last executing test programs:

6m58.242966409s ago: executing program 32 (id=360):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x13, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

5m35.159924781s ago: executing program 2 (id=1144):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0)

5m34.161491514s ago: executing program 2 (id=1150):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x1)

5m33.599640557s ago: executing program 2 (id=1152):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

5m33.04552415s ago: executing program 2 (id=1159):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

5m32.217647669s ago: executing program 2 (id=1165):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/hid/drivers/asus/new_id\x00', 0x1, 0x0)
write$P9_RLINK(r0, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7)

5m31.464198777s ago: executing program 2 (id=1174):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x1, 0x6ad, &(0x7f00000009c0)="$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")
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1})

5m31.184805663s ago: executing program 33 (id=1174):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x1, 0x6ad, &(0x7f00000009c0)="$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")
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x1})

5m27.82194502s ago: executing program 4 (id=1210):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x8, 0x4}, 0x8)
close(r0)

5m27.309638823s ago: executing program 4 (id=1215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/drivers/moschip7720/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='0525 a', 0x6)

5m27.138402767s ago: executing program 4 (id=1218):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)

5m25.327369868s ago: executing program 4 (id=1219):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

5m24.995379456s ago: executing program 4 (id=1220):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
fcntl$notify(r0, 0x402, 0x8000000b)
getdents(r1, &(0x7f0000000500)=""/218, 0xda)

5m24.200292324s ago: executing program 4 (id=1222):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x4)

5m23.686500527s ago: executing program 34 (id=1222):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
lseek(r0, 0x0, 0x4)

4m40.057596815s ago: executing program 5 (id=1616):
r0 = fanotify_init(0xf00, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000380)='./file6\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0], 0x1, 0x6af, &(0x7f0000003180)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0)

4m39.684156444s ago: executing program 5 (id=1617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}}, 0x0)

4m39.554075896s ago: executing program 5 (id=1619):
r0 = fanotify_init(0x40, 0x80000)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd)
readv(r0, &(0x7f0000000580)=[{0x0}], 0x1)

4m39.068324678s ago: executing program 5 (id=1623):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

4m38.476134972s ago: executing program 5 (id=1629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'lo\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4040400)

4m37.904308505s ago: executing program 5 (id=1636):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

4m37.434722356s ago: executing program 35 (id=1636):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

4m9.884387933s ago: executing program 6 (id=1828):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000280)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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")
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

4m9.348911725s ago: executing program 6 (id=1835):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4m8.71633651s ago: executing program 6 (id=1841):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '%^\'\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8c0)

4m8.342152049s ago: executing program 6 (id=1846):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

4m6.935125161s ago: executing program 6 (id=1854):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI")
truncate(&(0x7f0000000940)='./file1\x00', 0x8daa)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x4a438, &(0x7f0000000280)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

4m5.65926739s ago: executing program 6 (id=1864):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fremovexattr(0xffffffffffffffff, 0x0)

4m5.157120882s ago: executing program 36 (id=1864):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fremovexattr(0xffffffffffffffff, 0x0)

3m48.736826391s ago: executing program 3 (id=1962):
r0 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x8015, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c)

3m48.583514575s ago: executing program 3 (id=1964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1', 0x1)

3m48.421955059s ago: executing program 3 (id=1966):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xfffe, 0x0, 0x3, 0x5})
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000500)=0x7)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4})

3m48.151402715s ago: executing program 3 (id=1969):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]})
statfs(&(0x7f0000000000)='./file0\x00', 0x0)

3m47.316541954s ago: executing program 3 (id=1974):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close(0x3)
read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97)

3m46.697432419s ago: executing program 3 (id=1979):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0xff, 0x4}, 0xff}, 0x18)

3m46.064008953s ago: executing program 37 (id=1979):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x0, 0xff, 0x4}, 0xff}, 0x18)

3m17.495827354s ago: executing program 7 (id=2145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3m17.056315224s ago: executing program 7 (id=2155):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3bdH6Q6O0SN02WXFVTgCvUL3FWegu267iyDCnkQhMiHExoTo+yR7MmPr5RnB4o1HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc0t9iMf318/OwaZz1ppl2ngYAAACosyoW0/KPcdUfpfF3aehj6mcRkUdEXe3ei1c7MXspTrHn/uJeDr8jygjb/zFIx5uI+JqOqw+n/hQAAADg5VrO5pOqWq9O43MnRJeqSZv87beW4mURUYz/tRQt354+PerWzeH5oe33ux8/9lzNjkutnNiKxktmbpRTbv22oh3WSz/322Z4p8mqJu8uHQAAoCu7lUCHVQgAAAAd+37uBDiP8q1nWoufFvAPqia9EHy90wMAAAAu0LGrngEAAIDnaPTg1bL+v4D9/97/t/8fAAAAPFm1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntCoW0+VsPmkaZ72p8edLRN14jXaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgX5/vrrSACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYONxSJqQPIPrt5PYo4qGJfk89Hen5fW47f9zlRlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG389m6cF5uFSdypjt28d3W96G9N9YXr27eXi1bE2T9c/6u9Snz+vZzuZEvtJQIAAMDBkdf1fUQ/ejurRdBZKOv/Xn1OUfN/9+wkruv56bq/7uvav2i//nL3xQcDLUzGKS56bmM0PP73VLr5Hs5znj33r2d0yztfPnvJy29I572tF8a98n5m39y48U6/DA81kS0A8H8cq/sqqP8eKvpBm4kBcGB0q1a4U9X/+UK7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ob8VT9dxFhHL3d24cOve1fWyn9q/vn17uW6nr13bTq9ZXKIXEec2RsPjTU3kCXDp8pWP10aj4cXmg1cior3Rq+CDGc6JaDNDweMGnepnfbavOhoR7efcftDyLyYAAPadXtWKuv5Ob2e1OJYtRvz5/cP1/2tJHGn9P9Wn9f/dD0/fTMdK6/9BYzOcfyubFz5buXT5yhsbF9bOD88PP3nzxOCtwckzp06dWSmflax4YgIAAMDj6Vctrf87ixHjqfX/I0kcM9b/n387+DIdK1f/P9Luol/bmQAAABxszx/94/fsEcezfj++WNvcvDiYbLP71f6JybaFVP+zQ1VL6/98se2sAAAAgCaMt7KH1v/PJnHMuP7/zA8v/ZReM4+Iw9X6/7H1T0dnm5tOS+7PdFYT/06851MFAABgrh2uWrr+3yvf/+88eOWhExGvvzqJq48BnKn+z9/9+sd0rPT9/5PNTXEudZYm96PslyK6S21nBAAAwH72VNWKYv+33s7qRz8feb/v/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApv0VAAD//+NPQpo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
write$FUSE_OPEN(r0, &(0x7f00000025c0)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000540)={0x0, 0x8, 0x6, 0xfffffff8})

3m14.700950129s ago: executing program 7 (id=2159):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)="54f6", 0x2)

3m12.409268912s ago: executing program 7 (id=2169):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

3m11.914113653s ago: executing program 7 (id=2173):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a08018, &(0x7f0000000080), 0x1, 0x49e, &(0x7f0000002140)="$eJzs3E1sFFUcAPD/breFQoGKIvKh1q9I/KC0fMjBi0YTD5qY6AG91VIIUsTQmghpbDUGj4bEOzGeTLx546QXo55MvOrdkBDTC/iRuGZm35R+d9vudpX9/ZKF9+a9mXkf87pv3rQTQNvqy/4pRfRExC9ZuJxHZ1RTpizfremJ4T+mJ4ZLUa2+9nspT7s5PTFc5C3260mRA+WI8sel2LfIeccuXjo7NDo6ciHF+8fPvds/dvHS02fODZ0eOT3yzuDx40cODzxzbPBoQ+q5LSvr3g/O79/z0htXXhk+ceWtH76qFGWdV49G6Yu+OW0522ONPlmLbZsVLlVaWBBWpSMisu7qzMf/juiI2523I178qKWFA5qqWq1Wt6fw5MLkqSpwBytF3VkrTS0IsMGKL/qb090RMTHcjPvg/7Ibz9VugLJ630qfWkolyilP57z720banNZNTkz9eTXyftjUVu0PAGy8b7L5z1O1+U/xqaX0xr2z8m3P14OzrRF3RcTOiLg7Iu6JiF0Red7dEXHfKs/fNy++cP5Zvr6mitUpm/89m55tzZ3/pdnfP9XejhTbFt3RG52lU2dGRw6lNjkQnZuy+MAy5/j2hZ8/XSqtL2L3tdpU/Go2B8zOX8wFUzmuVzbN3efk0PjQ+mp9240P8zXAyYX1v/3kKgvtiYi9azh+Nm8+88SX+5dK70tz3+KzsP7LaMBzpurnEY/X+n8qlqn//OeT3Snt2ODR/s0xOnKov7gqFvrxp8uvLnX+ddW/AbL+37Lo9T9T/97S7Oe1Y6s/x+VfP1nynmbl+s9c/28WW7Lrv6v0eh7uqm36ujOldZVenr093h8aH78wWOxZmYnn/w9E3OjZFfHI4uN/Z22XvCX2RUR2Ed8fEQ9ExIOp7A9FxMORH2Ixk7ci4vvnH317LfUvr9CujZD1/8k5/R9pWWCp/l99oOPsd9fWUv+arP+P5KEDaUs9P//qLeA6mw8AAAD+N3qiVD6Y1ht6olw+eDBia762u6U8en5s/MlT59/762Ttd+V7o7NcrHTV1oNr66EDaW24iA/Oix9O68afdXTn8S3p2TfQOlvT+O+aN/4zv3W0unRA01V8GUPb8vea0L6Mf2hfxj+0r3rHf7XJ5QA23mLjf5GXgQB3IPN/aF91j/8vTjW3IMCG8/0P7cv4h7a0nr/rv3MDvdGQ40w2uHm7GnCc0lT9L0dYNhDlPFCdbGF//Z1ew1Jf5uaVp3hbxsqZi/eUtPoKXznQup9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjfRvAAAA//+yWeDS")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x8, 0x900, 0xfffffffffffffffb, 0x0, 0xa}, {0xffffffff, 0x4, 0xffffffffffffffff, 0xa}], ['\x00']})

3m10.400276238s ago: executing program 7 (id=2176):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x48c0)

3m9.808841522s ago: executing program 38 (id=2176):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0x0, 0x0, 0x40094}, 0x48c0)

3.425717881s ago: executing program 0 (id=3423):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0xf00, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

3.210577556s ago: executing program 0 (id=3425):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0)

3.02001659s ago: executing program 0 (id=3426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x1c5e42, 0x10)

1.640010253s ago: executing program 9 (id=3435):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00')

1.224267772s ago: executing program 0 (id=3438):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
finit_module(r0, 0x0, 0x1)

1.105764134s ago: executing program 9 (id=3440):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', <r1=>0x0})
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=@can={{0x0, 0x1}, 0xf, 0x1, 0x0, 0x0, "14c7bf8594af4407"}, 0x10}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009)

1.000355497s ago: executing program 0 (id=3441):
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x242, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001)
ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1.000081427s ago: executing program 1 (id=3442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0)
write(r0, 0x0, 0x5)

953.785408ms ago: executing program 8 (id=3443):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x5, "480891"}]}}}}}}}}, 0x0)

834.554591ms ago: executing program 1 (id=3444):
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000005c40)="00000000080209000101008001120100020000004000800000000000000001", 0x1f)

788.322252ms ago: executing program 9 (id=3445):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021})

787.972332ms ago: executing program 8 (id=3446):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}}}, 0x108)

655.562675ms ago: executing program 1 (id=3447):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x23, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800)

640.402956ms ago: executing program 9 (id=3448):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x3)

584.304406ms ago: executing program 8 (id=3449):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0, 0x30}, {&(0x7f0000000180)=""/111, 0x6f}], 0x2, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)

461.793749ms ago: executing program 8 (id=3450):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @loopback, 0x2b5}}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

420.814561ms ago: executing program 1 (id=3451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x60, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c19d52276"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

272.317194ms ago: executing program 8 (id=3452):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)

272.011434ms ago: executing program 9 (id=3453):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4)
recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0)

271.824484ms ago: executing program 1 (id=3454):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15d, 0x0, &(0x7f0000000680)="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", 0x0, 0xfffffffd, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x202}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

140.637227ms ago: executing program 8 (id=3455):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
getdents64(r0, &(0x7f00000001c0)=""/109, 0x6d)

105.356957ms ago: executing program 9 (id=3456):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@flush}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@check_normal}, {@rodir}, {@numtail}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uni_xlate}, {@rodir}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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")
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)

293.64µs ago: executing program 0 (id=3457):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000754a8983000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000270005006d04000012b0000000000000000000000600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"], 0x13f)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

0s ago: executing program 1 (id=3458):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
getdents64(r0, &(0x7f0000000800)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

