T18073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.056325][T18073] RIP: 0033:0x7f11b139e159
[  466.056335][T18073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.056343][T18073] RSP: 002b:00007f11b21e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  466.056353][T18073] RAX: ffffffffffffffda RBX: 00007f11b1625fa0 RCX: 00007f11b139e159
[  466.056359][T18073] RDX: 0000200000000100 RSI: 00000000c020660b RDI: 0000000000000004
[  466.056364][T18073] RBP: 00007f11b143506b R08: 0000000000000000 R09: 0000000000000000
[  466.056369][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.056374][T18073] R13: 00007f11b1626038 R14: 00007f11b1625fa0 R15: 00007ffe71fa3758
[  466.056386][T18073]  </TASK>
[  466.130850][T18087] loop2: detected capacity change from 0 to 32768
[  466.134840][T18073] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  466.168021][T18087] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  466.264125][   T34] audit: type=1800 audit(1790260587.473:6019): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4536" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  466.265117][T18087] (syz.2.4536,18087,0):ocfs2_file_write_iter:2458 ERROR: status = -27
[  466.481620][T14102] ocfs2: Unmounting device (7,2) on (node local)
[  466.646467][T18099] loop4: detected capacity change from 0 to 512
[  466.710090][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4541'.
[  466.805697][T18099] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.4540: corrupted in-inode xattr: invalid ea_ino
[  466.805742][T18099] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  466.810641][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  466.810659][    C1] EXT4-fs (loop4): initial error at time 1790260588: ext4_iget_extra_inode:5210: inode 15
[  466.810678][    C1] EXT4-fs (loop4): last error at time 1790260588: ext4_iget_extra_inode:5210: inode 15
[  466.823496][T18099] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.4540: couldn't read orphan inode 15 (err -117)
[  466.823540][T18099] loop4: lost filesystem error report for type 5 error -117
[  466.828136][T18099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.872363][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.136186][T18112] loop2: detected capacity change from 0 to 40427
[  467.137558][T18112] F2FS-fs: heap/no_heap options were deprecated
[  467.140391][T18112] F2FS-fs (loop2): build fault injection rate: 19
[  467.140402][T18112] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  467.143867][T18112] F2FS-fs (loop2): invalid crc value
[  467.163496][T18112] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  467.247873][T18112] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  467.259752][T18112] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  467.303635][T18112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  467.307409][T18112] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  467.308432][T18112] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0
[  467.313424][T18112] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  467.338671][T14102] syz-executor: attempt to access beyond end of device
[  467.338671][T14102] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  467.342566][T14102] CPU: 1 UID: 0 PID: 14102 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.342586][T14102] Tainted: [L]=SOFTLOCKUP
[  467.342591][T14102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  467.342599][T14102] Call Trace:
[  467.342605][T14102]  <TASK>
[  467.342610][T14102]  dump_stack_lvl+0xe8/0x150
[  467.342631][T14102]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  467.342643][T14102]  f2fs_write_end_bio+0x1211/0x16e0
[  467.342656][T14102]  ? blkg_put+0x22/0x240
[  467.342691][T14102]  __submit_merged_bio+0x258/0x6a0
[  467.342701][T14102]  ? rcu_is_watching+0x16/0xb0
[  467.342713][T14102]  __submit_merged_write_cond+0x3c9/0x4e0
[  467.342725][T14102]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  467.342742][T14102]  f2fs_write_data_pages+0x2a27/0x36f0
[  467.342755][T14102]  ? __lock_acquire+0x6df/0x2e50
[  467.342775][T14102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.342801][T14102]  ? __pfx_hlock_conflict+0x10/0x10
[  467.342809][T14102]  ? __bfs+0x153/0x290
[  467.342818][T14102]  ? __pfx_hlock_conflict+0x10/0x10
[  467.342843][T14102]  ? lockdep_unlock+0x5c/0xd0
[  467.342859][T14102]  ? __lock_acquire+0x14b9/0x2e50
[  467.342876][T14102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.342887][T14102]  do_writepages+0x338/0x560
[  467.342903][T14102]  ? do_raw_spin_unlock+0x4d/0x200
[  467.342915][T14102]  filemap_fdatawrite+0x1e9/0x2f0
[  467.342924][T14102]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  467.342948][T14102]  ? do_raw_spin_unlock+0x4d/0x200
[  467.342960][T14102]  f2fs_sync_dirty_inodes+0x30e/0x830
[  467.342977][T14102]  f2fs_write_checkpoint+0xa3d/0x2710
[  467.342987][T14102]  ? __lock_acquire+0x6df/0x2e50
[  467.343006][T14102]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  467.343038][T14102]  kill_f2fs_super+0x2dd/0x700
[  467.343077][T14102]  ? __pfx_kill_f2fs_super+0x10/0x10
[  467.343093][T14102]  ? call_rcu+0x64d/0x8b0
[  467.343102][T14102]  ? lockdep_hardirqs_on+0x7b/0x110
[  467.343118][T14102]  deactivate_locked_super+0xbc/0x110
[  467.343130][T14102]  cleanup_mnt+0x3d3/0x460
[  467.343143][T14102]  task_work_run+0x1d9/0x270
[  467.343154][T14102]  ? __pfx_task_work_run+0x10/0x10
[  467.343166][T14102]  exit_to_user_mode_loop+0x204/0x770
[  467.343175][T14102]  ? rcu_is_watching+0x16/0xb0
[  467.343185][T14102]  do_syscall_64+0x328/0x520
[  467.343196][T14102]  ? trace_irq_disable+0x3b/0x140
[  467.343203][T14102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.343214][T14102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.343222][T14102] RIP: 0033:0x7f2c9779f397
[  467.343231][T14102] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  467.343239][T14102] RSP: 002b:00007ffeec75b3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  467.343253][T14102] RAX: 0000000000000000 RBX: 00007f2c978344bb RCX: 00007f2c9779f397
[  467.343259][T14102] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeec75b490
[  467.343264][T14102] RBP: 00007ffeec75b490 R08: 00007ffeec75c490 R09: 00000000ffffffff
[  467.343270][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeec75c520
