last executing test programs:

6m39.217757263s ago: executing program 2 (id=1604):
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000002c0)="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", 0x1d8, r0)

6m39.18018136s ago: executing program 2 (id=1605):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

6m39.140519338s ago: executing program 2 (id=1606):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000ff7f040007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

6m39.067785251s ago: executing program 2 (id=1607):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0/file0\x00')
umount2(&(0x7f0000000100)='./file0\x00', 0x0)

6m38.951792178s ago: executing program 2 (id=1609):
syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x20, &(0x7f0000000240)=ANY=[], 0x40, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
syz_fuse_handle_req(r0, &(0x7f00000040c0)="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", 0x2000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syslog(0x3, 0xffffffffffffffff, 0x1000000)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)

6m38.617735611s ago: executing program 2 (id=1612):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000000000000000070200", r3, <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0xfffffffc)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000240)=0xffff)
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

6m38.573112009s ago: executing program 32 (id=1612):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb010000000000000000070200", r3, <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0xfffffffc)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000240)=0xffff)
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

5m49.875515694s ago: executing program 0 (id=2166):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000))

5m49.841862365s ago: executing program 0 (id=2167):
mkdirat(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x34, 0x4d]}}]})

5m49.811619627s ago: executing program 0 (id=2170):
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ff73331", @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

5m49.744076519s ago: executing program 0 (id=2171):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

5m49.41074607s ago: executing program 0 (id=2173):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
sendto$inet6(r0, &(0x7f0000000000)="8f6b", 0x2, 0x0, 0x0, 0x0)

5m49.107181715s ago: executing program 0 (id=2181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8)
write(r2, &(0x7f0000000180)='10000', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
socket$inet(0x2, 0x5, 0x0)
write(r3, &(0x7f0000000200)='1', 0x1)
r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]})
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0)

5m49.090876591s ago: executing program 33 (id=2181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8)
write(r2, &(0x7f0000000180)='10000', 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
socket$inet(0x2, 0x5, 0x0)
write(r3, &(0x7f0000000200)='1', 0x1)
r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]})
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0)

5m18.536098273s ago: executing program 3 (id=2579):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)='X:', 0x2}], 0x1}, 0x10000000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0)

5m17.673262852s ago: executing program 3 (id=2587):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0xda, @string={0xda, 0x3, "d550866386c061529ee0dde40bdd54b3b2ccaec338e38075688c55455a8573a96bc1cdbe47379a46517a01419f012aada5832961074aa7a1b3eb4550a6339d628147cede00b6962b571b8c4c56447697b96e5b78c8c2554d34890f6c126dd400376a24d8dfab914238221f4568988c5f5fca4eb266c71dd3162bda112b2e8aac86246d1eb7e011a2504e3367fa13dd204b86cbd2c935b93fc84852ce721b160f8a67eaa292f3cdd61416a7e05463a8843058e13d94d58ddc83d559f100bcf275720534f68d9c629ae34293fa58ff098d5ebb314dbb4b2e09"}}}, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xa7f}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "380cfa96ae580cdcf489502768785aa6e08d56f4835288699f6b612ed88adf0f6bb6688d5d11559b46e01a53ca338a"}})

5m14.666651555s ago: executing program 3 (id=2598):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=m'])

5m14.584197671s ago: executing program 3 (id=2599):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')

5m14.522233169s ago: executing program 3 (id=2600):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0)

5m14.275638112s ago: executing program 3 (id=2602):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)})

5m14.084590735s ago: executing program 34 (id=2602):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)})

50.291396397s ago: executing program 5 (id=6040):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f00000000c0), 0x3, 0x618, &(0x7f0000000300)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x8001, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./file0\x00')

50.126292404s ago: executing program 5 (id=6044):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f0000000540)=""/157, 0x9d)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)

49.614147025s ago: executing program 5 (id=6054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94)
r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x20002c27, 0x0, 0x1000000, 0x18a})
io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0)
io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

48.824450018s ago: executing program 5 (id=6069):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}, {@fat=@debug}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@fat=@sys_immutable}, {@fat=@flush}, {@shortname_winnt}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000580)="$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")
socket$inet(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

48.732877639s ago: executing program 5 (id=6070):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)

48.647419398s ago: executing program 5 (id=6071):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='syscall\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
open(&(0x7f00000007c0)='./file0\x00', 0x2280, 0x1)
read$char_usb(r0, &(0x7f0000000600)=""/190, 0xbe)
mmap$panthor(&(0x7f000019a000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x6)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x0, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216}}], 0x4, 0x0, 0x0)

48.544989643s ago: executing program 35 (id=6071):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='syscall\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
open(&(0x7f00000007c0)='./file0\x00', 0x2280, 0x1)
read$char_usb(r0, &(0x7f0000000600)=""/190, 0xbe)
mmap$panthor(&(0x7f000019a000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x6)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x2, 0x0, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216}}], 0x4, 0x0, 0x0)