[T12847] BTRFS info (device loop9): rebuilding free space tree
[  370.024915][ T5777] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  370.068826][T12849] BTRFS info (device loop0): enabling ssd optimizations
[  370.128293][T12847] BTRFS info (device loop9): disabling free space tree
[  370.186561][T12847] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  370.250849][ T5777] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  370.272599][T12847] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  370.328096][ T5777] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  370.401060][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'.
[  370.425013][ T5777] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  370.480970][T12432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  370.508454][ T5777] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  370.603717][ T5777] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  370.674844][ T5777] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.750531][ T5777] usb 9-1: Product: syz
[  370.793965][ T5777] usb 9-1: Manufacturer: syz
[  370.853960][ T5777] usb 9-1: SerialNumber: syz
[  370.931593][ T5777] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  371.047808][ T5777] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  371.173605][ T5777] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  371.196581][T12873] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  371.425555][T11860] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  371.525858][ T5777] usb 9-1: USB disconnect, device number 7
[  371.588613][ T5777] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  371.629478][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'.
[  371.687619][ T5777] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  371.729493][T12930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2265'.
[  371.817008][ T5777] ti_usb_3410_5052 9-1:2.0: device disconnected
[  372.585115][  T788] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  372.785183][  T788] usb 1-1: Using ep0 maxpacket: 8
[  372.814675][  T788] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  372.839268][T12965] loop8: detected capacity change from 0 to 256
[  372.846361][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  372.871047][  T788] usb 1-1: Product: syz
[  372.879116][T12965] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  372.908665][  T788] usb 1-1: Manufacturer: syz
[  372.927027][  T788] usb 1-1: SerialNumber: syz
[  372.956536][  T788] usb 1-1: config 0 descriptor??
[  372.964959][T12965] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  373.048057][  T788] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  373.212327][  T788] gspca_sn9c2028: read1 error -32
[  373.245420][  T788] gspca_sn9c2028: read1 error -32
[  373.525997][  T788] usb 1-1: USB disconnect, device number 12
[  374.305711][ T5084] Bluetooth: hci0: command tx timeout
[  374.328851][T12999] loop0: detected capacity change from 0 to 512
[  374.353498][T12999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  374.403556][T12999] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  374.453957][T12999] EXT4-fs (loop0): 1 truncate cleaned up
[  374.478398][T12999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.757705][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.167491][T13019] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  375.201494][T13014] loop8: detected capacity change from 0 to 4096
[  375.313936][T13022] i2c i2c-0: new_device: Can't parse I2C address
[  375.336755][T13014] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  375.442784][T13014] ntfs3: loop8: Failed to initialize $Extend/$Reparse.
[  375.597232][T13029] loop1: detected capacity change from 0 to 128
[  375.707708][T13033] loop9: detected capacity change from 0 to 256
[  377.713238][T13078] loop1: detected capacity change from 0 to 131072
[  377.755914][T13078] F2FS-fs (loop1): invalid crc value
[  377.807290][T13078] F2FS-fs (loop1): Found nat_bits in checkpoint
[  377.899724][T13078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  378.057912][T13091] loop9: detected capacity change from 0 to 256
[  378.180456][T13091] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  378.383114][T13091] exFAT-fs (loop9): error, tried to truncate zeroed cluster.
[  378.396032][T13098] loop0: detected capacity change from 0 to 16
[  378.470582][T13091] exFAT-fs (loop9): Filesystem has been set read-only
[  378.487475][T13098] erofs: (device loop0): mounted with root inode @ nid 36.
[  378.596543][T13101] exFAT-fs (loop9): error, tried to truncate zeroed cluster.
[  378.797779][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.804078][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.895504][T13106] bonding: mM% is being created...
[  378.903645][T13107] loop0: detected capacity change from 0 to 1024
[  378.925640][T13106] bonding: mM% creation failed
[  379.040580][T13107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.388778][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.749615][T13126] loop0: detected capacity change from 0 to 256
[  380.492413][T13139] loop8: detected capacity change from 0 to 2048
[  380.639806][T13145] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  380.680737][T13143] loop9: detected capacity change from 0 to 2048
[  380.828563][T13143] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.927700][T13143] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.053203][T13151] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean
[  381.312462][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.427236][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'.
[  382.055900][T13185] loop9: detected capacity change from 0 to 512
[  382.118466][T13185] EXT4-fs: Ignoring removed nobh option
[  382.165357][T13185] EXT4-fs (loop9): Test dummy encryption mode enabled
[  382.172146][T13185] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  382.327198][T13185] EXT4-fs (loop9): 1 truncate cleaned up
[  382.342271][T13195] loop1: detected capacity change from 0 to 512
[  382.375541][T13185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.412896][T13195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  382.504975][T13195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  382.607190][T13195] EXT4-fs (loop1): 1 truncate cleaned up
[  382.643090][T13195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.175741][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.206244][T12575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.449296][T13218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2346'.
[  383.877324][T13232] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81357332 (__mcheck_cpu_init_clear_banks+0x102/0x1e0)
[  383.893150][T13232] Call Trace:
[  383.896539][T13232]  <TASK>
[  383.899558][T13232]  mce_cpu_restart+0xce/0x1b0
[  383.904274][T13232]  ? mce_restart+0x180/0x180
[  383.908900][T13232]  smp_call_function_many_cond+0xb71/0x1190
[  383.914804][T13232]  ? _raw_spin_unlock+0x40/0x40
[  383.919712][T13232]  ? mce_restart+0x180/0x180
[  383.924301][T13232]  ? __try_to_del_timer_sync+0x1c2/0x280
[  383.929947][T13232]  ? __timer_delete_sync+0x10e/0x2e0
[  383.935220][T13232]  ? smp_call_function_many+0x40/0x40
[  383.940586][T13232]  ? __timer_delete_sync+0x23d/0x2e0
[  383.945859][T13232]  ? timer_delete_sync+0x20/0x20
[  383.950783][T13232]  ? mutex_lock_nested+0x20/0x20
[  383.955715][T13232]  ? _parse_integer_limit+0x19c/0x1e0
[  383.961135][T13232]  ? mce_restart+0x180/0x180
[  383.965717][T13232]  on_each_cpu_cond_mask+0x3f/0x80
[  383.970828][T13232]  mce_restart+0x104/0x180
[  383.975236][T13232]  set_bank+0x27f/0x390
[  383.979380][T13232]  ? show_bank+0x2a0/0x2a0
[  383.983784][T13232]  ? sysfs_kf_write+0x187/0x2a0
[  383.988649][T13232]  ? sysfs_kf_read+0x360/0x360
[  383.993400][T13232]  kernfs_fop_write_iter+0x3a4/0x520
[  383.998677][T13232]  vfs_write+0x474/0x9a0
[  384.002966][T13232]  ? file_end_write+0x250/0x250
[  384.007809][T13232]  ? __fget_files+0x3fc/0x460
[  384.012506][T13232]  ? __fdget_pos+0x2a3/0x330
[  384.017105][T13232]  ? ksys_write+0x74/0x260
[  384.021536][T13232]  ksys_write+0x151/0x260
[  384.025896][T13232]  ? __ia32_sys_read+0x90/0x90
[  384.030659][T13232]  ? lockdep_hardirqs_on+0x98/0x150
[  384.035957][T13232]  do_syscall_64+0x55/0xb0
[  384.040365][T13232]  ? clear_bhb_loop+0x40/0x90
[  384.045178][T13232]  ? clear_bhb_loop+0x40/0x90
[  384.049877][T13232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  384.055830][T13232] RIP: 0033:0x7fcaef99e159
[  384.060401][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.080084][T13232] RSP: 002b:00007fcaf0917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  384.088515][T13232] RAX: ffffffffffffffda RBX: 00007fcaefc25fa0 RCX: 00007fcaef99e159
[  384.096491][T13232] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003
[  384.104468][T13232] RBP: 00007fcaefa35024 R08: 0000000000000000 R09: 0000000000000000
[  384.112429][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.120389][T13232] R13: 00007fcaefc26038 R14: 00007fcaefc25fa0 R15: 00007fffc7b9d3d8
[  384.128357][T13232]  </TASK>
[  385.108465][T13267] loop9: detected capacity change from 0 to 256
[  385.147656][T13267] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  385.262268][T13267] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  385.304731][T13270] loop8: detected capacity change from 0 to 512
[  385.359428][T13270] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  385.394418][T13255] loop0: detected capacity change from 0 to 32768
[  385.439103][T13270] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.2362: bg 0: block 104: invalid block bitmap
[  385.490855][T13255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2357 (13255)
[  385.560677][T13270] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  385.631888][T13255] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  385.642980][T13270] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2362: invalid indirect mapped block 1 (level 1)
[  385.718900][T13255] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  385.747813][T13270] EXT4-fs (loop8): 1 truncate cleaned up
[  385.783321][T13255] BTRFS info (device loop0): force clearing of disk cache
[  385.794403][T13270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.826913][T13255] BTRFS info (device loop0): setting nodatacow, compression disabled
[  385.879581][T13255] BTRFS info (device loop0): enabling auto defrag
[  385.905542][T13270] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  385.944078][T13255] BTRFS info (device loop0): max_inline at 0
[  385.979656][T13255] BTRFS info (device loop0): enabling disk space caching
[  386.020660][T13270] overlayfs: failed to look up (fi) for ino (-13)
[  386.049226][T13255] BTRFS info (device loop0): disk space caching is enabled
[  386.166953][T13255] BTRFS info (device loop0): enabling ssd optimizations
[  386.225898][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.248760][T13255] BTRFS info (device loop0): rebuilding free space tree
[  386.333663][T13304] loop9: detected capacity change from 0 to 256
[  386.350354][T13255] BTRFS info (device loop0): disabling free space tree
[  386.405724][T13255] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  386.478536][T13307] loop8: detected capacity change from 0 to 16
[  386.514926][T13255] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  386.530918][T13304] FAT-fs (loop9): Directory bread(block 64) failed
[  386.569056][T13307] erofs: (device loop8): mounted with root inode @ nid 36.
[  386.578552][T13304] FAT-fs (loop9): Directory bread(block 65) failed
[  386.633786][T13304] FAT-fs (loop9): Directory bread(block 66) failed
[  386.701738][T13304] FAT-fs (loop9): Directory bread(block 67) failed
[  386.749446][T13304] FAT-fs (loop9): Directory bread(block 68) failed
[  386.813285][T13304] FAT-fs (loop9): Directory bread(block 69) failed
[  386.861604][T13304] FAT-fs (loop9): Directory bread(block 70) failed
[  386.913116][T13304] FAT-fs (loop9): Directory bread(block 71) failed
[  386.956327][T13304] FAT-fs (loop9): Directory bread(block 72) failed
[  387.003470][T13304] FAT-fs (loop9): Directory bread(block 73) failed
[  387.304482][T12432] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  387.366459][T13304] syz.9.2367: attempt to access beyond end of device
[  387.366459][T13304] loop9: rw=2049, sector=1224, nr_sectors = 76 limit=256
[  388.076579][T13338] loop1: detected capacity change from 0 to 256
[  388.083620][T13338] FAT-fs (loop1): "posix" option is obsolete, not supported now
[  388.336262][T13345] loop8: detected capacity change from 0 to 512
[  388.537355][T13345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  388.668485][T13345] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.783357][T13358] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2382'.
[  388.962056][T13358] netlink: 10 bytes leftover after parsing attributes in process `syz.9.2382'.
[  389.054492][T13345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  389.120195][ T5761] block nbd64: NBD_DISCONNECT
[  389.167418][T13345] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  389.259274][T13345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  389.396264][T13345] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000d40000.
[  389.568155][T13345] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[  389.725202][ T5761] udevd[5761]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  389.802320][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  390.114159][T13386] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2393'.
[  390.176100][T13390] program syz.0.2394 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.237033][T13388] loop8: detected capacity change from 0 to 4096
[  390.355653][T13394] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  390.600173][T13396] loop9: detected capacity change from 0 to 4096
[  390.651301][T13396] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  390.801735][T13404] program syz.8.2397 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.904628][T13396] ntfs: volume version 3.1.
[  391.724870][ T5867] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  391.944866][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  391.969572][ T5867] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  392.007749][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.062362][ T5867] usb 1-1: Product: syz
[  392.088016][ T5867] usb 1-1: Manufacturer: syz
[  392.110401][ T5867] usb 1-1: SerialNumber: syz
[  392.366706][ T5867] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  392.448963][ T5867] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  392.512866][ T5867] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  392.561233][ T5867] usb 1-1: media controller created
[  392.634710][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  392.741322][ T5867] zl10353_read_register: readreg error (reg=127, ret==-71)
[  392.760350][T13424] loop8: detected capacity change from 0 to 32768
[  392.947874][T13424] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  392.970683][ T5867] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5
[  393.047340][T13424] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  393.064562][ T5867] usb 1-1: USB disconnect, device number 13
[  393.463556][T13424] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  393.561755][  T788] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  393.603602][  T788] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  393.779649][T13471] loop9: detected capacity change from 0 to 1024
[  393.804651][  T788] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms
[  393.880422][  T788] gfs2: fsid=syz:syz.0: jid=0: Done
[  393.936043][T13424] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  394.325278][T13486] loop9: detected capacity change from 0 to 256
[  394.423419][T13424] gfs2: fsid=syz:syz.0: found 1 quota changes
[  394.674635][T13495] loop1: detected capacity change from 0 to 1024
[  394.770587][T11422] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  394.770587][T11422]   inode = 11 2339
[  394.770587][T11422]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  394.903969][T13495] hfsplus: invalid length 1280 has been corrected to 255
[  394.959514][T11422] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  394.985175][T13495] hfsplus: invalid length 1280 has been corrected to 255
[  395.027105][T11422] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:11422 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  395.112501][T11422] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  395.161183][T11422] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  395.279421][T11422] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  395.353807][T11422] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  395.416020][T11422] gfs2: fsid=syz:syz.0: File system withdrawn
[  395.422130][T11422] CPU: 0 PID: 11422 Comm: syz-executor Not tainted syzkaller #0
[  395.429783][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.439930][T11422] Call Trace:
[  395.443208][T11422]  <TASK>
[  395.446146][T11422]  dump_stack_lvl+0x18c/0x250
[  395.450840][T11422]  ? show_regs_print_info+0x20/0x20
[  395.456046][T11422]  ? load_image+0x420/0x420
[  395.460567][T11422]  ? kobject_uevent_env+0x368/0x890
[  395.465765][T11422]  gfs2_withdraw+0xe16/0x1400
[  395.470458][T11422]  ? gfs2_lm+0x240/0x240
[  395.474699][T11422]  ? gfs2_consist_inode_i+0xf5/0x110
[  395.479993][T11422]  gfs2_inode_refresh+0xb3c/0x11a0
[  395.485093][T11422]  ? gfs2_inode_metasync+0xf0/0xf0
[  395.490194][T11422]  ? gfs2_glock_nq+0xe2e/0x1440
[  395.495036][T11422]  gfs2_instantiate+0x162/0x220
[  395.499881][T11422]  gfs2_glock_wait+0x1d4/0x2a0
[  395.504633][T11422]  do_sync+0x4b8/0xd90
[  395.508717][T11422]  ? gfs2_quota_sync+0x411/0x5a0
[  395.513650][T11422]  ? bh_get+0x760/0x760
[  395.517817][T11422]  ? gfs2_quota_sync+0x318/0x5a0
[  395.522771][T11422]  ? gfs2_quota_sync+0x411/0x5a0
[  395.528333][T11422]  ? do_raw_spin_unlock+0x121/0x230
[  395.533542][T11422]  ? do_raw_spin_unlock+0x121/0x230
[  395.538738][T11422]  gfs2_quota_sync+0x411/0x5a0
[  395.543506][T11422]  gfs2_sync_fs+0x4c/0xb0
[  395.547868][T11422]  sync_filesystem+0xea/0x220
[  395.552568][T11422]  generic_shutdown_super+0x6f/0x2b0
[  395.557841][T11422]  kill_block_super+0x44/0x90
[  395.562505][T11422]  deactivate_locked_super+0x97/0x100
[  395.567865][T11422]  cleanup_mnt+0x3d7/0x460