[  467.343275][T14102] R13: 00007f2c978344bb R14: 00000000000720fe R15: 00007ffeec75c560
[  467.343287][T14102]  </TASK>
[  467.345800][T14102] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  467.567420][T18123] loop0: detected capacity change from 0 to 40427
[  467.578996][T18123] F2FS-fs: heap/no_heap options were deprecated
[  467.590587][T18123] F2FS-fs (loop0): build fault injection rate: 19
[  467.590652][T18123] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  467.594633][T18123] F2FS-fs (loop0): invalid crc value
[  467.622906][T18123] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  467.751646][T18123] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  467.779349][T18141] loop4: detected capacity change from 0 to 512
[  467.790755][T18141] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.4557: corrupted in-inode xattr: invalid ea_ino
[  467.790818][T18141] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  467.799607][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  467.799681][    C0] EXT4-fs (loop4): initial error at time 1790260588: ext4_iget_extra_inode:5210: inode 15
[  467.799778][    C0] EXT4-fs (loop4): last error at time 1790260588: ext4_iget_extra_inode:5210: inode 15
[  467.813928][T18123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  467.829229][T18141] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.4557: couldn't read orphan inode 15 (err -117)
[  467.834608][T18141] loop4: lost filesystem error report for type 5 error -117
[  467.836454][T18141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.887687][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.919990][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.920041][    C0] Tainted: [L]=SOFTLOCKUP
[  467.920072][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  467.920081][    C0] Call Trace:
[  467.920088][    C0]  <TASK>
[  467.920096][    C0]  dump_stack_lvl+0xe8/0x150
[  467.920125][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  467.920147][    C0]  f2fs_write_end_bio+0x1211/0x16e0
[  467.920169][    C0]  ? blkg_put+0x22/0x240
[  467.920197][    C0]  blk_update_request+0x57b/0xe50
[  467.920224][    C0]  blk_mq_end_request+0x3e/0x70
[  467.920243][    C0]  blk_flush_complete_seq+0x68a/0xce0
[  467.920268][    C0]  flush_end_io+0xb7e/0xe90
[  467.920302][    C0]  __blk_mq_end_request+0x461/0x600
[  467.920323][    C0]  blk_done_softirq+0x10a/0x160
[  467.920343][    C0]  handle_softirqs+0x226/0x860
[  467.920363][    C0]  ? schedule+0x90/0x2b0
[  467.920382][    C0]  ? run_ksoftirqd+0x36/0x60
[  467.920403][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  467.920423][    C0]  run_ksoftirqd+0x36/0x60
[  467.920441][    C0]  smpboot_thread_fn+0x565/0xa70
[  467.920461][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  467.920485][    C0]  kthread+0x38b/0x480
[  467.920499][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  467.920517][    C0]  ? __pfx_kthread+0x10/0x10
[  467.920532][    C0]  ret_from_fork+0x514/0xb70
[  467.920555][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  467.920575][    C0]  ? __switch_to+0xc89/0x1420
[  467.920597][    C0]  ? __pfx_kthread+0x10/0x10
[  467.920612][    C0]  ret_from_fork_asm+0x1a/0x30
[  467.920641][    C0]  </TASK>
[  467.920648][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  468.035781][T18144] blktrace: Concurrent blktraces are not allowed on loop3
[  468.037348][T18144] SET target dimension over the limit!
[  468.068200][T14443] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  468.489944][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  468.578315][T18164] loop0: detected capacity change from 0 to 512
[  468.587260][T18164] loop0: detected capacity change from 0 to 512
[  468.595121][T18164] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.4567: bad orphan inode 13
[  468.595191][T18164] loop0: lost filesystem error report for type 5 error -117
[  468.595458][T18164] ext4_test_bit(bit=12, block=4) = 1
[  468.595466][T18164] is_bad_inode(inode)=0
[  468.595470][T18164] NEXT_ORPHAN(inode)=0
[  468.595474][T18164] max_ino=32
[  468.595477][T18164] i_nlink=1
[  468.596598][T18164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.650976][    T9] usb 3-1: Using ep0 maxpacket: 16
[  468.653879][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  468.658264][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.658329][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.658368][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  468.658423][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.679389][    T9] usb 3-1: config 0 descriptor??
[  468.774301][T18164] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.4567: Hash code is SIPHASH, but hash not in dirent
[  468.774371][T18164] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4567: Corrupt directory, running e2fsck is recommended
[  468.783475][T18164] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  469.115703][    T9] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  469.314488][    T9] usb 3-1: USB disconnect, device number 11
[  469.378542][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.786999][T18182] loop4: detected capacity change from 0 to 32768
[  469.791206][T18182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4576 (18182)
[  469.806295][T18182] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  469.809708][T18182] BTRFS info (device loop4): using crc32c checksum algorithm
[  469.898928][T18182] BTRFS info (device loop4): enabling ssd optimizations
[  469.901832][T18182] BTRFS info (device loop4): turning on flush-on-commit
[  469.901877][T18182] BTRFS info (device loop4): enabling free space tree
[  469.901902][T18182] BTRFS info (device loop4): enabling auto defrag
[  469.901930][T18182] BTRFS info (device loop4): use lzo compression, level 1
[  469.901962][T18182] BTRFS info (device loop4): max_inline set to 4096
[  470.147892][T18205] loop0: detected capacity change from 0 to 32768
[  470.227100][T18205] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  470.257846][ T7877] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  470.291725][T18205] XFS (loop0): Ending clean mount
[  470.310549][T18205] XFS (loop0): Quotacheck needed: Please wait.
[  470.908887][T18205] XFS (loop0): Quotacheck: Done.