1.505508055s ago: executing program 4 (id=6805):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008d80402f0400001020301090224000101ff70010904000d410301000709217ffffc0122020009058103ff"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002421000000210188ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.068139358s ago: executing program 1 (id=6822):
r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$eJzs3AnYpXPhuPHzzhj7MIZKSk01okXWLFFmBjMUkiXakSUVlVRoo5LSRov2BVkSUSiUpV0pS1pUilDJEmmxDfO/3pl3zBi37dfv91dz3/d1ve855znPed7v+X6e73PeGXPZfurWUwaDhQezmjCYt7MvnTZ93CVbXH/UTksdu9rJNx969x0nThq5nTxyO2UwGIwaeXpo1rbxg1NOHTVYYOb2OS22yKJDYweD1UcejhxnsPasm7EXzd5vxjzNO9ChOd8OnvU1syWHf8TwnSMOPfDIwWAwbq7XDw0GQ/vf441K237ytKlzrO5yG7YaM3J/7q8FZ32NPW8wGHvagM+Pufcdegje0vDP3P/JZ43Z4iH42f91bT952qbz+A+vxdEj29YeXuPzrkFj857n166ww7ojUzjzfBsMhi9xd1sr/xVtP3nqZoN7v84Pjlrv3INnzLpuLjSY9UGxyGAwWHTk+rr4Q+1S/16Tp6wx8zN79uMR9tnn8v50Xhz/0hPvHP6QHgwGSw8G4zeZ/VlQVVVV/x1NnrLGhvD5v/B9ff6fdNJyp/X5X1VV9d/bppOnrDH8WT/P5//i9/X5v9dyP3rHrL/7n7T2rFfd+dC+iaqqqnpQTd0UP//H3dfn/9obXrBZn/9VVVX/vW21+czP/8Xn+fxf5r4+/1904nrLj+w3+/eGO+Y65NBc/z3h9rm2j55r+21zbR8z13Hm3n/BubbfMtf2hYafg/0nDAbjZ/97welzNo+fMPzcyPZb59o+ac6/05m40VzbJ8+1fepc26eMjHV4+7S5tk+ba/9N7mOqq6qq/mPaao2pGw7m+nf2I5uXnf08ff5/+/Tfr/xQjbeqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr+O7vz+jPOGgwGQ4PBYNRgMH0wcn/u28GMGTNmDD8+6ZwLL3zIBvqf0dDZl06bPu6SLa4/aqeljl3t5JsPnTNL/7X997+D+nca9l/4uAmDwZ7bPtRDqYeg1r+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7uHoT/Qv+X46iHpta/u/zd5e/uQfl3ssx3Reouf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y9/dA/af9H87jnpoav27y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hd35/VnnDVyDowaDKYPRu7vP/v29ENe+OKRXdfd7uQbD5vzyomTdh+5d/al06bv/hCM/SFoaPi9jrtki+uP2mmpY1c7+eZD54PV89//Durfaab/7kODwcj6Hje8lreYvNU2Kw0Gg8NuPHm7tQZ3PbfO8HPrjR89GD3zpSvN/L7xRD7w/pvMup35342XuesYJ808/qYzDh89NM8g5uqZZ19x1Cu2v3nNeW9XvPf3MWr2nSMv+/pNM2bMmHG3jSMtfC8vnn382e9l3nU+MvaVhse+yt57vHaV1++738q777Hjbrvstsueq62xzpprrb7aWus+fZVdd3/1LqvO+n4vczZh5vcNH8icLT7vnF0/ee45m/e93ducTbjvOZt5xOn7DW0ze84WeJBztuF9z9mE3Ud+0MRJYwY7zJyaocFg4kZjBvsMP1htocFg4sYj+y47vO/640cNBofMeaNDI//nyVn7DO0/vM/2U7eeMmdk93yH97hO323HiSP/lGHi5JHbKbOGOGEw51QcPzjl1FHDc3G3aV5skUWHxg4Gq488nP1PItYdefYLs/ebMU/zDnRozreDZ33NbMnhgwzfeeWqZ/x6eC3O8/r/i/5H1/97eK0zdNdEDY18jewzy2vytE3n/KyZ0zA8d6NHtq09bDLvnP1vdo/xTlhgMO4+xjt10ylrDG+eZ/5nvwTPrxtWOPfNs86tSWvPetWd/2MUGu/i9zHeTSfjeBe/r/Ee95bzT511qP+18c5zrdts5vdJD+RaN7jva91oOsAuP11+3mvdc+59iHdbx7PnaN7/o+29Xev2+fjq+w8ff9J9X+s2Gx77mLtd60YNBhM3nH2tG77wTR0zOGT4werDD6aNGRw7/GCNmQ8WGZwz/OBpL3/Nq3ce3rDJ7DlZdfi4k8YPzXQ/d+1rVpzxkRkzNhoZy6Txdx/ryPkxYe7P88njZ03m7NfOPu7wrrOPe/UjZj03deS4kx/EcWe/lsZ745Kznps2ctwp8xx3zH0cd/Zr77EeVhq668J1L9ebqfNcb0b+jDP7x93ta8FZX2PPGwzGnka+8+x7v9dMWr8L38d4J09ZY8Ph8c2zfu86HWn9nj/tkuHPirGDwWDpwWD8JrPH/iAburfxLnDf450C413gvsb7sy/tsfn/wngHc433bufZ9lvNOlc2GTnPpj2I83f2a+e9jo2Z+eysy/4mD+Q6NuEe17EDRo+aZ7Ln6t5+Z9sZ9p91f9k5v+de+pVjZs/9mHmOe3+/s831XobgOjZunj/Pj9rk8sEQzfn+x61/wdBH73vOxwzu/meL2XM++7Wz53w0zPm0BzLnj77vOX+gvyev9IRZz4+ZZ/xzz/mW73/U+2bP+YLzHPf+5nzafX923HPOJw3G0Jyvetusebuv6+m9zfns186e8+G3uN74BQYbD39mjcz51Acy58v+75zni8L+s+7vctemM486+fmz53zeOb6/OZ/6YOd8wl3n+cSZzz1+1GDBBQf77Lj33nutNuv77Ierz/rO16JbLp01z/f1WXpvRrNfe1/Xoo0eiNG4B2Q0dH9Gyy1wb0ZzltYXX7PXw/+n16KNHqzRgK9Flxwza97u6/eie5vz2a+lz8Fl5nr9vH8O3Wrzmb93Lz7P5+Dsl+Dn4Jmnb3bQ7EOOvOyOeYY5+3P19rm2j55r+21zbR8z13Hm3n/BubbfMtf24bew4Fz7z2adMPxn3pHt0+fsPn74l6cJI9tvnWv7pDmvnbjRXNsnz7V96lzbp8w5NSZOm2v7tLn232TwIJv9d9K7z3uRrwfa//Tvf/t74/mjHN3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3FHLJO/vPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hd35/VnnDVyDowaDKYPZt0fGrkd7D+05XUbDN8OBoMxa58wY8uHerwPcUNnXzpt+rhLtrj+qJ2WOna1k28+dD5YPf/976D+nWb67z40GIys73G7DwaDLSZvtc1Kg8FgyxknrD1qcNdzyw4/t/74UYPBIUN3O8BCd+0ztP/wPttP3XrKYLDwyB4T7vFD77GO7rbjxEkjt5NHbqfMuj5NGMw5X8cPTjl11GCBmdvntNgiiw6NHQxWH3k4cpzB2rNuxl40e78Z8zTvQIfmfDt41tfMlhz+EcN39tlt2mOG52qe1//HNPtavfuo+9219e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ39+D8O1vmtxJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7vz+jPOGjkHRg0G0wez7g/tP3I7GDrxlCeNnCJj9r346MMf6vE+xA2dfem06eMu2eL6o3Za6tjVTr750Plg9fz3v4P6d5rpv/vQYDCyvsftPhgMtpi81TYrDQaDw4++eN9Rg7ueW3b4ufXHjxoMDhm62wEWumufof2H99l+6tZTBoOFR/aYcI8feo91dLcdJ04auZ08cjtl1vVpwmDO+Tp+cMqpowYLzNw+p8UWWXRo7GCw+sjDkeMM1p51M/ai2fvNmKd5Bzo059vBs75mtuTwjxi+c+Dil544PFfzvP4/ptnX6t1H3e+urX93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXd+f1Z5w1cg6MGgymD2bdHzVyO7T/VVe+bZvh2+HHS21y0KUP9Xgf4obOvnTa9HGXbHH9UTstdexqJ9986Hywev7730H9Ow37L3zchMFgz20f6qHUQ1Dr313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MXdef0ZZ43cHTVn66j9Oy+wobMvnTZ93CVbXH/UTksdu9rJNx/6UA/o3+1e/A/IH7P4vyN/zOL/zvwxi/+78scs/gfmj1n8350/ZvE/KH/M4v+e/DGL/3vzxyz+B+ePWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8T8kf8zif2j+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMX/sPwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4H54/ZvE/In/M4n9k/pjF/4v5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvH/Uv6Yxf+4/DGL/5fzxyz+x+ePWfxPyB+z+H8lf8zif2L+mMX/pPwxi/9X88cs/l/LH7P4n5w/ZvE/JX/M4n9q/pjF/+v5Yxb/b+SPWfxPyx+z+J+ePzaf+s+kn9v/jPyx+dR/ZnP7fzN/zOL/rfwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H87f8zi/538MYv/d/PHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP7n5o9Z/H+UP2bx/3H+mMX/vPwxi/9P8scs/j/NH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/LHLP4X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/C/JH7P4/zp/zOL/m/wxi/9v88cs/pfmj1n8f5c/ZvH/ff6Yxf+y/DGL/+X5Yxb/P+SPWfyvyB+z+F+ZP2bxv+r+/Ef9H4/rPzSL/x9b/5jF/0/5Yxb/P+ePWfyvzh+z+P8lf8zif03+mMX/2vwxi/91+WMW/+vzxyz+f80fs/jfkD9m8b8xf8zi/7f8MYv/TfljFv+/549Z/P+RP2bx/2f+mMX/X/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8ziPz1/zOJ/R/6Yxf/O/DGL/4z8MYn/6EH+mMV/KH/M4j8qf8ziPzp/zOK/QP6YxX9M/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziPzZ/zOK/RP6YxX/J/DGL/7j8MYv/UvljFv/x+WMW/6Xzxyz+y+SPWfwflj9m8X94/pjF/xH5Yxb/ZfPHLP6PzB+z+C+XP2bxf1T+mMX/0fljFv/l88cs/o/JH7P4PzZ/zOI/IX/M4v+4/DGL/+Pzv0cLjNwa/J+QP2ZZ/xPzxyz+K+SPWfyfmD9m8V8xf8ziv1L+mMX/SfljFv8n549Z/J+i8l/wAe9p8X+qyv+BZ/FfOX/M4v+0/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/0/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4PyN/zOK/Xv6YxX/9/DGL/zPzxyz+z8ofs/hvkD9m8Z+UP2bxn5w/ZvGfkj9m8d8wf8ziv1H+mMV/4/wxi//U/DGL/zSV/+gHvKfFfxOV/wPP4r9p/pjF/9n5Yxb/5+SPWfw3yx+z+G+eP2bx3yJ/zOL/3Pwxi/+W+WMW/+flj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/+fljFv/t8scs/tvnj1n8X5A/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvF/af6Yxf9l+WMW/x3yxyz+O+aPWfx3yh+z+L88f8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+r8gfs/jvnj9m8X9l/pjF/1X5Yxb/V+ePWfz3yB+z+O+ZP2bxf03+mMX/tfljFv/X5Y9Z/PfKH7P4vz5/zOK/d/6Yxf8N+WMW/zfmj1n835Q/ZvHfJ3/M4r9v/pjFf7/8MYv/m/PHLP5vyR+z+L81f8zi/7b8MYv/2/PHLP77549Z/A8YDDZ4qIb0n5zF/x2tf8zi/878MYv/u/LHLP4H5o9Z/N+dP2bxPyh/zOL/nvwxi/9788cs/gfnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvE/JH/M4n9o/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjF/7D8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+B+eP2bxPyJ/zOJ/ZP6Yxf+L+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/1L+mMX/uPwxi/+X88cs/sfnj1n8T8gfs/h/JX/M4n9i/pjF/6T8MYv/V/PHLP5fyx+z+J+cP2bxPyV/zOJ/av6Yxf/r+WMW/2/kj1n8T8sfs/ifnj9m8T8jf8zi/838MYv/t/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4v/t/DGL/3fyxyz+380fs/h/L3/M4v/9/DGL/w/yxyz+P8wfs/ifmz9m8f9R/pjF/8f5Yxb/8/LHLP4/yR+z+P80f8zif37+mMX/gvwxi/+F+WMW/4vyxyz+P8sfs/hfnD9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8kf8zi/+v8MYv/b/LHLP6/zR+z+F+aP2bx/13+mMX/9/ljFv/L8scs/pfnj1n8/5A/ZvG/In/M4n9l/pjF/6r8MYv/H/PHLP5/yh+z+P85f8zif3X+mMX/L/ljFv9r8scs/tfmj1n8r8sfs/hfnz9m8f9r/pjF/4b8MYv/jfljFv+/5Y9Z/G/KH7P4/13qP+Z+nrf4/0Pqf39Z/P+ZP2bx/1f+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+E/PH7P435E/ZvG/M3/M4j8jf0ziv8Agf8ziP5Q/ZvEflT9m8R+dP2bxXyB/zOI/Jn/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8R+bP2bxXyJ/zOK/5AP0v3PGjBn/V0P7T8ziP671j1n8l8ofs/iPzx+z+C+dP2bxXyZ/zOL/sPwxi//D88cs/o/IH7P4L5s/ZvF/ZP6YxX+5/DGL/6Pyxyz+j84fs/gvnz9m8X9M/pjF/7H5Yxb/CfljFv/H5Y9Z/B+fP2bxf0L+mMV/Yv6YxX+F/DGL/xPzxyz+K+aPWfxXyh+z+D8pf8zi/+T8MYv/U/LHLP5PzR+bz/33H7m7wMr5Y/O5/+wWeFr+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxf3r+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfyfkT9m8V8vf8ziv37+mMX/mfljFv9n5Y9Z/DfIH7P4T8ofs/hPzh+z+E/JH7P4b5g/ZvHfKH/M4r9x/pjFf2r+mMV/Wv6YxX+T/DGL/6b5Yxb/Z+ePWfyfkz9m8d8sf8ziv3n+mMV/i/wxi/9z88cs/lvmj1n8nze4MH/I4r9V6x+z+G+dP2bx3yZ/zOK/bf6Yxf/5+WMW/+3yxyz+2+ePWfxfkD9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/HfLHLP475o9Z/HfKH7P4vzx/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP6vyB+z+O+eP2bxf2X+mMX/VfljFv9X549Z/PfIH7P475k/ZvF/Tf6Yxf+1+WMW/9flj1n898ofs/i/Pn/M4r93/pjF/w35Yxb/N+aPWfzflD9m8d8nf8ziv2/+mMV/v/wxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/vvnj1n8D8gfs/i/I3/M4v/O/DGL/7vyxyz+B+aPWfzfnT9m8T8of8zi/578MYv/e/PHLP4H549Z/N+XP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bxPyR/zOJ/aP6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6Yxf+w/DGL/8fzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/gfnj9m8T8if8zif2T+mMX/i/ljFv+j8scs/kfnj1n8j8kfs/gfmz9m8f9S/pjF/7h7+i/8/3Vc/6FZ/L/c+scs/sfnj1n8T8gfs/h/JX/M4n9i/pjF/6T8MYv/V/PHLP5fyx+z+J+cP2bxPyV/zOJ/av6Yxf/r+WMW/2/kj1n8T8sfs/ifnj9m8T8jf8zi/838MYv/t/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4v/t/DGL/3fyxyz+380fs/h/L3/M4v/9/DGL/w/yxyz+P8wfs/ifmz9m8f9R/pjF/8f5Yxb/8/LHLP4/yR+z+P80f8zif37+mMX/gvwxi/+F+WMW/4vyxyz+P8sfs/hfnD9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8kf8zi/+v8MYv/b/LHLP6/zR+z+F+aP2bx/13+mMX/9/ljFv/L8scs/pfnj1n8/5A/ZvG/In/M4n9l/pjF/6r8MYv/H/PHLP5/yh+z+P85f8zif3X+mMX/L/ljFv9r8scs/tfmj1n8r8sfs/hfnz9m8f9r/pjF/4b8MYv/jfljFv+/5Y9Z/G/KH7P4/z1/zOL/j/wxi/8/88cs/v/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv/p+WMW/zvyxyz+d+aPWfxn5I9J/McM8scs/kP5Yxb/UfljFv/R+WMW/wXyxyz+Y/LHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv+x+WMW/yXyxyz+Sxr9R9//Lhb/cUb/B5DFf6n8MYv/+Pwxi//S+WMW/2Xyxyz+D8sfs/g/PH/M4v+I/DGL/7L5Yxb/R+aPWfyXyx+z+D8qf8zi/+j8MYv/8vljFv/H5I9Z/B+bP2bxn5A/ZvF/XP6Yxf/x+WMW/yfkj1n8J+aPWfxXyB+z+D8xf8ziv2L+mMV/pfwxi/+T8scs/k/OH7P4PyV/zOL/1Pwxi//K+WMW/6flj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/6fnj1n818ofs/ivnT9m8V8nf8ziv27+mMX/GfljFv/18scs/uvnj1n8n5k/ZvF/Vv6YxX+D/DGL/6T8MYv/5Pwxi/+U/DGL/4b5Yxb/jfLHLP4b549Z/Kfmj1n8p+WPWfw3yR+z+G+aP2bxf3b+mMX/OfljFv/N8scs/pvnj1n8t8gfs/g/N3/M4r9l/pjF/3n5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvF/fv6YxX+7/DGL//b5Yxb/F+SPWfxfmD9m8X9R/pjF/8X5Yxb/l+SPWfxfmj9m8X9Z/pjFf4f8MYv/jvljFv+d8scs/i/PH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/K/LHLP67549Z/F+ZP2bxf1X+mMX/1fljFv898scs/nvmj1n8X5M/ZvF/bf6Yxf91+WMW/73yxyz+r88fs/jvnT9m8X9D/pjF/435Yxb/N+WPWfz3yR+z+O+bP2bx3y9/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi//++WMW/wPyxyz+78gfs/i/M3/M4v+u/DGL/4H5Yxb/d+ePWfwPyh+z+L8nf8zi/978MYv/wfljFv/3jX6oBvSfncX//a1/zOL/gfwxi/8H88cs/h/KH7P4H5I/ZvE/NH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4n9Y/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfwPzx+z+B+RP2bxPzJ/zOL/xfwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+H8pf8zif1z+mMX/y/ljFv/j88cs/ifkj1n8v5I/ZvE/MX/M4n9S/pjF/6v5Yxb/r+WPWfxPzh+z+J+SP2bxPzV/zOL/9fwxi/838scs/qflj1n8T88fs/ifkT9m8f9m/pjF/1v5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvH/dv6Yxf87+WMW/+/mj1n8v5c/ZvH/fv6Yxf8H+WMW/x/mj1n8z80fs/j/KH/M4v/j/LH50n8Eem7/8/LH5kv/kbtz+/8kf8zi/9P8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/LH/M4n9x/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/5L8MYv/r/PHLP6/yR+z+P82f8zif2n+mMX/d/ljFv/f549Z/C/LH7P4X54/ZvH/Q/6Yxf+K/DGL/5X5Yxb/q/LHLP5/zB+z+P8pf8zi/+f8MYv/1fljFv+/5I9Z/K/JHzP4TxoMxlybP2bwH17/1+WPWfyvzx+z+P9V6z9jyft61uJ/g9b/vrP435g/ZvH/W/6Yxf+m/DGL/9/zxyz+/8gfs/j/M3/M4v+v/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvGfnj9m8b8jf8zif2f+mMV/Rv6YxH/BQf6YxX8of8ziPyp/zOI/On/M4r9A/pjFf0z+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOI/Nn/M4r9E/pjFf8n8MYv/uPwxi/9S+WMW//H5Yxb/pfPHLP7L5I9Z/B+WP2bxf3j+mMX/EfljFv9l88cs/o/MH7P4L5c/ZvF/VP6Yxf/R+WMW/+Xzxyz+j8kfs/g/Nn/M4j8hf8zi/7j8MYv/4/PHLP5PyB+z+E/MH7P4r5A/ZvF/Yv6YxX/F/DGL/0r5Yxb/J+WPWfyfnD9m8X9K/pjF/6n5Yxb/lfPHLP5Pyx+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5Pzx+z+K+VP2bxXzt/zOK/Tv6YxX9dmf/oB7ifxf8ZMv8HmsV/vfwxi//6+WMW/2fmj1n8n5U/ZvHfIH/M4j8pf8ziPzl/zOI/JX/M4r9h/pjFf6P8MYv/xvljFv+p+WMW/2n5Yxb/TfLHLP6b5o9Z/J+dP2bxf07+mMV/s/wxi//m+WMW/y3yxyz+z80fs/hvmT9m8X9e/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8n58/ZvHfLn/M4r99/pjF/wX5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/l+aPWfxflj9m8d8hf8ziv2P+mMV/p/wxi//L88fmQ/9Js+/O7b9z/th86I/rf5f8MYv/rvljFv/d8scs/q/IH7P4754/ZvF/Zf6Yxf9V+WMW/1fnj1n898gfs/jvmT9m8X9N/pjF/7X5Yxb/1+WPWfz3yh+z+L8+f8ziv3f+mMX/DfljFv835o9Z/N+UP2bx3yd/zOK/b/6YxX+//DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+++ePWfwPyB+z+L8jf8zi/878MYv/u/LHLP4H5o9Z/N+dP2bxPyh/zOL/nvwxi/9788cs/gfnj1n835c/ZvF/f/6Yxf8D+WPzpf+YWXfn9v9g/th86T9yd27/D+WPWfwPyR+z+B+aP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxPyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/ofnj1n8j8gfs/gfmT9m8f9i/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5Q/ZvE/Ln/M4v/l/DGL//H5Yxb/E/LHLP5fyR+z+J+YP2bxPyl/zOL/1fwxi//X8scs/ifnj1n8T8kfs/ifmj9m8f96/pjF/xv5Yxb/0/LHLP6n549Z/M/IH7P4fzN/zOL/rfwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H87f8zi/538MYv/d/PHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP7n5o9Z/H+UP2bx/3H+mMX/vPwxi/9P8scs/j/NH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/LHLP4X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/C/JH7P4/zp/zOL/m/wxi/9v88cs/pfmj1n8f5c/ZvH/ff6Yxf+y/DGL/+X5Yxb/P+SPWfyvyB+z+F+ZP2bxvyp/zOL/x/wxi/+f8scs/n/OH7P4X50/ZvH/S/6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/P+aP2bxvyF/zOJ/Y/6Yxf9v+WMW/5vyxyz+f88fs/j/I3/M4v/P/DGL/7/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6YxX96/pjF/478MYv/nfljFv8Z+WMS/4UG+WMW/6H8MYv/qPwxi//o/DGL/wL5Yxb/MfljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi//Y/DGL/xL5Yxb/JfPHLP7j8scs/kvlj1n8x+ePWfyXzh+z+C+TP2bxf1j+mMX/4fljFv9H5I9Z/JfNH7P4PzJ/zOK/XP6Yxf9R+WMW/0fnj1n8l88fs/g/Jn/M4v/Y/DGL/4T8MYv/4/LHLP6Pzx+z+D8hf8ziPzF/zOK/Qv6Yxf+J+WMW/xXzxyz+K+WPWfyflD9m8X9y/pjF/yn5Yxb/p+aPWfxXzh+z+D8tf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+D89f8ziv5bSf8ZC97eHxX9tpf/9Z/FfJ3/M4r9u/pjF/xn5Yxb/9fLHLP7r549Z/J+ZP2bxf1b+mMV/g/wxi/+k/DGL/+T8MYv/lPwxi/+G+WMW/43yxyz+G+ePWfyn5o9Z/Kflj1n8N8kfs/hvmj9m8X92/pjF/zn5Yxb/zfLHLP6b549Z/LfIH7P4Pzd/zOK/Zf6Yxf95+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bxf37+mMV/u/wxi//2+WMW/xfkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX+H/DGL/475Yxb/nfLHLP4vzx+z+O+cP2bx3yV/zOK/a/6YxX+3/DGL/yvyxyz+u+ePWfxfmT9m8X9V/pjF/9X5Yxb/PfLHLP575o9Z/F+TP2bxf23+mMX/dfljFv+98scs/q/PH7P4750/ZvF/Q/6Yxf+N+WMW/zflj1n898kfs/jvmz9m8d8vf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv//vljFv8D8scs/u/IH7P4vzN/zOL/rvwxi/+B+WMW/3fnj1n8D8ofs/i/J3/M4v/e/DGL/8H5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwPyR+z+B+aP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxPyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/ofnj1n8j8gfs/gfmT9m8f9i/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5Q/ZvE/Ln/M4v/l/DGL//H5Yxb/E/LHLP5fyR+z+J+YP2bxPyl/zOL/1fwxi//X8scs/ifnj1n8T8kfs/ifmj9m8f96/pjF/xv5Yxb/0/LHLP6n549Z/M/IH7P4fzN/zOL/rfwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H87f8zi/538MYv/d/PHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP7n5o9Z/H+UP2bx/3H+mMX/vPwxi/9P8scs/j/NH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/LHLP4X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/C/JH7P4/zp/zOL/m/wxi/9v88cs/pfmj1n8f5c/ZvH/ff6Yxf+y/DGL/+X5Yxb/P+SPWfyvyB+z+F+ZP2bxvyp/zOL/x/wxi/+f8scs/n/OH7P4X50/ZvH/S/6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/P+aP2bxvyF/zOJ/Y/6Yxf9v+WMW/5vyxyz+f88fs/j/I3/M4v/P/DGL/7/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6YxX96/pjF/478MYv/nfljFv8Z+WMS/4UH+WMW/yG1/4L3+ozFf5Ta/96z+I/OH7P4L5A/ZvEfkz9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+I/NH7P4L5E/ZvFfMn/M4j8uf8ziv1T+mMV/fP6YxX/p/DGL/zL5Yxb/h+WPWfwfnj9m8X9E/pjFf9n8MYv/I/PHLP7L5Y9Z/B+VP2bxf3T+mMV/+fwxi/9j8scs/o/NH7P4T8gfs/g/Ln/M4v/4/DGL/xPyxyz+E/PHLP4r5I9Z/J+YP2bxXzF/zOK/Uv6Yxf9J+WMW/yfnj1n8n5I/ZvF/av6YxX/l/DGL/9Pyxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/9Pzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/jPwxi/96+WMW//Xzxyz+z8wfs/g/K3/M4r9B/pjFf1L+mMV/cv6YxX9K/pjFf8P8MYv/RvljFv+N88cs/lPzxyz+0/LHLP6b5I9Z/DfNH7P4Pzt/zOL/nPwxi/9m+WMW/83zxyz+W+SPWfyfmz9m8d8yf8zi/7z8MYv/VvljFv+t88cs/tvkj1n8t80fs/g/P3/M4r9d/pjFf/v8MYv/C/LHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv0P+mMV/x/wxi/9O+WMW/5fnj1n8d84fs/jvkj9m8d81f8ziv1v+mMX/FfljFv/d88cs/q/MH7P4vyp/zOL/6vwxi/8e+WMW/z3zxyz+r8kfs/i/Nn/M4v+6/DGL/175Yxb/1+ePWfz3zh+z+L8hf8zi/8b8MYv/m/LHLP775I9Z/PfNH7P475c/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6YxX///DGL/wH5Yxb/d+SPWfzfmT9m8X9X/pjF/8D8MYv/u/PHLP4H5Y9Z/N+TP2bxf2/+mMX/4Pwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/ofkj1n8D80fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/gflj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/w/PHLP5H5I9Z/I/MH7P4fzF/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP5fyh+z+B+XP2bx/3L+mMX/+Pwxi/8J+WMW/6/kj1n8T8wfs/iflD9m8f9q/pjF/2v5Yxb/k/PHLP6n5I9Z/E/NH7P4fz1/zOL/jfwxi/9p+WMW/9Pzxyz+Z+SPWfy/mT9m8f9W/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8v50/ZvH/Tv6Yxf+7+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/3Pzxyz+P8ofs/j/OH/M4n9e/pjF/yf5Yxb/n+aPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf9n+WMW/4vzxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