[  395.572296][T11422]  task_work_run+0x1d4/0x260
[  395.576898][T11422]  ? task_work_cancel+0x220/0x220
[  395.581921][T11422]  ? exit_to_user_mode_loop+0x3b/0x110
[  395.587379][T11422]  exit_to_user_mode_loop+0xe6/0x110
[  395.592740][T11422]  exit_to_user_mode_prepare+0xee/0x180
[  395.598275][T11422]  syscall_exit_to_user_mode+0x1a/0x50
[  395.603729][T11422]  do_syscall_64+0x61/0xb0
[  395.608134][T11422]  ? clear_bhb_loop+0x40/0x90
[  395.612805][T11422]  ? clear_bhb_loop+0x40/0x90
[  395.617466][T11422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.623368][T11422] RIP: 0033:0x7fcaef99f397
[  395.627773][T11422] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  395.647368][T11422] RSP: 002b:00007fffc7b9c648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  395.655767][T11422] RAX: 0000000000000000 RBX: 00007fcaefa34474 RCX: 00007fcaef99f397
[  395.663746][T11422] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc7b9c700
[  395.671706][T11422] RBP: 00007fffc7b9c700 R08: 00007fffc7b9d700 R09: 00000000ffffffff
[  395.679669][T11422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc7b9d790
[  395.687629][T11422] R13: 00007fcaefa34474 R14: 0000000000060505 R15: 00007fffc7b9d7d0
[  395.695599][T11422]  </TASK>
[  396.488765][T13527] loop0: detected capacity change from 0 to 32768
[  396.529278][T13527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2435 (13527)
[  396.676140][T13527] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  396.736427][T13527] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  396.814581][T13527] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  396.892898][T13527] BTRFS info (device loop0): force zstd compression, level 15
[  396.964842][T13527] BTRFS info (device loop0): using free space tree
[  397.212059][T13527] BTRFS info (device loop0): enabling ssd optimizations
[  397.257753][T13530] loop1: detected capacity change from 0 to 32768
[  397.266712][T13527] BTRFS info (device loop0): auto enabling async discard
[  397.345881][T13530] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.657887][T13580] loop9: detected capacity change from 0 to 1024
[  397.703342][T13530] XFS (loop1): Ending clean mount
[  397.767937][T13530] XFS (loop1): Quotacheck needed: Please wait.
[  398.059286][T13530] XFS (loop1): Quotacheck: Done.
[  398.117855][T12432] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  398.405086][T12575] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.557838][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'.
[  400.009528][T13640] loop1: detected capacity change from 0 to 764
[  400.101870][T13643] loop9: detected capacity change from 0 to 2048
[  400.244678][T13643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  400.403770][T13643] CacheFiles: Failed to register: -95
[  400.887407][T13663] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.894523][T13663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.992648][  T788] kernel write not supported for file /snd/midiC2D0 (pid: 788 comm: kworker/0:2)
[  402.828995][T13721] loop8: detected capacity change from 0 to 256
[  402.874063][T13721] exfat: Deprecated parameter 'utf8'
[  402.980215][T13721] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  403.410029][T13733] overlayfs: upper fs does not support tmpfile.
[  404.270700][T13734] loop0: detected capacity change from 0 to 32768
[  404.309942][T13734] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.2492 (13734)
[  404.322450][T11426] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  404.430637][T13734] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  404.495466][T13734] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  404.570577][T13734] BTRFS info (device loop0): force clearing of disk cache
[  404.578156][T11426] usb 9-1: unable to get BOS descriptor or descriptor too short
[  404.620840][T11426] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  404.642179][T13734] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  404.697289][T13734] BTRFS info (device loop0): use zstd compression, level 3
[  404.715871][T11426] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  404.757364][T11426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.770293][T13734] BTRFS info (device loop0): using free space tree
[  404.823703][T11426] usb 9-1: Product: syz
[  404.853422][T11426] usb 9-1: Manufacturer: syz
[  404.880374][T11426] usb 9-1: SerialNumber: syz
[  404.942956][T13734] BTRFS info (device loop0): enabling ssd optimizations
[  405.046076][T13734] BTRFS info (device loop0): rebuilding free space tree
[  405.139663][T11426] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  405.163890][T13754] loop1: detected capacity change from 0 to 8192
[  405.353520][T11426] usb 9-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  405.425246][T11426] usb 9-1: found format II with max.bitrate = 4, frame size=7372
[  405.597168][T12432] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  405.757152][T11426] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  405.915165][T11426] usb 9-1: USB disconnect, device number 8
[  406.251996][T13779] loop9: detected capacity change from 0 to 32768
[  406.398274][T13779] find_entry called with index >= next_index
[  406.404290][T13779] find_entry called with index >= next_index
[  406.448827][T13793] loop0: detected capacity change from 0 to 256
[  406.487056][T13779] find_entry called with index >= next_index
[  406.509273][T13793] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  406.545311][T13779] find_entry called with index >= next_index
[  406.551322][T13779] find_entry called with index >= next_index
[  406.669710][T13793] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  406.689195][T13779] add_index: next_index = 0.  Resetting!
[  406.724919][T13779] find_entry called with index >= next_index
[  406.730933][T13779] find_entry called with index >= next_index
[  406.834941][T13779] find_entry called with index >= next_index
[  406.925915][T13779] non-latin1 character 0x3ff found in JFS file name
[  406.932537][T13779] mount with iocharset=utf8 to access
[  407.585701][T13811] loop1: detected capacity change from 0 to 1024
[  407.773236][T13818] loop9: detected capacity change from 0 to 512
[  407.840920][T13822] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  407.878638][T13818] EXT4-fs (loop9): bad s_want_extra_isize: 192
[  409.207782][T13859] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  409.285113][T13859] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  409.954395][T13885] loop8: detected capacity change from 0 to 512
[  410.062786][T13885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.255705][T13893] gadgetfs: bound to dummy_udc driver
[  410.289562][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.484970][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  410.614255][T13904] loop9: detected capacity change from 0 to 512
[  410.670672][T13904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.698864][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  410.721356][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  410.733305][T13904] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.768576][ T5867] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  410.811694][ T5867] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  410.853728][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.892038][ T5867] usb 1-1: Product: syz
[  410.909621][ T5867] usb 1-1: Manufacturer: syz
[  410.927119][ T5867] usb 1-1: SerialNumber: syz
[  410.972931][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.175586][ T5867] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  411.209841][ T5867] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  411.294049][T13917] loop9: detected capacity change from 0 to 256
[  411.573633][ T5867] usb 1-1: 2:1 : can't get Cluster Descriptor
[  411.896435][    T9] usb 1-1: USB disconnect, device number 14
[  413.360867][T13977] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2552'.
[  414.240346][T14004] loop9: detected capacity change from 0 to 64
[  414.465031][ T5867] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  414.554130][T13988] loop8: detected capacity change from 0 to 32768
[  414.598084][T13988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2556 (13988)
[  414.622792][T14008] loop1: detected capacity change from 0 to 4096
[  414.690639][T14008] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  414.715468][ T5867] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[  414.743731][T13988] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  414.784287][T14008] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  414.823338][ T5867] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[  414.845566][T13988] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  414.909703][T14008] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  414.937129][T13988] BTRFS info (device loop8): setting nodatacow, compression disabled
[  414.952298][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  414.999054][T13988] BTRFS info (device loop8): setting datasum, datacow enabled
[  415.011160][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.033874][T14008] ntfs: volume version 3.1.
[  415.061339][T13988] BTRFS info (device loop8): force clearing of disk cache
[  415.080519][ T5867] usb 1-1: Product: syz
[  415.115078][ T5867] usb 1-1: Manufacturer: syz
[  415.130026][T13988] BTRFS info (device loop8): turning on sync discard
[  415.150262][ T5867] usb 1-1: SerialNumber: syz
[  415.205614][T13988] BTRFS warning (device loop8): excessive commit interval 43283
[  415.213473][T13988] BTRFS info (device loop8): enabling ssd optimizations
[  415.334656][T13988] BTRFS info (device loop8): using spread ssd allocation scheme
[  415.392702][T13988] BTRFS info (device loop8): not using ssd optimizations
[  415.449426][T13988] BTRFS info (device loop8): not using spread ssd allocation scheme
[  415.474669][ T5867] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  415.497720][T12575] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  415.523984][T13988] BTRFS info (device loop8): using free space tree
[  415.552211][ T5867] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  415.667253][ T5867] usb 1-1: USB disconnect, device number 15
[  415.797393][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  415.878879][T14040] netlink: 'syz.1.2567': attribute type 17 has an invalid length.
[  415.889575][T13988] BTRFS info (device loop8): rebuilding free space tree
[  415.918226][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2567'.
[  415.989375][T14040] bond0: option all_slaves_active: invalid value (8)
[  416.280948][T14046] loop1: detected capacity change from 0 to 64
[  416.742304][T13988] BTRFS info (device loop8): disk added /dev/nullb0
[  416.963903][T11422] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  417.972566][T14066] loop0: detected capacity change from 0 to 32768
[  418.103303][T14093] loop9: detected capacity change from 0 to 764
[  418.112423][T14066] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  418.159541][T14066] JBD2: Ignoring recovery information on journal
[  418.244648][T14093] Symlink component flag not implemented
[  418.307167][T14093] Symlink component flag not implemented
[  418.350804][T14066] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  418.760394][T14105] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  418.800401][T14105] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  418.883142][T12432] ocfs2: Unmounting device (7,0) on (node local)
[  420.482874][T14152] loop1: detected capacity change from 0 to 256
[  420.832710][T14141] loop8: detected capacity change from 0 to 32768
[  421.052479][T14143] loop9: detected capacity change from 0 to 32768
[  421.186276][T14143] ERROR: (device loop9): diAllocAG: numfree > numinos
[  421.186276][T14143] 
[  421.289901][T14143] ERROR: (device loop9): remounting filesystem as read-only
[  421.377640][T14143] ialloc: diAlloc returned -5!
[  421.424298][T14167] ERROR: (device loop9): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  421.424298][T14167] 
[  421.485760][T14170] loop1: detected capacity change from 0 to 1024
[  421.617240][T14170] hfsplus: invalid btree flag
[  421.622093][T14170] hfsplus: failed to load catalog file
[  421.846463][ T5084] Bluetooth: hci2: command 0x0406 tx timeout
[  423.176195][T14180] loop8: detected capacity change from 0 to 40427
[  423.248284][T14180] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  423.446857][T14211] loop1: detected capacity change from 0 to 32768
[  423.474972][T14180] F2FS-fs (loop8): Image doesn't support compression
[  423.518548][T14180] F2FS-fs (loop8): heap/no_heap options were deprecated
[  423.531327][T14211] JBD2: Ignoring recovery information on journal
[  423.583925][T14191] loop9: detected capacity change from 0 to 32768
[  423.595383][T14211] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  423.628621][T14180] F2FS-fs (loop8): invalid crc value
[  423.671187][T14191] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.2609 (14191)
[  423.715261][T14180] F2FS-fs (loop8): Found nat_bits in checkpoint
[  423.754047][T14211] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74)
[  423.775314][T14211] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  423.785582][T14211] OCFS2: File system is now read-only.
[  423.791086][T14211] (syz.1.2619,14211,0):ocfs2_search_chain:1783 ERROR: status = -30
[  423.799428][T14211] (syz.1.2619,14211,0):ocfs2_search_chain:1893 ERROR: status = -30
[  423.807440][T14211] (syz.1.2619,14211,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  423.815979][T14211] (syz.1.2619,14211,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  423.824491][T14211] (syz.1.2619,14211,0):ocfs2_claim_new_inode:2248 ERROR: status = -30
[  423.833007][T14211] (syz.1.2619,14211,0):ocfs2_claim_new_inode:2263 ERROR: status = -30
[  423.841306][T14211] (syz.1.2619,14211,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  423.849293][T14211] (syz.1.2619,14211,0):ocfs2_symlink:1944 ERROR: status = -30
[  423.857238][T14211] (syz.1.2619,14211,0):ocfs2_symlink:2068 ERROR: status = -30
[  423.955669][T14191] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  424.045041][T14191] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  424.116743][T14180] F2FS-fs (loop8): Start checkpoint disabled!
[  424.145259][T14191] BTRFS info (device loop9): force clearing of disk cache
[  424.152577][T14191] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  424.258451][T14191] BTRFS info (device loop9): use zstd compression, level 3
[  424.274884][T14180] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  424.326071][T14191] BTRFS info (device loop9): using free space tree
[  424.367734][T12575] ocfs2: Unmounting device (7,1) on (node local)
[  424.487848][T14200] loop0: detected capacity change from 0 to 40427
[  424.522700][T14180] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d0/0x910
[  424.615715][T14200] F2FS-fs (loop0): invalid crc value
[  424.673445][T14191] BTRFS info (device loop9): enabling ssd optimizations
[  424.694926][T14200] F2FS-fs (loop0): Found nat_bits in checkpoint
[  424.745498][T14191] BTRFS info (device loop9): rebuilding free space tree
[  424.979290][T14200] F2FS-fs (loop0): Start checkpoint disabled!
[  425.069731][   T12] kworker/u4:1: attempt to access beyond end of device
[  425.069731][   T12] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  425.164244][T14200] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  425.204372][   T12] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  425.280184][   T12] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  425.340722][   T12] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  425.377072][T11860] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  425.862163][  T133] kworker/u4:5: attempt to access beyond end of device
[  425.862163][  T133] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  425.981324][  T133] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  426.025143][ T5867] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  426.045478][  T133] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  426.052397][  T133] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  426.294983][ T5867] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  426.346878][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.435525][ T5867] usb 10-1: Product: syz
[  426.439827][ T5867] usb 10-1: Manufacturer: syz
[  426.444502][ T5867] usb 10-1: SerialNumber: syz
[  426.857893][T14271] loop1: detected capacity change from 0 to 1024
[  426.897082][T14271] EXT4-fs: Ignoring removed bh option
[  427.060836][T14271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.323467][ T5867] rtl8150 10-1:1.0: eth1: rtl8150 is detected
[  427.448088][ T5867] usb 10-1: USB disconnect, device number 5
[  427.597226][T12575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.992897][T14314] loop0: detected capacity change from 0 to 512
[  428.065872][T14314] EXT4-fs (loop0): 1 truncate cleaned up
[  428.110857][T14314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.301655][T14314] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2636: bg 0: block 465: padding at end of block bitmap is not set
[  428.498092][T14314] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  428.634089][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2642'.
[  428.643191][T14314] EXT4-fs (loop0): This should not happen!! Data will be lost
[  428.643191][T14314] 
[  428.699934][T14314] EXT4-fs (loop0): Total free blocks count 0
[  428.750451][T14314] EXT4-fs (loop0): Free/Dirty block details
[  428.805071][T14339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2644'.
[  428.853358][T14314] EXT4-fs (loop0): free_blocks=0
[  428.893307][T14314] EXT4-fs (loop0): dirty_blocks=5
[  428.914096][T14345] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2645'.
[  428.933735][T14314] EXT4-fs (loop0): Block reservation details
[  428.977841][T14314] EXT4-fs (loop0): i_reserved_data_blocks=5
[  429.142112][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28
[  429.457789][T14365] loop8: detected capacity change from 0 to 256
[  429.515546][T14365] exfat: Deprecated parameter 'utf8'
[  429.596269][T14365] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  429.746235][T14371] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2654'.
[  430.012521][T14380] loop9: detected capacity change from 0 to 256