[  471.103937][T14443] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.135944][T18230] loop4: detected capacity change from 0 to 32768
[  471.199352][T18230] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4586 (18230)
[  471.230005][T18230] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  471.230289][T18230] BTRFS info (device loop4): using crc32c checksum algorithm
[  471.484335][T18230] BTRFS info (device loop4): enabling ssd optimizations
[  471.484490][T18230] BTRFS info (device loop4): turning on flush-on-commit
[  471.484600][T18230] BTRFS info (device loop4): enabling free space tree
[  471.484613][T18230] BTRFS info (device loop4): enabling auto defrag
[  471.484626][T18230] BTRFS info (device loop4): use lzo compression, level 1
[  471.484639][T18230] BTRFS info (device loop4): max_inline set to 4096
[  471.787744][ T7877] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  472.343890][T18249] loop0: detected capacity change from 0 to 32768
[  472.357915][T18249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  472.386170][   T34] audit: type=1800 audit(1790260593.593:6020): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4589" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  472.386788][T18249] (syz.0.4589,18249,0):ocfs2_file_write_iter:2458 ERROR: status = -27
[  472.674636][T14443] ocfs2: Unmounting device (7,0) on (node local)
[  473.261053][T18270] loop0: detected capacity change from 0 to 40427
[  473.264788][T18270] F2FS-fs: heap/no_heap options were deprecated
[  473.270645][T18270] F2FS-fs (loop0): build fault injection rate: 19
[  473.274418][T18270] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  473.278296][T18270] F2FS-fs (loop0): invalid crc value
[  473.291589][T18270] f2fs_printk: 5 callbacks suppressed
[  473.294177][T18270] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  473.364123][T18270] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  473.374199][T18270] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  473.382934][T18270] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  473.388843][T18270] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  473.395921][T18270] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90
[  473.413243][T18270] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  473.483380][    C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_bio of blk_update_request+0x57b/0xe50
[  473.483465][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  473.483484][    C0] Tainted: [L]=SOFTLOCKUP
[  473.483488][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  473.483495][    C0] Call Trace:
[  473.483500][    C0]  <TASK>
[  473.483505][    C0]  dump_stack_lvl+0xe8/0x150
[  473.483525][    C0]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  473.483542][    C0]  f2fs_write_end_bio+0x1211/0x16e0
[  473.483567][    C0]  ? blkg_put+0x22/0x240
[  473.483590][    C0]  blk_update_request+0x57b/0xe50
[  473.483614][    C0]  blk_mq_end_request+0x3e/0x70
[  473.483630][    C0]  blk_flush_complete_seq+0x68a/0xce0
[  473.483652][    C0]  flush_end_io+0xb7e/0xe90
[  473.483673][    C0]  __blk_mq_end_request+0x461/0x600
[  473.483690][    C0]  blk_done_softirq+0x10a/0x160
[  473.483706][    C0]  handle_softirqs+0x226/0x860
[  473.483722][    C0]  ? schedule+0x90/0x2b0
[  473.483736][    C0]  ? run_ksoftirqd+0x36/0x60
[  473.483755][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  473.483770][    C0]  run_ksoftirqd+0x36/0x60
[  473.483784][    C0]  smpboot_thread_fn+0x565/0xa70
[  473.483801][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  473.483823][    C0]  kthread+0x38b/0x480
[  473.483836][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  473.483851][    C0]  ? __pfx_kthread+0x10/0x10
[  473.483863][    C0]  ret_from_fork+0x514/0xb70
[  473.483883][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  473.483895][    C0]  ? __switch_to+0xc89/0x1420
[  473.483913][    C0]  ? __pfx_kthread+0x10/0x10
[  473.483927][    C0]  ret_from_fork_asm+0x1a/0x30
[  473.483948][    C0]  </TASK>
[  473.483952][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  473.485067][T14443] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[  473.665504][T18289] vlan2: entered allmulticast mode
[  473.667833][T18289] bond0: entered allmulticast mode
[  473.676190][T18289] bond_slave_0: entered allmulticast mode
[  473.676268][T18289] bond_slave_1: entered allmulticast mode
[  473.830549][T18301] loop0: detected capacity change from 0 to 164
[  473.870152][T16139] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  473.923709][   T34] audit: type=1326 audit(1790260595.133:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.0.4607" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11b139e159 code=0x0
[  474.024076][T16139] usb 5-1: Using ep0 maxpacket: 16
[  474.024789][T16139] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  474.025948][T16139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.025969][T16139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.025985][T16139] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  474.026041][T16139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.029919][T16139] usb 5-1: config 0 descriptor??
[  474.448177][T16139] usbhid 5-1:0.0: can't add hid device: -71
[  474.448391][T16139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  474.457527][T16139] usb 5-1: USB disconnect, device number 30
[  474.511300][T18325] tmpfs: Bad value for 'mpol'
[  474.849807][T16127] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  474.918198][T18339] loop0: detected capacity change from 0 to 256
[  474.918996][T18339] exfat: Deprecated parameter 'namecase'
[  474.919167][T18339] exfat: Deprecated parameter 'namecase'
[  474.921634][T18339] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  474.925887][T18339] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  475.021679][T16127] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  475.026845][T16127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.033995][T16127] usb 3-1: config 0 descriptor??
[  475.241477][T16127] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  475.308326][T18343] loop4: detected capacity change from 0 to 32768
[  475.318436][T18343] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  475.401149][ T7877] ocfs2: Unmounting device (7,4) on (node local)
[  475.431819][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.437750][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.491677][T16127] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  475.494295][T16127] [drm] Initialized udl on minor 2
[  475.710473][T18368] loop2: detected capacity change from 0 to 512
[  475.711116][T18368] ext4: Unknown parameter 'nogrpid"errors'
[  475.771721][T16127] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  475.795221][T16127] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  475.804281][T16127] usb 3-1: USB disconnect, device number 12
[  478.147727][T18431] loop0: detected capacity change from 0 to 16
[  478.149269][T18431] erofs (device loop0): mounted with root inode @ nid 36.