+l+SPWfx/nT9m8f9N/pjF/7f5Yxb/S/PHLP6/yx+z+P8+f8zif1n+mMX/8vwxi/8f8scs/lfkj1n8r8wfs/hflT9m8f9j/pjF/096/xm41eL/Z73/SPNMgsX/6vwxi/9f8scs/tfkj1n8r80fs/hflz9m8b8+f8zi/9f8MYv/DfljFv8b88cs/n/LH7P435Q/ZvH/e/6Yxf8f+WMW/3/mj1n8/5U/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPWfzvzB+z+M/IH5P4LzLIH7P4D+WPWfxH5Y9Z/Efnj1n8F8gfs/iPyR+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/Mfmj1n8l8gfs/gvmT9m8R+XP2bxXyp/zOI/Pn/M4r90/pjFf5n8MYv/w/LHLP4Pzx+z+D8if8ziv2z+mMX/kfljFv/l8scs/o/KH7P4Pzp/zOK/fP6Yxf8x+WMW/8fmj1n8J+SPWfwflz9m8X98/pjF/wn5Yxb/ifljFv8V8scs/k/MH7P4r5g/ZvFfKX/M4v+k/DGL/5Pzxyz+T8kfs/g/NX/M4r9y/pjF/2n5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/+n5Yxb/tfLHLP5r54/dzf/4/R7q4fz73Yv/OvljlvW/bv6Yxf8Z+WMW//Xyxyz+6+ePWfyfmT9m8X9W/pjFf4P8MYv/pPwxi//k/DGL/5T8MYv/hvljFv+N8scs/hvnj1n8p+aPWfyn5Y9Z/DfJH7P4b5o/ZvF/dv6Yxf85+WMW/83yxyz+m+ePWfy3yB+z+D83f8ziv2X+mMX/efljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9+/pjFf7v8MYv/9vljFv8X5I9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/F+aP2bxf1n+mMV/h/wxi/+O+WMW/53yxyz+L88fs/jvnD9m8d8lf8ziv2v+mMV/t/wxi/8r8scs/rvnj1n8X5k/ZvF/Vf6Yxf/V+WMW/z3yxyz+e+aPWfxfkz9m8X9t/pjF/3X5Yxb/vfLHLP6vzx+z+O+dP2bxf0P+mMX/jfljFv835Y9Z/PfJH7P475s/ZvHfL3/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL//75Yxb/A/LHLP7vyB+z+L8zf8zi/678MYv/gfljFv93549Z/A/KH7P4vyd/zOL/3vwxi//B+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8D8kfs/gfmj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8T8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP6H549Z/I/IH7P4H5k/ZvH/Yv6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/L+UP2bxPy5/zOL/5fwxi//x+WMW/xPyxyz+X8kfs/ifmD9m8T8pf8zi/9X8MYv/1/LHLP4n549Z/E/JH7P4n5o/ZvH/ev6Yxf8b+WMW/9Pyxyz+p+ePWfzPyB+z+H8zf8zi/638MYv/mfljFv+z8scs/mfnj1n8z8kfs/h/O3/M4v+d/DGL/3fzxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+5+aPWfx/lD9m8f9x/pjF/7z8MYv/T/LHLP4/zR+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8/yxyz+F+ePWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfwvyR+z+P86f8zi/5v8MYv/b/PHLP6X5o9Z/H+XP3Z3/zEP9XD+/e7F//f5Y5b1f1n+mMX/8vwxi/8f8scs/lfkj1n8r8wfs/hflT9m8f9j/pjF/0/5Yxb/P+ePWfyvzh+z+P8lf8zif03+mMX/2vwxi/91+WMW/+vzxyz+f80fs/jfkD9m8b8xf8zi/7f8MYv/TfljFv+/549Z/P+RP2bx/2f+mMX/X/ljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8ziPz1/zOJ/R/6Yxf/O/DGL/4z8MYn/ooP8MYv/UP6YxX9U/pjFf3T+mMV/gfwxi/+Y/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/Nv/7L3zXU/nfs/nff2aLLp4/ZvEfmz9m8V8if8ziv2T+mMV/XP6YxX+p/DGL//j8MYv/0vljFv9l8scs/g/LH7P4Pzx/zOL/iPwxi/+y+WMW/0fmj1n8l8sfs/g/Kn/M4v/o/DGL//L5Yxb/x+SPWfwfmz9m8Z+QP2bxf1z+mMX/8fljFv8n5I9Z/Cfmj1n8V8gfs/g/MX/M4r9i/pjFf6X8MYv/k/LHLP5Pzh+z+D8lf8zi/9T8MYv/yvljFv+n5Y9Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+n549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/xn5Yxb/9fLHLP7r549Z/J+ZP2bxf1b+mMV/g/wxi/+k/DGL/+T8MYv/lPwxi/+G+WMW/43yxyz+G+ePWfyn5o9Z/Kflj1n8N8kfs/hvmj9m8X92/pjF/zn5Yxb/zfLHLP6b549Z/LfIH7P4Pzd/zOK/Zf6Yxf95+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bxf37+mMV/u/wxi//2+WMW/xfkj1n8X5g/ZvF/Uf6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX+H/DGL/475Yxb/nfLHLP4vzx+z+O8896O6K4v/Lq1/zOK/a/6YxX+3/DGL/yvyxyz+u+ePWfxfmT9m8X9V/pjF/9X5Yxb/PfLHLP575o9Z/F+TP2bxf23+mMX/dfljFv+98scs/q/PH7P4750/ZvF/Q/6Yxf+N+WMW/zflj1n898kfs/jvmz9m8d8vf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv//vljFv8D8scs/u/IH7P4vzN/zOL/rvwxi/+B+WMW/3fnj1n8D8ofs/i/J3/M4v/e/DGL/8H5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwPyR+z+B+aP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxPyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/ofnj1n8j8gfs/gfmT9m8f9i/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5Q/ZvE/Ln/M4v/l/DGL//H5Yxb/E/LHLP5fyR+z+J+YP2bxPyl/zOL/1fwxi//X8scs/ifnj1n8T8kfs/ifmj9m8f96/pjF/xv5Yxb/0/LHLP6n549Z/M/IH7P4fzN/zOL/rfwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H87f8zi/538MYv/d/PHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP7n5o9Z/H+UP2bx/3H+mMX/vPwxi/9P8scs/j/NH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/LHLP4X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/C/JH7P4/zp/zOL/m/wxi/9v88cs/pfmj1n8f5c/ZvH/ff6Yxf+y/DGL/+X5Yxb/P+SPWfyvyB+z+F+ZP2bxvyp/zOL/x/wxi/+f8scs/n/OH7P4X50/ZvH/S/6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/P+aP2bxvyF/zOJ/Y/6Yxf9v+WMW/5vyxyz+f88fs/j/I3/M4v/P/DGL/7/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6YxX96/pjF/478MYv/nfljFv8Z+WMS/8UG+WMW/6H8MYv/qPwxi//o/DGL/wL5Yxb/MfljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi//Y/DGL/xL5Yxb/JfPHLP7j8scs/kvlj1n8x+ePzXf+C8y5O7f/0vlj853/vaz/ZfLHLP4Pyx+z+D88f8zi/4j8MYv/svljFv9H5o9Z/JfLH7P4P8rm/wDfrMX/0Tb/B5jFf/n8MYv/Y/LHLP6PzR+z+E/IH7P4Py5/zOL/+Pwxi/8T8scs/hPzxyz+K+SPWfyfmD9m8V8xf8ziv1L+mMX/SfljFv8n549Z/J+SP2bxf2r+mMV/5fwxi//T8scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//T88cs/mvlj1n8184fs/ivkz9m8V83f8zi/4z8MYv/evljFv/188cs/s/MH7P4Pyt/zOK/Qf6YxX9S/pjFf3L+mMV/Sv6YxX/D/DGL/0b5Yxb/jfPHLP5T88cs/tPyxyz+m+SPWfw3zR+z+D87f8zi/5z8MYv/ZvljFv/N88cs/lvkj1n8n5s/ZvHfMn/M4v+8/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4Pz9/zOK/Xf6YxX/7/DGL/wvyxyz+L8wfs/i/KH/M4v/i/DGL/0vyxyz+L80fs/i/LH/M4r9D/pjFf8f8MYv/TvljFv+X549Z/HfOH7P475I/ZvHfNX/M4r9b/pjF/xX5Yxb/3fPHLP6vzB+z+L8qf8zi/+r8MYv/HvljFv8988cs/q/JH7P4vzZ/zOL/uvwxi/9e+WMW/9fnj1n8984fs/i/IX/M4v/G/DGL/5vyxyz+++SPWfz3zR+z+O+XP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMV///wxi/8B+WMW/3fkj1n835k/ZvF/V/6Yxf/A/DGL/7vzxyz+B+WPWfzfkz9m8X9v/pjF/+D8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6H5I9Z/A/NH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4H5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/8Pzxyz+R+SPWfyPzB+z+H8xf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+X8ofs/gflz9m8f9y/pjF//j8MYv/CfljFv+v5I9Z/E/MH7P4n5Q/ZvH/av6Yxf9r+WMW/5Pzxyz+p+SPWfxPzR+z+H89f8zi/438MYv/afljFv/T88cs/mfkj1n8v5k/ZvH/Vv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/L+dP2bx/07+mMX/u/ljFv/v5Y9Z/L+fP2bx/0H+mMX/h/ljFv9z88cs/j/KH7P4/zh/zOJ/Xv6Yxf8n+WMW/5/mj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/Z/ljFv+L88cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/pfkj1n8f50/ZvH/Tf6Yxf+3+WMW/0vzxyz+v8sfs/j/Pn/M4n9Z/pjF//L8MYv/H/LHLP5X5I9Z/K/MH7P4X5U/ZvH/Y/6Yxf9P+WMW/z/nj1n8r84fs/j/JX/M4n9N/pjF/9r8MYv/dXP8f7jEQzKw/8ws/te3/jGL/1/zxyz+N+SPWfxvzB+z+P8tf8zif1P+mMX/7/ljFv9/5I9Z/P+ZP2bx/1f+mMX/5hH/zoG7Z/G/JXvM4n9r/pjF/7b8MYv/7fljFv/p+WMW/zvyxyz+d+aPWfxn5I9J/Bcf5I9Z/Pu7P87iPyp/zOI/On/M4r9A/pjFf0z+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOI/Nn/M4r9E/pjFf8n8MYv/uPwxi/9S+WMW//H5Yxb/pfPHLP7L5I9Z/B+WP2bxf3j+mMX/EfljFv9l88cs/o/MH7P4L5c/ZvF/VP6Yxf/R+WMW/+Xzxyz+j8kfs/g/Nn/M4j8hf8zi/7j8MYv/4/PHLP5PyB+z+E/MH7P4r5A/ZvF/Yv6YxX/F/DGL/0r5Yxb/J+WPWfyfnD9m8X9K/pjF/6n5Yxb/lfPHLP5Pyx+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5Pzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/zPyxyz+6+WPWfzXzx+z+D8zf8zi/6z8MYv/BvljFv9J+WMW/8n5Yxb/KfljFv8N88cs/hvlj1n8N84fs/hPzR+z+E/LH7P4b5I/ZvHfNH/M4v/s/DGL/3Pyxyz+m+WPWfw3zx+z+G+RP2bxf27+mMV/y/wxi//z8scs/lvlj1n8t84fs/hvkz9m8d82f8zi//z8MYv/dvljFv/t88cs/i/IH7P4vzB/zOL/ovwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/8O+WMW/x3zxyz+O+WPWfxfnj9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/1fkj1n8d88fs/i/Mn/M4v+q/DGL/6vzxyz+e+SPWfz3zB+z+L8mf+wu/11PnK/9X5s/Zln/r8sfs/jvlT9m8X99/pjFf+/8MYv/G/LHLP5vzB+z+L8pf8ziv0/+mMV/3/wxi/9++WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/7fnj1n8988fs/gfkD9m8X9H/pjF/535Yxb/d+WPzc/+i8zZuviB+WPzs//c6//d+WMW/4Pyxyz+78kfs/i/N3/M4n9w/pjF/335Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/Q/LHLP6H5o9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/A/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi//h+WMW/yPyxyz+R+aPWfy/6PHf5cHsbPE/yuP/oLL4H50/ZvE/Jn/M4n9s/pjF/0v5Yxb/4/LHLP5fzh+z+B+fP2bxPyF/zOL/lfwxi/+J+WMW/5Pyxyz+X80fs/h/LX/M4n9y/pjF/5T8MYv/qfljFv+v549Z/L+RP2bxPy1/zOJ/ev6Yxf+M/DGL/zfzxyz+38ofs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+388cs/t/JH7P4fzd/zOL/vfwxi//388cs/j/IH7P4/zB/zOJ/bv6Yxf9H+WMW/x/nj1n8z8sfs/j/JH/M4v/T/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yx/zOJ/cf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf+S/DGL/6/zxyz+v8kfs/j/Nn/M4n9p/pjF/3f5Yxb/3+ePWfwvyx+z+F+eP2bx/0P+mMX/ivwxi/+V+WMW/6vyxyz+f8wfs/j/KX/M4v/n/DGL/9X5Yxb/v+SPWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+v+WMW/xvyxyz+N+aPWfz/lj9m8b8pf8zi//f8MYv/P/LHLP7/zB+z+P8rf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfyn549Z/O/IH7P435k/ZvGfkT8m8R87yB+z+A/lj1n8R+WPWfxH549Z/BfIH7P4j8kfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfzH5o9Z/JfIH7P4L5k/ZvEflz9m8V8qf8ziPz5/zOK/dP6YxX+Z/DGL/8Pyxyz+D88fs/g/In/M4r9s/pjF/5H5Yxb/5fLHLP6Pyh+z+D86f8ziv3z+mMX/MfljFv/H5o9Z/Cfkj1n8H5c/ZvF/fP6Yxf8J+WMW/4n5Yxb/FfLHLP5PzB+z+K+YP2bxXyl/zOL/pPwxi/+T88cs/k/JH7P4PzV/zOK/cv6Yxf9p6D/q/9+4/kOz+K/S+scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/6fljFv+18scs/mvnj1n818kfs/ivmz9m8X9G/pjFf738MYv/+vljFv9n5o9Z/J+VP2bx3yB/zOI/KX/M4j85f8ziPyV/zOK/Yf6YxX+j/DGL/8b5Yxb/qfljFv9p+WMW/03yxyz+m+aPWfyfnT9m8X9O/pjFf7P8MYv/5vljFv8t8scs/s/NH7P4b5k/ZvF/Xv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/J+fP2bx3y5/zOK/ff6Yxf8F+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvHfIX/M4r9j/pjFf6f8MYv/y/PHLP47549Z/HfJH7P475o/ZvHfLX/M4v+K/DGL/+75Yxb/V+aPWfxflT9m8X91/pjFf4/8MYv/nvljFv/X5I9Z/F+bP2bxf13+mMV/r/wxi//r88cs/nvnj1n835A/ZvF/Y/6Yxf9N+WMW/33yxyz+++aPWfz3yx+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+L89f2x+9l94ztax++ePzc/+c6//A/LHLP7vyB+z+L8zf8zi/678MYv/gfljFv93549Z/A/KH7P4vyd/zOL/3vwxi//B+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8D8kfs/gfmj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8T8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP6H549Z/I/IH7P4H5k/ZvH/Yv6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/L+UP2bxPy5/zOL/5fwxi//x+WMW/xPyxyz+X8kfs/ifmD9m8T8pf8zi/9X8MYv/1/LHLP4n549Z/E/JH7P4n5o/ZvH/ev6Yxf8b+WMW/9Pyxyz+p+ePWfzPyB+z+H8zf8zi/638MYv/mfljFv+z8scs/mfnj1n8z8l/TgvNuWvx/3b+mMX/O/ljFv/v5o9Z/L+XP2bx/37+mMX/B/ljFv8f5o9Z/M/NH7P4/yh/zOL/4/wxi/95+WMW/5/kj1n8f5o/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+f5Y9Z/C/OH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5I/ZvH/df6Yxf83+WMW/9/mj1n8L80fs/j/Ln/M4v/7/DGL/2X5Yxb/y/PHLP5/yB+z+F+RP2bxvzJ/zOJ/Vf6Yxf+P+WNz+S80GAzmW/8/5Y9Z1v+f88cs/lfnj1n8/5I/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv+/5o9Z/G/IH7P435g/ZvA/YDAY+7f8MYP/8Pq/KX/M4v/3/DGL/z/yxyz+/8wfs/j/K3/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n8p+ePWfzvyB+z+N+ZP2bxn5E/JvFfYpA/ZvEfyh+z+I/KH7P4j84fs/gvkD9m8R+TP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4j80fs/gvofEf/aD2tvgvqfF/cFn8x+WPWfyXyh+z+I/PH7P4L50/ZvFfJn/M4v+w/DGL/8Pzxyz+j8gfs/gvmz9m8X9k/pjFf7n8MYv/o/LHLP6Pzh+z+C+fP2bxf0z+mMX/sfljFv8J+WMW/8flj1n8H58/ZvF/Qv6YxX9i/pjFf4X8MYv/E/PHLP4r5o9Z/FfKH7P4Pyl/zOL/5Pwxi/9T8scs/k/NH7P4r5w/ZvF/Wv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvF/ev6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/J+RP2bxXy9/zOK/fv6Yxf+Z+WMW/2flj1n8N8gfs/hPyh+z+E/OH7P4T8kfs/hvmD9m8d9I5L/wg9jX4r+xyP/BZPGfmj9m8Z+WP2bx3yR/zOK/af6Yxf/Z+WMW/+fkj1n8N8sfs/hvnj9m8d8if8zi/9z8MYv/lvljFv/n5Y9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF//n5Yxb/7fLHLP7b549Z/F+QP2bxf2H+mMX/RfljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8d8scs/jvmj1n8d8ofs/i/PH/M4r9z/pjFf5f8MYv/rvljFv/d8scs/q/IH7P4754/ZvF/Zf6Yxf9V+WMW/1fnj1n898gfs/jvmT9m8X9N/pjF/7X5Yxb/1+WPWfz3yh+z+L8+f8ziv3f+mMX/DfljFv835o9Z/N+UP2bx3yd/zOK/b/6YxX+//DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+++ePWfwPyB+z+L8jf8zi/878MYv/u/LHLP4H5o9Z/N+dP2bxPyh/zOL/nvwxi/9788cs/gfnj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvE/JH/M4n9o/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjF/7D8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+B+eP2bxPyJ/zOJ/pN5/NG61+H9R789Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/0v5Yxb/4/LHLP5fzh+z+B+fP2bxPyF/zOL/lfwxi/+J+WMW/5Pyxyz+X80fs/h/LX/M4n9y/pjF/5T8MYv/qfljFv+v549Z/L+RP2bxPy1/zOJ/ev6Yxf+M/DGL/zfzxyz+38ofs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+388cs/t/JH7P4fzd/zOL/vfwxi//388cs/j/IH7P4/zB/zOJ/bv6Yxf9H+WMW/x/nj1n8z8sfs/j/JH/M4v/T/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yx/zOJ/cf6Yxf/nRv8N7n8Xi/8vjP4PIIv/L/PHLP6/yh+z+F+SP2bx/3X+mMX/N/ljFv/f5o9Z/C/NH7P4/y5/zOL/+/wxi/9l+WMW/8vzxyz+f8gfs/hfkT9m8b8yf8zif1X+mMX/j/ljFv8/5Y9Z/P+cP2bxvzp/zOL/l/wxi/81+WMW/2vzxyz+1+WPWfyvzx+z+P81f8zif0P+mMX/xvwxi//f8scs/jflj1n8/54/ZvH/R/6Yxf+f+WMW/3/lj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi//0/DGL/x35Yxb/O/PHLP4z8sck/ksO8scs/kP5Yxb/UfljFv/R+WMW/wXyv1ujR24t/mPyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/sfljFv8l8scs/kvmj1n8x+WPWfyXyh+z+I/PH7P4L50/ZvFfJn/M4v+w/DGL/8Pzxyz+j8gfs/gvmz9m8X9k/pjFf7n8MYv/o/LHLP6Pzh+z+C+fP2bxf0z+mMX/sfljc/uPmo/9J+SPWdb/4/LHLP6Pzx+z+D8hf8ziPzF/bI7/Qz2S/6XuxX+F/DHL+n9i/pjFf8X8MYv/SvljFv8n5Y9Z/J+cP2bxf0r+mMX/qfljFv+V88cs/k/LH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/k/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/M/LHLP7r5Y9Z/NfPH7P4PzN/zOL/rPwxi/8G+WMW/0n5Yxb/yfljFv8p+WMW/w3zxyz+G+WPWfw3zh+z+E/NH7P4T8sfs/hvkj9m8d80f8zi/+z8MYv/c/LHLP6b5Y9Z/DfPH7P4b5E/ZvF/bv6YxX/L/DGL//Pyxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL//Pwxi/92+WMW/+3zxyz+L8gfs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/i/NH/M4v+y/DGL/w75Yxb/HfPHLP475Y9Z/F+u9+d3b/HfWe/PWfx3yR+z+O+aP2bx3y1/zOL/ivwxi///Y48eDAAxECAAvo172zZj27aNs63Ytm3btm3btpMGtoLsTAsz0H/U8j/If9TyP9h/1PI/xH/U8j/Uf9TyP8x/1PI/3H/U8j/Cf9TyP9J/1PI/yn/U8j/af9TyP8Z/1PI/1n/U8j/Of9TyP95/1PI/wX/U8j/Rf9TyP8l/1PI/2X/U8j/Ff9TyP9V/1PI/zX/U8j/df9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iPWv4P9B+1/B/kP2r5P9h/1PJ/iP+o5f9Q/1HL/2H+o5b/w/1HLf9H+I9a/o/0H7X8H+U/avk/2n/U8n+M/6jl/1j/Ucv/cf6jlv/j/Uct/yf4j1r+T/Qftfyf5D9q+T/Zf9Tyf4r/qOX/VP9Ry/9p/qOW/9P9Ry3/Z/iPWv7P9B+1/J/lP2r5P9t/1PJ/jv+o5f9c/1HL/3n+o5b/8/1HLf8X+I9a/i/0H7X8X+Q/avm/2H/U8n+J/6jl/1L/Ucv/Zf6jlv/L/Uct/1f4j1r+r/Qftfxf5T9q+b/af9Tyf43/qOX/Wv9Ry/91/qOW/+v9Ry3/N/iPWv5v9B+1/N/kP2r5v9l/1PJ/i/+o5f9W/1HL/23+o5b/2/1HLf93+I9a/u/0H7X83+U/avm/23/U8n+P/6jl/17/Ucv/ff6jlv/7/Uct/w/4j1r+H/Qftfw/5D9q+X/Yf9Ty/4j/qOX/Uf9Ry/9j/qOW/8f9Ry3/T/iPWv6f9B+1/D/lP2r5f9p/1PL/jP+o5f9Z/1HL/3P+o5b/5/1HLf8v+I9a/l/0H7X8v+Q/avl/2X/U8v+K/6jl/1X/Ucv/a/6jlv/X/Uct/2/4j1r+3/Qftfy/5T9q+X/bf9Ty/47/qOX/Xf9Ry/97/qOW//f9Ry3/H/iPWv4/9B+1/H/kP2r5/9h/VPI/4DP+o5b/z/qPWv4/5z9q+f+8/6jl/wv+o5b/L/qPWv6/5D9q+f+y/6jl/yv+o5b/r/qPWv6/5j9q+f+6/6jl/xv+o5b/b/qPWv6/5T9q+f+2/6jlf4D/qOX/O/6jlv/v+o9a/r/nP2r5/77/qOX/B/6jlv8f+o9a/n/kP2r5/7H/qOX/J/6jlv+f+o9a/n/mP2r5/7n/qOX/F/6jlv9f+o9a/n/lP2r5/7X/qOX/N/6jlv/f+o9a/n/nP2r5/73/qOX/D/6jlv8/+o9a/v/kP2r5/7P/qOX/L/6jlv+/+o9a/v/mP2r5/7v/qOX/H/6jlv9/+o9a/v/lP2r5/7f/qOX/P/6jlv//+o9a/v/nP2r5/7//qOV/Bv9Ry/+M/qOW/5n8Ry3/M/uPWv5n8R+1/M/qP2r5n81/1PI/u/+o5X8O/1HL/5z+o5b/ufxHLf9z+49a/ufxH7X8z+s/avmfz3/U8j+//6jlfwH/Ucv/gv6jlv+F/Ect/wv7j1r+F/Eftfwv6j9q+V/Mf9Tyv7j/qOV/Cf9Ry/+S/qOW/6X8Ry3/S/uPWv6X8R+1/C/rP2r5X85/1PK/vP+o5X8F/1HL/4r+o5b/lfxHLf8r+49a/lfxH7X8r+o/avlfzX/U8r+6/6jlfw3/Ucv/mv6jlv+1/Ect/2v7j1r+1/Eftfyv6z9q+V/Pf9Tyv77/qOV/A/9Ry/+G/qOW/438Ry3/G/uPWv4H+o9a/gf5j1r+B/uPWv6H+I9a/of6j1r+h/mPWv6H+49a/kf4j1r+R/qPWv5H+Y9a/kf7j1r+x/iPWv7H+o9a/sf5j1r+x/uPWv4n+I9a/if6j1r+J/mPWv4n+49a/qf4j1r+p/qPWv6n+Y9a/qf7jz51/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAn7Nt/jNd1AcfxzwEHSLbhYsawNsi3pVtKd/wY/uGEROBCD/yNqCFwB4J3QMdhx6nx4w9y6fyRGzm2ciUMy0mbt1zT2aWZNYtVW81+qFm6shaZzoIt1rXv3ffOu2/Hre/7fL9Z+Xj8cd/v5/Pl9QFue/L5MAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf1dD44IjY2uGnBo7+ODDh5t7X2cfXXHTgd93X9D/Wv546TCXHDP4oKenp2f2s7N2lA8nFEVR+tl2lo8nVo5L199Z/6WOvqMwv/vFxccn/7LxyIE1pz1c13X0vtres7XFjes2tDR/YkxRhItqi47SQV1NUYRFtcW9pYP60sHi2uLh0sGs3oNTiu+WDs5bu7mlqXRiSfT3DP5fNDTuLMYOKbYY8qfB4P531n/njv7XES7Zf7VxRbn/yzt/+GbFZ/1O0H//9cOCyv6r/g0CJ1Rd/8/P738d4ZL/cf+f9OTKl4f77MT9918/fFL/kM4wz/9DGq187q94/p8+zCUH9lfWdB4v9X/Jrc/MKJ8a9988/79z/XBRZf9jhjz/l57jF/Y//08oinDxKL8d8J7S0LjryEj3/5H7HzetYlMzuP/T2zbvL/X/2OIfPF4+VVtl/wtHuP+PWVLxawWq09D41Z6K+38V/RcfG+aSA/2/9fhvHyr1/+gf7z9j0GfV9H9xZf8z21u3zNy6vfPcDa2r1zevb95UN2ve7Ln1dXPPnzOz95Gg7+sovyvw3jC6+38xqWJTUxTNA/uruw48Vep/zgMPzC6fmlhl/4tGvP9Pd/+HYX1kTDF+fNGxur29ra7va/9hfd/Xvh82TP9V/P3/zLPLP6y2/FpTFFMH9neecdfyUv9vH3pmd/nU+Cr7Xzxi//MHfl4gwijv/00VmyH9Hzz0Yu/z/9J7Dp5ePlXt3/+XjNj/K+7/MBoNjRX/w8+7rNT/ruLSyE5Dg//+B+nk6P/Rt6/vjluHT+kf0snR/x++cPScuHVYqn9IJ0f/4zbe/1zcOlyif0gnR//LpsxbHrcOl+of0snR/9pXzvlr3Do06h/SydH/2V/Z3RG3Dsv0D+nk6P/Bttnb4tZhuf4hnRz9//zUB1+NW4fL9A/p5Oj/2LG7b4hbh8v1D+nk6L9rz1k/iluHK/QP6eTo/7J1C0LcOlypf0gnR//Tpv75sbh1uEr/kE6O/uf+5Z+nxq3D1fqHdHL0f/sXl++LW4dr9A/p5Oh/7HUvvxC3Div0D+nk6H/JWdsWxK3DtfqHdHL03/Szpp64dVipf0gnR/8zv/mTDXHrcJ3+IZ0c/R9e9sieuHW4Xv+QTo7+99QVk+PW4Qb9Qzo5+v/G9087FLcOn9Y/pJOj/989+cS8uHVYpX9IJ0f/z37otm/FrcON+od0cvR/z5oXzoxbh9X6h3Ry9P/Q3ue+HLcOa/QP6eTo//XXW98Xtw5r9Q/p5Oh/0sRTXotbhyb9Qzo5+l9wy9fa4tahWf+QTo7+W3d3/ThuHdbpH9LJ0f9Hj09dGbcO6/UP6eTof8WcvR+MW4eb9A/p5Oj/A0sv2BW3Dhv0D+nk6P/C7o9fGLcOG/UP6eTov/3pz389bh1u1j+kk6P/vTNeXRS3Di36h3Ry9P/SqiU/jVuHVv1DOjn6f/ORazfFrcMm/UM6Ofp/4hdvHYtbh836h3Ry9P/+8xf+PW4dtugf0snR/6LFb6yNW4fP6B/SydH/xq5/vRS3Dm36h3Ry9D/j8FVL49Zhq/4hnaH9T3jXr1/q/3vn1u2PW4d2/UM6Oe7/d1yxrz5uHbbpH9LJ0f/+g3feFbcOt+gf0snR/xu/mj4tbh0+q39IJ0f/900+dE3cOnToH9LJ0f+vN9U+HbcO2/UP6eTo/x/7puyIW4dO/UM6Ofp/6rXuP8Wtw636h3Ry9L9q3G/Gx63DbfqHdHL0P6Vzy71x63C7/iGdHP3Pu3v1eXHr8Dn9Qzo5+t/6t+e/HbcOO/QP6Wzd3nnz6paW5jZvvPHGm4E3J/tPJiC1d6I/2b8SAAAAAAAAAAAAAADgRHL8c6KT/XsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmbx1E7wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BQAA//81Md+a")
ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000000)={0x8000000009, 0x3, 0x4000000000000001})