[  430.136542][T14380] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d)
[  431.128078][T14416] loop8: detected capacity change from 0 to 512
[  431.275332][T14416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.540529][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  431.568831][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.855936][T14442] bridge0: port 3(netdevsim0) entered blocking state
[  431.912335][T14442] bridge0: port 3(netdevsim0) entered disabled state
[  431.992566][T14442] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  432.059380][T14442] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  432.100771][T14449] loop0: detected capacity change from 0 to 128
[  432.116006][T14442] bridge0: port 3(netdevsim0) entered blocking state
[  432.122794][T14442] bridge0: port 3(netdevsim0) entered forwarding state
[  432.177860][T14449] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  432.259908][T14449] hpfs: filesystem error: improperly stopped
[  432.318884][T14449] hpfs: You really don't want any checks? You are crazy...
[  432.391723][T14449] hpfs: hpfs_map_sector(): read error
[  432.461975][T14449] hpfs: code page support is disabled
[  432.516742][T14449] hpfs: hpfs_map_4sectors(): unaligned read
[  432.522823][T14449] hpfs: hpfs_map_4sectors(): unaligned read
[  432.601798][T14449] hpfs: filesystem error: unable to find root dir
[  433.957609][T14509] loop1: detected capacity change from 0 to 4096
[  434.108837][T14509] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  434.344202][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2700'.
[  434.414302][T14525] ������: renamed from vlan0 (while UP)
[  434.469863][T14497] loop0: detected capacity change from 0 to 40427
[  434.577370][T14497] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[  434.672371][T14497] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4
[  434.761337][T14497] F2FS-fs (loop0): invalid crc value
[  434.824924][T14497] F2FS-fs (loop0): Found nat_bits in checkpoint
[  434.995064][T14497] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  435.154075][T14542] input: syz1 as /devices/virtual/input/input28
[  435.208072][T14497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  435.874417][T14548] loop8: detected capacity change from 0 to 131072
[  435.928051][T14548] F2FS-fs (loop8): invalid crc value
[  436.008630][T14548] F2FS-fs (loop8): Found nat_bits in checkpoint
[  436.049297][T14548] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  436.069380][T14497] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  436.195437][   T28] audit: type=1400 audit(1788789625.305:212): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=14555 comm="syz.1.2709" name="p" offset=48
[  436.337755][T12432] syz-executor: attempt to access beyond end of device
[  436.337755][T12432] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  436.476944][T14564] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2712'.
[  436.489480][T12432] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  437.095922][  T788] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  437.320746][  T788] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  437.382574][  T788] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.453672][  T788] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  437.525432][  T788] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.618143][  T788] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  437.691478][  T788] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  437.763104][  T788] usb 9-1: Product: syz
[  437.814346][  T788] usb 9-1: Manufacturer: syz
[  437.869551][  T788] cdc_wdm 9-1:1.0: skipping garbage
[  437.910111][  T788] cdc_wdm 9-1:1.0: skipping garbage
[  437.917542][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'.
[  437.974990][  T788] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  438.032040][  T788] cdc_wdm 9-1:1.0: Unknown control protocol
[  438.105876][  T788] usb 9-1: USB disconnect, device number 9
[  438.559063][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[  438.655721][ T5837] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  438.856446][ T5837] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  438.886059][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.937691][ T5837] usb 1-1: config 0 descriptor??
[  438.973651][ T5837] cp210x 1-1:0.0: cp210x converter detected
[  439.385812][ T5837] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  439.425523][ T5837] usb 1-1: cp210x converter now attached to ttyUSB0
[  439.696601][T11426] usb 1-1: USB disconnect, device number 16
[  439.745173][T11426] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  439.792141][T11426] cp210x 1-1:0.0: device disconnected
[  440.013803][T14651] loop9: detected capacity change from 0 to 2048
[  440.103091][T14651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.233891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.240355][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.259811][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  440.327460][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.371201][T14661] loop8: detected capacity change from 0 to 2048
[  440.510646][T14661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.622078][T14669] kAFS: bad VL server IP address
[  440.627378][ T5084] Bluetooth: hci4: command 0x1003 tx timeout
[  440.636118][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  440.830500][T14671] loop0: detected capacity change from 0 to 4096
[  440.876963][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.935500][T14671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.970464][T14678] loop9: detected capacity change from 0 to 128
[  441.043457][T14678] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  441.172131][T14678] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  441.481426][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.545310][T11426] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  441.767180][T11426] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  441.806984][T11426] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.868360][T11426] usb 9-1: config 0 descriptor??
[  441.878636][T14698] rnbd_client L127: Can't parse path ip:: -22
[  441.900081][T11426] cp210x 9-1:0.0: cp210x converter detected
[  442.144175][T14705] netlink: 'syz.9.2751': attribute type 4 has an invalid length.
[  442.516993][T11426] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71
[  442.556923][T11426] cp210x 9-1:0.0: GPIO initialisation failed: -71
[  442.593876][T11426] usb 9-1: cp210x converter now attached to ttyUSB0
[  442.651912][T11426] usb 9-1: USB disconnect, device number 10
[  442.701807][T11426] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  442.772466][T11426] cp210x 9-1:0.0: device disconnected
[  443.091616][T14728] loop0: detected capacity change from 0 to 1024
[  443.122292][T14728] EXT4-fs error (device loop0): __ext4_fill_super:5517: comm syz.0.2756: inode #2: comm syz.0.2756: iget: illegal inode #
[  443.226500][T14728] EXT4-fs (loop0): get root inode failed
[  443.276350][T14728] EXT4-fs (loop0): mount failed
[  443.344052][T14734] loop8: detected capacity change from 0 to 256
[  443.361952][  T788] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  443.471769][T14736] input: syz1 as /devices/virtual/input/input29
[  443.545157][T14736] input: failed to attach handler leds to device input29, error: -6
[  443.599384][  T788] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  443.672987][  T788] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  443.703167][T14740] loop0: detected capacity change from 0 to 2048
[  443.754560][  T788] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  443.831720][T14740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.851984][  T788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.915326][T14726] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  443.924607][  T788] usb 10-1: Quirk or no altest; falling back to MIDI 1.0
[  444.090566][T14748] loop1: detected capacity change from 0 to 4096
[  444.174292][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.207860][T14748] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  444.377949][T14748] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  444.442071][  T788] usb 10-1: USB disconnect, device number 6
[  444.471045][T14748] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  444.541394][T14748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  444.680639][T14748] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  444.737457][T14748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  444.857766][T14748] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  444.914333][T14748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  445.034187][T14748] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  445.099997][T14748] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  445.244351][T14773] loop9: detected capacity change from 0 to 512
[  445.268163][T14748] ntfs: volume version 3.1.
[  445.310735][T14773] EXT4-fs: Ignoring removed nomblk_io_submit option
[  445.435375][T14773] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  445.480819][T14773] EXT4-fs error (device loop9): ext4_iget_extra_inode:4740: inode #15: comm syz.9.2768: corrupted in-inode xattr: e_value size too large
[  445.596701][T14773] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2768: couldn't read orphan inode 15 (err -117)
[  445.678703][T14773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.951390][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.690459][T14811] loop0: detected capacity change from 0 to 2048
[  446.751060][T14811] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  446.838460][T14811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  447.683368][T14807] loop1: detected capacity change from 0 to 32768
[  447.711797][T14840] overlayfs: conflicting lowerdir path
[  447.769101][T14807] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  447.823725][T14807] JBD2: Ignoring recovery information on journal
[  447.998490][T14807] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  448.659942][T14868] Bluetooth: MGMT ver 1.22
[  448.901195][T12575] ocfs2: Unmounting device (7,1) on (node local)
[  450.415033][T11426] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  450.485703][T14898] loop9: detected capacity change from 0 to 32768
[  450.600893][T14898] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  450.650739][T11426] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[  450.682907][T11426] usb 9-1: config 0 has no interface number 0
[  450.735181][T11426] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  450.785016][T14898] (syz.9.2808,14898,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  450.875665][T11426] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  450.929118][T11426] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.000778][T11426] usb 9-1: Product: syz
[  451.042995][T11426] usb 9-1: Manufacturer: syz
[  451.084818][T11426] usb 9-1: SerialNumber: syz
[  451.165737][T11426] usb 9-1: config 0 descriptor??
[  451.209094][T11426] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[  451.273571][T11860] ocfs2: Unmounting device (7,9) on (node local)
[  451.324210][T14949] loop1: detected capacity change from 0 to 1024
[  451.582322][T11426] usb 9-1: USB disconnect, device number 11
[  451.635938][T11426] yurex 9-1:0.50: USB YUREX #0 now disconnected
[  452.179348][T14966] loop1: detected capacity change from 0 to 164
[  452.266735][T14966] rock: directory entry would overflow storage
[  452.273087][T14966] rock: sig=0x4543, size=28, remaining=18
[  452.878531][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2835'.
[  453.377479][T14994] loop0: detected capacity change from 0 to 8192
[  453.440131][T14994] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  453.507606][T14980] loop8: detected capacity change from 0 to 32768
[  453.531200][T14994] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  453.592032][T14994] REISERFS (device loop0): using ordered data mode
[  453.629990][T14980] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  453.670172][T14994] reiserfs: using flush barriers
[  453.707636][T14994] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  453.729164][T14980] JBD2: Ignoring recovery information on journal
[  453.812059][T14994] REISERFS (device loop0): checking transaction log (loop0)
[  453.839964][T14980] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  454.564282][T15010] loop9: detected capacity change from 0 to 131072
[  454.598285][T15010] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  454.606958][T15010] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  454.623627][T15010] F2FS-fs (loop9): invalid crc value
[  454.658692][T15010] F2FS-fs (loop9): Found nat_bits in checkpoint
[  454.713492][T15010] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  454.720641][T15010] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  454.754168][T14994] REISERFS (device loop0): Using tea hash to sort names
[  454.817081][T14994] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  455.246950][T11422] ocfs2: Unmounting device (7,8) on (node local)
[  455.708463][T15026] program syz.0.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  456.613189][T15051] netlink: 'syz.8.2852': attribute type 8 has an invalid length.
[  457.669672][ T5084] Bluetooth: hci3: command 0x0406 tx timeout
[  458.327492][T15063] loop1: detected capacity change from 0 to 40427
[  458.438446][T15063] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  458.486646][T15063] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  458.536982][T15063] F2FS-fs (loop1): invalid crc value
[  458.590655][T15076] loop8: detected capacity change from 0 to 32768
[  458.630243][T15063] F2FS-fs (loop1): Found nat_bits in checkpoint
[  458.732552][T15076] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  458.906385][T15076] XFS (loop8): Ending clean mount
[  458.974411][T15063] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  458.993259][T15076] XFS (loop8): Quotacheck needed: Please wait.
[  459.035359][T15063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  459.300357][T15076] XFS (loop8): Quotacheck: Done.
[  459.559388][T15136] loop0: detected capacity change from 0 to 512
[  459.628508][T15136] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  459.833529][T15136] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  459.909339][T15136] FAT-fs (loop0): Filesystem has been set read-only
[  459.934201][T11422] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  459.970895][T15136] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  460.451490][T15129] loop9: detected capacity change from 0 to 40427
[  460.527668][T15129] F2FS-fs (loop9): invalid crc value
[  460.569862][T15129] F2FS-fs (loop9): Found nat_bits in checkpoint
[  460.773869][T15129] F2FS-fs (loop9): Start checkpoint disabled!
[  460.918599][T15129] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  461.506085][   T12] kworker/u4:1: attempt to access beyond end of device
[  461.506085][   T12] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  461.617617][   T12] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  461.659339][T15169] loop8: detected capacity change from 0 to 256
[  461.681767][   T12] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  461.696253][T15166] loop1: detected capacity change from 0 to 4096
[  461.838171][T15170] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  462.602116][T15183] jffs2: notice: (15183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  462.785325][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  462.785356][   T28] audit: type=1326 audit(1788789651.885:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  462.975464][   T28] audit: type=1326 audit(1788789651.925:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  463.223939][   T28] audit: type=1326 audit(1788789651.925:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  463.437861][   T28] audit: type=1326 audit(1788789651.935:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  463.655171][   T28] audit: type=1326 audit(1788789651.935:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  463.822119][T15228] loop0: detected capacity change from 0 to 1024
[  463.873750][   T28] audit: type=1326 audit(1788789651.935:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  463.942023][T15228] EXT4-fs: Ignoring removed orlov option
[  464.058724][T15228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.084095][   T28] audit: type=1326 audit(1788789651.935:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  464.324892][   T28] audit: type=1326 audit(1788789651.935:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  464.507624][   T28] audit: type=1326 audit(1788789651.935:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25419e159 code=0x7ffc0000
[  464.604325][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.650864][   T28] audit: type=1326 audit(1788789651.935:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.0.2886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb25413f4d9 code=0x7ffc0000
[  465.434933][    T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  465.496241][T15279] loop8: detected capacity change from 0 to 16
[  465.523464][T15279] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  465.644844][    T8] usb 10-1: Using ep0 maxpacket: 32
[  465.659629][    T8] usb 10-1: config index 0 descriptor too short (expected 27632, got 27)
[  465.683641][    T8] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  465.722924][    T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[  465.751073][    T8] usb 10-1: config 1 has no interface number 0
[  465.769942][    T8] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  465.813586][    T8] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  465.870788][    T8] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  465.902506][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.951056][    T8] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[  466.162158][    T8] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached
[  466.669731][T15301] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2917'.
[  466.737529][ T5867] usb 10-1: USB disconnect, device number 7
[  466.785920][ T5867] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[  466.925527][T15308] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2919'.