[  478.332415][T18440] loop4: detected capacity change from 0 to 1024
[  478.356448][T18440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  478.356574][T18440] ext4 filesystem being mounted at /1325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.380601][T18440] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.4666: lblock 3 mapped to illegal pblock 3 (length 3)
[  478.394259][T18440] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  478.394334][T18440] EXT4-fs (loop4): This should not happen!! Data will be lost
[  478.394334][T18440] 
[  478.421677][ T1115] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u9:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  478.422451][ T1115] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  478.422472][ T1115] EXT4-fs (loop4): This should not happen!! Data will be lost
[  478.422472][ T1115] 
[  478.431376][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  478.714627][T18436] loop0: detected capacity change from 0 to 32768
[  478.818263][T18436] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  478.857940][T18436] XFS (loop0): Ending clean mount
[  478.876718][T18436] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  478.888982][T18472] loop2: detected capacity change from 0 to 164
[  479.120290][T18477] loop4: detected capacity change from 0 to 1024
[  479.181311][T18477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  479.181431][T18477] ext4 filesystem being mounted at /1329/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.189627][T18477] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.4678: lblock 3 mapped to illegal pblock 3 (length 3)
[  479.190134][T18477] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  479.190157][T18477] EXT4-fs (loop4): This should not happen!! Data will be lost
[  479.190157][T18477] 
[  479.210049][ T1115] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u9:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  479.210414][ T1115] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  479.210427][ T1115] EXT4-fs (loop4): This should not happen!! Data will be lost
[  479.210427][ T1115] 
[  479.215577][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  479.234560][T18436] loop0: detected capacity change from 0 to 512
[  479.264202][T18436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.286900][T18436] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.575007][T18497] loop4: detected capacity change from 0 to 512
[  479.646394][T18497] loop4: detected capacity change from 0 to 512
[  479.655417][T18497] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.4686: bad orphan inode 13
[  479.659633][T18497] loop4: lost filesystem error report for type 5 error -117
[  479.660100][T18497] ext4_test_bit(bit=12, block=4) = 1
[  479.665046][T18497] is_bad_inode(inode)=0
[  479.666955][T18497] NEXT_ORPHAN(inode)=0
[  479.668883][T18497] max_ino=32
[  479.670464][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  479.670475][    C1] EXT4-fs (loop4): initial error at time 1790260600: ext4_orphan_get:1429
[  479.670486][    C1] EXT4-fs (loop4): last error at time 1790260600: ext4_orphan_get:1429
[  479.677726][T18501] netlink: 'syz.0.4687': attribute type 12 has an invalid length.
[  479.686959][T18497] i_nlink=1
[  479.692340][T18497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.840429][T18497] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.4686: Hash code is SIPHASH, but hash not in dirent
[  479.840496][T18497] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4686: Corrupt directory, running e2fsck is recommended
[  479.846590][T18497] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  479.929357][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.554009][T18549] loop0: detected capacity change from 0 to 164
[  480.655672][T18556] loop4: detected capacity change from 0 to 512
[  480.671029][T18556] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.4714: bad orphan inode 13
[  480.674379][T18556] loop4: lost filesystem error report for type 5 error -117
[  480.674616][T18556] ext4_test_bit(bit=12, block=4) = 1
[  480.678917][T18556] is_bad_inode(inode)=0
[  480.680357][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  480.680368][    C1] EXT4-fs (loop4): initial error at time 1790260601: ext4_orphan_get:1429
[  480.680378][    C1] EXT4-fs (loop4): last error at time 1790260601: ext4_orphan_get:1429
[  480.696790][T18556] NEXT_ORPHAN(inode)=0
[  480.696852][T18556] max_ino=32
[  480.696881][T18556] i_nlink=1
[  480.703218][T18556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.746881][T18537] loop2: detected capacity change from 0 to 32768
[  480.762908][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.829141][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'.
[  480.856017][T18537] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  480.940715][T18566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  480.945592][T18566] ext4 filesystem being mounted at /1346/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.948088][   T34] audit: type=1800 audit(1790260602.153:6022): pid=18537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4704" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  480.979348][T17328] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u10:14: lblock 0 mapped to illegal pblock 0 (length 1)
[  480.989053][T17328] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  480.989138][T17328] EXT4-fs (loop4): This should not happen!! Data will be lost
[  480.989138][T17328] 
[  481.002582][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  481.136403][T14102] ocfs2: Unmounting device (7,2) on (node local)
[  481.299700][T16125] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  481.450113][T16125] usb 5-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=c4.46
[  481.454252][T16125] usb 5-1: config 250 has an invalid interface number: 177 but max is 0
[  481.457462][T16125] usb 5-1: config 250 has no interface number 0
[  481.462962][T16125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.465764][T16125] usb 5-1: Product: syz
[  481.467374][T16125] usb 5-1: Manufacturer: syz
[  481.469187][T16125] usb 5-1: SerialNumber: syz
[  481.531215][T18583] EXT4-fs: Ignoring removed bh option
[  481.536226][T18583] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  481.557258][T18583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.707926][T16125] imon 5-1:250.177: unable to register, err -19
[  481.711604][T16125] usb 5-1: USB disconnect, device number 31
[  481.714566][T18583] overlay: ./file1 is not a directory
[  481.717531][T18583] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  481.792816][T14102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.915155][T18590] hfsplus: failed to load catalog file
[  482.162379][T18600] overlayfs: failed to resolve './file1': -2
[  482.168333][T18600] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  482.694792][T18629] ip_tables: iptables: counters copy to user failed while replacing table
[  482.868023][T16127] kernel write not supported for file /comedi4 (pid: 16127 comm: kworker/1:11)
[  483.093282][T18650] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  483.104444][T18650] ntfs3(loop0): Failed to load $Extend (-22).
[  483.107050][T18650] ntfs3(loop0): Failed to initialize $Extend.