963.254732ms ago: executing program 4 (id=6824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000010000d042abd7000010000006f49207e", @ANYRES32=0x0, @ANYBLOB="c0700400400000002c0012800c0001006d6163766c616e001c00028008000900fdffffff08000300020000000800070009000000140035006d6163766c616e30"], 0x60}, 0x1, 0x0, 0x0, 0x4048004}, 0x8000)

963.062402ms ago: executing program 4 (id=6825):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = socket(0x2b, 0x80801, 0x1)
r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x87, 0x0, 0x1}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000100), 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

724.545877ms ago: executing program 1 (id=6830):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000000400000004000000020002"], 0x50)

603.925635ms ago: executing program 6 (id=6832):
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)

543.462554ms ago: executing program 1 (id=6833):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x61d, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x44)

543.287744ms ago: executing program 6 (id=6834):
socket$nl_route(0x10, 0x3, 0x0)
r0 = inotify_init()
r1 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006)
open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106)

471.230479ms ago: executing program 1 (id=6835):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x18, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101}}}], 0x20}, 0x400c804)

380.581812ms ago: executing program 1 (id=6836):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x84f1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x1, 0x8, 0xa, 0x1, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94)

322.776889ms ago: executing program 1 (id=6837):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./control\x00', 0x84042, 0x9e)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000000c0)="3b210268fed2e2fc82fcd529ced21521335f0d86047e159689a8bc6d6d7fe8c68ca23665cfbbbf78eafe36d32c2d89c91551b3cb6aa406230067816960b45f6ebe00e3f8dbeeed840b762849256d432767", 0x51, 0x0)

286.099775ms ago: executing program 6 (id=6838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

277.994296ms ago: executing program 4 (id=6839):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x243a3, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdfff, 0x2})

255.649111ms ago: executing program 6 (id=6840):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}}, 0x40000)

171.224075ms ago: executing program 4 (id=6841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x814}, 0x0)

170.918396ms ago: executing program 6 (id=6842):
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

59.902421ms ago: executing program 6 (id=6843):
socket$nl_crypto(0x10, 0x3, 0x15)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0)

0s ago: executing program 4 (id=6844):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

kernel console output (not intermixed with test programs):