[  467.563849][T15331] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  467.916217][ T5782] Bluetooth: hci1: command 0x0406 tx timeout
[  468.143513][T15352] loop9: detected capacity change from 0 to 256
[  468.170001][T15355] loop0: detected capacity change from 0 to 512
[  468.240511][T15355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  468.335430][T15355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  468.408298][T15355] System zones: 1-12
[  468.473054][T15355] EXT4-fs (loop0): 1 truncate cleaned up
[  468.492417][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  468.516142][T15355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.591172][T15361] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.898350][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.851402][T15368] loop9: detected capacity change from 0 to 32768
[  469.991336][T15368] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  470.052307][T15368] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  470.297558][T15368] XFS (loop9): Ending clean mount
[  470.330781][T15406] loop8: detected capacity change from 0 to 4096
[  470.350279][T15368] XFS (loop9): Quotacheck needed: Please wait.
[  470.582823][T15368] XFS (loop9): Quotacheck: Done.
[  470.980458][T11860] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.162292][T15423] loop1: detected capacity change from 0 to 4096
[  471.333840][T15423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.598746][T15423] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.2953: corrupted inode contents
[  471.766573][T15423] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #15: comm syz.1.2953: mark_inode_dirty error
[  471.862720][T15423] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.2953: corrupted inode contents
[  471.958935][T15423] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #15: comm syz.1.2953: mark_inode_dirty error
[  472.084943][T15423] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.2953: corrupted inode contents
[  472.149459][T15423] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #15: comm syz.1.2953: mark_inode_dirty error
[  472.216009][T15423] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.2953: corrupted inode contents
[  472.290129][T15419] loop0: detected capacity change from 0 to 40427
[  472.355168][T15423] EXT4-fs error (device loop1): ext4_truncate:4302: inode #15: comm syz.1.2953: mark_inode_dirty error
[  472.366531][T15419] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  472.374261][T15419] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  472.439786][T15423] EXT4-fs error (device loop1) in ext4_setattr:5683: Corrupt filesystem
[  472.487594][T15419] F2FS-fs (loop0): invalid crc value
[  472.551036][T15437] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #15: comm syz.1.2953: corrupted inode contents
[  472.620591][T15419] F2FS-fs (loop0): Found nat_bits in checkpoint
[  472.898782][T15419] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  472.947396][T15419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  473.162264][T15443] loop9: detected capacity change from 0 to 32768
[  473.254558][T15443] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  473.423396][T12575] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  473.521726][T12575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.570899][T15443] XFS (loop9): Ending clean mount
[  473.610574][T15443] XFS (loop9): Quotacheck needed: Please wait.
[  473.869734][T15443] XFS (loop9): Quotacheck: Done.
[  474.204251][T11860] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  474.302644][T15491] loop8: detected capacity change from 0 to 256
[  475.156006][T15506] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2970'.
[  475.643904][T15522] bond0: option slaves: invalid value (-veth0)
[  475.900250][T15532] loop9: detected capacity change from 0 to 1024
[  476.611341][T15547] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28
[  477.186586][T15535] loop0: detected capacity change from 0 to 32768
[  477.433940][T15573] loop1: detected capacity change from 0 to 512
[  477.512938][T15573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  477.671232][T15573] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2993: invalid indirect mapped block 256 (level 2)
[  477.846610][T15573] EXT4-fs (loop1): 2 truncates cleaned up
[  477.853039][T15573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.896620][T15583] loop9: detected capacity change from 0 to 512
[  477.995303][T15583] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #15: comm syz.9.2997: corrupted inode contents
[  478.084480][T15573] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2993: bg 0: block 5: invalid block bitmap
[  478.114483][T15583] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  478.147642][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  478.175303][T15583] EXT4-fs error (device loop9): ext4_do_update_inode:5256: inode #15: comm syz.9.2997: corrupted inode contents
[  478.245916][T15573] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  478.311862][T15583] EXT4-fs error (device loop9): ext4_evict_inode:302: inode #15: comm syz.9.2997: mark_inode_dirty error
[  478.389639][T15573] EXT4-fs (loop1): This should not happen!! Data will be lost
[  478.389639][T15573] 
[  478.417098][T15583] EXT4-fs (loop9): 1 orphan inode deleted
[  478.454033][T15583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.471741][T15573] EXT4-fs (loop1): Total free blocks count 0
[  478.527684][T15573] EXT4-fs (loop1): Free/Dirty block details
[  478.533745][T15573] EXT4-fs (loop1): free_blocks=0
[  478.653091][T15573] EXT4-fs (loop1): dirty_blocks=2
[  478.703254][T15573] EXT4-fs (loop1): Block reservation details
[  478.762633][T15573] EXT4-fs (loop1): i_reserved_data_blocks=2
[  478.814177][T15575] loop8: detected capacity change from 0 to 32768
[  478.822706][T15573] EXT4-fs error (device loop1) in ext4_setattr:5683: error 28
[  478.864171][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.939620][T15575] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  479.115571][   T42] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  479.188891][T15575] XFS (loop8): Ending clean mount
[  479.649373][T11422] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  479.686001][T15627] loop0: detected capacity change from 0 to 4096
[  479.694524][T15627] __ntfs_error: 5 callbacks suppressed
[  479.694535][T15627] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  479.882700][T15627] ntfs: volume version 3.1.
[  479.926180][T15627] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  480.015297][T15627] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  480.080967][T15627] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  480.321919][T15627] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro.  You might want to try to use the mount option nls=utf8.
[  480.404397][T15624] loop9: detected capacity change from 0 to 32768
[  480.425216][T15627] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  480.527853][T15624] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  480.602428][T15648] e1000e: probe of 0000:00:00.0 failed with error -5
[  480.671219][T15624] XFS (loop9): Ending clean mount
[  481.116891][T11860] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  482.038657][T15681] loop9: detected capacity change from 0 to 16
[  482.098058][T15681] erofs: Unknown parameter '���0ՓU_��M���{��HAAA�v�	'
[  482.125186][T15657] loop1: detected capacity change from 0 to 32768
[  482.282128][T15657] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  482.820391][T15701] loop8: detected capacity change from 0 to 1024
[  482.957412][T12575] ocfs2: Unmounting device (7,1) on (node local)
[  483.612218][T15721] loop1: detected capacity change from 0 to 256
[  484.047212][T15731] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input30
[  484.999144][T15761] loop8: detected capacity change from 0 to 256
[  485.068538][T15761] exfat: Deprecated parameter 'utf8'
[  485.124874][T15761] exfat: Deprecated parameter 'namecase'
[  485.130591][T15761] exfat: Deprecated parameter 'namecase'
[  485.201751][T15761] exfat: Deprecated parameter 'utf8'
[  485.271053][T15761] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  485.323525][T15764] loop1: detected capacity change from 0 to 8192
[  485.466669][T15764]  loop1: p1 p2 p4[EZD]
[  485.510970][T15764] loop1: p4 start 201326592 is beyond EOD, truncated
[  485.574260][ T5138]  loop1: p1 p2 p4[EZD]
[  485.627193][ T5138] loop1: p4 start 201326592 is beyond EOD, truncated
[  485.751044][ T5761] blk_print_req_error: 10 callbacks suppressed
[  485.751056][ T5761] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  486.062073][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  486.074292][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  486.145295][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  486.289869][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  486.332896][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  486.430428][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  486.509395][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  486.655045][ T5777] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  486.689367][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  486.766932][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  486.899178][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.966642][ T5777] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  487.041891][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.081663][T15805] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  487.122469][ T5777] usb 1-1: config 0 descriptor??
[  487.183602][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3053'.
[  487.400541][ T5777] usbhid 1-1:0.0: can't add hid device: -71
[  487.448585][ T5777] usbhid: probe of 1-1:0.0 failed with error -71
[  487.511077][ T5777] usb 1-1: USB disconnect, device number 17
[  487.698808][T15835] loop8: detected capacity change from 0 to 2048
[  487.815607][T15835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.034927][ T5777] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  488.077071][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.256692][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.311362][ T5777] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.40
[  488.380848][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.448260][ T5777] usb 1-1: config 0 descriptor??
[  488.495287][ T5777] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  488.502930][ T5777] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  488.613428][ T5777] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84
[  488.665700][ T5777] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  488.759809][ T5777] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  488.822097][ T5777] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88
[  488.888132][T15868] loop8: detected capacity change from 0 to 2048
[  488.901187][ T5777] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  488.949913][ T5777] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  488.980878][T15868] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  489.046818][ T5777] usb 1-1: USB disconnect, device number 18
[  489.065939][T15868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.206307][ T5777] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  489.297824][ T5777] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  489.386544][ T5777] keyspan 1-1:0.0: device disconnected
[  489.481342][T15849] loop9: detected capacity change from 0 to 40427
[  489.575150][T15849] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  489.582158][T15849] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  489.695833][T15849] F2FS-fs (loop9): build fault injection attr: rate: 17008, type: 0x7ffff
[  489.770019][T15849] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x1f8
[  489.859012][T15849] F2FS-fs (loop9): invalid crc value
[  489.914443][T15849] F2FS-fs (loop9): Found nat_bits in checkpoint
[  490.200905][T15849] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  490.244848][T15849] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  490.488811][T15849] syz.9.3064: attempt to access beyond end of device
[  490.488811][T15849] loop9: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  490.530829][T15872] loop1: detected capacity change from 0 to 32768
[  490.553442][T15902] loop0: detected capacity change from 0 to 256
[  490.598418][T15872] XFS: noikeep mount option is deprecated.
[  490.773433][T15872] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  490.805276][T11860] syz-executor: attempt to access beyond end of device
[  490.805276][T11860] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  490.940217][T11860] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  491.066019][T15872] XFS (loop1): Ending clean mount
[  491.334890][ T5777] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  491.346521][T15871] dvmrp0: entered allmulticast mode
[  491.506799][T15927] loop8: detected capacity change from 0 to 512
[  491.563409][T15927] EXT4-fs: Ignoring removed bh option
[  491.575567][T12575] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  491.594412][ T5777] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  491.630096][ T5777] usb 1-1: config 0 has no interface number 0
[  491.662277][T15927] EXT4-fs (loop8): Test dummy encryption mode enabled
[  491.692437][ T5777] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  491.719716][T15927] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  491.835096][ T5777] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  491.897096][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.922969][T15927] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.3085: inode has both inline data and extents flags
[  491.962591][ T5777] usb 1-1: Product: syz
[  492.000182][ T5777] usb 1-1: Manufacturer: syz
[  492.010516][T15927] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3085: couldn't read orphan inode 15 (err -117)
[  492.035283][ T5777] usb 1-1: SerialNumber: syz
[  492.082064][ T5777] usb 1-1: config 0 descriptor??
[  492.108253][T15927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.162373][ T5777] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  492.376401][  T133] dvmrp0 (unregistering): left allmulticast mode
[  492.548034][ T5777] usb 1-1: USB disconnect, device number 19
[  492.580655][ T5777] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  492.665502][T15927] fscrypt (loop8): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  492.906117][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.557245][T15961] kvm: kvm [15960]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb
[  493.781015][T15972] loop0: detected capacity change from 0 to 2048
[  493.833661][T15972] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  493.923867][T15972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.243339][T15983] program syz.0.3100 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  494.476099][T15965] loop8: detected capacity change from 0 to 32768
[  494.549606][T15965] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  494.719478][T15965] XFS (loop8): Ending clean mount
[  495.087716][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  495.127743][T11422] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  495.146870][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3109'.
[  495.304349][T16021] netlink: 201392 bytes leftover after parsing attributes in process `syz.9.3112'.
[  495.340623][T16021] netlink: zone id is out of range
[  495.353403][T16021] netlink: zone id is out of range
[  495.367880][T16021] netlink: zone id is out of range
[  495.381224][T16023] block2mtd: error: cannot open device ��Ta4G�g��)��_�դ���Evr!4��>=Z{��B�y�<0\��i=�
[  495.381224][T16023] \���!ug�[
[  495.396959][T16021] netlink: zone id is out of range
[  495.402214][T16021] netlink: zone id is out of range
[  495.411255][T16021] netlink: zone id is out of range
[  495.421390][T16021] netlink: zone id is out of range
[  495.437423][T16021] netlink: zone id is out of range
[  495.457718][T16021] netlink: zone id is out of range
[  495.487776][T16021] netlink: zone id is out of range
[  495.613718][T16029] bonding: unable to delete non-existent b
[  495.951699][T16042] loop0: detected capacity change from 0 to 2048
[  495.974203][T16043] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  496.022735][T16042] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  496.071804][T16042] Remounting filesystem read-only
[  496.174042][T16045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.212700][T16045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.237924][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.408647][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.449483][T16045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.660606][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3122'.
[  496.920481][T16062] loop9: detected capacity change from 0 to 64
[  497.146740][T16069] loop1: detected capacity change from 0 to 128
[  497.177361][T16069] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  497.288064][T16069] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  497.365866][T16071] loop9: detected capacity change from 0 to 64
[  497.525619][  T133] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  498.195029][ T5837] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  498.405720][ T5837] usb 10-1: Using ep0 maxpacket: 16
[  498.427675][ T5837] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  498.452635][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  498.491056][ T5837] usb 10-1: Product: syz
[  498.518380][ T5837] usb 10-1: Manufacturer: syz
[  498.529708][ T5837] usb 10-1: SerialNumber: syz
[  498.550643][T16085] loop1: detected capacity change from 0 to 32768
[  498.558934][ T5837] usb 10-1: config 0 descriptor??
[  498.600793][T16085] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  498.667748][T16085] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  498.871037][ T5837] usb 10-1: USB disconnect, device number 8
[  498.944571][T16085] XFS (loop1): Ending clean mount
[  499.004013][T16085] XFS (loop1): Quotacheck needed: Please wait.
[  499.218501][T16085] XFS (loop1): Quotacheck: Done.
[  499.409610][T16110] netlink: 'syz.8.3140': attribute type 2 has an invalid length.