[  483.286031][T18656]  loop0: unable to read partition table
[  483.286158][T18656] loop0: partition table beyond EOD, truncated
[  483.287728][T18656] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  483.361424][ T5044]  loop0: unable to read partition table
[  483.361638][ T5044] loop0: partition table beyond EOD, truncated
[  483.846765][T18661] set_capacity_and_notify: 7 callbacks suppressed
[  483.848890][T18661] loop4: detected capacity change from 0 to 32768
[  483.902119][T18661] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  483.989619][T18671] loop2: detected capacity change from 0 to 8
[  483.993122][T18671] squashfs: Bad value for 'errors'
[  484.226873][T18674] syz.4.4756 (18674) used greatest stack depth: 19544 bytes left
[  484.283575][T18680] 9p: Bad value for 'rfdno'
[  484.298878][ T7877] ocfs2: Unmounting device (7,4) on (node local)
[  484.362896][T18682] tmpfs: Bad value for 'mpol'
[  484.686787][T18698] loop4: detected capacity change from 0 to 512
[  484.697705][T18698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  484.707584][T18698] EXT4-fs (loop4): 1 truncate cleaned up
[  484.708393][T18698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.742702][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.899059][T18710] loop4: detected capacity change from 0 to 512
[  484.946813][T18710] loop4: detected capacity change from 0 to 512
[  484.961805][T18710] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.4777: bad orphan inode 13
[  484.961877][T18710] loop4: lost filesystem error report for type 5 error -117
[  484.962660][T18710] ext4_test_bit(bit=12, block=4) = 1
[  484.962697][T18710] is_bad_inode(inode)=0
[  484.962725][T18710] NEXT_ORPHAN(inode)=0
[  484.962754][T18710] max_ino=32
[  484.962782][T18710] i_nlink=1
[  484.965982][T18710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  485.153792][T18710] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.4777: Hash code is SIPHASH, but hash not in dirent
[  485.153857][T18710] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4777: Corrupt directory, running e2fsck is recommended
[  485.165782][T18710] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  485.334140][T18720] loop0: detected capacity change from 0 to 256
[  485.343058][T18720] exFAT-fs (loop0): error, The cluster chain has a loop
[  485.343120][T18720] exFAT-fs (loop0): Filesystem has been set read-only
[  485.343159][T18720] exFAT-fs (loop0): failed to count the number of clusters in root
[  485.343168][T18720] exFAT-fs (loop0): failed to recognize exfat type
[  485.394742][T18722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.668157][T18728] loop0: detected capacity change from 0 to 32768
[  485.757513][T18728] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  485.762784][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.929156][T14443] ocfs2: Unmounting device (7,0) on (node local)
[  486.104435][T18742] 9p: Bad value for 'rfdno'
[  486.167091][T18746] loop0: detected capacity change from 0 to 128
[  486.173928][T18746] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  486.493544][T18764] loop4: detected capacity change from 0 to 164
[  486.669158][T18774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.669375][T18774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.930226][T13905] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  487.082461][T13905] usb 5-1: unable to get BOS descriptor or descriptor too short
[  487.085856][T13905] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  487.096780][T13905] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  487.102793][T13905] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4
[  487.110566][T13905] usb 5-1: string descriptor 0 read error: -22
[  487.113234][T13905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.124855][T13905] ttusbir 5-1:8.0: cannot find expected altsetting
[  487.307773][T18782] loop0: detected capacity change from 0 to 4096
[  487.330522][T18782] ntfs3(loop0): Failed to load $MFT (-22).
[  487.331356][    T9] usb 5-1: USB disconnect, device number 32
[  487.903523][T18810] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  487.907043][T18810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  488.057093][T18812] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  488.075844][T18812] XFS (loop0): Ending clean mount
[  488.101790][T14443] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  488.416113][   T34] audit: type=1326 audit(1790260609.623:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18842 comm="syz.0.4836" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b139e159 code=0x0
[  488.510817][T18845] EXT4-fs: Ignoring removed bh option
[  488.529271][T18845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.562502][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.873791][T18856] binder: 18855:18856 ioctl c0306201 2000000002c0 returned -14
[  490.431838][T18908] set_capacity_and_notify: 3 callbacks suppressed
[  490.432189][T18908] loop0: detected capacity change from 0 to 512
[  490.465297][T18908] loop0: detected capacity change from 0 to 512
[  490.478078][T18908] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.4865: bad orphan inode 13
[  490.478149][T18908] loop0: lost filesystem error report for type 5 error -117
[  490.478443][T18908] ext4_test_bit(bit=12, block=4) = 1
[  490.478457][T18908] is_bad_inode(inode)=0
[  490.478463][T18908] NEXT_ORPHAN(inode)=0
[  490.478469][T18908] max_ino=32
[  490.478475][T18908] i_nlink=1
[  490.482693][T18908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.572246][T18904] loop4: detected capacity change from 0 to 40427
[  490.577199][T18904] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  490.577269][T18904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  490.588049][T18908] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.4865: Hash code is SIPHASH, but hash not in dirent
[  490.588065][T18908] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4865: Corrupt directory, running e2fsck is recommended
[  490.603577][T18904] F2FS-fs (loop4): invalid crc value
[  490.647675][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.720151][T18904] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  490.745159][T18904] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  490.748145][T18904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  491.070100][T18935] loop0: detected capacity change from 0 to 1024
[  491.074721][T18935] EXT4-fs: Ignoring removed bh option
[  491.098355][T18935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.134398][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.245869][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4881'.
[  491.266761][T18948] 8021q: adding VLAN 0 to HW filter on device bond1
[  491.341527][T18946] loop4: detected capacity change from 0 to 4096
[  491.421138][T18946] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  491.427132][T18946] ntfs3(loop4): Failed to load root (-22).
[  491.564167][ T5943] IPVS: starting estimator thread 0...
[  491.653569][T18966] IPVS: using max 81 ests per chain, 194400 per kthread
[  491.677455][T18978] loop0: detected capacity change from 0 to 1024
[  491.678073][T18978] EXT4-fs: Ignoring removed bh option
[  491.701461][T18978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.744138][T14443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.787738][T18985] ip_tables: iptables: counters copy to user failed while replacing table
[  492.805072][   T34] audit: type=1400 audit(1790260614.013:6024): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=18999 comm="syz.0.4904"
[  492.825733][T19002] Line length is too long: Should be less than 4094
[  492.906985][T19006] loop4: detected capacity change from 0 to 2048
[  492.974829][T19006]  loop4: unable to read partition table
[  492.977009][T19006] loop4: partition table beyond EOD, truncated
[  492.979469][T19006] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  493.335707][T19018] loop4: detected capacity change from 0 to 512
[  493.354337][T19018] loop4: detected capacity change from 0 to 512
[  493.379210][T19018] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.4910: bad orphan inode 13
[  493.393217][T19018] loop4: lost filesystem error report for type 5 error -117
[  493.395327][T19018] ext4_test_bit(bit=12, block=4) = 1
[  493.395379][T19018] is_bad_inode(inode)=0
[  493.395408][T19018] NEXT_ORPHAN(inode)=0
[  493.395436][T19018] max_ino=32
[  493.395463][T19018] i_nlink=1
[  493.396804][T19018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.581024][T19018] EXT4-fs warning (device loop4): dx_probe:813: inode #2: comm syz.4.4910: Hash code is SIPHASH, but hash not in dirent
[  493.581099][T19018] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4910: Corrupt directory, running e2fsck is recommended
[  493.676996][ T7877] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.819734][   T35] INFO: task kworker/u10:3:54 blocked in I/O wait for more than 143 seconds.