0327
[  484.265588][T19611] fuse: fd is not a fuse device
[  484.614755][T11374] gspca_sonixj: reg_r err -71
[  484.617669][T11374] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  484.623316][ T5661] usb 2-1: new low-speed USB device number 86 using dummy_hcd
[  484.625973][T11374] usb 6-1: USB disconnect, device number 30
[  484.768575][ T5661] usb 2-1: unable to get BOS descriptor or descriptor too short
[  484.774130][ T5661] usb 2-1: config 4 has an invalid interface number: 7 but max is 1
[  484.777815][ T5661] usb 2-1: config 4 has an invalid interface number: 243 but max is 1
[  484.782070][ T5661] usb 2-1: config 4 has no interface number 0
[  484.784725][ T5661] usb 2-1: config 4 has no interface number 1
[  484.789474][ T5661] usb 2-1: config 4 interface 7 has no altsetting 0
[  484.792284][ T5661] usb 2-1: config 4 interface 243 has no altsetting 0
[  484.801861][ T5661] usb 2-1: string descriptor 0 read error: -22
[  484.805528][ T5661] usb 2-1: New USB device found, idVendor=0341, idProduct=1b9e, bcdDevice=c9.af
[  484.809235][ T5661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.824114][ T5661] hub 2-1:4.7: Invalid hub with more than one config or interface
[  484.828286][ T5661] hub 2-1:4.7: probe with driver hub failed with error -22
[  484.837992][ T5661] hub 2-1:4.243: Invalid hub with more than one config or interface
[  484.841595][ T5661] hub 2-1:4.243: probe with driver hub failed with error -22
[  484.846456][ T5661] usb 2-1: No union descriptors
[  485.032282][ T5661] usb 2-1: USB disconnect, device number 86
[  485.797892][T19640] vivid-002: disconnect
[  485.838938][T19640] loop1: detected capacity change from 0 to 1024
[  485.908459][   T33] kauditd_printk_skb: 42 callbacks suppressed
[  485.908470][   T33] audit: type=1800 audit(1254.141:12611): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  486.042206][T19640] hfsplus: failed to extend attributes file
[  486.438574][   T33] audit: type=1800 audit(1254.708:12612): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.479183][T19634] vivid-002: reconnect
[  486.513277][T19665] openvswitch: netlink: IP tunnel dst address not specified
[  486.515767][   T33] audit: type=1800 audit(1254.781:12613): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.523863][T19665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.555327][   T33] audit: type=1800 audit(1254.823:12614): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.584789][   T33] audit: type=1800 audit(1254.855:12615): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.650698][   T33] audit: type=1800 audit(1254.928:12616): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.680202][   T33] audit: type=1800 audit(1254.949:12617): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  486.706079][   T33] audit: type=1800 audit(1254.981:12618): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.866582][   T33] audit: type=1800 audit(1255.044:12619): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  486.883490][   T33] audit: type=1800 audit(1255.096:12620): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  486.956527][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'.
[  486.961299][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'.
[  486.969725][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'.
[  486.974148][T19689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'.
[  487.484768][T19702] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5551'.
[  487.529177][T19704] sctp: [Deprecated]: syz.5.5552 (pid 19704) Use of struct sctp_assoc_value in delayed_ack socket option.
[  487.529177][T19704] Use struct sctp_sack_info instead
[  487.690384][ T5604] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  487.883134][T19726] program syz.1.5560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  489.711275][T19802] loop1: detected capacity change from 0 to 1024
[  489.714916][T19802] ext4: Unknown parameter 'fsname'
[  489.758076][   T32] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  489.910236][   T32] usb 6-1: Using ep0 maxpacket: 8
[  489.917146][   T32] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  489.925874][   T32] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  489.937731][   T32] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  489.948337][   T32] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  489.952151][   T32] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  489.957046][   T32] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  489.965970][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.993130][T19814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5597'.
[  489.998471][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5597'.
[  490.195287][   T32] usb 6-1: usb_control_msg returned -32
[  490.197526][   T32] usbtmc 6-1:16.0: can't read capabilities
[  490.548762][T19819] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  490.548895][T19820] usbtmc 6-1:16.0: control status returned 0
[  490.552757][T19819] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  490.743815][T11374] usb 6-1: USB disconnect, device number 31
[  490.894671][   T33] kauditd_printk_skb: 47 callbacks suppressed
[  490.894687][   T33] audit: type=1800 audit(1259.380:12668): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  490.950495][   T33] audit: type=1800 audit(1259.443:12669): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.010658][   T33] audit: type=1800 audit(1259.506:12670): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.065924][   T33] audit: type=1800 audit(1259.569:12671): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.118594][   T33] audit: type=1800 audit(1259.611:12672): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.148074][T19830] nbd: must specify an index to disconnect
[  491.184647][   T33] audit: type=1800 audit(1259.684:12673): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.239123][   T33] audit: type=1800 audit(1259.747:12674): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.285891][   T33] audit: type=1800 audit(1259.789:12675): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  491.308620][   T33] audit: type=1800 audit(1259.810:12676): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.363419][   T33] audit: type=1800 audit(1259.873:12677): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  491.711757][T11374] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  491.856874][T11374] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  491.864273][T11374] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  491.868724][T11374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.887527][T11374] gspca_main: stv0680-2.14.0 probing 041e:4007
[  491.982041][T19865] Console: switching to colour dummy device 80x25
[  492.399115][T19866] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  492.442172][T19866] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  492.453480][T19866] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[  492.456566][T19866] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  492.461359][T19866] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  492.491131][T19866] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  492.494073][T19866] pci 0000:00:01.0: vgaarb: bridge control possible
[  492.496545][T19866] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  492.516419][T19866] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  492.524719][T19866] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  492.541349][T19866] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  492.566282][T19866] [drm] Found bochs VGA, ID 0xb0c5.
[  492.570446][T19866] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  492.589118][T19866] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  493.329533][ T5444] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  493.418921][T11374] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  493.494395][ T5444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.502899][ T5444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.509694][ T5444] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  493.519529][ T5444] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  493.529341][ T5444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.533552][ T5444] usb 6-1: config 0 descriptor??
[  493.581420][T11374] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  493.590135][T11374] stv0680 2-1:4.0: last error: 83,  command = 0x7a
[  493.598228][T11374] usb 2-1: USB disconnect, device number 87
[  493.932143][ T5444] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xe
[  493.936870][ T5444] hid_parser_main: 4007 callbacks suppressed
[  493.936920][ T5444] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  493.950367][ T5444] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  494.139797][ T5444] usb 6-1: USB disconnect, device number 32
[  494.253726][T19899] xt_connbytes: Forcing CT accounting to be enabled
[  494.881779][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5647'.
[  495.720834][T19948] loop1: detected capacity change from 0 to 32768
[  495.750611][T19948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5655 (19948)
[  495.822636][   T33] kauditd_printk_skb: 68 callbacks suppressed
[  495.822770][   T33] audit: type=1800 audit(1264.555:12746): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  495.980321][   T33] audit: type=1800 audit(1264.723:12747): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187533 res=0 errno=0
[  496.021076][T19948] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.037215][T19948] BTRFS info (device loop1): using crc32c checksum algorithm
[  496.260396][T19968] netlink: 'syz.4.5659': attribute type 30 has an invalid length.
[  496.331873][T19948] BTRFS info (device loop1): setting nodatasum
[  496.338768][T19948] BTRFS info (device loop1): setting nodatacow
[  496.353009][T19948] BTRFS info (device loop1): disabling tree log
[  496.358317][T19948] BTRFS info (device loop1): turning on async discard
[  496.367538][T19948] BTRFS info (device loop1): enabling free space tree
[  496.375080][T19948] BTRFS info (device loop1): max_inline set to 0
[  496.742238][T19978] netlink: 'syz.4.5662': attribute type 6 has an invalid length.
[  496.745252][ T5602] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.749020][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'.
[  497.544086][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5672'.
[  497.649876][   T33] audit: type=1800 audit(1266.476:12748): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  497.910998][   T33] audit: type=1800 audit(1266.749:12749): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  498.529668][   T33] audit: type=1800 audit(1267.390:12750): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  498.563741][T20012] xt_hashlimit: size too large, truncated to 1048576
[  498.672103][T20020] netlink: 480 bytes leftover after parsing attributes in process `syz.4.5679'.
[  498.679599][T20020] netlink: 480 bytes leftover after parsing attributes in process `syz.4.5679'.
[  498.713614][   T33] audit: type=1800 audit(1267.589:12751): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  498.760576][   T33] audit: type=1800 audit(1267.631:12752): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  498.802392][   T33] audit: type=1800 audit(1267.684:12753): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  498.831906][   T33] audit: type=1800 audit(1267.715:12754): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  498.858055][   T33] audit: type=1800 audit(1267.746:12755): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  498.924368][T20036] loop1: detected capacity change from 0 to 512
[  498.936304][T20036] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  498.945890][T20036] EXT4-fs (loop1): 1 truncate cleaned up
[  498.953112][T20036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.003645][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.235524][   T32] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  499.400976][   T32] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[  499.404418][   T32] usb 6-1: config 5 has no interface number 0
[  499.407365][   T32] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  499.415979][   T32] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  499.422958][   T32] usb 6-1: config 5 interface 123 has no altsetting 0
[  499.429635][   T32] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  499.433378][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.439576][   T32] usb 6-1: Product: syz
[  499.442808][   T32] usb 6-1: Manufacturer: syz
[  499.445344][   T32] usb 6-1: SerialNumber: syz
[  499.665813][   T32] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[  499.673070][   T32] usb 6-1: USB disconnect, device number 33
[  499.740385][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  499.885374][    T9] usb 2-1: Using ep0 maxpacket: 16
[  499.891715][    T9] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  499.912622][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  499.920786][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  499.925352][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.928493][    T9] usb 2-1: Product: syz
[  499.930112][    T9] usb 2-1: Manufacturer: syz
[  499.933444][    T9] usb 2-1: SerialNumber: syz
[  499.953644][    T9] usb 2-1: 0:2 : does not exist
[  500.168401][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  500.259163][    T9] usb 2-1: USB disconnect, device number 88
[  500.326580][T15264] udevd[15264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  500.345266][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  500.348106][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  500.474685][T20083] loop5: detected capacity change from 0 to 16
[  500.487833][T20083] erofs (device loop5): mounted with root inode @ nid 36.
[  500.792452][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  500.792465][   T33] audit: type=1800 audit(1269.773:12792): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  501.072212][T20087] loop5: detected capacity change from 0 to 32768
[  501.115725][   T33] audit: type=1800 audit(1270.119:12793): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  501.128177][T20087] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  501.133492][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'.
[  501.260289][T12363] ocfs2: Unmounting device (7,5) on (node local)
[  501.310843][   T33] audit: type=1800 audit(1270.318:12794): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  501.359444][T20100] tipc: Cannot configure node identity twice
[  501.376983][T20100] tipc: New replicast peer: 127.0.0.1
[  501.386323][T20100] tipc: Enabled bearer <udp:syz0>, priority 10
[  501.477234][   T33] audit: type=1800 audit(1270.497:12795): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  501.548133][   T33] audit: type=1800 audit(1270.560:12796): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  501.623511][   T33] audit: type=1800 audit(1270.644:12797): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  501.690649][   T33] audit: type=1800 audit(1270.717:12798): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  501.817805][T20115] loop1: detected capacity change from 0 to 8192
[  501.833246][T20115] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  501.897421][   T33] audit: type=1800 audit(1270.938:12799): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  501.988072][   T33] audit: type=1800 audit(1271.022:12800): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  502.032517][T20130] erspan0: entered promiscuous mode
[  502.167848][   T33] audit: type=1800 audit(1271.200:12801): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  502.617787][    T9] tipc: Node number set to 1845821440
[  502.646433][T20148] loop1: detected capacity change from 0 to 764
[  502.787946][T20153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5740'.
[  502.982925][T20163] bond1: Removing last ns target with arp_interval on
[  503.293754][   T32] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  503.460774][   T32] usb 6-1: unable to get BOS descriptor or descriptor too short
[  503.469941][   T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  503.480198][   T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  503.492121][   T32] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  503.499564][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.512648][   T32] usb 6-1: Product: syz
[  503.514592][   T32] usb 6-1: Manufacturer: syz
[  503.516685][   T32] usb 6-1: SerialNumber: syz
[  503.732393][T20168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5747'.
[  503.783505][   T32] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  503.790410][   T32] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  503.836365][   T32] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  503.841202][   T32] usb 6-1: USB disconnect, device number 34
[  503.974420][T20180] loop1: detected capacity change from 0 to 1024
[  504.059697][T15264] udevd[15264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  504.333586][T20194] bridge0: port 3(syz_tun) entered disabled state
[  504.337829][T20194] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.340429][T20194] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.389650][T20194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.396527][T20194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.466157][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'.
[  504.471932][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'.
[  504.539326][T20200] loop5: detected capacity change from 0 to 128
[  504.549063][T20200] msdos: Bad value for 'gid'
[  504.565979][T20200] msdos: Bad value for 'gid'
[  504.600230][T20200] type: 2229836882 invalid
[  504.745425][ T5660] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.748222][ T5660] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.755718][ T5660] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.762363][ T5660] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.766328][ T5660] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.779646][ T5660] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.788161][ T5660] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.806130][ T5660] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.102315][T20220] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  505.105188][T20220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  505.113946][T20220] vhci_hcd vhci_hcd.0: Device attached
[  505.121616][T20225] vhci_hcd: connection closed
[  505.128616][T11088] vhci_hcd vhci_hcd.5: stop threads
[  505.136016][T11088] vhci_hcd vhci_hcd.5: release socket
[  505.137838][T11088] vhci_hcd vhci_hcd.5: disconnect device
[  505.313300][    T9] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[  505.467287][    T9] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[  505.471464][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.475283][    T9] usb 2-1: Product: syz
[  505.477071][    T9] usb 2-1: Manufacturer: syz
[  505.477720][T20251] netlink: 'syz.4.5784': attribute type 1 has an invalid length.
[  505.478917][    T9] usb 2-1: SerialNumber: syz
[  505.493072][T20251] netlink: 'syz.4.5784': attribute type 2 has an invalid length.
[  505.542092][T20253] tipc: Started in network mode
[  505.544255][T20253] tipc: Node identity 1000001, cluster identity 4369
[  505.547280][T20253] tipc: Node number set to 16777217
[  505.549945][T20253] tipc: Cannot configure node identity twice
[  505.556013][T20253] tipc: New replicast peer: 127.0.0.1
[  505.558994][T20253] tipc: Enabled bearer <udp:syz0>, priority 10
[  505.659064][   T33] kauditd_printk_skb: 43 callbacks suppressed
[  505.659080][   T33] audit: type=1800 audit(1274.885:12845): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  505.705292][    T9] usb 2-1: USB disconnect, device number 89
[  505.707914][   T33] audit: type=1800 audit(1274.938:12846): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=188709 res=0 errno=0
[  505.726325][   T33] audit: type=1800 audit(1274.938:12847): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=188710 res=0 errno=0
[  505.734921][   T33] audit: type=1800 audit(1274.938:12848): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=188689 res=0 errno=0
[  505.744401][   T33] audit: type=1800 audit(1274.938:12849): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=188711 res=0 errno=0
[  505.757170][   T33] audit: type=1800 audit(1274.980:12850): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  505.787782][   T33] audit: type=1800 audit(1275.011:12851): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  505.811398][T20264] loop5: detected capacity change from 0 to 256
[  505.816684][T20264] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  505.840056][   T33] audit: type=1800 audit(1275.074:12852): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  505.857317][   T33] audit: type=1800 audit(1275.095:12853): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  505.889097][   T33] audit: type=1804 audit(1275.127:12854): pid=20268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5792" name="/newroot/proc/stat" dev="proc" ino=4026532042 res=1 errno=0
[  505.906432][ T7404] kernel write not supported for file /stat (pid: 7404 comm: kworker/0:4)
[  506.342293][T20288] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  507.286254][T20306] netlink: 'syz.4.5809': attribute type 178 has an invalid length.
[  507.319338][T20309] fuse: fd is not a fuse device
[  507.374369][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5811'.
[  507.377964][T20311] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5811'.
[  508.038619][ T5604] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  508.152548][T20340] loop1: detected capacity change from 0 to 16
[  508.160296][T20340] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  508.378330][T20347] loop1: detected capacity change from 0 to 1024
[  508.401654][T20347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.404497][T20350] netlink: 'syz.4.5829': attribute type 39 has an invalid length.
[  508.525377][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.588170][T20359] loop1: detected capacity change from 0 to 8
[  508.622867][T20357] loop5: detected capacity change from 0 to 1756
[  508.663236][T20357] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  508.675789][T20357] UDF-fs: Scanning with blocksize 512 failed
[  508.727355][T20357] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  508.733587][T20357] UDF-fs: Scanning with blocksize 1024 failed
[  508.741510][T20357] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  509.176942][T20385] loop5: detected capacity change from 0 to 128
[  509.194523][T20385] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  509.209519][T20368] loop1: detected capacity change from 0 to 32768
[  509.211004][T20385] EXT4-fs (loop5): shut down requested (2)
[  509.223852][T20368] JBD2: Ignoring recovery information on journal
[  509.307518][T12363] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  509.312524][T20368] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  509.577332][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  509.951315][T20406] bonding: no command found in bonding_masters - use +ifname or -ifname
[  510.018585][ T5604] Bluetooth: hci0: Failed to read MSFT supported features (-110)
[  510.263956][T20422] PKCS7: Unknown OID: [4] (bad)
[  510.265614][T20422] PKCS7: Only support pkcs7_signedData type
[  510.426725][T20432] netlink: zone id is out of range
[  510.429245][T20432] netlink: zone id is out of range
[  510.431408][T20432] netlink: zone id is out of range
[  510.433736][T20432] netlink: zone id is out of range
[  510.436050][T20432] netlink: zone id is out of range
[  510.444238][T20432] netlink: zone id is out of range
[  510.448512][T20432] netlink: zone id is out of range
[  510.453863][T20432] netlink: zone id is out of range
[  510.457941][T20432] netlink: zone id is out of range
[  510.466418][   T32] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  510.491109][   T33] kauditd_printk_skb: 48 callbacks suppressed
[  510.491123][   T33] audit: type=1800 audit(1279.956:12903): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  510.564583][   T33] audit: type=1800 audit(1280.029:12904): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  510.633774][   T32] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9
[  510.652191][   T32] usb 2-1: config 1 interface 0 has no altsetting 0
[  510.659801][   T33] audit: type=1800 audit(1280.134:12905): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15445 res=0 errno=0
[  510.681278][   T32] usb 2-1: string descriptor 0 read error: -22
[  510.685384][   T32] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  510.698077][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.715993][   T33] audit: type=1800 audit(1280.187:12906): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188998 res=0 errno=0
[  510.729200][   T33] audit: type=1800 audit(1280.208:12907): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=189027 res=0 errno=0
[  510.739799][   T33] audit: type=1800 audit(1280.208:12908): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=189005 res=0 errno=0
[  510.748413][   T33] audit: type=1800 audit(1280.208:12909): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=189006 res=0 errno=0
[  510.761451][   T33] audit: type=1800 audit(1280.208:12910): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=189007 res=0 errno=0
[  510.783979][   T33] audit: type=1800 audit(1280.218:12911): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189047 res=0 errno=0
[  511.104055][   T32] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor
[  511.107942][   T33] audit: type=1800 audit(1280.607:12912): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189065 res=0 errno=0
[  511.130586][   T32] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:0926:3333.0018/input/input32
[  511.248156][   T32] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  511.307792][T11374] usb 2-1: USB disconnect, device number 90
[  511.316980][    C0] tipc: RX(40000000000000002e05): key[1] is activated
[  512.082421][T20473] loop1: detected capacity change from 0 to 512
[  512.099051][T20473] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  512.110954][T20473] EXT4-fs (loop1): 1 truncate cleaned up
[  512.120561][T20473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.193443][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.268037][T20482] net_ratelimit: 497 callbacks suppressed
[  512.268052][T20482] openvswitch: netlink: IPv4 tunnel dst address is zero
[  512.553528][T20499] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5895'.
[  512.562044][T20499] netlink: 'syz.1.5895': attribute type 9 has an invalid length.
[  512.568464][T20499] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5895'.
[  512.579571][T20499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5895'.
[  512.632208][T20503] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0
[  512.650200][T20503] binder: 20502:20503 ioctl 4018620d 200000001000 returned -1
[  512.770421][T20513] usb usb5: usbfs: process 20513 (syz.1.5901) did not claim interface 0 before use
[  512.915080][T20525] fuse: fd is not a fuse device
[  513.543219][   T32] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  513.686178][   T32] usb 2-1: Using ep0 maxpacket: 8