[  499.544275][T12575] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  499.566175][T16112] program syz.8.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  500.059872][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3149'.
[  500.866448][T16153] loop8: detected capacity change from 0 to 64
[  500.990407][T16153] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop8:00000002
[  501.056139][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3158'.
[  501.581710][T16168] loop0: detected capacity change from 0 to 2048
[  501.678061][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.684363][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.699270][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  502.197928][T16190] loop9: detected capacity change from 0 to 64
[  502.231436][T16168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.251787][T16192] bad cache= option: nonezspages 0
[  502.251787][T16192] nr_free_cma 0
[  502.251787][T16192] numa_hit 2116952
[  502.251787][T16192] numa_miss 0
[  502.251787][T16192] numa_foreign 0
[  502.251787][T16192] numa_interleave 46522
[  502.251787][T16192] numa_local 2092224
[  502.251787][T16192] numa_other 24728
[  502.251787][T16192] nr_inactive_anon 0
[  502.251787][T16192] nr_active_anon 26595
[  502.251787][T16192] nr_inactive_file 44522
[  502.251787][T16192] nr_active_file 13486
[  502.251787][T16192] nr_unevictable 768
[  502.251787][T16192] nr_slab_reclaimable 11671
[  502.251787][T16192] nr_slab_unreclaimable 97701
[  502.251787][T16192] nr_isolated_anon 0
[  502.251787][T16192] nr_isolated_file 0
[  502.251787][T16192] workingset_nodes 3
[  502.251787][T16192] workingset_refault_anon 186
[  502.251787][T16192] workingset_refault_file 118
[  502.251787][T16192] workingset_activate_anon 66
[  502.251787][T16192] workingset_activate_file 0
[  502.251787][T16192] workingset_restore_anon 66
[  502.251787][T16192] workingset_restore_file 0
[  502.251787][T16192] workingset_nodereclaim 0
[  502.251787][T16192] nr_anon_pages 8818
[  502.251787][T16192] nr_mapped 35512
[  502.251787][T16192] nr_file_pages 76181
[  502.251787][T16192] nr_dirty 267
[  502.251787][T16192] nr_writeback 0
[  502.251787][T16192] nr_writeback_temp 0
[  502.251787][T16192] nr_shmem 18551
[  502.251787][T16192] nr_shmem_hugepages 0
[  502.251787][T16192] nr_shmem_pmdmapped 0
[  502.251787][T16192] nr_file_hugepages 0
[  502.251787][T16192] nr_file_pmdmapped 0
[  502.251787][T16192] nr_anon_transparent_hugepages 0
[  502.251787][T16192] nr_vmscan_write 7494
[  502.251787][T16192] nr_vmscan_immediate_reclaim 0
[  502.251787][T16192] nr_dirtied 10166
[  502.251787][T16192] nr_written 17079
[  502.251787][T16192] nr_throttled_written 0
[  502.251787][T16192] nr_kernel_misc_reclaimable 0
[  502.251787][T16192] nr_foll_pin_acquired 8631
[  502.251787][T16192] nr_foll_pin_released 8667
[  502.252107][T16192] CIFS: VFS: bad cache= option: nonezspages 0
[  502.252107][T16192] nr_free_cma 0
[  502.252107][T16192] numa_hit 2116952
[  502.252107][T16192] numa_miss 0
[  502.252107][T16192] numa_foreign 0
[  502.252107][T16192] numa_interleave 46522
[  502.252107][T16192] numa_local 2092224
[  502.252107][T16192] numa_other 24728
[  502.252107][T16192] nr_inactive_anon 0
[  502.252107][T16192] nr_active_anon 26595
[  502.252107][T16192] nr_inactive_file 44522
[  502.252107][T16192] nr_active_file 13486
[  502.252107][T16192] nr_unevictable 768
[  502.252107][T16192] nr_slab_reclaimable 11671
[  502.252107][T16192] nr_slab_unreclaimable 97701
[  502.252107][T16192] nr_isolated_anon 0
[  502.252107][T16192] nr_isolated_file 0
[  502.252107][T16192] workingset_nodes 3
[  502.252107][T16192] workingset_refault_anon 186
[  502.252107][T16192] workingset_refault_file 118
[  502.252107][T16192] workingset_activate_anon 66
[  502.252107][T16192] workingset_activate_file 0
[  502.252107][T16192] workingset_restore_anon 66
[  502.252107][T16192] workingset_restore_file 0
[  502.252107][T16192] workingset_nodereclaim 0
[  502.252107][T16192] nr_anon_pages 8818
[  502.252107][T16192] nr_mapped 35512
[  502.252107][T16192] nr_file_pages 76181
[  502.252107][T16192] nr_dirty 267
[  502.252107][T16192] nr_writeback 0
[  502.252107][T16192] nr_writeback_temp 0
[  502.252107][T16192] nr_shmem 18551
[  502.252107][T16192] nr_shmem_hugepages 0
[  502.252107][T16192] nr_shmem_pmdmapped 0
[  502.252107][T16192] nr_file_hugepages 0
[  502.252107][T16192] nr_file_pmdmapped 0
[  502.252107][T16192] nr_anon_transparent_hugepages 0
[  502.252107][T16192] nr_vmscan_write 7494
[  502.252107][T16192] nr_vmscan_immediate_reclaim 0
[  502.252107][T16192] nr_dirtied 10166
[  502.252107][T16192] nr_written 17079
[  502.252107][T16192] nr_throttled_written 0
[  502.252107][T16192] nr_kernel_misc_reclaimable 0
[  502.252107][T16192] nr_foll_pin_acquired 8631
[  502.252107][T16192] nr_foll_pin_released 8667
[  502.566794][T16196] netlink: 'syz.1.3169': attribute type 39 has an invalid length.
[  502.979963][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.795355][T16220] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3170'.
[  504.069837][T16226] loop9: detected capacity change from 0 to 512
[  504.202122][T16226] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.305524][T16226] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.481798][T16226] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  504.649921][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.880992][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.998064][T16223] loop8: detected capacity change from 0 to 32768
[  505.054694][T16223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3177 (16223)
[  505.143149][T16223] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  505.183380][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.235923][T16223] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  505.295877][T16223] BTRFS info (device loop8): use zlib compression, level 3
[  505.344653][T16248] loop9: detected capacity change from 0 to 2048
[  505.362919][T16223] BTRFS info (device loop8): turning on sync discard
[  505.409444][T16223] BTRFS info (device loop8): using free space tree
[  505.474259][T16248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.753836][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.822402][T16223] BTRFS info (device loop8): enabling ssd optimizations
[  506.064248][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.083233][T11422] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  506.158900][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.470881][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  506.477181][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  506.480126][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  506.482069][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  506.482423][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  506.482602][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  507.198877][T16296] program syz.8.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  507.459929][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3193'.
[  508.083610][T16323] loop9: detected capacity change from 0 to 2048
[  508.130948][T16277] chnl_net:caif_netlink_parms(): no params data found
[  508.379691][T16327] scsi_strcpy_devinfo: model string 'mo�劌r�����r��del' is too long
[  508.555781][ T5084] Bluetooth: hci0: command tx timeout
[  508.723240][T16331] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3201'.
[  509.626099][T16277] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.633262][T16277] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.715145][T16277] bridge_slave_0: entered allmulticast mode
[  509.766910][T16277] bridge_slave_0: entered promiscuous mode
[  509.822508][T16277] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.869398][T16277] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.925717][T16277] bridge_slave_1: entered allmulticast mode
[  509.956958][T16277] bridge_slave_1: entered promiscuous mode
[  510.356241][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.427303][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.629388][ T5084] Bluetooth: hci0: command tx timeout
[  510.903268][T16277] team0: Port device team_slave_0 added
[  510.947077][T16277] team0: Port device team_slave_1 added
[  510.963741][T16371] loop8: detected capacity change from 0 to 32768
[  511.043736][T16371] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  511.100468][   T12] hsr_slave_0: left promiscuous mode
[  511.107235][ T5777] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  511.158400][   T12] hsr_slave_1: left promiscuous mode
[  511.245013][T16371] XFS (loop8): Ending clean mount
[  511.274970][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.322958][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.353990][ T5777] usb 1-1: unable to get BOS descriptor or descriptor too short
[  511.410624][ T5777] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  511.428253][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.442612][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.478274][T11422] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  511.490224][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.517714][ T5777] usb 1-1: Product: syz
[  511.526443][ T5777] usb 1-1: Manufacturer: syz
[  511.539623][   T12] bridge_slave_1: left allmulticast mode
[  511.558145][ T5777] usb 1-1: SerialNumber: syz
[  511.573209][   T12] bridge_slave_1: left promiscuous mode
[  511.618018][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.695369][   T12] bridge_slave_0: left allmulticast mode
[  511.750274][   T12] bridge_slave_0: left promiscuous mode
[  511.760567][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.840220][ T5777] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  511.885897][ T5777] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  512.101025][ T5777] usb 1-1: USB disconnect, device number 20
[  512.211241][   T12] veth1_macvtap: left promiscuous mode
[  512.232736][   T12] veth0_macvtap: left promiscuous mode
[  512.263291][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  512.295356][   T12] veth1_vlan: left promiscuous mode
[  512.300666][   T12] veth0_vlan: left promiscuous mode
[  512.620171][ T5837] kernel write not supported for file /snd/pcmC1D0p (pid: 5837 comm: kworker/0:5)
[  512.632544][T16425] loop9: detected capacity change from 0 to 512
[  512.683025][T16425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  512.719899][ T5084] Bluetooth: hci0: command tx timeout
[  512.778738][T16425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  512.901201][T16425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.994594][T16425] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.346117][ T5837] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  513.556661][ T5837] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  513.616787][ T5837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.661608][ T5837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.717170][ T5837] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  513.769889][ T5837] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  513.790312][ T5837] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  513.835911][ T5837] usb 10-1: Manufacturer: syz
[  513.856384][ T5837] usb 10-1: config 0 descriptor??
[  514.329346][ T5837] appleir 0003:05AC:8243.0011: No inputs registered, leaving
[  514.382346][ T5837] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  514.530504][ T5837] usb 10-1: USB disconnect, device number 9
[  514.645970][T16463] fido_id[16463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  514.788408][ T5084] Bluetooth: hci0: command tx timeout
[  514.961212][T16472] loop8: detected capacity change from 0 to 512
[  514.983436][T16472] EXT4-fs: inline encryption not supported
[  514.993540][T16472] EXT4-fs (loop8): Test dummy encryption mode enabled
[  515.042751][T16472] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  515.078883][T16472] EXT4-fs (loop8): 1 truncate cleaned up
[  515.126470][T16472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.146180][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.223252][T16472] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5960: inode #12: comm syz.8.3240: bad extra_isize 62 (inode size 256)
[  515.354173][T16472] EXT4-fs (loop8): Remounting filesystem read-only
[  515.432147][T11422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.634048][T16479] loop8: detected capacity change from 0 to 2048
[  515.733795][T16479] NILFS (loop8): invalid segment: Magic number mismatch
[  515.767757][T16479] NILFS (loop8): trying rollback from an earlier position
[  515.835887][T16479] NILFS (loop8): recovery complete
[  515.859521][T16484] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  516.483253][   T12] team0 (unregistering): Port device team_slave_1 removed
[  516.592909][   T12] team0 (unregistering): Port device team_slave_0 removed
[  516.663727][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.739462][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.244366][   T12] bond0 (unregistering): Released all slaves
[  517.436037][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.443004][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.468915][    C0] vkms_vblank_simulate: vblank timer overrun
[  517.728762][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.801623][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.860327][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.886243][    C0] vkms_vblank_simulate: vblank timer overrun
[  517.986194][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.299448][T16277] hsr_slave_0: entered promiscuous mode
[  518.313277][T16515] loop9: detected capacity change from 0 to 512
[  518.332730][T16277] hsr_slave_1: entered promiscuous mode
[  518.410125][T16277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  518.473173][T16277] Cannot create hsr debugfs directory
[  518.528625][T16517] netlink: 'syz.8.3256': attribute type 12 has an invalid length.
[  518.560613][T16517] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3256'.
[  519.827975][T16563] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3272'.
[  520.453389][T16584] loop0: detected capacity change from 0 to 512
[  520.793740][T16582] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.928522][T16277] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  521.012142][T16277] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  521.142636][T16582] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.171097][T16600] loop9: detected capacity change from 0 to 1024
[  521.239264][T16600] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[  521.280399][T16277] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  521.298023][T16600] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  521.357210][T16600] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.3286: Failed to acquire dquot type 0
[  521.409701][T16600] EXT4-fs error (device loop9): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  521.450837][T16582] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.488402][T16600] EXT4-fs (loop9): 1 truncate cleaned up
[  521.512441][T16600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.534549][T16277] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  521.608236][T16600] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[  521.652541][T16582] bridge0: port 3(netdevsim0) entered disabled state
[  521.671137][T16600] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  521.719048][T16600] EXT4-fs error (device loop9): ext4_acquire_dquot:6953: comm syz.9.3286: Failed to acquire dquot type 0
[  521.747170][T16582] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode
[  521.790889][T16582] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode
[  521.822697][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.836331][T16582] bridge0: port 3(netdevsim0) entered disabled state
[  521.865753][T16582] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.920255][T16612] tipc: Started in network mode
[  521.927173][T16612] tipc: Node identity ac14140f, cluster identity 4711
[  521.950328][T16612] tipc: New replicast peer: 255.255.255.255
[  521.967783][T16612] tipc: Enabled bearer <udp:syz2>, priority 10
[  522.217993][T16582] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.256891][T16582] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.331965][T16582] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.383384][T16277] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.443497][T16582] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.500436][T16277] 8021q: adding VLAN 0 to HW filter on device team0
[  522.551458][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.558629][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.650548][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.657703][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.809576][T16277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  522.857542][T16277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  523.089268][  T788] tipc: Node number set to 2886997007
[  523.458867][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.565187][  T788] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  523.606932][T16277] veth0_vlan: entered promiscuous mode
[  523.670541][T16277] veth1_vlan: entered promiscuous mode
[  523.774977][  T788] usb 1-1: Using ep0 maxpacket: 8
[  523.791718][T16277] veth0_macvtap: entered promiscuous mode
[  523.806229][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  523.848827][T16277] veth1_macvtap: entered promiscuous mode
[  523.868041][  T788] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  523.908083][  T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.931895][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.978392][  T788] usb 1-1: config 0 descriptor??
[  524.000036][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.037891][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.086996][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.113187][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.141974][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.180439][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.227586][  T788] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  524.243459][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.317054][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.355154][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.395823][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.449101][T16277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.472175][  T788] usb 1-1: USB disconnect, device number 21