[  493.819802][   T35]       Tainted: G             L      syzkaller #0
[  493.819843][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  493.819873][   T35] task:kworker/u10:3   state:D stack:21800 pid:54    tgid:54    ppid:2      task_flags:0x4208060 flags:0x00080000
[  493.819985][   T35] Workqueue: writeback wb_workfn (flush-7:7)
[  493.820073][   T35] Call Trace:
[  493.820100][   T35]  <TASK>
[  493.820132][   T35]  __schedule+0x17db/0x58f0
[  493.820176][   T35]  ? blk_mq_flush_plug_list+0x415/0x540
[  493.820228][   T35]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  493.820275][   T35]  ? __blk_flush_plug+0x416/0x4d0
[  493.820318][   T35]  ? __pfx___schedule+0x10/0x10
[  493.820363][   T35]  ? schedule+0x90/0x2b0
[  493.820404][   T35]  schedule+0x164/0x2b0
[  493.820447][   T35]  io_schedule+0x7f/0xd0
[  493.820487][   T35]  lock_metapage+0x1fe/0x400
[  493.820532][   T35]  ? lock_metapage+0x116/0x400
[  493.820571][   T35]  ? __pfx_lock_metapage+0x10/0x10
[  493.820613][   T35]  ? __pfx_default_wake_function+0x10/0x10
[  493.820655][   T35]  ? __filemap_get_folio_mpol+0x7c8/0x1000
[  493.820702][   T35]  __get_metapage+0x47a/0xdf0
[  493.820746][   T35]  xtSplitPage+0x276/0x2130
[  493.820797][   T35]  xtSplitUp+0x33a/0x1ef0
[  493.820836][   T35]  ? folio_unlock+0x101/0x160
[  493.820875][   T35]  ? __get_metapage+0x87a/0xdf0
[  493.820965][   T35]  ? __pfx_xtSplitUp+0x10/0x10
[  493.820999][   T35]  ? xtSearch+0x1592/0x1ce0
[  493.821055][   T35]  xtInsert+0x43e/0xf10
[  493.821101][   T35]  ? __pfx_xtInsert+0x10/0x10
[  493.821216][   T35]  ? rcu_is_watching+0x16/0xb0
[  493.821255][   T35]  ? __mark_inode_dirty+0x4e7/0x13b0
[  493.821292][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.821332][   T35]  extAlloc+0xac6/0x1010
[  493.821381][   T35]  ? __pfx_extAlloc+0x10/0x10
[  493.821419][   T35]  ? down_write_nested+0x172/0x210
[  493.821459][   T35]  ? __pfx_down_write_nested+0x10/0x10
[  493.821504][   T35]  jfs_get_block+0x351/0xad0
[  493.821550][   T35]  ? __pfx_jfs_get_block+0x10/0x10
[  493.821601][   T35]  __mpage_writepages+0x86c/0x1d00
[  493.821643][   T35]  ? __mpage_writepages+0x6b1/0x1d00
[  493.821688][   T35]  ? __pfx_jfs_get_block+0x10/0x10
[  493.821734][   T35]  ? __pfx___mpage_writepages+0x10/0x10
[  493.821790][   T35]  ? __lock_acquire+0x6df/0x2e50
[  493.821837][   T35]  ? __pfx_jfs_writepages+0x10/0x10
[  493.821879][   T35]  do_writepages+0x338/0x560
[  493.821935][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  493.821979][   T35]  ? reacquire_held_locks+0x117/0x1a0
[  493.822016][   T35]  ? writeback_sb_inodes+0x450/0x1b00
[  493.822056][   T35]  __writeback_single_inode+0x136/0x1220
[  493.822095][   T35]  ? do_raw_spin_unlock+0x4d/0x200
[  493.822136][   T35]  writeback_sb_inodes+0x9de/0x1b00
[  493.822189][   T35]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  493.822252][   T35]  ? rcu_is_watching+0x16/0xb0
[  493.822290][   T35]  ? queue_io+0x2d3/0x470
[  493.822331][   T35]  wb_writeback+0x41c/0xad0
[  493.822372][   T35]  ? queue_io+0x2b1/0x470
[  493.822412][   T35]  ? __pfx_wb_writeback+0x10/0x10
[  493.822448][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  493.822499][   T35]  wb_workfn+0x431/0x10f0
[  493.822544][   T35]  ? __pfx_wb_workfn+0x10/0x10
[  493.822583][   T35]  ? rcu_is_watching+0x16/0xb0
[  493.822618][   T35]  ? trace_hrtimer_start+0x82/0x200
[  493.822665][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  493.822712][   T35]  ? lock_acquire+0x115/0x350
[  493.822753][   T35]  ? rcu_is_watching+0x16/0xb0
[  493.822792][   T35]  ? process_scheduled_works+0x97a/0x1630
[  493.822834][   T35]  process_scheduled_works+0xc3d/0x1630
[  493.822890][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  493.822961][   T35]  ? assign_work+0x3cf/0x5d0
[  493.823004][   T35]  worker_thread+0xa47/0xfb0
[  493.823062][   T35]  kthread+0x38b/0x480
[  493.823099][   T35]  ? __pfx_worker_thread+0x10/0x10
[  493.823135][   T35]  ? __pfx_kthread+0x10/0x10
[  493.823171][   T35]  ret_from_fork+0x514/0xb70
[  493.823216][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  493.823256][   T35]  ? __switch_to+0xc89/0x1420
[  493.823299][   T35]  ? __pfx_kthread+0x10/0x10
[  493.823334][   T35]  ret_from_fork_asm+0x1a/0x30
[  493.823389][   T35]  </TASK>
[  493.823561][   T35] INFO: task syz-executor:13178 blocked for more than 143 seconds.