[  513.691416][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  513.699038][   T32] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  513.702227][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.704699][   T32] usb 2-1: Product: syz
[  513.706970][   T32] usb 2-1: Manufacturer: syz
[  513.709275][   T32] usb 2-1: SerialNumber: syz
[  513.828729][ T5444] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  513.908207][   T32] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  513.951196][   T32] usb 2-1: USB disconnect, device number 91
[  513.972602][ T5444] usb 6-1: too many configurations: 25, using maximum allowed: 8
[  513.979321][ T5444] usb 6-1: config index 0 descriptor too short (expected 137, got 18)
[  513.982715][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  513.987498][ T5444] usb 6-1: config index 1 descriptor too short (expected 137, got 18)
[  513.992123][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  513.995947][ T5444] usb 6-1: config index 2 descriptor too short (expected 137, got 18)
[  513.998963][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.003461][ T5444] usb 6-1: config index 3 descriptor too short (expected 137, got 18)
[  514.006575][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.010315][ T5444] usb 6-1: config index 4 descriptor too short (expected 137, got 18)
[  514.014572][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.018132][ T5444] usb 6-1: config index 5 descriptor too short (expected 137, got 18)
[  514.018819][ T7949] udevd[7949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  514.027483][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.032164][ T5444] usb 6-1: config index 6 descriptor too short (expected 137, got 18)
[  514.034889][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.040095][ T5444] usb 6-1: config index 7 descriptor too short (expected 137, got 18)
[  514.042620][ T5444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.046021][ T5444] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  514.049054][ T5444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.252242][ T5444] usb 6-1: string descriptor 0 read error: -71
[  514.256033][ T5444] pwc: Creative Labs Webcam Pro Ex detected.
[  514.258134][ T5444] pwc: Warning: more than 1 configuration available.
[  514.261470][ T5444] pwc: Failed to set LED on/off time (-71)
[  514.264678][ T5444] pwc: send_video_command error -71
[  514.266977][ T5444] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  514.270739][ T5444] Philips webcam 6-1:1.0: probe with driver Philips webcam failed with error -71
[  514.275933][ T5444] usb 6-1: USB disconnect, device number 35
[  514.451483][T20558] loop1: detected capacity change from 0 to 512
[  514.468562][T20558] EXT4-fs (loop1): #blocks per group too big: 8724480
[  514.835014][T20578] xt_hashlimit: size too large, truncated to 1048576
[  514.934579][   T32] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  515.034745][T20589] 9p: Bad value for 'rfdno'
[  515.065594][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5937'.
[  515.069929][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5937'.
[  515.079049][   T32] usb 2-1: Using ep0 maxpacket: 16
[  515.084261][   T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.091207][   T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  515.096930][   T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  515.105215][   T32] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  515.114008][   T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  515.117300][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  515.119804][   T32] usb 2-1: SerialNumber: syz
[  515.125541][T20568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  515.132053][T20568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  515.136379][   T32] hub 2-1:1.0: bad descriptor, ignoring hub
[  515.138299][   T32] hub 2-1:1.0: probe with driver hub failed with error -5
[  515.339155][T20568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  515.343678][T20568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  515.764557][   T32] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[  515.769738][   T33] kauditd_printk_skb: 84 callbacks suppressed
[  515.769749][   T33] audit: type=1800 audit(1285.499:12997): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=189664 res=0 errno=0
[  515.783252][   T33] audit: type=1800 audit(1285.509:12998): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189684 res=0 errno=0
[  515.791981][   T33] audit: type=1800 audit(1285.509:12999): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189751 res=0 errno=0
[  515.804043][   T33] audit: type=1800 audit(1285.520:13000): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=189756 res=0 errno=0
[  515.819735][   T33] audit: type=1800 audit(1285.520:13001): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=189760 res=0 errno=0
[  515.841981][   T33] audit: type=1800 audit(1285.520:13002): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=189759 res=0 errno=0
[  515.865031][   T33] audit: type=1800 audit(1285.520:13003): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=189762 res=0 errno=0
[  515.878447][   T33] audit: type=1800 audit(1285.530:13004): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="address" dev="sysfs" ino=189765 res=0 errno=0
[  515.888533][   T33] audit: type=1800 audit(1285.530:13005): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=189685 res=0 errno=0
[  515.896372][   T33] audit: type=1800 audit(1285.530:13006): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=189688 res=0 errno=0
[  516.049138][   T32] usb 2-1: USB disconnect, device number 92
[  516.074871][   T32] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[  516.815530][T20650] loop1: detected capacity change from 0 to 32768
[  516.847429][T20650] JBD2: Ignoring recovery information on journal
[  516.888386][T20650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  517.115161][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  517.356997][T20658] netlink: 'syz.1.5960': attribute type 1 has an invalid length.
[  517.364549][T20658] netlink: 'syz.1.5960': attribute type 4 has an invalid length.
[  517.388314][T20658] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.5960'.
[  518.360571][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5965'.
[  518.550369][T20673] overlayfs: failed to clone upperpath
[  518.550867][T20672] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  518.562290][T20672] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  518.568377][T20672] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  518.641670][T20675] loop5: detected capacity change from 0 to 512
[  518.650049][T20675] EXT4-fs: Ignoring removed nobh option
[  518.662510][T20675] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  518.666723][T20675] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  518.675258][T20675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002]
[  518.680084][T20675] System zones: 1-12
[  518.681961][T20675] EXT4-fs (loop5): orphan cleanup on readonly fs
[  518.685152][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.692772][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.696485][    C1] EXT4-fs (loop5): initial error at time 1288: ext4_read_block_bitmap_nowait:517
[  518.703139][    C1] EXT4-fs (loop5): last error at time 1288: ext4_read_block_bitmap_nowait:517
[  518.721324][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.726112][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.726384][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.734545][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.734782][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.741837][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.746191][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.752876][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.753134][T20675] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.5969: Block bitmap for bg 0 marked uninitialized
[  518.762539][T20675] loop5: lost filesystem error report for type 5 error -117
[  518.763019][T20675] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  518.770240][T20675] EXT4-fs (loop5): 1 truncate cleaned up
[  518.775414][T20675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  518.800124][T12363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.915444][   T32] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  519.080161][   T32] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  519.089678][   T32] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  519.095984][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.126050][   T32] gspca_main: stv0680-2.14.0 probing 041e:4007
[  519.256873][T20715] netlink: 'syz.4.5986': attribute type 83 has an invalid length.
[  519.402094][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5989'.
[  519.405321][T20721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5989'.
[  519.409417][T20721] netlink: 'syz.4.5989': attribute type 4 has an invalid length.
[  520.164111][   T32] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  520.166810][   T32] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  520.169689][   T32] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  520.296767][T11374] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  520.368092][    T9] usb 2-1: USB disconnect, device number 93
[  520.443590][T11374] usb 6-1: unable to get BOS descriptor or descriptor too short
[  520.447620][T11374] usb 6-1: not running at top speed; connect to a high speed hub
[  520.452975][T11374] usb 6-1: config 7 has an invalid interface number: 62 but max is 0
[  520.456278][T11374] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  520.461369][T11374] usb 6-1: config 7 has no interface number 0
[  520.464665][T11374] usb 6-1: config 7 interface 62 has no altsetting 0
[  520.474398][T11374] usb 6-1: New USB device found, idVendor=0421, idProduct=0327, bcdDevice=8b.96
[  520.477921][T11374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.481221][T11374] usb 6-1: Product: syz
[  520.483024][T11374] usb 6-1: Manufacturer: syz
[  520.485155][T11374] usb 6-1: SerialNumber: syz
[  520.688151][T11374] cdc_phonet 6-1:7.62: skipping garbage
[  520.691222][T11374] cdc_phonet 6-1:7.62: probe with driver cdc_phonet failed with error -22
[  520.696146][   T33] kauditd_printk_skb: 37 callbacks suppressed
[  520.696153][   T33] audit: type=1800 audit(1290.664:13044): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=190142 res=0 errno=0
[  520.706869][   T33] audit: type=1800 audit(1290.674:13045): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=190143 res=0 errno=0
[  520.707806][T11374] usb 6-1: USB disconnect, device number 36
[  520.713657][   T33] audit: type=1800 audit(1290.685:13046): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=190122 res=0 errno=0
[  520.721907][   T33] audit: type=1800 audit(1290.685:13047): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=190144 res=0 errno=0
[  520.729047][   T33] audit: type=1800 audit(1290.695:13048): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190174 res=0 errno=0
[  520.889189][   T33] audit: type=1800 audit(1290.874:13049): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  520.949792][   T33] audit: type=1800 audit(1290.937:13050): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  520.990623][   T33] audit: type=1800 audit(1290.979:13051): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  521.044224][   T33] audit: type=1800 audit(1291.031:13052): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  521.075222][T20748] loop1: detected capacity change from 0 to 4096
[  521.090232][   T33] audit: type=1800 audit(1291.084:13053): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  521.215840][T20752] xt_TCPMSS: Only works on TCP SYN packets
[  521.343443][T20762] netlink: 'syz.1.6007': attribute type 11 has an invalid length.
[  521.345870][T20762] netlink: 'syz.1.6007': attribute type 11 has an invalid length.
[  521.349785][T20762] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6007'.
[  521.905874][T20785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6016'.
[  522.095459][T20799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6022'.
[  522.100516][T20799] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6022'.
[  522.105398][T20799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6022'.
[  522.304778][T20814] loop5: detected capacity change from 0 to 7
[  522.313213][T20817] loop1: detected capacity change from 0 to 256
[  522.317691][T20814]  loop5: [POWERTEC] p1
[  522.319129][T20817] FAT-fs (loop1): bogus sectors per cluster 223
[  522.322611][T20817] FAT-fs (loop1): Can't find a valid FAT filesystem
[  522.326385][T20814] loop5: p1 start 1110023002 is beyond EOD, truncated
[  522.452352][T20822] loop5: detected capacity change from 0 to 736
[  522.681788][T20836] loop5: detected capacity change from 0 to 1024
[  522.722547][T20836] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  522.728947][T20836] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  522.733512][T20836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.767216][T20836] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - no `..'
[  522.811852][T12363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.331857][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6053'.
[  523.630524][T11374] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  523.694205][T20887] vlan0: entered promiscuous mode
[  523.784599][T11374] usb 2-1: Using ep0 maxpacket: 32
[  523.790805][T11374] usb 2-1: config 2 has an invalid interface number: 119 but max is 0
[  523.795043][T11374] usb 2-1: config 2 has no interface number 0
[  523.798299][T11374] usb 2-1: config 2 interface 119 has no altsetting 0
[  523.804178][T11374] usb 2-1: New USB device found, idVendor=1385, idProduct=5f01, bcdDevice=b2.83
[  523.807944][T11374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.811094][T11374] usb 2-1: Product: syz
[  523.813139][T11374] usb 2-1: Manufacturer: syz
[  523.815025][T11374] usb 2-1: SerialNumber: syz
[  523.825226][T11374] usb 2-1: Could not find all expected endpoints
[  523.831198][T11374] cdc_ether 2-1:2.119: invalid descriptor buffer length
[  523.834682][T11374] usb 2-1: No union descriptors
[  523.895344][T20897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6066'.
[  523.899033][T20897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6066'.
[  524.019076][ T5444] usb 2-1: USB disconnect, device number 94
[  524.120299][T20904] loop5: detected capacity change from 0 to 128
[  524.153127][T12363] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  524.162260][T12363] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  524.358131][T11088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.369486][T11088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  524.374038][T11088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.480329][T11088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.484546][T11088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  524.488832][T11088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.519378][T19510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  524.536657][T19510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  524.544453][T19510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  524.550769][T19510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  524.557114][T19510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  524.647754][T11088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.651624][T11088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  524.654751][T11088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.867641][T11088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.872003][T11088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  524.876087][T11088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.243559][T20939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6082'.
[  525.419524][T20945] CIFS mount error: No usable UNC path provided in device string!
[  525.419524][T20945] 
[  525.423981][T20945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  525.466729][   T33] kauditd_printk_skb: 72 callbacks suppressed
[  525.466743][   T33] audit: type=1800 audit(1295.671:13126): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  525.516108][   T33] audit: type=1800 audit(1295.724:13127): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  525.535815][   T33] audit: type=1800 audit(1295.724:13128): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=191274 res=0 errno=0
[  525.551314][   T33] audit: type=1800 audit(1295.745:13129): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=191279 res=0 errno=0
[  525.560531][T11088] bridge_slave_1: left allmulticast mode
[  525.562177][   T33] audit: type=1800 audit(1295.745:13130): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=191283 res=0 errno=0
[  525.562528][T11088] bridge_slave_1: left promiscuous mode
[  525.569433][   T33] audit: type=1800 audit(1295.745:13131): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=191282 res=0 errno=0
[  525.569462][   T33] audit: type=1800 audit(1295.745:13132): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=191285 res=0 errno=0
[  525.590415][T11088] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.598720][T11088] bridge_slave_0: left allmulticast mode
[  525.601074][T11088] bridge_slave_0: left promiscuous mode
[  525.602852][   T33] audit: type=1800 audit(1295.818:13133): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  525.603774][T11088] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.651733][T20951] loop1: detected capacity change from 0 to 4096
[  525.687542][   T33] audit: type=1800 audit(1295.902:13134): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  525.773049][T20952] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  525.962251][   T33] audit: type=1800 audit(1296.196:13135): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  526.091894][T11088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.101191][T11088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.106317][T11088] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  526.111750][T11088] bond0 (unregistering): Released all slaves
[  526.121269][T11088] bond1 (unregistering): Released all slaves
[  526.239152][T11088] tipc: Disabling bearer <eth:syzkaller0>
[  526.267414][T11088] tipc: Left network mode
[  526.310777][T20963] loop1: detected capacity change from 0 to 64
[  526.388522][T20963] syz.1.6092: attempt to access beyond end of device
[  526.388522][T20963] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  526.472048][T20968] sctp: [Deprecated]: syz.4.6094 (pid 20968) Use of int in max_burst socket option.
[  526.472048][T20968] Use struct sctp_assoc_value instead
[  526.555390][T19510] Bluetooth: hci1: command tx timeout
[  526.799542][T11088] hsr_slave_0: left promiscuous mode
[  526.811140][T11088] hsr_slave_1: left promiscuous mode
[  526.853848][T11088] veth1_macvtap: left promiscuous mode
[  526.867267][T11088] veth0_macvtap: left promiscuous mode
[  526.871488][T11088] veth1_vlan: left promiscuous mode
[  526.873792][T11088] veth0_vlan: left promiscuous mode
[  526.884455][T20986] loop1: detected capacity change from 0 to 512
[  526.907746][T20986] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.6100: inode has both inline data and extents flags
[  526.930156][T20986] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  526.931465][T20986] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6100: couldn't read orphan inode 15 (err -117)
[  526.940066][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  526.940087][    C0] EXT4-fs (loop1): initial error at time 1297: ext4_orphan_get:1399: inode 15
[  526.940110][    C0] EXT4-fs (loop1): last error at time 1297: ext4_orphan_get:1399: inode 15
[  526.961010][T20986] loop1: lost filesystem error report for type 5 error -117
[  526.962720][T20986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.029425][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.237127][T11088] team0 (unregistering): Port device team_slave_1 removed
[  527.249106][T11088] team0 (unregistering): Port device team_slave_0 removed
[  527.371406][T11374] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  527.457735][ T5341] 8021q: adding VLAN 0 to HW filter on device eth9
[  527.499494][T20906] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.503586][T20906] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.507017][T20906] bridge_slave_0: entered allmulticast mode
[  527.510261][T20906] bridge_slave_0: entered promiscuous mode
[  527.539864][T20906] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.543561][T20906] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.547231][T20906] bridge_slave_1: entered allmulticast mode
[  527.553025][T20906] bridge_slave_1: entered promiscuous mode
[  527.570263][T11374] usb 2-1: Using ep0 maxpacket: 16
[  527.580858][T11374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.586491][T11374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  527.603553][T11374] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  527.606052][T20906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.614785][T20906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.623578][T11374] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  527.632795][T11374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.661727][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6104'.
[  527.662785][T20906] team0: Port device team_slave_0 added
[  527.666175][T11374] usb 2-1: config 0 descriptor??
[  527.670163][T20906] team0: Port device team_slave_1 added
[  527.674494][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'.
[  527.706656][T20999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  527.764778][T20906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.774692][T20906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.805462][T20906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.829491][T20906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.834404][T20906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.846561][T20906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.920705][T20906] hsr_slave_0: entered promiscuous mode
[  527.923913][T20906] hsr_slave_1: entered promiscuous mode
[  528.120342][ T5341] 8021q: adding VLAN 0 to HW filter on device eth10
[  528.182194][T11374] nintendo 0003:057E:2019.0019: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0
[  528.286578][T11088] IPVS: stop unused estimator thread 0...
[  528.323606][T20906] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  528.343528][T20906] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  528.348610][T20906] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  528.360312][T20906] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  528.364126][T20906] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  528.373086][T20906] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  528.376517][T20906] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  528.392848][T20906] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  528.432305][T20906] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.434809][T20906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.437262][T20906] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.439746][T20906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.463356][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.466646][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.491065][T11374] nintendo 0003:057E:2019.0019: Failed to set baudrate (ret=-71), continuing anyway
[  528.500504][T20906] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.511318][T11374] nintendo 0003:057E:2019.0019: Failed handshake; ret=-71
[  528.515160][T11374] nintendo 0003:057E:2019.0019: Failed to initialize controller; ret=-71
[  528.518355][T20906] 8021q: adding VLAN 0 to HW filter on device team0
[  528.530493][T11374] nintendo 0003:057E:2019.0019: probe - fail = -71
[  528.533221][T11374] nintendo 0003:057E:2019.0019: probe with driver nintendo failed with error -71
[  528.539429][T11374] usb 2-1: USB disconnect, device number 95
[  528.543198][T19510] Bluetooth: hci1: command tx timeout
[  528.549044][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.551912][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.576996][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.579400][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.630505][ T5341] 8021q: adding VLAN 0 to HW filter on device eth11
[  528.814846][ T5341] 8021q: adding VLAN 0 to HW filter on device eth12
[  528.926342][T20906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.092810][T20906] veth0_vlan: entered promiscuous mode
[  529.101572][T20906] veth1_vlan: entered promiscuous mode
[  529.128226][T20906] veth0_macvtap: entered promiscuous mode
[  529.141019][T20906] veth1_macvtap: entered promiscuous mode
[  529.151321][T20906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.168013][T20906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.170114][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6121'.
[  529.186337][T11086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.189381][T11086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.196424][T11086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.199221][T11086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.358493][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.374557][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.430179][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.436110][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.581136][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6128'.
[  529.740005][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.745016][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.756805][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.761559][T21108] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  529.775810][T21108] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  529.787732][T21108] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  529.792010][T21112] loop6: detected capacity change from 0 to 1024
[  529.811684][T21112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  529.813427][T21108] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  529.844738][T21108] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  529.869382][T21112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.901797][T21112] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  529.952788][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.958412][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.963012][T21108] hsr0 speed is unknown, defaulting to 1000
[  529.968899][T21108] hsr0 speed is unknown, defaulting to 1000
[  530.166307][  T802] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  530.176972][T21126] loop1: detected capacity change from 0 to 4096
[  530.299397][  T802] usb 7-1: device descriptor read/64, error -71
[  530.517702][T19510] Bluetooth: hci1: command tx timeout
[  530.556302][  T802] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  530.727125][  T802] usb 7-1: device descriptor read/64, error -71
[  530.819429][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6142'.
[  530.832382][  T802] usb usb7-port1: attempt power cycle
[  530.851069][T21132] team1: entered promiscuous mode
[  530.852926][T21132] team1: entered allmulticast mode