[  524.514888][T16277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.561388][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.611707][T16277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.659617][T16277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.699007][T16277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.736414][T16277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.965574][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.013144][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.139967][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.203033][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.375191][T16687] netlink: 774 bytes leftover after parsing attributes in process `syz.0.3322'.
[  525.431724][T16687] netlink: 'syz.0.3322': attribute type 1 has an invalid length.
[  525.709475][T16694] page:ffffea0001200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000
[  525.763556][T16694] head:ffffea0001200000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  525.798590][T16694] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  525.837137][T16694] page_type: 0xffffffff()
[  525.861842][T16694] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000
[  525.902557][T16694] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  525.939231][T16694] page dumped because: unmovable page
[  525.962341][T16694] page_owner tracks the page as allocated
[  525.998992][T16694] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 42, tgid 42 (kworker/u4:2), ts 521486098893, free_ts 518635113843
[  526.112646][T16694]  post_alloc_hook+0x1c1/0x200
[  526.131306][T16694]  get_page_from_freelist+0x2181/0x22a0
[  526.151394][T16694]  __alloc_pages+0x1f0/0x460
[  526.178676][T16694]  alloc_slab_page+0x5d/0x180
[  526.190536][T16694]  new_slab+0x87/0x2d0
[  526.216258][T16694]  ___slab_alloc+0xc5c/0x12f0
[  526.228224][T16706] loop8: detected capacity change from 0 to 16
[  526.234530][T16694]  __kmem_cache_alloc_node+0x11f/0x250
[  526.249585][T16694]  __kmalloc_node_track_caller+0xa4/0x230
[  526.262465][T16706] erofs: (device loop8): mounted with root inode @ nid 36.
[  526.299066][T16694]  kmalloc_reserve+0x116/0x240
[  526.324375][T16694]  __alloc_skb+0x138/0x2c0
[  526.350607][T16694]  nsim_dev_trap_report_work+0x253/0xa90
[  526.376753][T16694]  process_scheduled_works+0xa60/0x1600
[  526.387522][T16708] loop9: detected capacity change from 0 to 512
[  526.408813][T16694]  worker_thread+0xa5e/0xfe0
[  526.432407][T16694]  kthread+0x2fa/0x390
[  526.445962][T16708] EXT4-fs error (device loop9): ext4_iget_extra_inode:4740: inode #15: comm syz.9.3331: corrupted in-inode xattr: invalid ea_ino
[  526.474948][T16694]  ret_from_fork+0x48/0x80
[  526.479436][T16694]  ret_from_fork_asm+0x11/0x20
[  526.484228][T16694] page last free stack trace:
[  526.507732][T16708] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.3331: couldn't read orphan inode 15 (err -117)
[  526.528466][T16694]  free_unref_page_prepare+0x7d7/0x8f0
[  526.533968][T16694]  free_unref_page+0x32/0x2e0
[  526.542281][T16708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.557647][T16694]  __unfreeze_partials+0x1cf/0x210
[  526.562807][T16694]  put_cpu_partial+0x17c/0x250
[  526.569208][T16694]  __slab_free+0x319/0x400
[  526.573644][T16694]  qlist_free_all+0x75/0xd0
[  526.607219][T16694]  kasan_quarantine_reduce+0x143/0x160
[  526.612748][T16694]  __kasan_slab_alloc+0x22/0x80
[  526.640869][T16694]  slab_post_alloc_hook+0x6a/0x4d0
[  526.650382][T16694]  kmem_cache_alloc+0x17e/0x2c0
[  526.655583][T16694]  __se_sys_inotify_add_watch+0x6c5/0x1070
[  526.661430][T16694]  do_syscall_64+0x55/0xb0
[  526.668385][T16694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.771267][T11860] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.846127][T16714] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  527.349889][T16727] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  527.389804][T16727] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  527.432484][T16727] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  527.473455][T16727] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  527.793184][T16730] loop8: detected capacity change from 0 to 16
[  527.801241][T16723] loop0: detected capacity change from 0 to 32768
[  527.822980][T16730] erofs: (device loop8): mounted with root inode @ nid 36.
[  527.850955][T16723] JBD2: Ignoring recovery information on journal
[  528.019250][T16723] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  528.487523][T12432] ocfs2: Unmounting device (7,0) on (node local)
[  528.494594][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3344'.
[  528.544081][T16742] netlink: 'syz.9.3344': attribute type 15 has an invalid length.
[  528.622925][T16742] netlink: 'syz.9.3344': attribute type 25 has an invalid length.
[  528.686076][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3344'.
�[  529.224601][T16763] relay: one or more items not logged [item size (56) > sub-buffer size (7)]
[  529.251319][T16765] loop0: detected capacity change from 0 to 1024
[  529.324487][T16765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.574409][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.868550][T16784] loop9: detected capacity change from 0 to 2048
[  529.946971][ T5084] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  530.033207][T16791] loop1: detected capacity change from 0 to 256
[  530.203276][T16793] loop8: detected capacity change from 0 to 2048
[  530.280503][T16797] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  530.835755][T16813] loop0: detected capacity change from 0 to 256
[  530.888667][T16813] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  531.187645][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3380'.
[  531.298262][    T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:1)
[  531.366389][T16827] loop0: detected capacity change from 0 to 512
[  531.454224][T16827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.528817][T16827] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.817224][T12432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.093571][T16849] loop9: detected capacity change from 0 to 1024
[  532.165050][    T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  532.230823][T16853] loop0: detected capacity change from 0 to 164
[  532.283607][T16853] rock: directory entry would overflow storage
[  532.314903][T16853] rock: sig=0x66, size=4, remaining=3
[  532.347032][T16853] rock: directory entry would overflow storage
[  532.380575][    T8] usb 9-1: unable to get BOS descriptor or descriptor too short
[  532.403802][T16853] rock: sig=0x66, size=4, remaining=3
[  532.443520][    T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  532.464527][T16853] iso9660: Corrupted directory entry in block 4 of inode 1792
[  532.523659][    T8] usb 9-1: string descriptor 0 read error: -22
[  532.542279][    T8] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  532.600847][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'.
[  532.620962][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.768089][T16863] loop0: detected capacity change from 0 to 256
[  532.849953][T16863] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  532.923537][T16863] FAT-fs (loop0): Filesystem has been set read-only
[  532.999885][T16863] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  533.286432][    T8] usb 9-1: current rate 2990353 is different from the runtime rate 48000
[  533.387028][T16878] GUP no longer grows the stack in syz.0.3405 (16878): 200000009000-20000000a000 (200000005000)
[  533.449365][T16881] loop9: detected capacity change from 0 to 1024
[  533.460194][T16878] CPU: 0 PID: 16878 Comm: syz.0.3405 Not tainted syzkaller #0
[  533.467677][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  533.477723][T16878] Call Trace:
[  533.480989][T16878]  <TASK>
[  533.483908][T16878]  dump_stack_lvl+0x18c/0x250
[  533.488584][T16878]  ? show_regs_print_info+0x20/0x20
[  533.493767][T16878]  ? load_image+0x420/0x420
[  533.498252][T16878]  ? find_vma+0x134/0x1b0
[  533.502574][T16878]  __get_user_pages+0xfe7/0x1580
[  533.507514][T16878]  ? populate_vma_page_range+0x380/0x380
[  533.513142][T16878]  ? __gup_longterm_locked+0x21d8/0x2cb0
[  533.518761][T16878]  ? down_read_killable+0x1d0/0x340
[  533.523952][T16878]  __gup_longterm_locked+0x2345/0x2cb0
[  533.529412][T16878]  ? pin_user_pages_remote+0x220/0x220
[  533.534874][T16878]  ? mark_lock+0x94/0x320
[  533.539200][T16878]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  533.545166][T16878]  ? __lock_acquire+0x7d80/0x7d80
[  533.550175][T16878]  ? lock_chain_count+0x20/0x20
[  533.555011][T16878]  ? internal_get_user_pages_fast+0x1f8e/0x27a0
[  533.561292][T16878]  internal_get_user_pages_fast+0x2174/0x27a0
[  533.567365][T16878]  ? get_user_pages_fast_only+0xa0/0xa0
[  533.572898][T16878]  ? trace_contention_end+0x39/0xe0
[  533.578090][T16878]  ? __mutex_lock+0x30d/0xc80
[  533.582756][T16878]  ? __lock_acquire+0x7d80/0x7d80
[  533.587853][T16878]  ? iov_iter_iovec_advance+0x1ef/0x290
[  533.593389][T16878]  __iov_iter_get_pages_alloc+0x380/0xac0
[  533.599104][T16878]  iov_iter_get_pages2+0x5f/0xa0
[  533.604031][T16878]  __se_sys_vmsplice+0x5e5/0x11f0
[  533.609050][T16878]  ? __x64_sys_vmsplice+0xb0/0xb0
[  533.614060][T16878]  ? futex_wake_mark+0x150/0x150
[  533.619022][T16878]  ? fd_install+0x60/0x4e0
[  533.623433][T16878]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  533.629409][T16878]  ? lockdep_hardirqs_on+0x98/0x150
[  533.634598][T16878]  do_syscall_64+0x55/0xb0
[  533.638996][T16878]  ? clear_bhb_loop+0x40/0x90
[  533.643675][T16878]  ? clear_bhb_loop+0x40/0x90
[  533.648341][T16878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  533.654224][T16878] RIP: 0033:0x7fb25419e159
[  533.658626][T16878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.678312][T16878] RSP: 002b:00007fb255027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  533.686714][T16878] RAX: ffffffffffffffda RBX: 00007fb254425fa0 RCX: 00007fb25419e159
[  533.694692][T16878] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004
[  533.702651][T16878] RBP: 00007fb254235024 R08: 0000000000000000 R09: 0000000000000000
[  533.710622][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.719014][T16878] R13: 00007fb254426038 R14: 00007fb254425fa0 R15: 00007ffd22da6ac8
[  533.726985][T16878]  </TASK>
[  533.745745][T16881] hfsplus: uid requires an argument
[  533.754786][T16881] hfsplus: unable to parse mount options
[  533.839247][    T8] usb 9-1: USB disconnect, device number 12
[  533.855759][ T5764] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  534.321179][T16886] loop1: detected capacity change from 0 to 32768
[  534.802757][T16888] loop9: detected capacity change from 0 to 40427
[  534.883422][T16888] F2FS-fs (loop9): build fault injection attr: rate: 690, type: 0x7ffff
[  534.949391][T16888] F2FS-fs (loop9): Image doesn't support compression
[  534.999050][T16888] F2FS-fs (loop9): heap/no_heap options were deprecated
[  535.073350][T16888] F2FS-fs (loop9): invalid crc value
[  535.103116][T16888] F2FS-fs (loop9): Found nat_bits in checkpoint
[  535.326236][T16888] F2FS-fs (loop9): Start checkpoint disabled!
[  535.345491][T16900] Failed to get privilege flags for destination (handle=0x2:0x0)
[  535.413589][T16888] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  535.599717][T16891] loop8: detected capacity change from 0 to 32768
[  535.758780][T16891] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  535.817841][T16916] bond0: option slaves: interface +d does not exist!
[  535.838170][  T133] kworker/u4:5: attempt to access beyond end of device
[  535.838170][  T133] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  535.902444][T16891] XFS (loop8): Ending clean mount
[  535.937830][  T133] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  535.987025][  T133] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  536.148747][T11422] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  536.869785][ T5777] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  537.098642][ T5777] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  537.132655][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  537.174061][ T5777] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  537.185025][T16923] loop1: detected capacity change from 0 to 40427
[  537.231932][ T5777] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  537.248825][T16923] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  537.297309][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.328114][T16923] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  537.370724][T16929] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  537.399701][T16923] F2FS-fs (loop1): invalid crc value
[  537.424469][ T5777] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  537.486119][T16923] F2FS-fs (loop1): invalid crc value
[  537.501682][T16923] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  537.522912][ T5777] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  537.547469][T16946] loop8: detected capacity change from 0 to 256
[  537.643026][    T8] usb 1-1: USB disconnect, device number 22
[  537.696058][    T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  537.774722][    T8] cyberjack 1-1:1.0: device disconnected
[  537.959710][T16952] loop9: detected capacity change from 0 to 2048
[  538.013390][T16952] NILFS (loop9): invalid segment: Magic number mismatch
[  538.039576][T16952] NILFS (loop9): trying rollback from an earlier position
[  538.132984][T16952] NILFS (loop9): recovery complete
[  538.187087][T16957] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  538.937497][T16982] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  538.987387][T16982] netlink: 'syz.1.3447': attribute type 2 has an invalid length.
[  538.988177][T16985] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  538.988188][T16985] netlink: 'syz.1.3447': attribute type 2 has an invalid length.
[  539.310844][T16995] program syz.1.3454 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  563.112242][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.121947][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.132726][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  624.551855][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.558324][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  624.574588][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  631.753033][T17050] Bluetooth: hci0: command 0x0406 tx timeout
[  685.991537][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  685.997946][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  686.015391][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  687.265093][   T29] INFO: task syz-executor:5759 blocked for more than 143 seconds.
[  687.272925][   T29]       Not tainted syzkaller #0
[  687.281763][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.290670][   T29] task:syz-executor    state:D stack:22008 pid:5759  ppid:5758   flags:0x00004002
[  687.303434][   T29] Call Trace:
[  687.306900][   T29]  <TASK>
[  687.309872][   T29]  __schedule+0x15ae/0x4660
[  687.317326][   T29]  ? mark_lock+0x94/0x320
[  687.321763][   T29]  ? asan.module_dtor+0x20/0x20
[  687.326920][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  687.331966][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  687.340487][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  687.346201][   T29]  schedule+0xbd/0x170
[  687.350304][   T29]  io_schedule+0x80/0xd0
[  687.354540][   T29]  bit_wait_io+0x11/0xd0
[  687.364701][   T29]  __wait_on_bit+0x9f/0x2c0
[  687.369781][   T29]  ? bit_wait+0xd0/0xd0
[  687.373932][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  687.381871][   T29]  ? bit_wait+0xd0/0xd0
[  687.386218][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  687.390974][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  687.396346][   T29]  ? bit_waitqueue+0x30/0x30
[  687.400939][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  687.409604][   T29]  do_get_write_access+0x5c9/0xe00
[  687.415422][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  687.421563][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  687.430219][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  687.436593][   T29]  ? __might_sleep+0xe0/0xe0
[  687.441183][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  687.449177][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  687.454644][   T29]  ext4_dirty_inode+0xcb/0x110
[  687.459777][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  687.471289][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  687.476738][   T29]  file_update_time+0x187/0x1a0
[  687.481588][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  687.489216][   T29]  ? do_wp_page+0x4ce/0x34d0
[  687.493828][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  687.500344][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  687.507763][   T29]  do_page_mkwrite+0x153/0x3f0
[  687.512527][   T29]  do_wp_page+0xd4d/0x34d0
[  687.517508][   T29]  ? folio_put+0xd0/0xd0
[  687.521751][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  687.531010][   T29]  ? __rwlock_init+0x150/0x150
[  687.536202][   T29]  handle_mm_fault+0x1306/0x4a50
[  687.541136][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  687.548523][   T29]  ? numa_migrate_prep+0x350/0x350
[  687.553640][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  687.559187][   T29]  do_user_addr_fault+0x736/0x12d0
[  687.564303][   T29]  exc_page_fault+0x64/0x100
[  687.571345][   T29]  ? clear_bhb_loop+0x40/0x90
[  687.579360][   T29]  asm_exc_page_fault+0x26/0x30
[  687.584217][   T29] RIP: 0033:0x7f80de07c6e2
[  687.591795][   T29] RSP: 002b:00007fff801b47c0 EFLAGS: 00010202
[  687.598066][   T29] RAX: 00007f80dbe74000 RBX: 00005555906c6e80 RCX: 0000000000000004
[  687.608397][   T29] RDX: 000000000000212a RSI: 00005555906d17c0 RDI: 0000000000000010
[  687.616586][   T29] RBP: 00007fff801b4cc0 R08: 00005555906d17e0 R09: 0000000000000092
[  687.627366][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff801b4b00
[  687.636590][   T29] R13: 00007fff801b48f0 R14: 585858582e7a7973 R15: 00007fff801b4840
[  687.644586][   T29]  </TASK>
[  687.650242][   T29] INFO: task syz.8.3455:16996 blocked for more than 143 seconds.