[  493.823598][   T35]       Tainted: G             L      syzkaller #0
[  493.823625][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  493.823653][   T35] task:syz-executor    state:D stack:22416 pid:13178 tgid:13178 ppid:1      task_flags:0x400140 flags:0x00080002
[  493.823731][   T35] Call Trace:
[  493.823757][   T35]  <TASK>
[  493.823789][   T35]  __schedule+0x17db/0x58f0
[  493.823831][   T35]  ? __lock_acquire+0x6df/0x2e50
[  493.823881][   T35]  ? __pfx___schedule+0x10/0x10
[  493.823929][   T35]  ? lock_acquire+0x115/0x350
[  493.823971][   T35]  ? schedule+0x90/0x2b0
[  493.824012][   T35]  schedule+0x164/0x2b0
[  493.824052][   T35]  wb_wait_for_completion+0x3b2/0x700
[  493.824103][   T35]  ? __pfx_wb_wait_for_completion+0x10/0x10
[  493.824146][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  493.824194][   T35]  sync_inodes_sb+0x227/0xbf0
[  493.824239][   T35]  ? __pfx_sync_inodes_sb+0x10/0x10
[  493.824276][   T35]  ? __pfx___writeback_inodes_sb_nr+0x10/0x10
[  493.824321][   T35]  sync_filesystem+0x17d/0x240
[  493.824366][   T35]  generic_shutdown_super+0x77/0x2d0
[  493.824409][   T35]  kill_block_super+0x44/0xa0
[  493.824451][   T35]  deactivate_locked_super+0xbc/0x110
[  493.952828][   T35]  cleanup_mnt+0x3d3/0x460
[  493.952865][   T35]  task_work_run+0x1d9/0x270
[  493.952885][   T35]  ? __pfx_task_work_run+0x10/0x10
[  493.952934][   T35]  exit_to_user_mode_loop+0x204/0x770
[  493.952952][   T35]  ? rcu_is_watching+0x16/0xb0
[  493.952978][   T35]  do_syscall_64+0x328/0x520
[  493.952998][   T35]  ? trace_irq_disable+0x3b/0x140
[  493.953012][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.953030][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.953045][   T35] RIP: 0033:0x7fac72f9f397
[  493.953059][   T35] RSP: 002b:00007fff885bd378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  493.953076][   T35] RAX: 0000000000000000 RBX: 00007fac730344bb RCX: 00007fac72f9f397
[  493.953086][   T35] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff885bd430
[  493.953095][   T35] RBP: 00007fff885bd430 R08: 0000000000008000 R09: 00000000ffffffff
[  493.953104][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff885be4c0
[  493.953113][   T35] R13: 00007fac730344bb R14: 0000000000055144 R15: 00007fff885be500
[  493.953135][   T35]  </TASK>
[  493.955114][   T35] 
[  493.955114][   T35] Showing all locks held in the system:
[  493.955127][   T35] locks held by pr/ttyS0/16: 2, last CPU#1:
[  493.955138][   T35]  #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  493.955178][   T35]  #1: ffffffff9ad31098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  493.955217][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  493.955227][   T35]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  493.955260][   T35] locks held by kworker/u10:1/37: 3, last CPU#1:
[  493.955270][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.955307][   T35]  #1: ffffc90000ad7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.955344][   T35]  #2: ffff888115607258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  493.955385][   T35] locks held by kworker/u10:3/54: 4, on CPU#1:
[  493.955394][   T35]  #0: ffff88816577b140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.955430][   T35]  #1: ffffc9000140fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.959189][   T35]  #2: ffff8881abd1a490 (&jfs_ip->rdwrlock#3){++++}-{4:4}, at: jfs_get_block+0x14e/0xad0
[  493.959240][   T35]  #3: ffff8881abd1a518 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: extAlloc+0x130/0x1010
[  493.959307][   T35] locks held by getty/5422: 2, on CPU#1:
[  493.959318][   T35]  #0: ffff8881175ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  493.959354][   T35]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  493.959389][   T35] locks held by kworker/u10:5/5943: 2, last CPU#1:
[  493.959398][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.959434][   T35]  #1: ffffc90006a47c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  493.959471][   T35] locks held by syz-executor/7877: 2, last CPU#1:
[  493.959480][   T35]  #0: ffff88819b1200e8 (&type->s_umount_key#33){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  493.962414][   T35]  #1: ffffffff8ee46200 (lock#5){+.+.}-{4:4}, at: __lru_add_drain_all+0xec/0x7a0
[  493.962461][   T35] locks held by syz-executor/13178: 2, on CPU#1:
[  493.962471][   T35]  #0: ffff8881bcccc0e8 (&type->s_umount_key#72){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  493.962510][   T35]  #1: ffff888109b10870 (&bdi->wb_switch_rwsem){+.+.}-{4:4}, at: sync_inodes_sb+0x20b/0xbf0
[  493.962560][   T35] locks held by syz.2.4770/18692: 1, on CPU#1:
[  493.962570][   T35]  #0: ffff8881bcccc0e8 (&type->s_umount_key#72){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  493.962603][   T35] locks held by syz.2.4770/18696: 1, on CPU#0:
[  493.962614][   T35]  #0: ffff8881bcccc0e8 (&type->s_umount_key#72){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  493.962649][   T35] locks held by syz.0.4909/19010: 4, last CPU#1:
[  493.962657][   T35]  #0: ffff8881bfbce9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  493.962692][   T35]  #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  493.962725][   T35]  #2: ffff88823c5f4fd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  493.962762][   T35]  #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: pfn_valid+0xba/0x490
[  493.962796][   T35] 
[  493.962800][   T35] =============================================
[  493.962800][   T35] 
[  493.962807][   T35] NMI backtrace for cpu 0
[  493.962818][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.962836][   T35] Tainted: [L]=SOFTLOCKUP
[  493.962841][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  493.962849][   T35] Call Trace:
[  493.962855][   T35]  <TASK>
[  493.962861][   T35]  dump_stack_lvl+0xe8/0x150