[  531.175185][  T802] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  531.207052][  T802] usb 7-1: device descriptor read/8, error -71
[  531.451278][  T802] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  531.491056][  T802] usb 7-1: device descriptor read/8, error -71
[  531.594375][  T802] usb usb7-port1: unable to enumerate USB device
[  531.685771][   T33] kauditd_printk_skb: 41 callbacks suppressed
[  531.685787][   T33] audit: type=1800 audit(1302.201:13177): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  531.714596][T21146] loop1: detected capacity change from 0 to 512
[  531.722284][T21146] EXT4-fs (loop1): 1 truncate cleaned up
[  531.732891][T21146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.749598][   T33] audit: type=1800 audit(1302.274:13178): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  531.787847][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.820554][   T33] audit: type=1800 audit(1302.348:13179): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  531.829463][T21150] xt_hashlimit: size too large, truncated to 1048576
[  531.865745][T21152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6150'.
[  531.875867][T21152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6150'.
[  531.885686][T21152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6150'.
[  531.952081][   T33] audit: type=1800 audit(1302.484:13180): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.012450][   T33] audit: type=1800 audit(1302.547:13181): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.078098][   T33] audit: type=1800 audit(1302.610:13182): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.155767][   T33] audit: type=1800 audit(1302.694:13183): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.199286][ T1044] wlan1: Trigger new scan to find an IBSS to join
[  532.202746][   T33] audit: type=1800 audit(1302.747:13184): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.263850][T21169] loop1: detected capacity change from 0 to 2048
[  532.336316][   T33] audit: type=1800 audit(1302.883:13185): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.373472][T21173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6159'.
[  532.408600][   T33] audit: type=1800 audit(1302.967:13186): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  532.499279][T19510] Bluetooth: hci1: command tx timeout
[  532.697700][T20906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.803344][T21199] netlink: 'syz.4.6172': attribute type 30 has an invalid length.
[  532.990285][T21193] loop1: detected capacity change from 0 to 32768
[  533.002178][T21193] JBD2: Ignoring recovery information on journal
[  533.034465][T21193] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  533.219790][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  533.328734][T21218] loop6: detected capacity change from 0 to 512
[  533.434801][T21225] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6182'.
[  533.573454][T21232] loop1: detected capacity change from 0 to 4096
[  533.592031][T21234] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.634600][T21232] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  533.729582][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6186'.
[  533.754549][T21237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.780483][T21237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.931105][T21242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6188'.
[  533.941362][T21244] netlink: 'syz.6.6189': attribute type 2 has an invalid length.
[  534.001399][T21246] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.114394][T21251] netlink: 'syz.6.6192': attribute type 1 has an invalid length.
[  534.123924][T21251] netlink: 'syz.6.6192': attribute type 2 has an invalid length.
[  534.135164][T21251] netlink: 'syz.6.6192': attribute type 13 has an invalid length.
[  534.139189][T21251] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6192'.
[  534.165978][ T5669] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  534.228579][T21256] netlink: 'syz.4.6194': attribute type 2 has an invalid length.
[  534.311826][ T5669] usb 2-1: config 8 has an invalid interface number: 188 but max is 0
[  534.316277][ T5669] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  534.325449][ T5669] usb 2-1: config 8 has no interface number 0
[  534.328984][ T5669] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  534.335395][ T5669] usb 2-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  534.350448][ T5669] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  534.355390][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.364197][ T5669] usb 2-1: Product: syz
[  534.370279][ T5669] usb 2-1: Manufacturer: syz
[  534.372151][ T5669] usb 2-1: SerialNumber: syz
[  534.461495][ T5661] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  534.616948][ T5661] usb 7-1: config 0 has no interfaces?
[  534.618764][ T5661] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  534.626275][ T5669] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  534.640417][ T5661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.647265][ T5669] usb 2-1: USB disconnect, device number 96
[  534.650450][ T5661] usb 7-1: config 0 descriptor??
[  534.848869][  T802] usb 7-1: USB disconnect, device number 6
[  535.014892][ T4123] wlan1: Trigger new scan to find an IBSS to join
[  535.500791][T21315] ip_tables: iptables: counters copy to user failed while replacing table
[  535.759227][T21335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6231'.
[  536.656850][T21374] netlink: 'syz.4.6249': attribute type 3 has an invalid length.
[  536.802702][   T33] kauditd_printk_skb: 60 callbacks suppressed
[  536.802711][   T33] audit: type=1800 audit(1307.576:13247): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  536.835124][T21382] netlink: 'syz.1.6253': attribute type 2 has an invalid length.
[  536.838433][T21382] netlink: 'syz.1.6253': attribute type 8 has an invalid length.
[  536.841203][T21382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6253'.
[  536.884313][   T33] audit: type=1800 audit(1307.660:13248): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  536.922816][   T33] audit: type=1800 audit(1307.702:13249): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6254" name="nx_huge_pages" dev="sysfs" ino=54791 res=0 errno=0
[  536.984122][   T33] audit: type=1800 audit(1307.754:13250): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  537.021346][   T33] audit: type=1800 audit(1307.796:13251): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  537.040682][   T33] audit: type=1800 audit(1307.828:13252): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  537.098364][   T33] audit: type=1800 audit(1307.880:13253): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  537.203325][   T33] audit: type=1800 audit(1307.996:13254): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  537.384431][T21397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input33
[  537.413363][   T33] audit: type=1800 audit(1308.174:13255): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  537.422380][   T33] audit: type=1800 audit(1308.185:13256): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198256 res=0 errno=0
[  537.498877][T21403] dummy0: entered promiscuous mode
[  537.502864][T21403] dummy0: entered allmulticast mode
[  537.919326][ T1103] wlan1: Trigger new scan to find an IBSS to join
[  537.992366][T21414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6266'.
[  538.139836][ T5604] Bluetooth: hci1: command 0x0405 tx timeout
[  538.672731][T11374] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  538.780691][ T6886] wlan1: Creating new IBSS network, BSSID 92:46:94:a6:89:38
[  538.843559][T11374] usb 7-1: Using ep0 maxpacket: 16
[  538.857090][T11374] usb 7-1: unable to get BOS descriptor or descriptor too short
[  538.868831][T11374] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  538.885373][T11374] usb 7-1: config 0 has no interface number 0
[  538.891984][T11374] usb 7-1: config 0 interface 20 has no altsetting 0
[  538.897608][T11374] usb 7-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=fd.8a
[  538.909890][T11374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.915763][T11374] usb 7-1: Product: syz
[  538.917519][T11374] usb 7-1: Manufacturer: syz
[  538.919935][T11374] usb 7-1: SerialNumber: syz
[  538.927293][T11374] usb 7-1: config 0 descriptor??
[  538.948409][T21463] loop1: detected capacity change from 0 to 4096
[  538.955407][T21463] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  538.968036][T21463] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  538.974525][T21463] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  539.116062][T21468] netlink: 'syz.1.6288': attribute type 2 has an invalid length.
[  539.160939][T11374] usb 7-1: USB disconnect, device number 7
[  539.977191][T21507] loop6: detected capacity change from 0 to 40427
[  539.980385][T21507] F2FS-fs (loop6): Image doesn't support compression
[  539.982521][T21507] F2FS-fs (loop6): build fault injection type: 0x4
[  539.985001][T21507] F2FS-fs (loop6): invalid crc value
[  540.036519][T21507] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  540.048624][T21507] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  540.523882][T21534] veth0_to_batadv: default FDB implementation only supports local addresses
[  540.797312][T21546] xt_CT: No such helper "netbios-ns"
[  541.514891][T21560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6320'.
[  541.530416][T21560] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.6320'.
[  541.612346][   T33] kauditd_printk_skb: 63 callbacks suppressed
[  541.612360][   T33] audit: type=1800 audit(1312.625:13320): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  541.690107][   T33] audit: type=1800 audit(1312.709:13321): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  541.740527][   T33] audit: type=1800 audit(1312.762:13322): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  541.762240][   T33] audit: type=1800 audit(1312.783:13323): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  541.839927][T21574] loop6: detected capacity change from 0 to 4096
[  541.851221][T21574] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  541.867248][T21574] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  541.925448][   T33] audit: type=1800 audit(1312.951:13324): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  542.054237][T21573] loop1: detected capacity change from 0 to 32768
[  542.065039][T21573] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  542.082485][   T33] audit: type=1800 audit(1313.129:13325): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  542.090808][T21573] XFS (loop1): Starting recovery (logdev: internal)
[  542.111006][T21573] XFS (loop1): Ending recovery (logdev: internal)
[  542.161093][ T5602] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  542.348173][   T33] audit: type=1800 audit(1313.392:13326): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  542.789762][   T33] audit: type=1800 audit(1313.864:13327): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  543.024867][ T5669] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  543.167653][ T5669] usb 7-1: Using ep0 maxpacket: 16
[  543.174653][ T5669] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  543.179609][ T5669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.183048][ T5669] usb 7-1: Product: syz
[  543.184945][ T5669] usb 7-1: Manufacturer: syz
[  543.188192][ T5669] usb 7-1: SerialNumber: syz
[  543.195186][   T33] audit: type=1800 audit(1314.284:13328): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198898 res=0 errno=0
[  543.212615][   T33] audit: type=1800 audit(1314.305:13329): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=198930 res=0 errno=0
[  543.408930][ T5669] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  543.432415][ T5669] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  543.445799][ T5669] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  543.451796][ T5669] usb 7-1: media controller created
[  543.492677][ T5669] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  543.605878][ T5669] zl10353_read_register: readreg error (reg=127, ret==-71)
[  543.644323][T21628] loop1: detected capacity change from 0 to 1024
[  543.647365][T21628] EXT4-fs: Ignoring removed orlov option
[  543.657830][T21628] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  543.678027][T21628] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.6344: lblock 2 mapped to illegal pblock 2 (length 1)
[  543.684102][ T5669] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  543.688020][T21628] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  543.688709][T21628] EXT4-fs (loop1): Remounting filesystem read-only
[  543.692861][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  543.692876][    C1] EXT4-fs (loop1): initial error at time 1314: ext4_map_blocks:791: inode 3: block 2
[  543.692899][    C1] EXT4-fs (loop1): last error at time 1314: ext4_map_blocks:791: inode 3: block 2
[  543.706211][ T5669] usb 7-1: USB disconnect, device number 8
[  543.751269][T21628] EXT4-fs (loop1): 1 orphan inode deleted
[  543.757698][T21628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.801315][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.961343][T21642] loop1: detected capacity change from 0 to 256
[  544.201210][T21648] loop1: detected capacity change from 0 to 256
[  544.209743][T21648] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  544.865257][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'.
[  546.378586][   T33] kauditd_printk_skb: 39 callbacks suppressed
[  546.378595][   T33] audit: type=1800 audit(1317.633:13367): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.431625][   T33] audit: type=1800 audit(1317.685:13368): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.507169][   T33] audit: type=1800 audit(1317.769:13369): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.592459][   T33] audit: type=1800 audit(1317.853:13370): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.644283][   T33] audit: type=1800 audit(1317.906:13371): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.688776][   T33] audit: type=1800 audit(1317.958:13372): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.713243][T21733] loop6: detected capacity change from 0 to 256
[  546.738631][   T33] audit: type=1800 audit(1318.000:13373): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.767077][   T33] audit: type=1800 audit(1318.021:13374): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.789411][   T33] audit: type=1800 audit(1318.053:13375): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  546.841969][   T33] audit: type=1800 audit(1318.116:13376): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  548.966334][T21806] netlink: 'syz.1.6422': attribute type 5 has an invalid length.
[  549.624268][T21824] tmpfs: Bad value for 'mpol'
[  549.698114][T21828] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.6434'.
[  549.702840][T21828] netlink: 'syz.1.6434': attribute type 1 has an invalid length.
[  550.024713][T21848] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.6444:21848
[  550.077649][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6445'.
[  550.261711][T21846] loop6: detected capacity change from 0 to 32768
[  550.436126][T21860] loop1: detected capacity change from 0 to 32768
[  550.442089][T21860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6449 (21860)
[  550.448654][T21860] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  550.452243][T21860] BTRFS info (device loop1): using sha256 checksum algorithm
[  550.502024][T21860] BTRFS info (device loop1): enabling ssd optimizations
[  550.506060][T21860] BTRFS info (device loop1): turning on async discard
[  550.508565][T21860] BTRFS info (device loop1): enabling free space tree
[  550.528254][ T5602] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  551.114246][T11374] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  551.264660][T11374] usb 7-1: Using ep0 maxpacket: 8
[  551.271720][T11374] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  551.275632][T11374] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  551.279640][T11374] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  551.289536][T11374] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  551.295039][T11374] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  551.301309][T11374] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  551.305809][T11374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.316270][   T33] kauditd_printk_skb: 52 callbacks suppressed
[  551.316282][   T33] audit: type=1800 audit(1322.819:13429): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199241 res=0 errno=0
[  551.343689][   T33] audit: type=1800 audit(1322.829:13430): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199270 res=0 errno=0
[  551.358703][   T33] audit: type=1800 audit(1322.829:13431): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199248 res=0 errno=0
[  551.366938][   T33] audit: type=1800 audit(1322.829:13432): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199249 res=0 errno=0
[  551.375125][   T33] audit: type=1800 audit(1322.829:13433): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=199250 res=0 errno=0
[  551.385013][   T33] audit: type=1800 audit(1322.840:13434): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199290 res=0 errno=0
[  551.599652][T11374] usb 7-1: usb_control_msg returned -32
[  551.607576][T11374] usbtmc 7-1:16.0: can't read capabilities
[  551.624649][   T33] audit: type=1800 audit(1323.134:13435): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  551.650508][   T33] audit: type=1800 audit(1323.134:13436): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199307 res=0 errno=0
[  551.667908][   T33] audit: type=1800 audit(1323.186:13437): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  551.697605][T21920] veth3: entered promiscuous mode
[  551.699645][T21920] veth3: entered allmulticast mode
[  551.733202][   T33] audit: type=1800 audit(1323.249:13438): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  552.111903][T11374] usb 7-1: USB disconnect, device number 9
[  552.643748][T21947] loop1: detected capacity change from 0 to 32768
[  552.649689][T21947] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6482 (21947)
[  552.695240][T21947] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  552.699436][T21947] BTRFS info (device loop1): using sha256 checksum algorithm
[  552.794435][T21947] BTRFS info (device loop1): turning off barriers
[  552.808722][T21947] BTRFS info (device loop1): enabling free space tree
[  552.844381][ T5602] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  552.928122][T21980] usb usb4: usbfs: process 21980 (syz.6.6492) did not claim interface 5 before use
[  553.026153][T21986] openvswitch: netlink: Missing key (keys=40, expected=100)
[  553.703841][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6503'.
[  554.385542][T22035] loop1: detected capacity change from 0 to 4096
[  554.405886][T22035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  554.412060][T22035] EXT4-fs (loop1): Test dummy encryption mode enabled
[  554.414866][T22035] EXT4-fs (loop1): bs(8192) > ps(4096) unsupported for encrypt
[  554.478244][T22037] loop1: detected capacity change from 0 to 512
[  554.506499][T22037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  554.510571][T22037] System zones: 1-12
[  554.515321][T22037] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.6514: missing EA_INODE flag
[  554.520679][T22037] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  554.520936][T22037] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.6514: error while reading EA inode 12 err=-117
[  554.524736][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  554.524750][    C1] EXT4-fs (loop1): initial error at time 1326: ext4_xattr_inode_iget:441: inode 12
[  554.524770][    C1] EXT4-fs (loop1): last error at time 1326: ext4_xattr_inode_iget:441: inode 12
[  554.542157][T22037] loop1: lost filesystem error report for type 5 error -117
[  554.542451][T22037] EXT4-fs (loop1): 1 orphan inode deleted
[  554.549075][T22037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  554.671985][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.757505][T22043] tap0: tun_chr_ioctl cmd 1074025677
[  554.761689][T22043] tap0: linktype set to 0
[  555.290225][T22049] loop6: detected capacity change from 0 to 32768
[  555.300801][T22049] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  555.326824][T22049] XFS (loop6): Ending clean mount
[  555.336254][T22049] XFS (loop6): Quotacheck needed: Please wait.
[  555.403900][T22049] XFS (loop6): Quotacheck: Done.
[  555.508092][T20906] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  555.764158][T22075] loop1: detected capacity change from 0 to 40427
[  555.773006][T22075] F2FS-fs (loop1): build fault injection rate: 690
[  555.778568][T22075] F2FS-fs (loop1): invalid crc value
[  555.845058][T22075] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  555.880801][T22075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  555.939965][ T5602] syz-executor: attempt to access beyond end of device
[  555.939965][ T5602] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  555.969184][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.969199][ T5602] Tainted: [L]=SOFTLOCKUP
[  555.969202][ T5602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  555.969206][ T5602] Call Trace:
[  555.969209][ T5602]  <TASK>
[  555.969213][ T5602]  dump_stack_lvl+0xe8/0x150
[  555.969264][ T5602]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  555.969302][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  555.969318][ T5602]  __submit_merged_bio+0x258/0x6a0
[  555.969327][ T5602]  ? rcu_is_watching+0x15/0xb0
[  555.969339][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  555.969352][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  555.969370][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  555.969398][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  555.969437][ T5602]  ? is_bpf_text_address+0x26/0x2b0
[  555.969453][ T5602]  ? arch_stack_walk+0xfb/0x150
[  555.969474][ T5602]  ? add_lock_to_list+0xc7/0x100
[  555.969485][ T5602]  ? lockdep_unlock+0x5d/0xd0
[  555.969492][ T5602]  ? __lock_acquire+0x14b9/0x2e50
[  555.969511][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  555.969522][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  555.969529][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  555.969540][ T5602]  do_writepages+0x338/0x560
[  555.969559][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  555.969567][ T5602]  filemap_fdatawrite+0x1e9/0x2f0
[  555.969579][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  555.969605][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  555.969613][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  555.969626][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  555.969645][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  555.969667][ T5602]  ? kfree+0x1c5/0x640
[  555.969674][ T5602]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  555.969685][ T5602]  kill_f2fs_super+0x2f6/0x700
[  555.969694][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  555.969706][ T5602]  ? call_rcu+0x64b/0x8b0
[  555.969715][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  555.969755][ T5602]  deactivate_locked_super+0xbc/0x130
[  555.969764][ T5602]  cleanup_mnt+0x3d3/0x460
[  555.969775][ T5602]  task_work_run+0x1d9/0x270
[  555.969786][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  555.969799][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  555.969807][ T5602]  ? rcu_is_watching+0x15/0xb0
[  555.969817][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.969824][ T5602]  do_syscall_64+0x353/0x580
[  555.969832][ T5602]  ? trace_irq_disable+0x3b/0x140
[  555.969843][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.969849][ T5602] RIP: 0033:0x7ff19059f317
[  555.969858][ T5602] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  555.969864][ T5602] RSP: 002b:00007fff11b1abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  555.969872][ T5602] RAX: 0000000000000000 RBX: 00007ff190634474 RCX: 00007ff19059f317
[  555.969877][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff11b1ac70
[  555.969882][ T5602] RBP: 00007fff11b1ac70 R08: 00007fff11b1bc70 R09: 00000000ffffffff
[  555.969886][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff11b1bd00
[  555.969890][ T5602] R13: 00007ff190634474 R14: 0000000000088a20 R15: 00007fff11b1bd40
[  555.969917][ T5602]  </TASK>
[  556.154442][ T5602] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  556.164526][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  556.164541][ T5602] Tainted: [L]=SOFTLOCKUP
[  556.164543][ T5602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  556.164553][ T5602] Call Trace:
[  556.164556][ T5602]  <TASK>
[  556.164560][ T5602]  dump_stack_lvl+0xe8/0x150
[  556.164574][ T5602]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  556.164587][ T5602]  f2fs_write_end_io+0x124b/0x1710
[  556.164602][ T5602]  __submit_merged_bio+0x258/0x6a0
[  556.164611][ T5602]  ? rcu_is_watching+0x15/0xb0
[  556.164624][ T5602]  __submit_merged_write_cond+0x3c9/0x4e0
[  556.164637][ T5602]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  556.164671][ T5602]  f2fs_write_data_pages+0x2a27/0x36f0
[  556.164698][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  556.164708][ T5602]  ? is_bpf_text_address+0x26/0x2b0
[  556.164723][ T5602]  ? arch_stack_walk+0xfb/0x150
[  556.164745][ T5602]  ? add_lock_to_list+0xc7/0x100
[  556.164756][ T5602]  ? lockdep_unlock+0x5d/0xd0
[  556.164763][ T5602]  ? __lock_acquire+0x14b9/0x2e50
[  556.164783][ T5602]  ? do_raw_spin_lock+0x12b/0x2f0
[  556.164795][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  556.164802][ T5602]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  556.164813][ T5602]  do_writepages+0x338/0x560
[  556.164826][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  556.164835][ T5602]  filemap_fdatawrite+0x1e9/0x2f0
[  556.164846][ T5602]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  556.164874][ T5602]  ? do_raw_spin_unlock+0x4d/0x210
[  556.164884][ T5602]  f2fs_sync_dirty_inodes+0x30e/0x830
[  556.164897][ T5602]  f2fs_write_checkpoint+0xa3d/0x2710
[  556.164918][ T5602]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  556.164942][ T5602]  ? kfree+0x1c5/0x640
[  556.164949][ T5602]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  556.164961][ T5602]  kill_f2fs_super+0x2f6/0x700
[  556.164971][ T5602]  ? __pfx_kill_f2fs_super+0x10/0x10
[  556.164983][ T5602]  ? call_rcu+0x64b/0x8b0
[  556.164992][ T5602]  ? lockdep_hardirqs_on+0x7a/0x110
[  556.165007][ T5602]  deactivate_locked_super+0xbc/0x130
[  556.165016][ T5602]  cleanup_mnt+0x3d3/0x460
[  556.165027][ T5602]  task_work_run+0x1d9/0x270
[  556.165038][ T5602]  ? __pfx_task_work_run+0x10/0x10
[  556.165054][ T5602]  exit_to_user_mode_loop+0x1fa/0x730
[  556.165063][ T5602]  ? rcu_is_watching+0x15/0xb0
[  556.165073][ T5602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.165081][ T5602]  do_syscall_64+0x353/0x580
[  556.165089][ T5602]  ? trace_irq_disable+0x3b/0x140
[  556.165099][ T5602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.165106][ T5602] RIP: 0033:0x7ff19059f317
[  556.165114][ T5602] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  556.165120][ T5602] RSP: 002b:00007fff11b1abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  556.165129][ T5602] RAX: 0000000000000000 RBX: 00007ff190634474 RCX: 00007ff19059f317