[  687.658199][   T29]       Not tainted syzkaller #0
[  687.663138][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  687.687961][   T29] task:syz.8.3455      state:D stack:27560 pid:16996 ppid:11422  flags:0x00004004
[  687.700903][   T29] Call Trace:
[  687.704192][   T29]  <TASK>
[  687.707427][   T29]  __schedule+0x15ae/0x4660
[  687.711945][   T29]  ? mark_lock+0x94/0x320
[  687.718744][   T29]  ? asan.module_dtor+0x20/0x20
[  687.724047][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  687.729362][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  687.737715][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  687.742924][   T29]  schedule+0xbd/0x170
[  687.749123][   T29]  io_schedule+0x80/0xd0
[  687.753381][   T29]  bit_wait_io+0x11/0xd0
[  687.760271][   T29]  __wait_on_bit+0x9f/0x2c0
[  687.764977][   T29]  ? bit_wait+0xd0/0xd0
[  687.769133][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  687.774582][   T29]  ? bit_wait+0xd0/0xd0
[  687.781293][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  687.786260][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  687.791287][   T29]  ? bit_waitqueue+0x30/0x30
[  687.796295][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  687.801519][   T29]  do_get_write_access+0x5c9/0xe00
[  687.813024][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  687.819411][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  687.828442][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  687.834699][   T29]  ? __might_sleep+0xe0/0xe0
[  687.839624][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  687.847684][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  687.853154][   T29]  ext4_dirty_inode+0xcb/0x110
[  687.859094][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  687.867603][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  687.872660][   T29]  file_update_time+0x187/0x1a0
[  687.877839][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  687.882868][   T29]  ? filemap_fault+0x103c/0x1540
[  687.890315][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  687.896262][   T29]  ? pte_alloc_one+0x3b6/0x540
[  687.901022][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  687.909955][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  687.918443][   T29]  do_page_mkwrite+0x153/0x3f0
[  687.923221][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  687.931567][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  687.936728][   T29]  ? numa_migrate_prep+0x350/0x350
[  687.941841][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  687.949643][   T29]  do_user_addr_fault+0x736/0x12d0
[  687.954949][   T29]  exc_page_fault+0x64/0x100
[  687.959540][   T29]  ? clear_bhb_loop+0x40/0x90
[  687.964203][   T29]  asm_exc_page_fault+0x26/0x30
[  687.972499][   T29] RIP: 0033:0x7fcaef86baa3
[  687.977869][   T29] RSP: 002b:00007fffc7b9d540 EFLAGS: 00010246
[  687.983940][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2d264000
[  687.995004][   T29] RDX: 0000001b2d224000 RSI: 0000000000400000 RDI: 00007fcaefbe0708
[  688.002980][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  688.012989][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  688.021145][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffc7b9d7d0
[  688.035712][   T29]  </TASK>
[  688.042558][   T29] INFO: task syz.1.3458:16997 blocked for more than 144 seconds.
[  688.052743][   T29]       Not tainted syzkaller #0
[  688.058415][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.069637][   T29] task:syz.1.3458      state:D stack:27560 pid:16997 ppid:16277  flags:0x00004004
[  688.080511][   T29] Call Trace:
[  688.083791][   T29]  <TASK>
[  688.088843][   T29]  __schedule+0x15ae/0x4660
[  688.093368][   T29]  ? mark_lock+0x94/0x320
[  688.098524][   T29]  ? asan.module_dtor+0x20/0x20
[  688.103373][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  688.110301][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  688.117003][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  688.122312][   T29]  schedule+0xbd/0x170
[  688.128470][   T29]  io_schedule+0x80/0xd0
[  688.133206][   T29]  bit_wait_io+0x11/0xd0
[  688.141723][   T29]  __wait_on_bit+0x9f/0x2c0
[  688.149718][   T29]  ? bit_wait+0xd0/0xd0
[  688.153890][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  688.159731][   T29]  ? bit_wait+0xd0/0xd0
[  688.163924][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  688.171231][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  688.176432][   T29]  ? bit_waitqueue+0x30/0x30
[  688.181044][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  688.189720][   T29]  do_get_write_access+0x5c9/0xe00
[  688.195245][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  688.201231][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  688.209879][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  688.216235][   T29]  ? __might_sleep+0xe0/0xe0
[  688.220852][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  688.229806][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  688.235973][   T29]  ext4_dirty_inode+0xcb/0x110
[  688.240765][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  688.252960][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  688.258475][   T29]  file_update_time+0x187/0x1a0
[  688.263325][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  688.270814][   T29]  ? filemap_fault+0x103c/0x1540
[  688.275925][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  688.281643][   T29]  ? pte_alloc_one+0x3b6/0x540
[  688.288824][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  688.296181][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  688.301209][   T29]  do_page_mkwrite+0x153/0x3f0
[  688.309316][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  688.314263][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  688.319460][   T29]  ? numa_migrate_prep+0x350/0x350
[  688.324573][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  688.332445][   T29]  do_user_addr_fault+0x736/0x12d0
[  688.338217][   T29]  exc_page_fault+0x64/0x100
[  688.342819][   T29]  ? clear_bhb_loop+0x40/0x90
[  688.350065][   T29]  asm_exc_page_fault+0x26/0x30
[  688.358696][   T29] RIP: 0033:0x7fdeabe6baa3
[  688.363130][   T29] RSP: 002b:00007ffd09b993d0 EFLAGS: 00010246
[  688.372435][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34164000
[  688.380626][   T29] RDX: 0000001b34124000 RSI: 0000000000400000 RDI: 00007fdeac1e0708
[  688.391340][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  688.399519][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  688.410891][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd09b99660
[  688.419604][   T29]  </TASK>
[  688.422753][   T29] INFO: task syz.9.3456:16998 blocked for more than 144 seconds.
[  688.433227][   T29]       Not tainted syzkaller #0
[  688.438869][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.450001][   T29] task:syz.9.3456      state:D stack:27560 pid:16998 ppid:11860  flags:0x00004004
[  688.459425][   T29] Call Trace:
[  688.462706][   T29]  <TASK>
[  688.466117][   T29]  __schedule+0x15ae/0x4660
[  688.470721][   T29]  ? mark_lock+0x94/0x320
[  688.481600][   T29]  ? asan.module_dtor+0x20/0x20
[  688.486617][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  688.491640][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  688.500151][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  688.505643][   T29]  schedule+0xbd/0x170
[  688.509714][   T29]  io_schedule+0x80/0xd0
[  688.513947][   T29]  bit_wait_io+0x11/0xd0
[  688.521653][   T29]  __wait_on_bit+0x9f/0x2c0
[  688.526399][   T29]  ? bit_wait+0xd0/0xd0
[  688.530559][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  688.538790][   T29]  ? bit_wait+0xd0/0xd0
[  688.543426][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  688.549544][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  688.554583][   T29]  ? bit_waitqueue+0x30/0x30
[  688.561917][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  688.567321][   T29]  do_get_write_access+0x5c9/0xe00
[  688.572487][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  688.578887][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  688.591603][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  688.597991][   T29]  ? __might_sleep+0xe0/0xe0
[  688.602695][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  688.610997][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  688.616698][   T29]  ext4_dirty_inode+0xcb/0x110
[  688.621473][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  688.630728][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  688.636005][   T29]  file_update_time+0x187/0x1a0
[  688.640859][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  688.649026][   T29]  ? filemap_fault+0x103c/0x1540
[  688.653985][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  688.660020][   T29]  ? pte_alloc_one+0x3b6/0x540
[  688.667213][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  688.673462][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  688.678841][   T29]  do_page_mkwrite+0x153/0x3f0
[  688.683623][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  688.689016][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  688.693967][   T29]  ? numa_migrate_prep+0x350/0x350
[  688.710094][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  688.717342][   T29]  do_user_addr_fault+0x736/0x12d0
[  688.722473][   T29]  exc_page_fault+0x64/0x100
[  688.727954][   T29]  ? clear_bhb_loop+0x40/0x90
[  688.732652][   T29]  asm_exc_page_fault+0x26/0x30
[  688.740394][   T29] RIP: 0033:0x7fc7ee06baa3
[  688.746168][   T29] RSP: 002b:00007fff14aa61f0 EFLAGS: 00010246
[  688.752280][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b30364000
[  688.762389][   T29] RDX: 0000001b30324000 RSI: 0000000000400000 RDI: 00007fc7ee3e0708
[  688.771273][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  688.781264][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  688.790927][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff14aa6480
[  688.800852][   T29]  </TASK>
[  688.803915][   T29] INFO: task syz.0.3457:16999 blocked for more than 144 seconds.
[  688.817969][   T29]       Not tainted syzkaller #0
[  688.822904][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.832893][   T29] task:syz.0.3457      state:D stack:27560 pid:16999 ppid:12432  flags:0x00004004
[  688.844006][   T29] Call Trace:
[  688.849418][   T29]  <TASK>
[  688.852417][   T29]  __schedule+0x15ae/0x4660
[  688.859334][   T29]  ? mark_lock+0x94/0x320
[  688.863667][   T29]  ? asan.module_dtor+0x20/0x20
[  688.868793][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  688.873816][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  688.882376][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  688.887802][   T29]  schedule+0xbd/0x170
[  688.891873][   T29]  io_schedule+0x80/0xd0
[  688.898511][   T29]  bit_wait_io+0x11/0xd0
[  688.902756][   T29]  __wait_on_bit+0x9f/0x2c0
[  688.907480][   T29]  ? bit_wait+0xd0/0xd0
[  688.911631][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  688.921641][   T29]  ? bit_wait+0xd0/0xd0
[  688.927918][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  688.932700][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  688.940314][   T29]  ? bit_waitqueue+0x30/0x30
[  688.945348][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  688.950841][   T29]  do_get_write_access+0x5c9/0xe00
[  688.959673][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  688.965874][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  688.972033][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  688.980708][   T29]  ? __might_sleep+0xe0/0xe0
[  688.985849][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  688.991415][   T29]  __ext4_mark_inode_dirty+0x13f/0x6d0
[  688.999508][   T29]  ext4_dirty_inode+0xcb/0x110
[  689.004291][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  689.010381][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  689.017809][   T29]  file_update_time+0x187/0x1a0
[  689.022671][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  689.031792][   T29]  ? filemap_fault+0x103c/0x1540
[  689.040553][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  689.046507][   T29]  ? pte_alloc_one+0x3b6/0x540
[  689.051728][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  689.060399][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  689.066799][   T29]  do_page_mkwrite+0x153/0x3f0
[  689.071567][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  689.078962][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  689.083929][   T29]  ? numa_migrate_prep+0x350/0x350
[  689.089099][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  689.094372][   T29]  do_user_addr_fault+0x736/0x12d0
[  689.102150][   T29]  exc_page_fault+0x64/0x100
[  689.107864][   T29]  ? clear_bhb_loop+0x40/0x90
[  689.112546][   T29]  asm_exc_page_fault+0x26/0x30
[  689.119936][   T29] RIP: 0033:0x7fb25406baa3
[  689.124352][   T29] RSP: 002b:00007ffd22da6c30 EFLAGS: 00010246
[  689.130640][   T29] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b34964000
[  689.143678][   T29] RDX: 0000001b34924000 RSI: 0000000000400000 RDI: 00007fb2543e0708
[  689.153352][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  689.164346][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  689.172650][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd22da6ec0
[  689.184115][   T29]  </TASK>
[  689.188683][   T29] 
[  689.188683][   T29] Showing all locks held in the system:
[  689.198828][   T29] 1 lock held by khungtaskd/29:
[  689.203751][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  689.213980][   T29] 4 locks held by kworker/u4:5/133:
[  689.221792][   T29]  #0: ffff888141a54538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  689.233349][   T29]  #1: ffffc90002d57d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  689.250502][   T29]  #2: ffff8880321a80e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  689.263694][   T29]  #3: ffff8880321aac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  689.277702][   T29] 2 locks held by getty/5528:
[  689.282377][   T29]  #0: ffff88802d34f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  689.293907][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  689.306449][   T29] 3 locks held by syz-executor/5759:
[  689.311729][   T29]  #0: ffff88802e52f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  689.322511][   T29]  #1: ffff8880321a8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  689.334099][   T29]  #2: ffff8880321ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  689.343970][   T29] 3 locks held by syz.8.3455/16996:
[  689.352354][   T29]  #0: ffff88807cf227a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  689.368712][   T29]  #1: ffff8880321a8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  689.379383][   T29]  #2: ffff8880321ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  689.391478][   T29] 3 locks held by syz.1.3458/16997:
[  689.397795][   T29]  #0: ffff88807cf24da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  689.410200][   T29]  #1: ffff8880321a8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  689.420198][   T29]  #2: ffff8880321ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  689.430382][   T29] 3 locks held by syz.9.3456/16998:
[  689.437978][   T29]  #0: ffff88807cf260a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  689.448113][   T29]  #1: ffff8880321a8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  689.460422][   T29]  #2: ffff8880321ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  689.473027][   T29] 3 locks held by syz.0.3457/16999:
[  689.482672][   T29]  #0: ffff88807d36f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  689.492857][   T29]  #1: ffff8880321a8510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  689.506078][   T29]  #2: ffff8880321ac990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  689.517641][   T29] 
[  689.519993][   T29] =============================================
[  689.519993][   T29] 
[  689.529373][   T29] NMI backtrace for cpu 0
[  689.533721][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  689.540900][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  689.550937][   T29] Call Trace:
[  689.554228][   T29]  <TASK>
[  689.557165][   T29]  dump_stack_lvl+0x18c/0x250
[  689.561840][   T29]  ? __wake_up_klogd+0xd9/0x100
[  689.566694][   T29]  ? show_regs_print_info+0x20/0x20
[  689.571878][   T29]  ? load_image+0x420/0x420
[  689.576376][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  689.581366][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  689.587532][   T29]  ? load_image+0x420/0x420
[  689.592030][   T29]  ? wq_watchdog_touch+0xef/0x170
[  689.597043][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  689.603189][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  689.609180][   T29]  watchdog+0xf59/0xfa0
[  689.613346][   T29]  ? watchdog+0x1e1/0xfa0
[  689.617681][   T29]  kthread+0x2fa/0x390
[  689.621733][   T29]  ? hungtask_pm_notify+0x50/0x50
[  689.626740][   T29]  ? kthread_blkcg+0xd0/0xd0
[  689.631329][   T29]  ret_from_fork+0x48/0x80
[  689.635735][   T29]  ? kthread_blkcg+0xd0/0xd0
[  689.640309][   T29]  ret_from_fork_asm+0x11/0x20
[  689.645067][   T29]  </TASK>
[  689.657959][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  689.664818][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  689.671997][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  689.682035][   T29] Call Trace:
[  689.685310][   T29]  <TASK>
[  689.688228][   T29]  dump_stack_lvl+0x18c/0x250
[  689.692896][   T29]  ? show_regs_print_info+0x20/0x20
[  689.698097][   T29]  ? load_image+0x420/0x420
[  689.702600][   T29]  panic+0x2ca/0x720
[  689.706490][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  689.710990][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  689.716530][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  689.721907][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  689.728052][   T29]  watchdog+0xf98/0xfa0
[  689.732197][   T29]  ? watchdog+0x1e1/0xfa0
[  689.736512][   T29]  kthread+0x2fa/0x390
[  689.740570][   T29]  ? hungtask_pm_notify+0x50/0x50
[  689.745587][   T29]  ? kthread_blkcg+0xd0/0xd0
[  689.750163][   T29]  ret_from_fork+0x48/0x80
[  689.754571][   T29]  ? kthread_blkcg+0xd0/0xd0
[  689.759143][   T29]  ret_from_fork_asm+0x11/0x20
[  689.763906][   T29]  </TASK>
[  689.766972][   T29] Kernel Offset: disabled
[  689.771299][   T29] Rebooting in 86400 seconds..