[  493.962883][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  493.962946][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  493.962968][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  493.962992][   T35]  sys_info+0x135/0x170
[  493.963005][   T35]  watchdog+0xfd7/0x1030
[  493.963023][   T35]  ? watchdog+0x1c7/0x1030
[  493.963040][   T35]  kthread+0x38b/0x480
[  493.963055][   T35]  ? __pfx_watchdog+0x10/0x10
[  493.963066][   T35]  ? __pfx_kthread+0x10/0x10
[  493.963080][   T35]  ret_from_fork+0x514/0xb70
[  493.963102][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  493.963122][   T35]  ? __switch_to+0xc89/0x1420
[  493.963141][   T35]  ? __pfx_kthread+0x10/0x10
[  493.963155][   T35]  ret_from_fork_asm+0x1a/0x30
[  493.963184][   T35]  </TASK>
[  493.963231][   T35] Sending NMI from CPU 0 to CPUs 1:
[  493.963279][    C1] NMI backtrace for cpu 1
[  493.963303][    C1] CPU: 1 UID: 0 PID: 19010 Comm: syz.0.4909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.963323][    C1] Tainted: [L]=SOFTLOCKUP
[  493.963328][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  493.963336][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80
[  493.963363][    C1] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 00 00 00 74 2c <8b> 91 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48
[  493.963375][    C1] RSP: 0018:ffffc90008e27310 EFLAGS: 00000246
[  493.963389][    C1] RAX: ffffffff82437931 RBX: 8000000000000001 RCX: ffff88816a1f5a00
[  493.963399][    C1] RDX: 8000000000000001 RSI: 8000000000000001 RDI: 0000000000000000
[  493.963407][    C1] RBP: 0000000000000001 R08: b200000000000000 R09: 0000000000000000
[  493.963416][    C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: dffffc0000000000
[  493.963425][    C1] R13: 0000000000000008 R14: 00000000001a193c R15: 0000000000000001
[  493.963433][    C1] FS:  0000000000000000(0000) GS:ffff8882a8cda000(0000) knlGS:0000000000000000
[  493.963443][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  493.963454][    C1] CR2: 000055e533010000 CR3: 000000000eb48000 CR4: 00000000000006f0
[  493.963490][    C1] Call Trace:
[  493.963497][    C1]  <TASK>
[  493.963502][    C1]  pfn_valid+0x3e1/0x490
[  493.963521][    C1]  page_table_check_clear+0x21/0x500
[  493.963534][    C1]  ? vm_normal_page+0x13c/0x2b0
[  493.963555][    C1]  __zap_vma_range+0x3a12/0x4f80
[  493.963581][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  493.963597][    C1]  ? mas_find+0x6d6/0xcb0
[  493.963616][    C1]  unmap_vmas+0x390/0x550
[  493.963632][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  493.963643][    C1]  ? mas_next_slot+0xc91/0xd70
[  493.963664][    C1]  exit_mmap+0x293/0x9f0
[  493.963681][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  493.963705][    C1]  ? __pfx_exit_aio+0x10/0x10
[  493.963727][    C1]  ? uprobe_clear_state+0x2a4/0x3d0
[  493.963743][    C1]  __mmput+0x118/0x420
[  493.963757][    C1]  exit_mm+0x221/0x2d0
[  493.963771][    C1]  do_exit+0x6cd/0x2360
[  493.963792][    C1]  ? __pfx_do_exit+0x10/0x10
[  493.963806][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  493.963826][    C1]  do_group_exit+0x22d/0x2f0
[  493.963836][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.963854][    C1]  get_signal+0x121b/0x12c0
[  493.963878][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  493.963898][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  493.963961][    C1]  exit_to_user_mode_loop+0x10e/0x770
[  493.963976][    C1]  ? rcu_is_watching+0x16/0xb0
[  493.963992][    C1]  do_syscall_64+0x328/0x520
[  493.964010][    C1]  ? trace_irq_disable+0x3b/0x140
[  493.964023][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.964038][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.964050][    C1] RIP: 0033:0x7f11b139e159
[  493.964063][    C1] Code: Unable to access opcode bytes at 0x7f11b139e12f.
[  493.964069][    C1] RSP: 002b:00007f11b21e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  493.964084][    C1] RAX: fffffffffffffe00 RBX: 00007f11b1625fa8 RCX: 00007f11b139e159
[  493.964093][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11b1625fa8
[  493.964101][    C1] RBP: 00007f11b1625fa0 R08: 0000000000000000 R09: 0000000000000000
[  493.964110][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.964119][    C1] R13: 00007f11b1626038 R14: 00007ffe71fa3670 R15: 00007ffe71fa3758
[  493.964132][    C1]  </TASK>
[  493.966697][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  494.362137][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.365658][   T35] Tainted: [L]=SOFTLOCKUP
[  494.367098][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  494.370397][   T35] Call Trace:
[  494.371514][   T35]  <TASK>
[  494.372489][   T35]  vpanic+0x56d/0xa60
[  494.374009][   T35]  ? __pfx___schedule+0x10/0x10
[  494.375937][   T35]  ? __pfx_vpanic+0x10/0x10
[  494.377770][   T35]  panic+0xc5/0xd0
[  494.379273][   T35]  ? __pfx_panic+0x10/0x10
[  494.381071][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  494.383089][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  494.384769][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  494.386948][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  494.388995][   T35]  watchdog+0x1030/0x1030
[  494.390312][   T35]  ? watchdog+0x1c7/0x1030
[  494.391790][   T35]  kthread+0x38b/0x480
[  494.393261][   T35]  ? __pfx_watchdog+0x10/0x10
[  494.394969][   T35]  ? __pfx_kthread+0x10/0x10
[  494.396627][   T35]  ret_from_fork+0x514/0xb70
[  494.398345][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  494.400075][   T35]  ? __switch_to+0xc89/0x1420
[  494.401678][   T35]  ? __pfx_kthread+0x10/0x10
[  494.403247][   T35]  ret_from_fork_asm+0x1a/0x30
[  494.405058][   T35]  </TASK>
[  494.407098][   T35] Kernel Offset: disabled
[  494.408889][   T35] Rebooting in 86400 seconds..