[  556.165134][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff11b1ac70
[  556.165138][ T5602] RBP: 00007fff11b1ac70 R08: 00007fff11b1bc70 R09: 00000000ffffffff
[  556.165143][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff11b1bd00
[  556.165147][ T5602] R13: 00007ff190634474 R14: 0000000000088a20 R15: 00007fff11b1bd40
[  556.165160][ T5602]  </TASK>
[  556.166239][ T5602] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  556.336286][    C1] hpet_rtc_timer_reinit: 49 callbacks suppressed
[  556.336297][    C1] hpet: Lost 1 RTC interrupts
[  556.365045][   T33] audit: type=1800 audit(1328.110:13487): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.517922][   T33] audit: type=1800 audit(1328.278:13488): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.592691][   T33] audit: type=1800 audit(1328.351:13489): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.692805][T22106] loop1: detected capacity change from 0 to 8
[  556.696753][   T33] audit: type=1800 audit(1328.467:13490): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.704949][T22106] squashfs: Bad value for 'errors'
[  556.727920][   T33] audit: type=1800 audit(1328.498:13491): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.871558][   T33] audit: type=1800 audit(1328.645:13492): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  556.897958][   T33] audit: type=1800 audit(1328.666:13493): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  556.952238][T22115] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6545'.
[  556.955993][   T33] audit: type=1800 audit(1328.729:13494): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  556.993932][   T33] audit: type=1800 audit(1328.771:13495): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15568 res=0 errno=0
[  557.284952][ T5668] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  557.430555][ T5668] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  557.434640][ T5668] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  557.439801][ T5668] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  557.443607][ T5668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  557.447429][ T5668] usb 7-1: SerialNumber: syz
[  557.667163][ T5668] usb 7-1: 0:2 : does not exist
[  557.701892][ T5668] usb 7-1: USB disconnect, device number 10
[  557.779162][T15264] udevd[15264]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  558.153812][T22137] netlink: 'syz.1.6553': attribute type 6 has an invalid length.
[  558.387875][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6556'.
[  558.852915][T22157] ip_tables: iptables: counters copy to user failed while replacing table
[  559.028220][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  559.030938][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  559.209667][T22164] 9pnet_fd: p9_fd_create_unix (22164): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  559.299105][T22170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6568'.
[  559.510217][T22179] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6572'.
[  559.593483][T22185] netlink: 'syz.4.6575': attribute type 21 has an invalid length.
[  559.815131][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6581'.
[  559.818063][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6581'.
[  559.857128][T22201] netlink: 'syz.4.6582': attribute type 4 has an invalid length.
[  559.862416][T22201] netlink: 'syz.4.6582': attribute type 1 has an invalid length.
[  560.296599][T22216] loop1: detected capacity change from 0 to 4096
[  560.303709][T22216] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  560.322091][T22216] ntfs3(loop1): Failed to load $Extend (-22).
[  560.324878][T22216] ntfs3(loop1): Failed to initialize $Extend.
[  560.524352][T22220] loop1: detected capacity change from 0 to 2048
[  560.531222][T22220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  560.799657][   T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  560.915344][T22226] loop1: detected capacity change from 0 to 40427
[  560.919787][T22226] F2FS-fs (loop1): Small segment_count (20 < 1 * 24)
[  560.925779][T22226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  560.933718][T22226] F2FS-fs (loop1): build fault injection rate: 20
[  560.938778][T22226] F2FS-fs (loop1): build fault injection type: 0x7698c
[  560.944143][T22226] F2FS-fs (loop1): invalid crc value
[  560.952550][T22226] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of build_curseg+0x18ea/0x30c0
[  560.954952][   T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  560.959322][T22226] F2FS-fs (loop1): SIT is corrupted node# 2 vs 7
[  560.963421][T22226] loop1: lost filesystem error report for type 5 error -117
[  560.963434][T22226] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  560.967632][   T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  560.986246][   T24] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  560.993329][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.007313][   T24] usb 7-1: Product: syz
[  561.017241][   T24] usb 7-1: Manufacturer: syz
[  561.021957][   T24] usb 7-1: SerialNumber: syz
[  561.218346][T22226] loop1: detected capacity change from 0 to 1024
[  561.229315][T22226] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  561.250059][T22226] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.6594: lblock 2 mapped to illegal pblock 2 (length 1)
[  561.257615][   T24] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  561.259699][T22226] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  561.262023][T22226] EXT4-fs (loop1): Remounting filesystem read-only
[  561.264697][   T24] usb 7-1: unit 6 not found!
[  561.265415][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  561.265425][   T33] audit: type=1800 audit(1333.254:13531): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  561.267947][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  561.267956][    C0] EXT4-fs (loop1): initial error at time 1333: ext4_map_blocks:791: inode 3: block 2
[  561.267970][    C0] EXT4-fs (loop1): last error at time 1333: ext4_map_blocks:791: inode 3: block 2
[  561.277168][   T24] usb 7-1: unit 254 not found!
[  561.285620][T22226] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  561.319766][T22226] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  561.335923][   T33] audit: type=1800 audit(1333.338:13532): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=200560 res=0 errno=0
[  561.337275][   T24] usb 7-1: USB disconnect, device number 11
[  561.343260][   T33] audit: type=1800 audit(1333.338:13533): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=200561 res=0 errno=0
[  561.362902][   T33] audit: type=1800 audit(1333.338:13534): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=200540 res=0 errno=0
[  561.368206][T22226] EXT4-fs (loop1): 1 orphan inode deleted
[  561.379596][   T33] audit: type=1800 audit(1333.338:13535): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=200562 res=0 errno=0
[  561.382799][T22226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.393115][   T33] audit: type=1800 audit(1333.359:13536): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200681 res=0 errno=0
[  561.399481][   T33] audit: type=1800 audit(1333.359:13537): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200590 res=0 errno=0
[  561.406751][   T33] audit: type=1800 audit(1333.359:13538): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200702 res=0 errno=0
[  561.432714][T15264] udevd[15264]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  561.646391][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.748747][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6605'.
[  561.961999][T22265] loop6: detected capacity change from 0 to 64
[  562.082870][T22269] tmpfs: Bad value for 'mpol'
[  562.147446][T22271] netlink: 'syz.6.6613': attribute type 1 has an invalid length.
[  562.203491][T22275] bridge_slave_0: left allmulticast mode
[  562.205280][T22275] bridge_slave_0: left promiscuous mode
[  562.208050][T22275] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.214758][T22275] bridge_slave_1: left allmulticast mode
[  562.216629][T22275] bridge_slave_1: left promiscuous mode
[  562.218674][T22275] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.224654][T22275] bond0: (slave bond_slave_0): Releasing backup interface
[  562.232222][T22275] bond0: (slave bond_slave_1): Releasing backup interface
[  562.239609][T22275] team0: Port device team_slave_0 removed
[  562.244190][T22275] team0: Port device team_slave_1 removed
[  562.246422][T22275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.258198][T22275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.262061][T22275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  562.532692][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'.
[  562.538211][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'.
[  562.606781][T22286] loop6: detected capacity change from 0 to 2048
[  562.637115][T22286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.713840][T22293] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6621: bg 0: block 345: padding at end of block bitmap is not set
[  562.721442][T22293] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117
[  562.728574][T22293] EXT4-fs (loop6): This should not happen!! Data will be lost
[  562.728574][T22293] 
[  562.763670][ T6885] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 511 with error 28
[  562.768688][ T6885] EXT4-fs (loop6): This should not happen!! Data will be lost
[  562.768688][ T6885] 
[  562.773586][ T6885] EXT4-fs (loop6): Total free blocks count 0
[  562.776205][ T6885] EXT4-fs (loop6): Free/Dirty block details
[  562.778902][ T6885] EXT4-fs (loop6): free_blocks=0
[  562.781636][ T6885] EXT4-fs (loop6): dirty_blocks=512
[  562.783791][ T6885] EXT4-fs (loop6): Block reservation details
[  562.846048][T20906] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  563.079651][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6628'.
[  563.228234][T22313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6623'.
[  564.078539][T22341] loop1: detected capacity change from 0 to 2048
[  564.108193][T22341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.168883][ T5602] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.358199][T22352] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  564.687000][T22368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6652'.
[  564.701676][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6651'.
[  564.822470][T22372] loop1: detected capacity change from 0 to 1024
[  565.000855][T22381] SET target dimension over the limit!
[  565.164877][T22391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  565.617381][T22422] netlink: 'syz.1.6677': attribute type 9 has an invalid length.
[  566.078848][   T33] kauditd_printk_skb: 72 callbacks suppressed
[  566.078857][   T33] audit: type=1800 audit(1338.314:13611): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  566.822745][T11374] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  566.949043][T22471] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6701'.
[  566.972629][T11374] usb 2-1: Using ep0 maxpacket: 16
[  566.979913][T11374] usb 2-1: config 1 has an invalid interface number: 22 but max is 0
[  566.985344][T11374] usb 2-1: config 1 has no interface number 0
[  566.989546][T11374] usb 2-1: config 1 interface 22 has no altsetting 0
[  566.997373][T11374] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70
[  567.003377][T11374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.011551][T11374] usb 2-1: Product: syz
[  567.013952][T11374] usb 2-1: Manufacturer: syz
[  567.019459][T11374] usb 2-1: SerialNumber: syz
[  567.028802][   T33] audit: type=1800 audit(1339.301:13612): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201217 res=0 errno=0
[  567.046255][   T33] audit: type=1800 audit(1339.322:13613): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201249 res=0 errno=0
[  567.055786][   T33] audit: type=1800 audit(1339.322:13614): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201224 res=0 errno=0
[  567.069507][   T33] audit: type=1800 audit(1339.322:13615): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201225 res=0 errno=0
[  567.100764][T22477] overlayfs: failed to clone upperpath
[  567.155758][T22481] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) !
[  567.228608][T11374] gspca_main: touptek-2.14.0 probing 0547:6801
[  567.237156][T11374] usb 2-1: USB disconnect, device number 97
[  567.239917][   T33] audit: type=1800 audit(1339.532:13616): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=201246 res=0 errno=0
[  567.256062][   T33] audit: type=1800 audit(1339.532:13617): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=201247 res=0 errno=0
[  567.263823][   T33] audit: type=1800 audit(1339.532:13618): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=201226 res=0 errno=0
[  567.272185][   T33] audit: type=1800 audit(1339.532:13619): pid=15264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=201248 res=0 errno=0
[  567.402654][ T6885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  567.693543][T22521] fuse: fd is not a fuse device
[  567.754148][   T33] audit: type=1800 audit(1340.067:13620): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  568.827939][T22580] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.6752'.
[  568.958865][T22590] bridge_slave_0: entered promiscuous mode
[  569.210422][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6761'.
[  569.217779][T22600] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  570.981792][T22684] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  570.985129][T22684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  571.032326][T22686] cgroup: Name too long
[  571.498770][T22699] netlink: 'syz.6.6807': attribute type 5 has an invalid length.
[  572.069491][T22732] loop1: detected capacity change from 0 to 32768
[  572.074615][T22746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6828'.
[  572.082782][T22746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6828'.
[  572.101520][T22732] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  572.124875][T22732] XFS (loop1): Ending clean mount
[  572.147129][ T5602] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  572.255865][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  572.255875][   T33] audit: type=1800 audit(1344.791:13644): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.358182][   T33] audit: type=1800 audit(1344.907:13645): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.471844][   T33] audit: type=1800 audit(1345.012:13646): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.530825][   T33] audit: type=1800 audit(1345.085:13647): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.571993][   T33] audit: type=1800 audit(1345.127:13648): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.800851][T22773] loop1: detected capacity change from 0 to 32768
[  572.810350][T22773] JBD2: Ignoring recovery information on journal
[  572.839068][T22773] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  572.846967][   T33] audit: type=1800 audit(1345.421:13649): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
[  572.934074][T22787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6843'.
[  572.945167][T22787] bond0: Unable to set down delay as MII monitoring is disabled
[  572.978580][   T33] audit: type=1800 audit(1345.547:13650): pid=22773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6837" name="control" dev="loop1" ino=17060 res=0 errno=0
[  572.998496][T22773] (syz.1.6837,22773,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -14
[  572.999544][T22773] 
[  573.003783][T22773] ======================================================
[  573.006388][T22773] WARNING: possible circular locking dependency detected
[  573.008742][T22773] syzkaller #0 Tainted: G             L     
[  573.010803][T22773] ------------------------------------------------------
[  573.013308][T22773] syz.1.6837/22773 is trying to acquire lock:
[  573.015625][T22773] ffff88811b6b89a0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  573.020695][T22773] 
[  573.020695][T22773] but task is already holding lock:
[  573.023339][T22773] ffff88811b65bee8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  573.026437][T22773] 
[  573.026437][T22773] which lock already depends on the new lock.
[  573.026437][T22773] 
[  573.029550][T22773] 
[  573.029550][T22773] the existing dependency chain (in reverse order) is:
[  573.032918][T22773] 
[  573.032918][T22773] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  573.035762][T22773]        down_read+0x4a/0x330
[  573.037237][T22773]        ocfs2_init_acl+0x2fd/0x7e0
[  573.039167][T22773]        ocfs2_mknod+0x166a/0x2240
[  573.040973][T22773]        ocfs2_create+0x195/0x460
[  573.042811][T22773]        path_openat+0x133a/0x3830
[  573.044712][T22773]        do_file_open+0x23e/0x4a0
[  573.046631][T22773]        do_sys_openat2+0x115/0x200
[  573.048546][T22773]        __x64_sys_creat+0x8f/0xc0
[  573.050379][T22773]        do_syscall_64+0x174/0x580
[  573.052034][T22773]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.053988][T22773] 
[  573.053988][T22773] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  573.056567][T22773]        down_read+0x4a/0x330
[  573.058021][T22773]        ocfs2_start_trans+0x3ab/0x700
[  573.059700][T22773]        ocfs2_mknod+0x116a/0x2240
[  573.061285][T22773]        ocfs2_create+0x195/0x460
[  573.062840][T22773]        path_openat+0x133a/0x3830
[  573.064426][T22773]        do_file_open+0x23e/0x4a0
[  573.065994][T22773]        do_sys_openat2+0x115/0x200
[  573.067627][T22773]        __x64_sys_open+0x11e/0x150
[  573.069230][T22773]        do_syscall_64+0x174/0x580
[  573.070819][T22773]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.072775][T22773] 
[  573.072775][T22773] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  573.075070][T22773]        ocfs2_start_trans+0x2ac/0x700
[  573.076750][T22773]        ocfs2_mknod+0x116a/0x2240
[  573.078416][T22773]        ocfs2_create+0x195/0x460
[  573.079953][T22773]        path_openat+0x133a/0x3830
[  573.081704][T22773]        do_file_open+0x23e/0x4a0
[  573.083360][T22773]        do_sys_openat2+0x115/0x200
[  573.084973][T22773]        __x64_sys_open+0x11e/0x150
[  573.086572][T22773]        do_syscall_64+0x174/0x580
[  573.088158][T22773]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.090214][T22773] 
[  573.090214][T22773] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  573.093449][T22773]        down_write+0x96/0x200
[  573.094940][T22773]        ocfs2_reserve_local_alloc_bits+0x11f/0x2680
[  573.096969][T22773]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  573.099603][T22773]        ocfs2_mknod+0x110d/0x2240
[  573.101362][T22773]        ocfs2_create+0x195/0x460
[  573.103167][T22773]        path_openat+0x133a/0x3830
[  573.104760][T22773]        do_file_open+0x23e/0x4a0
[  573.106283][T22773]        do_sys_openat2+0x115/0x200
[  573.107821][T22773]        __x64_sys_open+0x11e/0x150
[  573.109363][T22773]        do_syscall_64+0x174/0x580
[  573.110931][T22773]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.112829][T22773] 
[  573.112829][T22773] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  573.116134][T22773]        __lock_acquire+0x15ff/0x2e50
[  573.117891][T22773]        lock_acquire+0x115/0x350
[  573.119465][T22773]        down_write+0x96/0x200
[  573.120895][T22773]        ocfs2_reserve_suballoc_bits+0x170/0x4850
[  573.122810][T22773]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  573.125007][T22773]        ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  573.126880][T22773]        ocfs2_xattr_set+0xc78/0x13a0
[  573.128553][T22773]        __vfs_setxattr+0x442/0x480
[  573.130478][T22773]        __vfs_setxattr_noperm+0x12a/0x660
[  573.132715][T22773]        vfs_setxattr+0x163/0x360
[  573.134644][T22773]        filename_setxattr+0x296/0x630
[  573.136718][T22773]        path_setxattrat+0x408/0x450
[  573.138745][T22773]        __x64_sys_setxattr+0xbc/0xe0
[  573.140802][T22773]        do_syscall_64+0x174/0x580
[  573.142775][T22773]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.145280][T22773] 
[  573.145280][T22773] other info that might help us debug this:
[  573.145280][T22773] 
[  573.149151][T22773] Chain exists of:
[  573.149151][T22773]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  573.149151][T22773] 
[  573.155222][T22773]  Possible unsafe locking scenario:
[  573.155222][T22773] 
[  573.157712][T22773]        CPU0                    CPU1
[  573.159812][T22773]        ----                    ----
[  573.161592][T22773]   lock(&oi->ip_xattr_sem);
[  573.163020][T22773]                                lock(&journal->j_trans_barrier);
[  573.165433][T22773]                                lock(&oi->ip_xattr_sem);
[  573.167580][T22773]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  573.169915][T22773] 
[  573.169915][T22773]  *** DEADLOCK ***
[  573.169915][T22773] 
[  573.172655][T22773] 3 locks held by syz.1.6837/22773:
[  573.174601][T22773]  #0: ffff88811b3c4450 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  573.177925][T22773]  #1: ffff88811b65c1a0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_setxattr+0x13e/0x360
[  573.181660][T22773]  #2: ffff88811b65bee8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x494/0x13a0
[  573.185474][T22773] 
[  573.185474][T22773] stack backtrace:
[  573.187548][T22773] CPU: 0 UID: 0 PID: 22773 Comm: syz.1.6837 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.187560][T22773] Tainted: [L]=SOFTLOCKUP
[  573.187564][T22773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  573.187569][T22773] Call Trace:
[  573.187574][T22773]  <TASK>
[  573.187577][T22773]  dump_stack_lvl+0xe8/0x150
[  573.187590][T22773]  print_circular_bug+0x2e2/0x300
[  573.187602][T22773]  check_noncircular+0x12f/0x150
[  573.187613][T22773]  __lock_acquire+0x15ff/0x2e50
[  573.187624][T22773]  ? igrab+0xd4/0x2f0
[  573.187633][T22773]  lock_acquire+0x115/0x350
[  573.187641][T22773]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  573.187654][T22773]  down_write+0x96/0x200
[  573.187663][T22773]  ? ocfs2_reserve_suballoc_bits+0x170/0x4850
[  573.187672][T22773]  ? __pfx_down_write+0x10/0x10
[  573.187681][T22773]  ? lockdep_unlock+0x5d/0xd0
[  573.187688][T22773]  ? __lock_acquire+0x14b9/0x2e50
[  573.187696][T22773]  ocfs2_reserve_suballoc_bits+0x170/0x4850
[  573.187708][T22773]  ? do_raw_spin_lock+0x12b/0x2f0
[  573.187716][T22773]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  573.187724][T22773]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  573.187733][T22773]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  573.187740][T22773]  ? stack_depot_save_flags+0x3ec/0x800
[  573.187750][T22773]  ? kasan_save_track+0x4f/0x80
[  573.187759][T22773]  ? kasan_save_track+0x3e/0x80
[  573.187767][T22773]  ? __kasan_kmalloc+0x93/0xb0
[  573.187776][T22773]  ? __kmalloc_cache_noprof+0x32d/0x660
[  573.187784][T22773]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  573.187793][T22773]  ? ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  573.187800][T22773]  ? ocfs2_xattr_set+0xc78/0x13a0
[  573.187806][T22773]  ? __vfs_setxattr+0x442/0x480
[  573.187813][T22773]  ? __vfs_setxattr_noperm+0x12a/0x660
[  573.187819][T22773]  ? vfs_setxattr+0x163/0x360
[  573.187825][T22773]  ? filename_setxattr+0x296/0x630
[  573.187831][T22773]  ? path_setxattrat+0x408/0x450
[  573.187839][T22773]  ? __x64_sys_setxattr+0xbc/0xe0
[  573.187846][T22773]  ? do_syscall_64+0x174/0x580
[  573.187853][T22773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.187866][T22773]  ? __kasan_kmalloc+0x93/0xb0
[  573.187875][T22773]  ? __kmalloc_cache_noprof+0x32d/0x660
[  573.187883][T22773]  ? __kmalloc_cache_noprof+0x150/0x660
[  573.187891][T22773]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  573.187900][T22773]  ? ocfs2_reserve_new_metadata_blocks+0x10c/0x9a0
[  573.187910][T22773]  ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  573.187926][T22773]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  573.187936][T22773]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  573.187949][T22773]  ocfs2_init_xattr_set_ctxt+0x2f5/0x760
[  573.187962][T22773]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  573.187974][T22773]  ? ocfs2_xattr_set+0xc3c/0x13a0
[  573.187985][T22773]  ? up_write+0x19f/0x4a0
[  573.187996][T22773]  ocfs2_xattr_set+0xc78/0x13a0
[  573.188013][T22773]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  573.188024][T22773]  ? do_raw_spin_lock+0x12b/0x2f0
[  573.188036][T22773]  ? do_raw_spin_lock+0x12b/0x2f0
[  573.188043][T22773]  ? do_raw_spin_unlock+0x4d/0x210
[  573.188051][T22773]  ? posix_xattr_acl+0x93/0xc0
[  573.188058][T22773]  ? evm_protect_xattr+0x4ef/0xb20
[  573.188064][T22773]  ? __pfx_ocfs2_permission+0x10/0x10
[  573.188072][T22773]  ? ocfs2_xattr_user_set+0xab/0x100
[  573.188079][T22773]  ? __pfx_ocfs2_xattr_user_set+0x10/0x10
[  573.188086][T22773]  __vfs_setxattr+0x442/0x480
[  573.188094][T22773]  __vfs_setxattr_noperm+0x12a/0x660
[  573.188102][T22773]  vfs_setxattr+0x163/0x360
[  573.188109][T22773]  ? __pfx_vfs_setxattr+0x10/0x10
[  573.188117][T22773]  filename_setxattr+0x296/0x630
[  573.188125][T22773]  ? __pfx_filename_setxattr+0x10/0x10
[  573.188133][T22773]  ? do_getname+0x151/0x250
[  573.188142][T22773]  path_setxattrat+0x408/0x450
[  573.188152][T22773]  ? __pfx_path_setxattrat+0x10/0x10
[  573.188164][T22773]  ? ksys_write+0x242/0x270
[  573.188172][T22773]  ? rcu_is_watching+0x15/0xb0
[  573.188183][T22773]  __x64_sys_setxattr+0xbc/0xe0
[  573.188190][T22773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.188196][T22773]  do_syscall_64+0x174/0x580
[  573.188204][T22773]  ? trace_irq_disable+0x3b/0x140
[  573.188213][T22773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.188220][T22773] RIP: 0033:0x7ff19059e0d9
[  573.188227][T22773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.188233][T22773] RSP: 002b:00007ff1913bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  573.188241][T22773] RAX: ffffffffffffffda RBX: 00007ff190825fa0 RCX: 00007ff19059e0d9
[  573.188246][T22773] RDX: 00002000000000c0 RSI: 0000200000000300 RDI: 00002000000002c0
[  573.188251][T22773] RBP: 00007ff190635024 R08: 0000000000000000 R09: 0000000000000000
[  573.188255][T22773] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[  573.188292][T22773] R13: 00007ff190826038 R14: 00007ff190825fa0 R15: 00007fff11b1b948
[  573.188306][T22773]  </TASK>
[  573.380185][T22773] OCFS2: ERROR (device loop1): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 6 used bits, but a count shows 5
[  573.449538][T22773] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  573.453669][T22773] OCFS2: File system is now read-only.
[  573.456233][T22773] (syz.1.6837,22773,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  573.460924][T22773] (syz.1.6837,22773,1):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[  573.464093][T22773] (syz.1.6837,22773,1):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  573.467488][T22773] (syz.1.6837,22773,1):ocfs2_init_xattr_set_ctxt:3332 ERROR: status = -30
[  573.471236][T22773] (syz.1.6837,22773,1):ocfs2_xattr_set:3681 ERROR: status = -30
[  573.502521][ T5602] ocfs2: Unmounting device (7,1) on (node local)
[  573.541236][   T33] audit: type=1800 audit(1346.146:13651): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14953 res=0 errno=0
